Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2oYuNGVC3nQwTaREUAxuQkjhMksSSbTusrb4C5ejYMJT/0/3230302e32342e3130382e302f32322d3332203d3e20323731363131.roa
File:                     3230302e32342e3130382e302f32322d3332203d3e20323731363131.roa (raw, json)
Hash identifier:          iOesQVGZv+NNxhRf/lkmGr9NB0Vld5ECBVQ6fntPv4I=
Subject key identifier:   8F:F3:C4:29:9B:E9:59:B6:F6:CA:B7:F1:DC:CA:B7:F4:51:2E:2E:9E
Certificate issuer:       /CN=C2C711199028B119AC8F2C0AC66D07BF403C78FE
Certificate serial:       6E813E7C48AE4ABA9D2176E6645F9D2C6E1F2F62
Authority key identifier: C2:C7:11:19:90:28:B1:19:AC:8F:2C:0A:C6:6D:07:BF:40:3C:78:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2C711199028B119AC8F2C0AC66D07BF403C78FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2oYuNGVC3nQwTaREUAxuQkjhMksSSbTusrb4C5ejYMJT/0/3230302e32342e3130382e302f32322d3332203d3e20323731363131.roa
Signing time:             Thu 19 Mar 2026 19:26:46 +0000
ROA not before:           Thu 19 Mar 2026 19:21:46 +0000
ROA not after:            Thu 18 Mar 2027 19:26:46 +0000
asID:                     271611
IP address blocks:        200.24.108.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2oYuNGVC3nQwTaREUAxuQkjhMksSSbTusrb4C5ejYMJT/0/C2C711199028B119AC8F2C0AC66D07BF403C78FE.crl
                          rsync://rpki-repo.registro.br/repo/2oYuNGVC3nQwTaREUAxuQkjhMksSSbTusrb4C5ejYMJT/0/C2C711199028B119AC8F2C0AC66D07BF403C78FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2C711199028B119AC8F2C0AC66D07BF403C78FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 22:54:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:81:3e:7c:48:ae:4a:ba:9d:21:76:e6:64:5f:9d:2c:6e:1f:2f:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2C711199028B119AC8F2C0AC66D07BF403C78FE
        Validity
            Not Before: Mar 19 19:21:46 2026 GMT
            Not After : Mar 18 19:26:46 2027 GMT
        Subject: CN=8FF3C4299BE959B6F6CAB7F1DCCAB7F4512E2E9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6c:bb:59:17:c7:60:f8:92:0e:38:e7:5b:77:
                    92:ef:0c:5d:66:42:a0:9c:fa:c9:a2:9f:17:96:e5:
                    29:51:af:82:55:17:3e:55:53:03:5a:19:32:60:ea:
                    17:7c:25:44:2b:ff:c7:23:2b:d4:eb:d1:8a:58:3e:
                    f2:fd:e1:39:57:34:15:83:e9:7d:8d:00:90:00:d4:
                    55:99:5c:52:da:f0:5f:5d:ad:7e:98:53:5d:ab:6f:
                    4d:35:c0:d5:00:17:9b:ea:09:1f:a7:13:43:49:e0:
                    2a:a5:79:ac:79:9c:1e:8c:5a:9d:b2:82:6a:ec:4a:
                    e3:8f:01:67:b2:22:b1:56:74:4d:59:e2:89:17:02:
                    19:ea:6d:a7:7a:28:89:5c:dd:82:85:4e:c2:cd:8f:
                    57:cb:bc:9b:20:ce:47:67:9f:d9:ff:0b:0f:28:ef:
                    68:d2:4e:d5:eb:7e:12:76:50:da:06:80:90:d1:c8:
                    ce:7c:ca:a2:0a:25:f2:a7:88:cf:22:db:b7:ca:fb:
                    ee:1e:9d:4c:4f:3f:74:c9:08:63:7d:59:56:67:ac:
                    11:2d:b3:71:dd:e7:8b:99:01:6c:46:ae:1e:ed:31:
                    92:d8:9d:6a:2a:1c:9e:79:66:ac:2f:ee:14:41:df:
                    10:a4:f9:5e:2e:16:27:b8:80:e7:b0:c6:af:0e:be:
                    95:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:F3:C4:29:9B:E9:59:B6:F6:CA:B7:F1:DC:CA:B7:F4:51:2E:2E:9E
            X509v3 Authority Key Identifier:
                keyid:C2:C7:11:19:90:28:B1:19:AC:8F:2C:0A:C6:6D:07:BF:40:3C:78:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2oYuNGVC3nQwTaREUAxuQkjhMksSSbTusrb4C5ejYMJT/0/C2C711199028B119AC8F2C0AC66D07BF403C78FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2C711199028B119AC8F2C0AC66D07BF403C78FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2oYuNGVC3nQwTaREUAxuQkjhMksSSbTusrb4C5ejYMJT/0/3230302e32342e3130382e302f32322d3332203d3e20323731363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.24.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:41:eb:57:27:fa:38:04:34:01:f4:c3:5e:75:19:58:ed:26:
         10:5e:e5:c9:af:f6:cd:32:a8:02:92:4b:93:c0:fe:3c:72:33:
         8d:e3:8f:8b:ff:c6:8c:c0:39:34:c1:1a:99:ba:e1:4a:16:92:
         24:a5:b6:ad:25:14:b2:05:fa:5d:78:86:8b:cd:38:5f:22:58:
         6d:94:05:86:12:12:f5:01:aa:d6:fa:8e:eb:55:1c:07:c1:20:
         68:a4:5f:a2:df:27:8f:71:ea:55:71:74:16:03:23:bc:d6:94:
         8c:1e:91:00:42:cf:9e:44:e6:2e:d7:32:aa:6b:68:57:b8:e0:
         75:c7:d4:a1:74:90:c6:1a:23:3e:09:bb:54:8e:c4:99:e6:7b:
         e8:eb:ca:5c:be:f4:f5:c4:4c:c5:01:40:a5:ca:d2:e0:e0:53:
         1e:ec:bd:9e:26:22:04:26:1a:fd:66:b4:9e:7c:07:c1:78:95:
         71:06:3c:bf:6d:8d:7f:6c:0c:71:5a:5f:ca:72:f6:f8:3a:a6:
         72:c1:79:c5:3a:89:c7:8f:dd:0d:67:df:8e:d3:b8:0f:c8:ed:
         04:74:8a:94:0b:48:bd:b1:be:fe:d8:f1:40:00:a6:dc:42:e2:
         9e:c7:37:a2:47:b3:b3:97:27:8c:fa:cf:3d:36:9b:6a:ba:91:
         18:8b:35:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:05:10 2026 by rpki-client