Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/0/3230302e3132332e3233332e302f32342d3234203d3e20323730323838.roa
File:                     3230302e3132332e3233332e302f32342d3234203d3e20323730323838.roa (raw, json)
Hash identifier:          oIvIELq+c4g8axfITsReorCC+Dd/whMt/Ds4tN6d/5w=
Subject key identifier:   F8:FF:82:6B:F2:DC:FE:4E:6A:0B:23:28:1E:60:A8:62:DA:AE:BE:BC
Certificate issuer:       /CN=7C39647D835751BB03E763780FC3CF55E30C6370
Certificate serial:       55F1C8FA12868DE2880CC745A308A287FFE70E43
Authority key identifier: 7C:39:64:7D:83:57:51:BB:03:E7:63:78:0F:C3:CF:55:E3:0C:63:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C39647D835751BB03E763780FC3CF55E30C6370.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/0/3230302e3132332e3233332e302f32342d3234203d3e20323730323838.roa
Signing time:             Tue 24 Feb 2026 15:42:31 +0000
ROA not before:           Tue 24 Feb 2026 15:37:31 +0000
ROA not after:            Tue 23 Feb 2027 15:42:31 +0000
asID:                     270288
IP address blocks:        200.123.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/0/7C39647D835751BB03E763780FC3CF55E30C6370.crl
                          rsync://rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/0/7C39647D835751BB03E763780FC3CF55E30C6370.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C39647D835751BB03E763780FC3CF55E30C6370.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 18:09:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:f1:c8:fa:12:86:8d:e2:88:0c:c7:45:a3:08:a2:87:ff:e7:0e:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C39647D835751BB03E763780FC3CF55E30C6370
        Validity
            Not Before: Feb 24 15:37:31 2026 GMT
            Not After : Feb 23 15:42:31 2027 GMT
        Subject: CN=F8FF826BF2DCFE4E6A0B23281E60A862DAAEBEBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ca:2b:ea:1a:9e:18:1e:b3:8a:7d:e4:dc:4b:
                    70:59:08:0f:4d:28:8e:62:0f:34:45:3a:39:c0:a5:
                    14:da:cf:71:7e:db:cb:3c:53:6e:48:39:f0:86:fa:
                    23:1e:8d:3e:cb:ad:ad:81:4c:ef:54:04:a0:f4:bd:
                    7b:a9:5f:d8:0c:dd:74:ef:3b:c3:bf:6a:0a:71:9f:
                    1b:87:af:38:e6:8c:24:75:f4:e8:07:f6:52:ec:8a:
                    c4:76:d6:be:c5:3b:88:cf:a1:d9:2b:5f:9b:5e:24:
                    52:57:dd:44:b0:18:58:ff:30:b1:36:fe:9d:8d:1a:
                    1a:c8:ab:90:89:49:cb:85:1b:f0:f6:c2:ac:7c:da:
                    b4:84:8d:4d:86:f4:5e:c0:59:96:6c:97:bd:c4:64:
                    2a:75:d2:ad:b5:5a:85:78:1e:91:4b:6a:a8:95:20:
                    70:6b:80:12:73:17:61:e0:a5:ff:e6:a6:37:fc:78:
                    d3:4b:90:35:d0:24:82:a9:5a:3a:5f:17:1c:52:78:
                    91:59:0c:2a:15:53:50:dc:0f:fa:34:de:4c:c9:b0:
                    fa:27:3e:b6:b0:d1:5f:fb:07:c0:3c:a8:89:29:df:
                    16:4b:1d:3f:87:14:da:b0:b7:30:13:f7:d1:1f:11:
                    89:9e:09:2e:b3:c6:4f:fe:8a:10:30:4d:39:f2:4b:
                    b2:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:FF:82:6B:F2:DC:FE:4E:6A:0B:23:28:1E:60:A8:62:DA:AE:BE:BC
            X509v3 Authority Key Identifier:
