Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3234302e302f32312d3231203d3e203238353934.roa
File:                     3230302e3231382e3234302e302f32312d3231203d3e203238353934.roa (raw, json)
Hash identifier:          M47XnsvumaKLSf+xGvJVJa4ln84gOE26vP910lDxEic=
Subject key identifier:   C8:AD:CA:10:4F:D6:AE:2E:1A:56:9D:F4:75:D3:9C:AC:62:7A:76:F2
Certificate issuer:       /CN=0ADE98861008384C202CF7E0C8750CB9D0883315
Certificate serial:       5F3113EE22B972A4936AAEBFA55B417D9AFF5912
Authority key identifier: 0A:DE:98:86:10:08:38:4C:20:2C:F7:E0:C8:75:0C:B9:D0:88:33:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0ADE98861008384C202CF7E0C8750CB9D0883315.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3234302e302f32312d3231203d3e203238353934.roa
Signing time:             Wed 01 Jul 2026 14:48:22 +0000
ROA not before:           Wed 01 Jul 2026 14:43:22 +0000
ROA not after:            Wed 30 Jun 2027 14:48:22 +0000
asID:                     28594
IP address blocks:        200.218.240.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/0ADE98861008384C202CF7E0C8750CB9D0883315.crl
                          rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/0ADE98861008384C202CF7E0C8750CB9D0883315.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0ADE98861008384C202CF7E0C8750CB9D0883315.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 03:56:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:31:13:ee:22:b9:72:a4:93:6a:ae:bf:a5:5b:41:7d:9a:ff:59:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ADE98861008384C202CF7E0C8750CB9D0883315
        Validity
            Not Before: Jul  1 14:43:22 2026 GMT
            Not After : Jun 30 14:48:22 2027 GMT
        Subject: CN=C8ADCA104FD6AE2E1A569DF475D39CAC627A76F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:84:09:86:eb:ff:d6:a7:1a:29:21:4e:4a:91:
                    5d:a5:30:dd:98:16:6b:b7:2a:c5:20:0d:80:45:3e:
                    e6:17:64:40:b5:00:f9:7c:e8:63:18:ab:93:dc:74:
                    c8:a7:23:ee:15:40:ca:77:8a:98:81:b3:fc:8c:e9:
                    fb:89:51:2e:4b:5e:be:ec:9b:1e:70:48:5e:b3:74:
                    b2:ae:91:3f:65:86:ea:76:75:ed:b2:ce:2f:8b:29:
                    d9:75:8c:9e:f6:8c:25:72:d7:ae:63:94:fb:82:ca:
                    ea:c3:30:52:a1:0e:ea:20:7a:a4:37:db:f5:17:cf:
                    06:cc:fe:22:e4:d8:5d:64:7b:e1:7b:df:45:69:07:
                    0f:d0:f5:bb:3b:53:bc:1f:01:62:c4:40:5a:5a:e7:
                    e9:87:ed:c6:2f:7c:32:84:7e:40:ee:a9:07:44:54:
                    32:e4:6c:3b:24:42:47:1a:dd:83:57:6c:21:03:1b:
                    c2:af:4f:ab:94:1f:43:36:fa:9b:5c:4c:32:a3:82:
                    22:1d:7b:51:67:3a:ff:f9:bb:ea:07:5b:65:19:e9:
                    0b:8b:35:06:13:eb:57:ea:81:24:82:81:a4:27:c1:
                    bf:72:45:bd:5c:b9:f3:f6:e8:37:0b:21:4c:0c:21:
                    06:7c:78:f5:32:48:c0:d5:22:f7:24:2d:00:59:e3:
                    e6:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:AD:CA:10:4F:D6:AE:2E:1A:56:9D:F4:75:D3:9C:AC:62:7A:76:F2
            X509v3 Authority Key Identifier:
                keyid:0A:DE:98:86:10:08:38:4C:20:2C:F7:E0:C8:75:0C:B9:D0:88:33:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/0ADE98861008384C202CF7E0C8750CB9D0883315.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0ADE98861008384C202CF7E0C8750CB9D0883315.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3234302e302f32312d3231203d3e203238353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.218.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         59:ad:d2:38:2c:0d:b1:29:f6:70:8b:fb:10:6a:08:95:85:f4:
         a0:fb:eb:37:d6:94:65:25:73:d0:02:f7:78:6d:2b:1e:d7:7d:
         e2:8d:32:b6:61:52:2a:d6:ba:02:a8:ab:1e:a5:2b:b8:b5:79:
         7c:d2:ce:6a:64:7f:3a:df:1b:d4:48:df:b9:a5:92:93:85:bf:
         dd:69:cc:bb:74:36:64:ae:3d:a4:d7:a4:7d:64:d4:08:ce:81:
         1e:a1:2a:df:2b:c1:4a:46:5b:1c:39:e5:f4:a4:90:50:42:fa:
         d3:f3:07:a0:de:1c:f4:b3:2b:a9:ab:5a:12:0f:d2:20:eb:c8:
         6e:f2:b9:5c:39:d0:99:96:e7:d0:7f:f8:35:28:c6:02:26:b0:
         f5:27:e2:ec:a2:98:a5:f9:6a:d9:7e:8a:f3:e8:c1:8c:41:30:
         65:a9:b3:08:83:29:3d:7a:c9:af:a9:0b:d2:b8:76:57:a5:0e:
         88:34:49:06:dd:eb:e9:3f:57:be:be:59:11:08:21:43:19:25:
         dd:1e:a8:92:c4:48:00:84:c0:af:8a:35:f2:f8:99:d8:44:1e:
         72:f3:ec:1c:a5:2d:18:6f:77:04:9d:d3:3a:e6:50:04:92:ef:
         72:bc:00:1b:9a:fb:47:92:a7:14:60:4f:dd:9c:a3:ed:48:52:
         3d:bf:83:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:10:25 2026 by rpki-client