Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GcNHLKewFRbVwBSAbS3eP7fe3J8HnNWrR7NrnFxhpN4W/0/3230302e3130362e3134332e302f32342d3234203d3e20323730343638.roa
File:                     3230302e3130362e3134332e302f32342d3234203d3e20323730343638.roa (raw, json)
Hash identifier:          e+GDUrXwWGHmidIwNXNIGcsaRBJyyIU/BQr/FuElLSc=
Subject key identifier:   21:D8:A4:46:0F:38:21:6D:F7:42:D1:36:C0:C4:66:C7:FA:F2:37:8F
Certificate issuer:       /CN=870D313405780E71067BEC204B12CFE5F0268816
Certificate serial:       5ED59D0EF09416DEA015583B4C1D57E30D48A1F7
Authority key identifier: 87:0D:31:34:05:78:0E:71:06:7B:EC:20:4B:12:CF:E5:F0:26:88:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870D313405780E71067BEC204B12CFE5F0268816.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GcNHLKewFRbVwBSAbS3eP7fe3J8HnNWrR7NrnFxhpN4W/0/3230302e3130362e3134332e302f32342d3234203d3e20323730343638.roa
Signing time:             Thu 27 Aug 2026 09:48:26 +0000
ROA not before:           Thu 27 Aug 2026 09:43:26 +0000
ROA not after:            Thu 26 Aug 2027 09:48:26 +0000
asID:                     270468
IP address blocks:        200.106.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GcNHLKewFRbVwBSAbS3eP7fe3J8HnNWrR7NrnFxhpN4W/0/870D313405780E71067BEC204B12CFE5F0268816.crl
                          rsync://rpki-repo.registro.br/repo/GcNHLKewFRbVwBSAbS3eP7fe3J8HnNWrR7NrnFxhpN4W/0/870D313405780E71067BEC204B12CFE5F0268816.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870D313405780E71067BEC204B12CFE5F0268816.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 18:30:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:d5:9d:0e:f0:94:16:de:a0:15:58:3b:4c:1d:57:e3:0d:48:a1:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=870D313405780E71067BEC204B12CFE5F0268816
        Validity
            Not Before: Aug 27 09:43:26 2026 GMT
            Not After : Aug 26 09:48:26 2027 GMT
        Subject: CN=21D8A4460F38216DF742D136C0C466C7FAF2378F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c1:81:4d:7c:fb:ae:0d:95:6b:cd:0f:32:3a:
                    78:b7:ff:f3:e9:b7:4c:00:4a:a2:3a:37:b8:8b:00:
                    28:df:5b:95:72:b6:16:4a:db:b0:db:c0:77:2c:21:
                    c9:eb:3b:48:70:8f:a6:85:d1:1e:54:53:29:66:e1:
                    3d:f3:70:c3:01:5c:32:37:5d:88:47:85:4d:42:f8:
                    d3:56:29:c9:39:23:9b:bb:8e:2c:b3:20:f0:9a:89:
                    2c:f0:f2:9c:03:dc:64:18:d4:4a:40:29:92:b3:e2:
                    50:b2:f7:a4:82:2f:98:77:b9:40:60:26:2c:4a:44:
                    97:4a:3f:01:8d:7a:90:e5:f9:e7:c5:22:88:af:ae:
                    b7:bd:48:e7:72:60:ea:0c:c1:89:69:4e:8f:95:d9:
                    a7:b7:84:5e:27:3b:d5:72:50:fd:0d:3a:16:db:ff:
                    8d:1d:76:b3:75:8c:f5:92:0b:3e:76:0d:91:04:d3:
                    fd:02:fc:3b:67:06:ae:f8:ef:d6:4d:f8:aa:ff:8f:
                    c5:60:35:5c:ca:91:e4:94:22:92:0a:f1:77:11:9e:
                    38:c2:b5:e3:3c:12:96:53:9d:2b:8a:1a:86:fd:4e:
                    20:12:48:0a:8b:9d:e9:ac:f4:70:2f:59:ac:55:62:
                    a5:c5:78:43:93:fd:68:8a:6a:56:bc:64:12:da:30:
                    26:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:D8:A4:46:0F:38:21:6D:F7:42:D1:36:C0:C4:66:C7:FA:F2:37:8F
            X509v3 Authority Key Identifier:
