Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3234352e302f32342d3234203d3e203238353934.roa
File:                     3230302e3231382e3234352e302f32342d3234203d3e203238353934.roa (raw, json)
Hash identifier:          22/VH//sfMEAMu+z7+UvbepeZNBaAOn9wSxMufUNnW0=
Subject key identifier:   35:B1:27:89:3E:C1:F3:25:3F:64:C3:FB:BB:CC:B7:F8:2A:B5:39:5C
Certificate issuer:       /CN=0ADE98861008384C202CF7E0C8750CB9D0883315
Certificate serial:       0C66204A1EF02E1DF0410940842A2A73258B219C
Authority key identifier: 0A:DE:98:86:10:08:38:4C:20:2C:F7:E0:C8:75:0C:B9:D0:88:33:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0ADE98861008384C202CF7E0C8750CB9D0883315.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3234352e302f32342d3234203d3e203238353934.roa
Signing time:             Wed 01 Jul 2026 14:48:23 +0000
ROA not before:           Wed 01 Jul 2026 14:43:23 +0000
ROA not after:            Wed 30 Jun 2027 14:48:23 +0000
asID:                     28594
IP address blocks:        200.218.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/0ADE98861008384C202CF7E0C8750CB9D0883315.crl
                          rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/0ADE98861008384C202CF7E0C8750CB9D0883315.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0ADE98861008384C202CF7E0C8750CB9D0883315.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 03:56:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:66:20:4a:1e:f0:2e:1d:f0:41:09:40:84:2a:2a:73:25:8b:21:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ADE98861008384C202CF7E0C8750CB9D0883315
        Validity
            Not Before: Jul  1 14:43:23 2026 GMT
            Not After : Jun 30 14:48:23 2027 GMT
        Subject: CN=35B127893EC1F3253F64C3FBBBCCB7F82AB5395C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:3b:b4:5e:40:59:e8:f5:54:3c:ab:7f:ee:94:
                    de:b7:b2:c2:a9:b6:66:98:75:ab:90:28:ed:3e:00:
                    92:8d:8f:b6:78:57:99:22:9d:80:8f:13:cb:0b:d3:
                    92:3f:d3:6c:0e:4a:3e:c2:38:0a:3d:54:6d:6d:8c:
                    0b:92:bd:c9:fe:46:9f:ea:1d:bb:62:c3:74:75:f7:
                    29:43:e8:f8:28:6b:f3:b5:16:e8:60:d0:d5:62:a6:
                    ca:ed:e9:4d:ce:71:2b:2b:12:b3:04:bc:e9:47:76:
                    6f:4f:20:8c:f9:a9:71:04:26:da:af:9c:b2:65:57:
                    fd:13:12:e1:d9:84:e8:f8:76:0b:59:ec:16:8e:05:
                    94:9e:fd:02:dd:58:f5:2e:e0:d1:c9:70:4a:48:c9:
                    9e:7b:5d:99:60:07:12:ec:e5:bc:32:3d:09:36:a6:
                    05:68:32:fd:d5:a8:db:9c:6c:87:64:03:56:97:6c:
                    fe:74:41:bd:a9:60:3b:ba:57:5a:92:a6:88:bb:40:
                    0f:fc:54:43:a2:bd:ff:50:6f:16:e5:31:de:32:7d:
                    44:0d:b2:ae:49:f5:e7:e3:14:e6:63:b3:62:76:cd:
                    4d:55:dd:93:a4:d6:16:3e:22:09:9b:e2:a7:5a:9d:
                    03:65:3f:bc:ff:5e:6c:16:b3:8d:2a:43:bd:16:27:
                    65:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:B1:27:89:3E:C1:F3:25:3F:64:C3:FB:BB:CC:B7:F8:2A:B5:39:5C
            X509v3 Authority Key Identifier:
