Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/3230302e3135322e3138332e302f32342d3234203d3e203238313935.roa
File:                     3230302e3135322e3138332e302f32342d3234203d3e203238313935.roa (raw, json)
Hash identifier:          MZHXR75Nn838rbnQ7rnGt+9atJTe38E4pdpqGgAFuLE=
Subject key identifier:   38:0A:11:73:14:8D:63:A2:D6:D9:48:72:64:B1:FB:22:F7:1A:C2:CD
Certificate issuer:       /CN=ABEDCE5CA2A73752E848B305E7DCB48075860E71
Certificate serial:       575E54440EB75784CBE50F8C203636778FB25964
Authority key identifier: AB:ED:CE:5C:A2:A7:37:52:E8:48:B3:05:E7:DC:B4:80:75:86:0E:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABEDCE5CA2A73752E848B305E7DCB48075860E71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/3230302e3135322e3138332e302f32342d3234203d3e203238313935.roa
Signing time:             Fri 10 Jul 2026 22:46:15 +0000
ROA not before:           Fri 10 Jul 2026 22:41:15 +0000
ROA not after:            Fri 09 Jul 2027 22:46:15 +0000
asID:                     28195
IP address blocks:        200.152.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/ABEDCE5CA2A73752E848B305E7DCB48075860E71.crl
                          rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/ABEDCE5CA2A73752E848B305E7DCB48075860E71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABEDCE5CA2A73752E848B305E7DCB48075860E71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 10:50:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:5e:54:44:0e:b7:57:84:cb:e5:0f:8c:20:36:36:77:8f:b2:59:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABEDCE5CA2A73752E848B305E7DCB48075860E71
        Validity
            Not Before: Jul 10 22:41:15 2026 GMT
            Not After : Jul  9 22:46:15 2027 GMT
        Subject: CN=380A1173148D63A2D6D9487264B1FB22F71AC2CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:cd:0b:fb:43:82:cc:ab:5f:c9:7c:57:4b:8c:
                    29:1c:34:52:4a:0a:2d:bc:59:05:94:a9:19:01:ce:
                    d9:8a:f0:e6:50:63:ee:e0:00:cd:45:58:cd:b9:fa:
                    32:01:b9:dc:f6:39:6a:3b:9c:46:6f:f4:c8:10:36:
                    ee:bf:c6:83:7d:ef:6a:63:2a:2b:6e:8f:dc:b9:0e:
                    e3:2e:a5:8d:04:95:e4:2d:cc:a2:ba:7d:d2:5a:ef:
                    49:e1:7d:bb:d7:74:22:a3:d7:40:30:d4:69:ac:53:
                    87:75:11:f8:71:65:e0:ce:7a:26:9a:59:80:43:e8:
                    01:a7:7f:f2:86:6e:8c:fd:8d:68:52:b3:3c:c3:1e:
                    7f:a7:ed:49:11:18:7b:7e:28:4d:bc:19:c3:11:c0:
                    87:a9:3a:72:25:6b:35:b9:d8:f6:a6:62:37:6c:5a:
                    b2:e1:29:32:eb:6b:3b:e8:d3:68:64:91:67:94:4d:
                    48:a8:8d:d4:1d:2b:96:14:87:a7:ba:84:d1:56:cf:
                    e8:9f:77:73:7f:f4:a7:50:9c:b3:37:95:20:33:57:
                    85:0d:45:41:95:97:ec:a8:e2:4d:16:33:27:77:0b:
                    5f:46:af:48:79:87:89:7a:e1:a3:be:21:9a:3e:38:
                    51:57:76:69:6c:da:b1:e4:37:13:ee:04:7d:1d:57:
                    13:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:0A:11:73:14:8D:63:A2:D6:D9:48:72:64:B1:FB:22:F7:1A:C2:CD
            X509v3 Authority Key Identifier:
                keyid:AB:ED:CE:5C:A2:A7:37:52:E8:48:B3:05:E7:DC:B4:80:75:86:0E:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/ABEDCE5CA2A73752E848B305E7DCB48075860E71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABEDCE5CA2A73752E848B305E7DCB48075860E71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/3230302e3135322e3138332e302f32342d3234203d3e203238313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:9f:f1:82:eb:b9:51:3a:ae:b3:7f:d8:36:5b:7d:0c:7b:f1:
         2a:3b:92:56:f5:0c:cc:3a:78:89:f7:e2:56:c6:7f:44:cd:c7:
         30:b4:d9:63:4f:21:97:9a:50:e8:58:94:72:69:06:41:e5:9a:
         18:ad:2f:d4:01:95:b0:3c:15:12:80:14:26:10:34:df:6a:d9:
         6c:57:79:d8:69:ea:1b:c5:e9:69:f5:fb:b6:51:37:aa:96:f2:
         82:66:70:96:64:33:42:dd:a8:2f:91:24:36:e7:18:ad:85:dc:
         52:ee:73:29:d5:63:87:f6:e4:03:bf:ac:ab:11:e9:f2:ed:03:
         a8:b7:f4:1c:35:c4:c6:32:ab:4b:66:de:de:0c:10:e1:d4:fc:
         99:a3:15:24:b3:93:78:2f:e5:50:d8:79:11:59:f6:23:59:9f:
         65:a3:d2:f2:46:04:a3:46:0b:91:37:e2:48:17:8b:67:09:cd:
         80:fd:e1:41:1c:2f:9a:0d:d0:12:e8:76:d1:95:b2:82:10:1b:
         9e:7e:60:1d:c7:ee:54:92:f0:24:73:33:87:1e:82:7c:32:b1:
         34:62:8f:dd:ed:30:4b:16:af:aa:2a:77:47:9d:48:8c:1f:13:
         9b:fb:f7:2a:0d:bc:e2:35:e7:c5:e0:82:45:0b:66:81:5a:b0:
         2e:de:a2:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:08:21 2026 by rpki-client