Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3234372e302f32342d3234203d3e203238353934.roa
File:                     3230302e3231382e3234372e302f32342d3234203d3e203238353934.roa (raw, json)
Hash identifier:          FNlR7RXwGz+Q7eEJOlrP4Ayvz4RTxbLU/aLJyXOKlR0=
Subject key identifier:   42:1D:32:11:DC:70:C8:76:61:7D:2F:EF:81:A5:80:9D:3D:92:3C:55
Certificate issuer:       /CN=0ADE98861008384C202CF7E0C8750CB9D0883315
Certificate serial:       1AC80174C3CF8F539D8CB9E97FD140C80CE62454
Authority key identifier: 0A:DE:98:86:10:08:38:4C:20:2C:F7:E0:C8:75:0C:B9:D0:88:33:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0ADE98861008384C202CF7E0C8750CB9D0883315.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3234372e302f32342d3234203d3e203238353934.roa
Signing time:             Wed 01 Jul 2026 14:48:23 +0000
ROA not before:           Wed 01 Jul 2026 14:43:23 +0000
ROA not after:            Wed 30 Jun 2027 14:48:23 +0000
asID:                     28594
IP address blocks:        200.218.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/0ADE98861008384C202CF7E0C8750CB9D0883315.crl
                          rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/0ADE98861008384C202CF7E0C8750CB9D0883315.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0ADE98861008384C202CF7E0C8750CB9D0883315.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 03:56:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:c8:01:74:c3:cf:8f:53:9d:8c:b9:e9:7f:d1:40:c8:0c:e6:24:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ADE98861008384C202CF7E0C8750CB9D0883315
        Validity
            Not Before: Jul  1 14:43:23 2026 GMT
            Not After : Jun 30 14:48:23 2027 GMT
        Subject: CN=421D3211DC70C876617D2FEF81A5809D3D923C55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:98:4e:73:31:07:58:9c:70:c2:97:0d:62:31:
                    fe:90:2d:45:ff:ee:04:92:a5:16:fc:d6:53:69:71:
                    57:f3:8c:50:03:0c:44:28:21:f6:27:4e:0c:f3:ca:
                    55:95:13:cf:1b:ff:93:a4:aa:51:54:9d:3c:ac:aa:
                    ce:8d:c0:83:45:4c:3a:d8:8f:1e:f5:41:58:ad:fb:
                    47:1e:d8:ca:54:f3:ef:18:a3:24:49:8d:34:39:13:
                    f0:a3:53:fb:6a:a0:f6:4b:ad:71:ca:c1:c0:91:12:
                    30:d4:7e:6b:61:24:f5:31:f2:c2:89:f0:86:b0:62:
                    be:3b:a3:a8:dc:58:85:14:b7:4e:7d:e9:ba:e7:0b:
                    9e:c3:dd:f9:5d:97:14:09:cb:fc:f5:ab:ce:89:2e:
                    6e:c6:a8:24:6f:ff:41:0f:b7:c3:fc:d9:a1:c8:3a:
                    9b:68:fe:e4:2f:44:a4:8f:96:7f:68:86:ed:b4:e3:
                    00:4f:47:58:bf:06:1f:4d:c7:71:6b:b8:93:1e:4c:
                    dd:34:2d:96:e6:bb:64:91:89:24:b7:dc:45:86:e5:
                    38:b1:0a:95:36:09:fd:82:11:c9:86:f2:fb:b3:33:
                    ef:9b:0d:71:68:89:b4:51:7a:d8:e2:a7:02:31:dc:
                    d2:dd:1f:0a:07:4d:e0:17:a6:91:28:81:54:b4:23:
                    d8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:1D:32:11:DC:70:C8:76:61:7D:2F:EF:81:A5:80:9D:3D:92:3C:55
            X509v3 Authority Key Identifier:
                keyid:0A:DE:98:86:10:08:38:4C:20:2C:F7:E0:C8:75:0C:B9:D0:88:33:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/0ADE98861008384C202CF7E0C8750CB9D0883315.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0ADE98861008384C202CF7E0C8750CB9D0883315.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3234372e302f32342d3234203d3e203238353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.218.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:f2:db:df:d5:ca:4e:16:90:81:3c:cf:10:ca:ae:87:f1:1d:
         69:71:3f:6c:58:21:81:98:8c:a0:2b:d2:4c:d0:b1:1e:f3:74:
         fc:87:22:62:4c:e2:cb:c6:e0:bc:07:70:75:97:18:65:3d:a5:
         af:ff:a7:17:d8:aa:ce:81:b1:9a:7f:97:0c:3d:4f:43:3c:d9:
         e6:b4:2a:b1:03:01:9c:c3:84:13:ee:0c:a2:0b:d6:fc:26:81:
         2b:66:bf:4d:94:7c:27:f6:14:7e:8d:0f:b8:2b:e5:ea:5f:32:
         e3:18:17:dd:c6:6e:7e:16:d3:70:a4:c0:fc:9a:a6:0d:24:37:
         f6:79:5a:d6:e6:50:1e:30:93:c4:f9:4e:c1:53:91:ef:09:bf:
         2b:25:13:e6:2c:e1:73:44:05:2e:48:18:f5:94:b6:cc:2d:fd:
         bb:ed:a0:c5:ea:1c:9c:b6:67:1e:f5:e1:82:0f:de:77:0b:76:
         c7:53:0a:cd:06:e8:61:c3:b5:62:e1:85:67:33:c0:09:8a:0d:
         24:4f:32:50:3c:57:cf:76:6b:33:86:1f:29:1c:ba:00:f2:96:
         34:fe:72:55:46:2d:bb:c4:d1:d3:86:56:9d:8e:7c:e9:a2:98:
         ee:a8:3e:ce:9d:ab:c7:bc:c2:f0:51:1f:90:71:3f:3e:b9:99:
         59:1c:1f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:10:23 2026 by rpki-client