Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3234382e302f32312d3231203d3e203238353934.roa
File:                     3230302e3231382e3234382e302f32312d3231203d3e203238353934.roa (raw, json)
Hash identifier:          MO+rRK3Ez8PJoxpPWw/8RZrouDtSzO/pMXM2JZagimk=
Subject key identifier:   E8:06:92:0D:30:CF:DA:59:C4:B9:28:9D:AA:7D:A2:CC:CC:81:74:F9
Certificate issuer:       /CN=0ADE98861008384C202CF7E0C8750CB9D0883315
Certificate serial:       21DF0102ABC0B8C76BD843D0D67B6E721CFE5A2E
Authority key identifier: 0A:DE:98:86:10:08:38:4C:20:2C:F7:E0:C8:75:0C:B9:D0:88:33:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0ADE98861008384C202CF7E0C8750CB9D0883315.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3234382e302f32312d3231203d3e203238353934.roa
Signing time:             Wed 01 Jul 2026 14:48:21 +0000
ROA not before:           Wed 01 Jul 2026 14:43:21 +0000
ROA not after:            Wed 30 Jun 2027 14:48:21 +0000
asID:                     28594
IP address blocks:        200.218.248.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/0ADE98861008384C202CF7E0C8750CB9D0883315.crl
                          rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/0ADE98861008384C202CF7E0C8750CB9D0883315.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0ADE98861008384C202CF7E0C8750CB9D0883315.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 03:56:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:df:01:02:ab:c0:b8:c7:6b:d8:43:d0:d6:7b:6e:72:1c:fe:5a:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ADE98861008384C202CF7E0C8750CB9D0883315
        Validity
            Not Before: Jul  1 14:43:21 2026 GMT
            Not After : Jun 30 14:48:21 2027 GMT
        Subject: CN=E806920D30CFDA59C4B9289DAA7DA2CCCC8174F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:52:16:5f:78:d6:66:f5:a1:37:5f:69:7a:0d:
                    37:66:e3:13:26:23:6a:04:85:46:78:a6:c6:82:04:
                    4b:ed:1f:ec:94:f8:b1:12:c2:38:4e:0b:44:d0:27:
                    4a:ec:3d:3e:8c:0f:3f:14:8b:dd:b8:e2:ea:73:2e:
                    3c:78:ea:e2:ab:88:5d:f5:c7:06:71:5c:67:8c:4f:
                    09:7a:75:8d:b6:a5:6c:f9:e6:24:d4:62:33:74:dc:
                    4c:40:7f:67:38:1a:a9:84:0f:65:ad:0a:45:c3:a4:
                    e3:22:4a:a8:f3:f7:08:f7:52:ae:f7:ab:07:8a:d3:
                    4a:db:38:4e:f4:bf:02:ea:bc:d8:5f:69:1a:26:d1:
                    37:1c:cd:70:cc:58:84:f7:05:d6:4d:2d:b6:7c:22:
                    5a:63:ec:bb:77:ac:24:75:5b:0d:43:ea:13:0e:ad:
                    25:91:f8:18:a2:60:7b:19:1b:fe:5b:2b:7d:eb:c3:
                    c0:1d:13:e2:62:2c:ae:0b:52:c6:5b:8f:2c:9c:c6:
                    4f:ce:4a:32:2c:a7:b1:5e:26:ca:ab:ab:1b:dd:db:
                    d0:85:13:3d:f5:6c:22:c0:64:ed:44:50:8e:b6:c5:
                    ad:52:67:4a:9b:18:88:2f:6e:87:5d:07:2e:b2:55:
                    d1:cd:13:16:a1:4c:cc:8a:de:73:1a:7c:67:9b:25:
                    df:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:06:92:0D:30:CF:DA:59:C4:B9:28:9D:AA:7D:A2:CC:CC:81:74:F9
            X509v3 Authority Key Identifier:
                keyid:0A:DE:98:86:10:08:38:4C:20:2C:F7:E0:C8:75:0C:B9:D0:88:33:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/0ADE98861008384C202CF7E0C8750CB9D0883315.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0ADE98861008384C202CF7E0C8750CB9D0883315.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3234382e302f32312d3231203d3e203238353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.218.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         60:a4:3d:4d:33:79:d5:e0:ad:8d:e6:95:52:1b:36:83:48:24:
         e2:88:37:2a:00:cb:0e:f9:39:9c:cb:91:e4:2f:e7:24:ae:bb:
         2d:02:36:19:77:7c:6c:9c:ce:6b:38:ef:dc:d4:5a:64:5f:1e:
         e3:55:34:8c:ce:da:9b:27:64:ae:8c:ce:07:40:36:32:7d:0c:
         60:75:cf:d3:79:f3:b6:d6:a0:e1:9a:0d:7c:35:98:02:97:80:
         b3:0f:aa:35:56:ef:2a:dc:0d:f9:c2:34:d5:5b:c3:1e:85:76:
         51:e6:da:48:15:97:b0:55:73:1f:3a:63:b3:77:55:f3:da:fa:
         11:d7:29:2b:2c:6f:26:b9:b9:73:d3:53:a2:1e:69:49:54:2d:
         b2:ee:5d:e4:04:19:50:14:2e:e1:ce:e2:e4:0d:ce:ff:d0:1e:
         94:97:f3:f4:ae:21:a7:c3:b8:c7:a5:13:e7:af:b6:10:b6:3b:
         33:bc:e9:da:85:31:2f:66:c5:6b:10:f9:dc:fb:44:2f:15:bd:
         50:db:16:cf:6c:7e:9a:6b:30:f9:72:1d:bc:71:b3:05:56:4a:
         79:b5:74:b8:af:78:88:97:2d:93:46:f2:63:d8:09:f4:9c:be:
         81:22:ca:97:61:6d:76:fd:cd:e3:9e:c6:df:67:91:03:86:e7:
         8a:1e:b2:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:10:20 2026 by rpki-client