                keyid:7C:39:64:7D:83:57:51:BB:03:E7:63:78:0F:C3:CF:55:E3:0C:63:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/0/7C39647D835751BB03E763780FC3CF55E30C6370.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C39647D835751BB03E763780FC3CF55E30C6370.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/0/3230302e3132332e3233332e302f32342d3234203d3e20323730323838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:89:71:54:19:c7:d7:07:14:ed:c0:b5:f1:c5:39:4e:6e:56:
         ae:08:ec:8d:fb:35:7a:2a:d3:36:3c:03:55:4d:0d:c8:a8:55:
         b3:fb:6e:cd:38:a9:be:9a:9f:d6:14:f6:59:54:87:d7:42:ac:
         25:da:c6:ef:bd:88:28:fd:4e:f5:b4:1f:97:28:db:87:d4:03:
         c8:ec:7a:85:57:23:ee:9d:f6:d1:1e:5f:90:c1:f1:c9:90:4c:
         05:01:e7:63:e3:c1:da:da:96:30:3d:51:0a:2b:21:d3:a5:ce:
         8b:d8:f1:7b:29:2b:e5:0a:ee:fc:ce:02:c3:11:2a:7f:7b:7c:
         8e:48:d4:27:85:4e:6f:18:05:5e:18:e2:ad:50:01:bd:19:85:
         15:cd:94:27:7d:6d:7b:00:af:04:f6:56:93:0a:92:bc:db:31:
         df:9e:e1:57:98:8d:82:0a:20:57:52:1b:1f:5d:fd:e2:8f:05:
         ff:51:4f:e7:b4:2a:65:f0:df:62:00:d6:a5:76:21:9e:c0:f9:
         1b:8f:64:30:dc:7c:92:53:5d:29:14:58:82:f9:62:d5:c6:53:
         09:93:14:6b:42:f9:36:50:7e:bd:a6:55:64:1d:8d:a6:48:e3:
         16:6d:e4:d9:ef:f5:bd:41:80:dc:05:f0:9a:ed:c8:06:e7:2e:
         4d:7b:92:24
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUVfHI+hKGjeKIDMdFowiih//nDkMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0MzOTY0N0Q4MzU3NTFCQjAzRTc2Mzc4MEZDM0NGNTVF
MzBDNjM3MDAeFw0yNjAyMjQxNTM3MzFaFw0yNzAyMjMxNTQyMzFaMDMxMTAvBgNV
BAMTKEY4RkY4MjZCRjJEQ0ZFNEU2QTBCMjMyODFFNjBBODYyREFBRUJFQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1yivqGp4YHrOKfeTcS3BZCA9N
KI5iDzRFOjnApRTaz3F+28s8U25IOfCG+iMejT7Lra2BTO9UBKD0vXupX9gM3XTv
O8O/agpxnxuHrzjmjCR19OgH9lLsisR21r7FO4jPodkrX5teJFJX3USwGFj/MLE2
/p2NGhrIq5CJScuFG/D2wqx82rSEjU2G9F7AWZZsl73EZCp10q21WoV4HpFLaqiV
IHBrgBJzF2Hgpf/mpjf8eNNLkDXQJIKpWjpfFxxSeJFZDCoVU1DcD/o03kzJsPon
Praw0V/7B8A8qIkp3xZLHT+HFNqwtzAT99EfEYmeCS6zxk/+ihAwTTnyS7JBAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU+P+Ca/Lc/k5qCyMoHmCoYtquvrwwHwYDVR0j
BBgwFoAUfDlkfYNXUbsD52N4D8PPVeMMY3AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3lCbm1xY3pTc1JRaVJUejg3QWZVU0ZDUHhBcEpoczVNOUVyY1NDc011
SjEvMC83QzM5NjQ3RDgzNTc1MUJCMDNFNzYzNzgwRkMzQ0Y1NUUzMEM2MzcwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdDMzk2NDdEODM1NzUxQkIw
M0U3NjM3ODBGQzNDRjU1RTMwQzYzNzAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d5Qm5tcWN6U3NSUWlSVHo4N0FmVVNGQ1B4QXBKaHM1TTlFcmNTQ3NNdUoxLzAv
MzIzMDMwMmUzMTMyMzMyZTMyMzMzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczMDMyMzgzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAMh76TANBgkqhkiG9w0BAQsFAAOCAQEAYolx
VBnH1wcU7cC18cU5Tm5Wrgjsjfs1eirTNjwDVU0NyKhVs/tuzTipvpqf1hT2WVSH
10KsJdrG772IKP1O9bQflyjbh9QDyOx6hVcj7p320R5fkMHxyZBMBQHnY+PB2tqW
MD1RCish06XOi9jxeykr5Qru/M4CwxEqf3t8jkjUJ4VObxgFXhjirVABvRmFFc2U
J31tewCvBPZWkwqSvNsx357hV5iNggogV1IbH1394o8F/1FP57QqZfDfYgDWpXYh
nsD5G49kMNx8klNdKRRYgvli1cZTCZMUa0L5NlB+vaZVZB2NpkjjFm3k2e/1vUGA
3AXwmu3IBucuTXuSJA==
-----END CERTIFICATE-----
Generated at Tue Mar 3 05:43:43 2026 by rpki-client