Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MHBziK2hr4VEkDyMzt8GzeW3WLB5RmqhoMm1yum4JzJ/0/3230312e3138322e3235322e302f32322d3234203d3e20323637363133.roa
File:                     3230312e3138322e3235322e302f32322d3234203d3e20323637363133.roa (raw, json)
Hash identifier:          swkVLQyfUweIWN9BbUKOnMGN1pfGPWgnr3EUoo4Ytrg=
Subject key identifier:   E6:89:3C:CA:41:66:39:D7:93:23:35:CE:A7:EB:83:E1:61:79:D6:74
Certificate issuer:       /CN=A463009C233BB5EAA53E8C746539426027DCE085
Certificate serial:       352027E83C03C7D958C2E902AB4928F2D203BB2B
Authority key identifier: A4:63:00:9C:23:3B:B5:EA:A5:3E:8C:74:65:39:42:60:27:DC:E0:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A463009C233BB5EAA53E8C746539426027DCE085.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MHBziK2hr4VEkDyMzt8GzeW3WLB5RmqhoMm1yum4JzJ/0/3230312e3138322e3235322e302f32322d3234203d3e20323637363133.roa
Signing time:             Tue 24 Mar 2026 18:36:38 +0000
ROA not before:           Tue 24 Mar 2026 18:31:38 +0000
ROA not after:            Tue 23 Mar 2027 18:36:38 +0000
asID:                     267613
IP address blocks:        201.182.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2MHBziK2hr4VEkDyMzt8GzeW3WLB5RmqhoMm1yum4JzJ/0/A463009C233BB5EAA53E8C746539426027DCE085.crl
                          rsync://rpki-repo.registro.br/repo/2MHBziK2hr4VEkDyMzt8GzeW3WLB5RmqhoMm1yum4JzJ/0/A463009C233BB5EAA53E8C746539426027DCE085.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A463009C233BB5EAA53E8C746539426027DCE085.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 06:37:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:20:27:e8:3c:03:c7:d9:58:c2:e9:02:ab:49:28:f2:d2:03:bb:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A463009C233BB5EAA53E8C746539426027DCE085
        Validity
            Not Before: Mar 24 18:31:38 2026 GMT
            Not After : Mar 23 18:36:38 2027 GMT
        Subject: CN=E6893CCA416639D7932335CEA7EB83E16179D674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:2b:25:71:97:6d:94:e4:c4:66:c8:bc:cc:5c:
                    3d:fb:4f:fb:a7:c1:66:8a:58:ca:06:4e:58:ef:41:
                    d7:6b:f8:7b:b3:49:84:64:fc:0b:f1:b9:db:4f:d0:
                    f8:9f:5e:c4:8c:ce:9d:6c:b9:65:f1:cb:73:bf:d0:
                    bc:46:f0:6f:00:17:69:9c:f1:fc:e6:e0:b2:a4:40:
                    53:23:99:42:b0:07:06:5e:e7:df:d7:dd:50:fb:c3:
                    12:ae:26:e6:83:80:dc:af:82:2d:24:4b:fd:0e:52:
                    52:fc:0c:8f:2f:17:2f:bf:6c:6f:55:72:e0:52:60:
                    86:43:ca:e1:2c:67:ca:1f:18:45:14:c8:8c:87:62:
                    73:5a:a4:7e:d5:bb:59:ce:74:f7:2e:a9:15:f7:84:
                    fc:91:4e:44:6d:03:92:a7:d2:04:48:46:8f:b8:24:
                    35:41:bb:a1:47:5c:d7:23:a0:f9:40:2f:19:a3:3b:
                    02:7b:42:0a:d8:d3:f3:e3:e7:55:52:b8:c2:e5:73:
                    ea:7e:db:35:fa:51:0f:b2:6b:24:4f:bf:a5:fe:92:
                    6f:42:e2:84:b1:ca:cb:cd:46:17:1d:81:92:de:d3:
                    11:9e:73:41:6f:e9:21:df:ce:65:4f:a7:0d:c5:19:
                    5c:79:0d:56:75:f6:87:bd:88:c4:11:41:dd:f4:39:
                    6d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:89:3C:CA:41:66:39:D7:93:23:35:CE:A7:EB:83:E1:61:79:D6:74
            X509v3 Authority Key Identifier:
                keyid:A4:63:00:9C:23:3B:B5:EA:A5:3E:8C:74:65:39:42:60:27:DC:E0:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MHBziK2hr4VEkDyMzt8GzeW3WLB5RmqhoMm1yum4JzJ/0/A463009C233BB5EAA53E8C746539426027DCE085.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A463009C233BB5EAA53E8C746539426027DCE085.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MHBziK2hr4VEkDyMzt8GzeW3WLB5RmqhoMm1yum4JzJ/0/3230312e3138322e3235322e302f32322d3234203d3e20323637363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:1c:5b:2e:d8:54:7a:58:8c:f8:27:7e:33:5e:7e:12:31:99:
         63:a1:92:22:d6:54:1f:41:0d:7e:1a:68:3c:9b:fb:3f:fc:44:
         09:e8:c5:69:20:6d:eb:f9:4e:2f:9e:61:3d:03:f2:09:95:c2:
         ee:f2:c7:31:74:63:21:ca:04:af:f4:5a:03:8a:29:9a:d9:cd:
         a0:5d:a4:da:c5:0a:a7:79:d3:e2:fa:39:21:12:57:b7:49:4e:
         21:40:29:bf:04:9d:27:83:9c:5a:8c:cc:f6:b5:46:de:3a:32:
         df:86:68:26:6a:d3:b5:e8:af:05:13:d1:dd:5f:1c:04:5d:37:
         b1:0a:11:30:29:55:23:eb:17:ee:aa:54:83:08:7e:73:fc:ef:
         af:a3:4a:7b:d9:a3:44:01:97:2e:dc:10:c2:e2:93:f5:a9:be:
         49:7b:07:d1:06:90:54:90:04:59:07:ac:39:57:44:27:b5:ec:
         50:1d:c0:12:a5:81:4f:00:5e:77:c0:a5:ea:1b:65:69:29:70:
         29:0b:d9:ba:02:85:69:f6:41:fe:bc:7b:0b:73:c2:63:44:b7:
         65:37:c9:87:ae:13:43:55:0b:d7:ce:3b:b6:ab:a5:31:b2:aa:
         a4:1c:cc:83:bd:59:7a:53:00:ee:ab:ca:fc:41:62:e7:8a:eb:
         95:3f:72:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:32:32 2026 by rpki-client