                keyid:87:0D:31:34:05:78:0E:71:06:7B:EC:20:4B:12:CF:E5:F0:26:88:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GcNHLKewFRbVwBSAbS3eP7fe3J8HnNWrR7NrnFxhpN4W/0/870D313405780E71067BEC204B12CFE5F0268816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870D313405780E71067BEC204B12CFE5F0268816.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GcNHLKewFRbVwBSAbS3eP7fe3J8HnNWrR7NrnFxhpN4W/0/3230302e3130362e3134332e302f32342d3234203d3e20323730343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.106.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:55:e8:5e:0d:61:04:08:93:bb:8b:8d:06:2c:19:0b:12:79:
         b5:22:06:82:20:ac:5d:82:2e:13:28:e5:c5:0f:07:84:49:04:
         2c:f5:a8:03:34:79:18:8b:6c:ab:88:7b:7e:05:3a:d6:23:e1:
         5c:42:bb:a6:d5:5a:8f:1c:ec:33:81:1f:74:b7:0d:9f:ba:a1:
         ed:78:1d:95:62:18:d5:98:49:5f:bb:35:be:43:38:07:3e:88:
         ff:95:89:d3:37:90:47:b8:64:c6:65:ab:73:c6:17:ec:82:09:
         a2:2f:76:d6:d8:80:20:f7:24:f9:71:66:66:36:0e:a6:ec:06:
         25:fa:14:09:8f:7e:cf:4b:0a:5f:d2:65:59:d5:eb:4c:9f:7d:
         d9:1c:c4:46:65:9d:4b:7c:75:a4:8a:ff:65:82:dc:77:24:52:
         52:08:87:d8:20:e0:9d:25:2d:fa:cd:8c:a9:36:55:c7:7a:1d:
         7e:12:8a:cc:fc:a0:d1:f1:0b:ed:ae:85:01:a4:dd:69:1f:3b:
         0f:dd:0d:df:76:65:26:e6:9e:0d:88:76:d8:af:bf:9f:bc:e5:
         82:78:1a:03:c3:ec:7a:49:e3:0c:f7:4f:b9:9f:f7:b0:af:f3:
         54:1f:e8:ca:b3:03:c3:fc:63:52:a8:bb:71:c5:c6:32:d2:ae:
         43:e6:70:61
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUXtWdDvCUFt6gFVg7TB1X4w1IofcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODcwRDMxMzQwNTc4MEU3MTA2N0JFQzIwNEIxMkNGRTVG
MDI2ODgxNjAeFw0yNjA4MjcwOTQzMjZaFw0yNzA4MjYwOTQ4MjZaMDMxMTAvBgNV
BAMTKDIxRDhBNDQ2MEYzODIxNkRGNzQyRDEzNkMwQzQ2NkM3RkFGMjM3OEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPwYFNfPuuDZVrzQ8yOni3//Pp
t0wASqI6N7iLACjfW5VythZK27DbwHcsIcnrO0hwj6aF0R5UUylm4T3zcMMBXDI3
XYhHhU1C+NNWKck5I5u7jiyzIPCaiSzw8pwD3GQY1EpAKZKz4lCy96SCL5h3uUBg
JixKRJdKPwGNepDl+efFIoivrre9SOdyYOoMwYlpTo+V2ae3hF4nO9VyUP0NOhbb
/40ddrN1jPWSCz52DZEE0/0C/DtnBq7479ZN+Kr/j8VgNVzKkeSUIpIK8XcRnjjC
teM8EpZTnSuKGob9TiASSAqLnems9HAvWaxVYqXFeEOT/WiKala8ZBLaMCaVAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUIdikRg84IW33QtE2wMRmx/ryN48wHwYDVR0j
BBgwFoAUhw0xNAV4DnEGe+wgSxLP5fAmiBYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2NOSExLZXdGUmJWd0JTQWJTM2VQN2ZlM0o4SG5OV3JSN05ybkZ4aHBO
NFcvMC84NzBEMzEzNDA1NzgwRTcxMDY3QkVDMjA0QjEyQ0ZFNUYwMjY4ODE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg3MEQzMTM0MDU3ODBFNzEw
NjdCRUMyMDRCMTJDRkU1RjAyNjg4MTYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0djTkhMS2V3RlJiVndCU0FiUzNlUDdmZTNKOEhuTldyUjdOcm5GeGhwTjRXLzAv
MzIzMDMwMmUzMTMwMzYyZTMxMzQzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczMDM0MzYzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAMhqjzANBgkqhkiG9w0BAQsFAAOCAQEAF1Xo
Xg1hBAiTu4uNBiwZCxJ5tSIGgiCsXYIuEyjlxQ8HhEkELPWoAzR5GItsq4h7fgU6
1iPhXEK7ptVajxzsM4EfdLcNn7qh7XgdlWIY1ZhJX7s1vkM4Bz6I/5WJ0zeQR7hk
xmWrc8YX7IIJoi921tiAIPck+XFmZjYOpuwGJfoUCY9+z0sKX9JlWdXrTJ992RzE
RmWdS3x1pIr/ZYLcdyRSUgiH2CDgnSUt+s2MqTZVx3odfhKKzPyg0fEL7a6FAaTd
aR87D90N33ZlJuaeDYh22K+/n7zlgngaA8PseknjDPdPuZ/3sK/zVB/oyrMDw/xj
Uqi7ccXGMtKuQ+ZwYQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 05:23:26 2026 by rpki-client