Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/2/3230302e35332e38342e302f32322d3232203d3e20323731323938.roa
File:                     3230302e35332e38342e302f32322d3232203d3e20323731323938.roa (raw, json)
Hash identifier:          jYwy5TnJjGUWtTIArLiwN1maCFjfVwaTeUzqW9aabFc=
Subject key identifier:   E9:76:8F:5C:2C:BB:FD:3C:EB:8A:A7:22:29:9E:26:23:C5:69:FB:67
Certificate issuer:       /CN=315DDEA82F4151678E22C7DE6D37282137387EEA
Certificate serial:       7D4A2795B2F7ED4A528ED0C3450A0CC57D61570A
Authority key identifier: 31:5D:DE:A8:2F:41:51:67:8E:22:C7:DE:6D:37:28:21:37:38:7E:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/315DDEA82F4151678E22C7DE6D37282137387EEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/2/3230302e35332e38342e302f32322d3232203d3e20323731323938.roa
Signing time:             Wed 11 Mar 2026 18:02:59 +0000
ROA not before:           Wed 11 Mar 2026 17:57:59 +0000
ROA not after:            Wed 10 Mar 2027 18:02:59 +0000
asID:                     271298
IP address blocks:        200.53.84.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/2/315DDEA82F4151678E22C7DE6D37282137387EEA.crl
                          rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/2/315DDEA82F4151678E22C7DE6D37282137387EEA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/315DDEA82F4151678E22C7DE6D37282137387EEA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 20:30:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:4a:27:95:b2:f7:ed:4a:52:8e:d0:c3:45:0a:0c:c5:7d:61:57:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=315DDEA82F4151678E22C7DE6D37282137387EEA
        Validity
            Not Before: Mar 11 17:57:59 2026 GMT
            Not After : Mar 10 18:02:59 2027 GMT
        Subject: CN=E9768F5C2CBBFD3CEB8AA722299E2623C569FB67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:33:27:01:61:aa:ea:fc:03:f4:c7:78:17:43:
                    7a:e8:be:b1:b6:c4:b6:7c:9b:d4:b4:45:6f:b6:c6:
                    63:c9:f1:56:4f:04:32:08:38:86:61:4c:f7:f5:c4:
                    7d:58:c4:a1:61:72:8a:eb:2c:ef:29:7b:9a:52:8d:
                    5d:d3:39:c0:04:8d:1e:bd:c7:23:4e:03:2c:97:f9:
                    a6:4b:f8:da:ea:a3:e8:08:31:37:3e:7c:35:1e:6b:
                    d0:2f:dc:3a:3b:d4:93:e3:04:68:aa:d6:99:ef:94:
                    17:0f:4f:37:9d:21:7a:ca:7d:d6:d2:5b:21:3a:48:
                    61:91:f5:6b:ec:01:de:c8:97:1e:90:53:61:16:a5:
                    94:85:e0:32:1b:df:7f:67:48:43:2e:ec:31:26:8f:
                    9b:0e:41:5f:1e:a3:40:47:00:6f:21:d5:b9:42:f9:
                    a7:41:b8:8c:ec:f2:c8:94:d6:de:17:9f:0b:6c:00:
                    26:a3:bf:35:74:a3:dd:4b:27:19:d0:1b:d8:6f:c6:
                    8b:61:21:b0:5d:27:b7:1e:85:25:bb:a0:be:c0:fd:
                    23:d7:af:25:3e:25:a4:3f:f0:21:ed:fd:39:0b:1d:
                    08:41:36:a9:8a:a8:3d:71:3d:ac:dd:1c:05:8a:19:
                    9b:89:7e:d8:ff:b1:f3:60:38:e8:c1:03:a9:e2:5d:
                    e6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:76:8F:5C:2C:BB:FD:3C:EB:8A:A7:22:29:9E:26:23:C5:69:FB:67
            X509v3 Authority Key Identifier:
                keyid:31:5D:DE:A8:2F:41:51:67:8E:22:C7:DE:6D:37:28:21:37:38:7E:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/2/315DDEA82F4151678E22C7DE6D37282137387EEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/315DDEA82F4151678E22C7DE6D37282137387EEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/2/3230302e35332e38342e302f32322d3232203d3e20323731323938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:25:43:45:ce:e7:77:69:ca:37:0d:88:ec:f9:44:e2:da:46:
         0c:4c:02:e2:40:8b:3d:2b:41:1b:80:2d:01:08:42:c4:97:e3:
         96:36:67:3e:c6:45:9a:d0:8b:38:67:1b:ac:b2:35:91:93:57:
         89:30:04:5c:e5:84:2c:c5:5a:25:70:37:6a:9b:41:03:62:ff:
         a2:86:e1:15:28:87:86:b1:54:19:a6:93:34:93:c8:cb:6d:8f:
         be:ea:88:9e:20:15:f7:c8:92:13:ad:b8:72:88:62:8f:1f:d7:
         bb:38:90:f5:d8:4a:c9:4d:72:86:e7:cf:b0:27:1e:2f:72:f2:
         5e:26:7e:94:6f:ec:04:37:61:68:05:41:7a:31:70:25:f2:50:
         f7:51:5a:f4:38:b8:6c:82:dd:72:da:03:e7:b0:4a:fe:a7:2e:
         f9:e1:05:e8:61:f2:a4:b2:4f:d1:68:13:57:76:21:f5:ae:0f:
         2e:fd:32:b6:a9:07:ba:a7:65:ed:58:3e:5b:a4:e5:02:fd:e5:
         3e:6e:62:85:b0:2d:fb:78:80:c8:a4:00:6a:ab:81:4d:95:5d:
         cc:29:05:1d:a3:3d:fc:ea:39:5a:ab:fe:97:59:09:80:92:09:
         88:6e:18:29:9a:e9:d7:20:f9:27:9d:d0:46:d2:a9:d4:5c:ba:
         40:4f:1a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:52:41 2026 by rpki-client