Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3234342e302f32322d3232203d3e203238353934.roa
File:                     3230302e3231382e3234342e302f32322d3232203d3e203238353934.roa (raw, json)
Hash identifier:          RQ4djdUKt5dobLyM+uCzENRWHMMCTw0e0bLs+fl/U5w=
Subject key identifier:   48:90:50:18:31:8D:FF:B5:2B:C6:1E:DF:E7:7C:05:6E:0B:0B:83:CA
Certificate issuer:       /CN=0ADE98861008384C202CF7E0C8750CB9D0883315
Certificate serial:       332E3B3803B399F2187DBA803F8B0BA29CF5425A
Authority key identifier: 0A:DE:98:86:10:08:38:4C:20:2C:F7:E0:C8:75:0C:B9:D0:88:33:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0ADE98861008384C202CF7E0C8750CB9D0883315.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3234342e302f32322d3232203d3e203238353934.roa
Signing time:             Wed 01 Jul 2026 14:48:23 +0000
ROA not before:           Wed 01 Jul 2026 14:43:23 +0000
ROA not after:            Wed 30 Jun 2027 14:48:23 +0000
asID:                     28594
IP address blocks:        200.218.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/0ADE98861008384C202CF7E0C8750CB9D0883315.crl
                          rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/0ADE98861008384C202CF7E0C8750CB9D0883315.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0ADE98861008384C202CF7E0C8750CB9D0883315.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 03:56:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:2e:3b:38:03:b3:99:f2:18:7d:ba:80:3f:8b:0b:a2:9c:f5:42:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ADE98861008384C202CF7E0C8750CB9D0883315
        Validity
            Not Before: Jul  1 14:43:23 2026 GMT
            Not After : Jun 30 14:48:23 2027 GMT
        Subject: CN=48905018318DFFB52BC61EDFE77C056E0B0B83CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f3:da:b5:a9:a7:ab:15:e6:f1:c5:27:6c:14:
                    03:99:b7:b5:3f:75:3a:32:08:9e:fe:49:46:d2:ac:
                    a7:68:59:43:c3:7a:1e:97:b4:7e:d1:29:c8:d4:55:
                    86:f3:58:7c:6b:c8:b1:44:25:72:0b:88:20:b3:cf:
                    83:77:cf:03:d8:06:5b:21:81:c0:7b:76:82:ab:18:
                    af:0b:97:cc:8b:d9:ae:c3:b6:87:b4:d2:bd:80:21:
                    c0:a8:77:ab:eb:d3:8e:6f:58:f3:11:90:2d:71:dc:
                    b6:ba:f1:27:e5:63:e8:21:81:ce:c2:57:17:63:1a:
                    87:d6:70:1d:85:ee:ad:01:db:71:58:42:d4:d1:64:
                    4d:94:51:53:3a:63:ab:f1:af:98:f6:5d:88:0d:9c:
                    45:33:53:3f:a5:ae:6b:76:74:b8:d1:1d:e8:0d:32:
                    bd:9c:af:e2:75:a6:da:52:8e:6b:a0:c6:87:a3:88:
                    f3:41:cd:5d:66:4a:75:b9:48:bc:45:46:b9:ec:2f:
                    b4:b5:52:b7:6a:90:05:5b:74:45:a2:cd:ca:24:cc:
                    06:c1:e3:79:cb:04:29:bd:c4:93:92:3a:10:75:71:
                    4d:c7:b4:db:01:25:4e:13:61:ee:6f:7e:69:46:d9:
                    e3:0a:fa:ff:91:1d:d8:c9:01:44:ba:8a:61:75:1b:
                    8f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:90:50:18:31:8D:FF:B5:2B:C6:1E:DF:E7:7C:05:6E:0B:0B:83:CA
            X509v3 Authority Key Identifier:
                keyid:0A:DE:98:86:10:08:38:4C:20:2C:F7:E0:C8:75:0C:B9:D0:88:33:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/0ADE98861008384C202CF7E0C8750CB9D0883315.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0ADE98861008384C202CF7E0C8750CB9D0883315.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3234342e302f32322d3232203d3e203238353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.218.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:01:d9:aa:7e:93:aa:34:e0:d9:8d:0f:3c:70:4b:10:f4:ee:
         ef:b7:a6:0c:bc:47:7a:9c:ba:ca:4c:30:4a:6a:74:34:e0:35:
         9c:f5:50:2a:80:50:11:22:dc:7e:3b:7a:c4:d1:d8:81:41:78:
         ea:c0:75:ca:fa:07:4c:b4:9b:06:90:f5:f8:4c:1e:96:1f:3a:
         d6:89:81:f1:58:01:35:fa:5e:8d:fe:9b:62:d1:3b:c7:2e:09:
         15:d1:fe:09:b8:ab:7c:21:8c:96:c7:b6:0b:5b:d4:e8:e7:8f:
         98:d6:9b:fb:8b:69:65:9d:14:a5:63:a8:e0:5f:44:3d:02:ff:
         cd:16:44:16:10:a2:37:a2:49:6a:af:88:f3:ce:ce:aa:9e:70:
         b6:55:e2:ef:73:a5:c4:ad:9a:6d:c1:5a:ec:4c:f7:6f:7e:a1:
         f4:41:ec:73:0b:ce:59:2b:c5:40:e0:6e:56:3e:3e:64:94:29:
         b5:06:27:0d:25:0e:d5:f0:19:ea:ad:18:b7:50:31:f7:33:c4:
         85:be:a1:35:aa:ac:0e:49:e1:ce:33:4f:59:7c:c3:5b:9b:01:
         01:0e:34:98:01:15:36:4f:ec:3f:69:07:d1:f3:82:57:75:92:
         cd:6a:ed:d2:88:98:dd:27:bf:b5:41:0b:a5:dd:37:cb:07:5c:
         0b:84:f2:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:10:24 2026 by rpki-client