Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SfwJX1KYy12VgJYEPNR8dRYJeZg3rkb7VtK6LWXZiQS/0/3230302e3138372e3130362e302f32342d3234203d3e20323730363834.roa
File:                     3230302e3138372e3130362e302f32342d3234203d3e20323730363834.roa (raw, json)
Hash identifier:          Q+e7IddrKIVUx6fBhjgNa1BgkwEIStlNsmtaiP9S2cM=
Subject key identifier:   E1:E9:5B:31:D2:60:C7:0F:4B:11:81:79:9A:64:28:2D:AB:7B:EB:35
Certificate issuer:       /CN=597A0EE976AA889BD891E5B5A82635E17925FB5A
Certificate serial:       65B8DEBFA9DA1FA5AF23320398BB3E76E23AEDD2
Authority key identifier: 59:7A:0E:E9:76:AA:88:9B:D8:91:E5:B5:A8:26:35:E1:79:25:FB:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/597A0EE976AA889BD891E5B5A82635E17925FB5A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SfwJX1KYy12VgJYEPNR8dRYJeZg3rkb7VtK6LWXZiQS/0/3230302e3138372e3130362e302f32342d3234203d3e20323730363834.roa
Signing time:             Mon 23 Mar 2026 13:01:37 +0000
ROA not before:           Mon 23 Mar 2026 12:56:37 +0000
ROA not after:            Mon 22 Mar 2027 13:01:37 +0000
asID:                     270684
IP address blocks:        200.187.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3SfwJX1KYy12VgJYEPNR8dRYJeZg3rkb7VtK6LWXZiQS/0/597A0EE976AA889BD891E5B5A82635E17925FB5A.crl
                          rsync://rpki-repo.registro.br/repo/3SfwJX1KYy12VgJYEPNR8dRYJeZg3rkb7VtK6LWXZiQS/0/597A0EE976AA889BD891E5B5A82635E17925FB5A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/597A0EE976AA889BD891E5B5A82635E17925FB5A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 05:54:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:b8:de:bf:a9:da:1f:a5:af:23:32:03:98:bb:3e:76:e2:3a:ed:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=597A0EE976AA889BD891E5B5A82635E17925FB5A
        Validity
            Not Before: Mar 23 12:56:37 2026 GMT
            Not After : Mar 22 13:01:37 2027 GMT
        Subject: CN=E1E95B31D260C70F4B1181799A64282DAB7BEB35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9a:71:b5:2d:ab:29:dc:79:00:d0:2c:0b:c5:
                    fd:42:27:b1:8d:f1:14:d0:f5:45:92:87:37:67:7d:
                    97:ee:b7:b4:6e:7a:37:f3:84:83:32:ab:d0:be:64:
                    2d:07:23:0f:8b:90:11:ba:94:9c:c1:01:88:02:09:
                    9c:89:a7:11:11:b8:eb:3c:49:14:0f:65:a6:8d:a8:
                    c5:02:9d:2d:b8:7c:5d:bf:39:57:f9:05:34:4e:5a:
                    2e:2d:96:eb:4b:d2:49:63:5b:fb:16:c3:8a:f8:b4:
                    36:c6:c8:72:95:64:b1:cb:c3:6d:e3:df:b5:3d:14:
                    ec:09:e6:33:40:5e:74:dc:5d:0d:fc:45:07:73:2c:
                    58:13:87:0b:13:12:01:34:66:11:76:38:7c:79:22:
                    1b:36:f4:71:c3:11:da:2d:cc:81:c5:50:66:2a:d8:
                    c5:3c:c0:65:d6:07:0a:24:81:51:8d:39:49:28:fc:
                    5a:8e:86:c7:c9:5c:6e:18:57:34:4d:c6:0c:36:9c:
                    4e:03:01:65:09:19:ea:6d:87:fc:77:af:6f:a0:ea:
                    38:ab:de:d0:b8:22:d5:91:0b:07:ba:7c:a8:c9:03:
                    17:7b:d2:90:e6:e9:5d:60:f3:5b:ce:75:40:0d:7c:
                    92:75:4b:6c:80:2b:ad:b7:63:4d:77:1c:7f:b1:9e:
                    7b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:E9:5B:31:D2:60:C7:0F:4B:11:81:79:9A:64:28:2D:AB:7B:EB:35
            X509v3 Authority Key Identifier:
                keyid:59:7A:0E:E9:76:AA:88:9B:D8:91:E5:B5:A8:26:35:E1:79:25:FB:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SfwJX1KYy12VgJYEPNR8dRYJeZg3rkb7VtK6LWXZiQS/0/597A0EE976AA889BD891E5B5A82635E17925FB5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/597A0EE976AA889BD891E5B5A82635E17925FB5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SfwJX1KYy12VgJYEPNR8dRYJeZg3rkb7VtK6LWXZiQS/0/3230302e3138372e3130362e302f32342d3234203d3e20323730363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.187.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:cd:2c:57:ee:01:6b:02:0d:db:e1:e3:92:d3:84:e1:52:78:
         7f:88:e0:e9:91:09:14:28:b1:7b:19:9e:b1:c6:24:31:4b:ad:
         f3:dd:38:de:01:66:3f:8e:fe:f6:c9:ba:0f:42:e7:fc:55:0f:
         12:50:58:9d:fa:0c:a0:1f:df:91:77:5d:88:ff:fa:8c:7c:1b:
         38:33:9a:c2:84:26:4d:8b:3d:c3:97:1b:92:76:e8:32:3c:6b:
         8d:dd:f5:74:39:0e:02:f5:3f:e1:65:47:ed:13:3e:58:1e:e6:
         2e:f5:c1:b6:d7:9a:2e:02:1c:4f:d4:e4:9d:30:e4:d5:34:6a:
         43:49:f3:82:33:7e:25:e3:8c:5d:94:1e:35:41:98:19:63:e2:
         80:7b:6d:47:49:10:78:f9:b8:be:07:08:2f:e0:2e:e1:36:cb:
         d2:8d:ba:84:ed:9f:2f:7c:38:ef:04:d6:8e:56:f1:40:1e:15:
         be:03:0c:91:7c:3e:de:04:26:8a:46:c3:7b:6d:b5:b2:c1:4b:
         3c:69:08:bb:23:75:ec:dd:bf:9a:c4:ea:3f:ae:58:1b:3e:20:
         eb:b3:18:50:c4:62:96:b1:80:42:1a:7e:57:48:ba:54:29:29:
         8b:80:65:a9:00:b8:75:f9:71:61:a6:be:b8:cf:b4:34:12:5f:
         30:58:2b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:28:39 2026 by rpki-client