Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SfwJX1KYy12VgJYEPNR8dRYJeZg3rkb7VtK6LWXZiQS/0/3230302e3138372e3130372e302f32342d3234203d3e20323730363834.roa
File:                     3230302e3138372e3130372e302f32342d3234203d3e20323730363834.roa (raw, json)
Hash identifier:          4JpPVydWCsnZDbjO6hlaZ8HgvRiFimP3UK+jDokTQ6E=
Subject key identifier:   1D:DE:61:A2:DE:8B:99:B3:1F:62:66:77:05:F9:F7:89:1A:56:DB:D5
Certificate issuer:       /CN=597A0EE976AA889BD891E5B5A82635E17925FB5A
Certificate serial:       32CCBED826EB80CACB58363BACBA95FC538B93A8
Authority key identifier: 59:7A:0E:E9:76:AA:88:9B:D8:91:E5:B5:A8:26:35:E1:79:25:FB:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/597A0EE976AA889BD891E5B5A82635E17925FB5A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SfwJX1KYy12VgJYEPNR8dRYJeZg3rkb7VtK6LWXZiQS/0/3230302e3138372e3130372e302f32342d3234203d3e20323730363834.roa
Signing time:             Mon 23 Mar 2026 13:01:57 +0000
ROA not before:           Mon 23 Mar 2026 12:56:57 +0000
ROA not after:            Mon 22 Mar 2027 13:01:57 +0000
asID:                     270684
IP address blocks:        200.187.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3SfwJX1KYy12VgJYEPNR8dRYJeZg3rkb7VtK6LWXZiQS/0/597A0EE976AA889BD891E5B5A82635E17925FB5A.crl
                          rsync://rpki-repo.registro.br/repo/3SfwJX1KYy12VgJYEPNR8dRYJeZg3rkb7VtK6LWXZiQS/0/597A0EE976AA889BD891E5B5A82635E17925FB5A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/597A0EE976AA889BD891E5B5A82635E17925FB5A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 05:54:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:cc:be:d8:26:eb:80:ca:cb:58:36:3b:ac:ba:95:fc:53:8b:93:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=597A0EE976AA889BD891E5B5A82635E17925FB5A
        Validity
            Not Before: Mar 23 12:56:57 2026 GMT
            Not After : Mar 22 13:01:57 2027 GMT
        Subject: CN=1DDE61A2DE8B99B31F62667705F9F7891A56DBD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:52:02:ec:6b:70:97:78:22:a1:e5:c5:20:c1:
                    71:fa:a3:fb:2c:44:4a:df:f4:4d:8e:91:67:37:e0:
                    c5:42:fb:31:cd:55:7e:d2:ce:26:66:0e:dc:d8:80:
                    43:34:79:3b:c1:c7:bf:61:02:9b:fe:4a:01:33:f5:
                    e3:0e:5a:8d:2f:25:cf:d5:ff:c3:a5:0d:f8:55:bb:
                    f0:77:4a:82:6b:50:e0:09:f7:a1:ad:56:bf:ac:ed:
                    c3:18:01:74:13:ce:2a:f1:d4:08:3e:4e:4d:28:54:
                    6d:b1:b7:ad:ed:87:88:02:e0:b6:c3:06:59:d0:bc:
                    6d:8c:d8:95:94:8c:fc:fa:de:95:10:db:c1:24:60:
                    14:3d:f7:b3:b1:3f:84:09:54:c5:41:64:71:6a:45:
                    ce:4a:c7:f7:c9:d0:fc:03:f2:22:37:a5:99:aa:71:
                    69:c1:a8:2a:ac:1c:b5:ed:9d:b9:fb:95:86:6d:48:
                    33:40:6e:ce:58:f7:62:62:d4:94:3c:89:13:6b:4d:
                    a3:05:60:1b:1c:9f:1e:f4:b5:fd:8d:5f:58:e8:4b:
                    e0:f1:3d:d7:8e:33:44:1c:26:4e:05:7b:de:8f:94:
                    82:44:ff:ff:32:a1:26:7a:76:26:f4:27:ac:3e:be:
                    44:f2:8f:f7:c2:7d:d6:c8:64:03:d6:63:df:6b:eb:
                    5d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:DE:61:A2:DE:8B:99:B3:1F:62:66:77:05:F9:F7:89:1A:56:DB:D5
            X509v3 Authority Key Identifier:
                keyid:59:7A:0E:E9:76:AA:88:9B:D8:91:E5:B5:A8:26:35:E1:79:25:FB:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SfwJX1KYy12VgJYEPNR8dRYJeZg3rkb7VtK6LWXZiQS/0/597A0EE976AA889BD891E5B5A82635E17925FB5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/597A0EE976AA889BD891E5B5A82635E17925FB5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SfwJX1KYy12VgJYEPNR8dRYJeZg3rkb7VtK6LWXZiQS/0/3230302e3138372e3130372e302f32342d3234203d3e20323730363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.187.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:0d:9a:c1:52:13:fd:18:83:00:d7:22:74:be:5a:e4:57:29:
         b0:91:0c:b3:84:1d:b3:6c:68:c3:98:85:22:6a:0d:5f:f0:4b:
         52:4b:34:0c:d6:c7:84:8e:03:cc:21:5d:f5:48:25:76:f9:59:
         d5:5e:81:95:f2:7d:b0:7d:e4:7d:51:f2:3c:fa:46:b4:2d:84:
         ab:1b:00:5a:56:b2:0c:c4:c2:03:e5:e4:30:37:88:33:0b:8d:
         f1:6b:dd:e0:09:63:c0:e8:b2:3a:8c:dd:34:72:b6:fd:21:c9:
         b0:22:9a:fe:8f:97:66:0c:da:6f:c5:f8:08:07:e9:ab:6f:13:
         1e:4d:5d:d9:1b:ab:87:59:3b:1e:fd:f2:d8:a9:47:3e:74:7f:
         45:a9:47:31:28:52:22:6b:14:ff:4b:c7:53:70:73:ec:9d:05:
         1f:6b:c2:02:d4:5d:5f:34:cd:91:0a:78:95:e5:e0:58:52:08:
         96:81:4d:9d:ff:cc:0d:dd:cf:32:18:ba:8b:46:10:00:2b:cb:
         6f:0d:ff:74:67:4d:a1:8f:51:49:3c:57:14:27:cd:4b:7a:29:
         b9:98:c3:2c:0d:39:3d:8a:4c:54:74:11:b0:47:62:1b:ab:0f:
         6a:e8:11:26:36:19:9e:e0:f0:c0:22:1c:ee:ea:3d:c6:9e:95:
         4c:79:b1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:28:40 2026 by rpki-client