                keyid:0A:DE:98:86:10:08:38:4C:20:2C:F7:E0:C8:75:0C:B9:D0:88:33:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/0ADE98861008384C202CF7E0C8750CB9D0883315.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0ADE98861008384C202CF7E0C8750CB9D0883315.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3234352e302f32342d3234203d3e203238353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.218.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:a8:58:6e:f8:e1:af:99:c1:ae:4f:23:8c:c6:3e:31:15:b1:
         a2:79:f2:e0:72:85:37:af:09:a2:13:63:d1:2e:66:2f:0e:d6:
         c5:6c:f4:99:94:3b:88:8f:65:a2:b6:36:72:42:47:16:7a:c1:
         d3:d4:8e:93:9e:37:81:f4:17:c8:c0:97:c5:59:7b:7a:64:24:
         fd:21:db:15:ec:df:63:5c:ea:6f:91:4f:56:63:89:32:17:44:
         e2:48:c7:c1:75:d8:25:a4:a0:e1:d3:0f:22:23:ee:c5:fc:62:
         78:5e:bf:02:e0:08:aa:57:ab:f9:e7:30:ed:07:12:3d:d9:9d:
         27:87:6b:a9:a4:54:3a:c2:a6:4a:d7:4e:dd:78:f7:c9:98:63:
         46:6b:53:3d:00:c7:ae:e7:fd:ab:84:9f:36:b7:76:80:9b:1d:
         52:0e:23:44:31:e2:90:70:87:00:9e:0d:3a:fd:2e:f2:3e:04:
         4a:d8:c4:fd:23:04:6c:77:b8:bd:d4:94:c7:e7:ed:42:ea:27:
         f7:a5:7d:61:f4:69:29:4c:28:2b:3a:53:78:af:a2:54:f9:99:
         f7:33:ed:9f:28:b3:dd:43:7f:40:1c:7b:f1:ca:c7:d1:25:f4:
         3f:7e:fe:b4:61:06:5a:b4:08:12:48:5c:00:15:f9:70:f9:a4:
         03:56:e9:63
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUDGYgSh7wLh3wQQlAhCoqcyWLIZwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEFERTk4ODYxMDA4Mzg0QzIwMkNGN0UwQzg3NTBDQjlE
MDg4MzMxNTAeFw0yNjA3MDExNDQzMjNaFw0yNzA2MzAxNDQ4MjNaMDMxMTAvBgNV
BAMTKDM1QjEyNzg5M0VDMUYzMjUzRjY0QzNGQkJCQ0NCN0Y4MkFCNTM5NUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaO7ReQFno9VQ8q3/ulN63ssKp
tmaYdauQKO0+AJKNj7Z4V5kinYCPE8sL05I/02wOSj7COAo9VG1tjAuSvcn+Rp/q
Hbtiw3R19ylD6Pgoa/O1Fuhg0NVipsrt6U3OcSsrErMEvOlHdm9PIIz5qXEEJtqv
nLJlV/0TEuHZhOj4dgtZ7BaOBZSe/QLdWPUu4NHJcEpIyZ57XZlgBxLs5bwyPQk2
pgVoMv3VqNucbIdkA1aXbP50Qb2pYDu6V1qSpoi7QA/8VEOivf9QbxblMd4yfUQN
sq5J9efjFOZjs2J2zU1V3ZOk1hY+Igmb4qdanQNlP7z/XmwWs40qQ70WJ2VnAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUNbEniT7B8yU/ZMP7u8y3+Cq1OVwwHwYDVR0j
BBgwFoAUCt6YhhAIOEwgLPfgyHUMudCIMxUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTNqampURGZVQWVSQ3FSd1lKNkZNcjlCb3l5dWNVOGNpd25QSzRNaEx5
d3ovMS8wQURFOTg4NjEwMDgzODRDMjAyQ0Y3RTBDODc1MENCOUQwODgzMzE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBBREU5ODg2MTAwODM4NEMy
MDJDRjdFMEM4NzUwQ0I5RDA4ODMzMTUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzUzampqVERmVUFlUkNxUndZSjZGTXI5Qm95eXVjVThjaXduUEs0TWhMeXd6LzEv
MzIzMDMwMmUzMjMxMzgyZTMyMzQzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzgzNTM5MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADI2vUwDQYJKoZIhvcNAQELBQADggEBAG+oWG74
4a+Zwa5PI4zGPjEVsaJ58uByhTevCaITY9EuZi8O1sVs9JmUO4iPZaK2NnJCRxZ6
wdPUjpOeN4H0F8jAl8VZe3pkJP0h2xXs32Nc6m+RT1ZjiTIXROJIx8F12CWkoOHT
DyIj7sX8YnhevwLgCKpXq/nnMO0HEj3ZnSeHa6mkVDrCpkrXTt1498mYY0ZrUz0A
x67n/auEnza3doCbHVIOI0Qx4pBwhwCeDTr9LvI+BErYxP0jBGx3uL3UlMfn7ULq
J/elfWH0aSlMKCs6U3ivolT5mfcz7Z8os91Df0Ace/HKx9El9D9+/rRhBlq0CBJI
XAAV+XD5pANW6WM=
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:10:24 2026 by rpki-client