Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/3230302e33332e3135322e302f32312d3332203d3e20323638393736.roa
File:                     3230302e33332e3135322e302f32312d3332203d3e20323638393736.roa (raw, json)
Hash identifier:          jmo11YFomV5/KpnaDd9ubLaCla2xFn9fKItGdwGw180=
Subject key identifier:   BF:D8:3B:BB:85:3C:CB:32:11:90:20:4A:74:CE:30:D4:E3:AE:59:5F
Certificate issuer:       /CN=134699DE05FA0114D9EBD9657A4AC646F0601BB1
Certificate serial:       2A32377ADD3847FCF2554F700035CCEB78E6346C
Authority key identifier: 13:46:99:DE:05:FA:01:14:D9:EB:D9:65:7A:4A:C6:46:F0:60:1B:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/134699DE05FA0114D9EBD9657A4AC646F0601BB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/3230302e33332e3135322e302f32312d3332203d3e20323638393736.roa
Signing time:             Mon 11 May 2026 17:48:33 +0000
ROA not before:           Mon 11 May 2026 17:43:33 +0000
ROA not after:            Mon 10 May 2027 17:48:33 +0000
asID:                     268976
IP address blocks:        200.33.152.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/134699DE05FA0114D9EBD9657A4AC646F0601BB1.crl
                          rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/134699DE05FA0114D9EBD9657A4AC646F0601BB1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/134699DE05FA0114D9EBD9657A4AC646F0601BB1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 05:47:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:32:37:7a:dd:38:47:fc:f2:55:4f:70:00:35:cc:eb:78:e6:34:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=134699DE05FA0114D9EBD9657A4AC646F0601BB1
        Validity
            Not Before: May 11 17:43:33 2026 GMT
            Not After : May 10 17:48:33 2027 GMT
        Subject: CN=BFD83BBB853CCB321190204A74CE30D4E3AE595F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ce:5a:33:2f:79:30:a1:35:5d:34:a8:73:57:
                    cb:65:b0:eb:6f:70:c3:8a:e2:3e:cb:9e:68:f4:d9:
                    47:dd:31:ae:a9:bf:82:ae:87:77:89:50:65:3b:6d:
                    d2:41:25:43:64:e8:80:bd:b1:87:4c:e3:80:2e:eb:
                    76:95:0d:fb:b0:a8:6f:81:26:82:a8:15:23:2c:21:
                    80:1e:b7:0c:2e:c2:4c:e6:dc:61:e3:d0:8a:4e:ca:
                    7b:dd:f3:68:74:20:84:4b:2e:7d:a2:d8:c1:5b:e1:
                    28:fe:a2:e1:ff:aa:72:58:56:32:8d:2c:96:92:1a:
                    84:88:95:0b:0b:ed:f5:e4:6c:84:a8:61:c3:c6:e4:
                    db:cc:ee:5f:71:4c:fd:e8:6a:05:bf:d5:bc:00:07:
                    24:b7:74:b0:cd:6a:a5:4e:9a:ac:16:35:1a:a2:10:
                    2d:77:c6:92:f1:92:74:60:e7:f5:b4:4a:f8:12:e4:
                    e1:73:d3:40:22:cb:d5:c8:a4:77:61:56:db:a4:31:
                    80:a7:03:13:16:98:2c:b2:ac:de:61:75:87:bd:2b:
                    a6:5b:01:70:49:13:40:be:ea:14:fe:39:54:8f:1e:
                    5f:85:32:d4:13:71:58:f1:03:c0:ef:f4:ca:62:d0:
                    18:fe:2b:90:2a:b3:b6:36:1e:6e:ce:88:70:50:17:
                    89:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:D8:3B:BB:85:3C:CB:32:11:90:20:4A:74:CE:30:D4:E3:AE:59:5F
            X509v3 Authority Key Identifier:
                keyid:13:46:99:DE:05:FA:01:14:D9:EB:D9:65:7A:4A:C6:46:F0:60:1B:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/134699DE05FA0114D9EBD9657A4AC646F0601BB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/134699DE05FA0114D9EBD9657A4AC646F0601BB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/3230302e33332e3135322e302f32312d3332203d3e20323638393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         35:16:62:3b:7e:82:3a:a9:c1:17:55:e2:37:46:32:cf:19:dc:
         24:77:f7:87:3d:64:58:b5:09:c9:8c:a5:ae:f8:dd:62:2f:67:
         81:d5:7f:eb:cb:17:03:ca:3a:7e:39:ae:e6:4c:a4:e7:d3:d8:
         65:e0:c2:11:01:87:1f:37:21:c8:30:29:49:dd:87:48:66:7d:
         6c:95:93:60:fd:55:df:f5:a3:24:cd:06:82:45:5a:69:df:c0:
         86:57:32:84:3b:d6:df:6f:cf:bd:bd:71:e4:7b:06:fe:73:8a:
         8d:66:e2:39:92:2b:01:89:e1:c3:d3:d4:ee:6e:5a:7f:50:54:
         d6:eb:2b:76:dd:5a:a5:1a:26:05:37:e2:f1:3b:01:c5:92:92:
         e4:f8:91:55:f1:9a:c0:4c:ba:5f:48:0d:bb:a1:b0:e6:23:64:
         7f:81:7a:82:67:d1:20:14:e3:38:54:b7:ce:49:b4:b4:2e:00:
         d3:69:11:4b:f7:cf:20:e1:c2:a3:8f:f4:f9:01:f9:ed:c6:59:
         c4:e1:06:02:56:45:ca:8f:78:11:82:7f:8c:12:39:94:38:83:
         bb:93:94:44:9a:87:b7:2b:6c:fb:b8:f3:74:a9:3c:f6:32:dd:
         00:c3:62:4c:90:db:22:8c:db:94:29:1f:6e:d9:1f:c9:85:4f:
         fc:80:44:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:33:37 2026 by rpki-client