Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3234382e302f32332d3233203d3e203238353934.roa
File:                     3230302e3231382e3234382e302f32332d3233203d3e203238353934.roa (raw, json)
Hash identifier:          SH42NV9z7zg5fzNTyOdmtb0KTYKuM52J5F261rs30GQ=
Subject key identifier:   ED:9F:5F:EF:5D:25:6E:CE:01:47:BD:06:75:3D:7C:71:33:A5:09:9B
Certificate issuer:       /CN=0ADE98861008384C202CF7E0C8750CB9D0883315
Certificate serial:       2D119B4EC9969DBA5C9869752FC47DB1EFF04308
Authority key identifier: 0A:DE:98:86:10:08:38:4C:20:2C:F7:E0:C8:75:0C:B9:D0:88:33:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0ADE98861008384C202CF7E0C8750CB9D0883315.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3234382e302f32332d3233203d3e203238353934.roa
Signing time:             Wed 01 Jul 2026 14:48:22 +0000
ROA not before:           Wed 01 Jul 2026 14:43:22 +0000
ROA not after:            Wed 30 Jun 2027 14:48:22 +0000
asID:                     28594
IP address blocks:        200.218.248.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/0ADE98861008384C202CF7E0C8750CB9D0883315.crl
                          rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/0ADE98861008384C202CF7E0C8750CB9D0883315.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0ADE98861008384C202CF7E0C8750CB9D0883315.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 03:56:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:11:9b:4e:c9:96:9d:ba:5c:98:69:75:2f:c4:7d:b1:ef:f0:43:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ADE98861008384C202CF7E0C8750CB9D0883315
        Validity
            Not Before: Jul  1 14:43:22 2026 GMT
            Not After : Jun 30 14:48:22 2027 GMT
        Subject: CN=ED9F5FEF5D256ECE0147BD06753D7C7133A5099B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:36:49:b1:2f:b0:c1:7a:8f:07:28:40:28:c0:
                    91:89:68:d3:6d:30:52:d1:de:09:bd:9e:09:fb:60:
                    65:cb:0a:fe:4e:ec:e7:bc:86:ce:1d:48:a3:ac:cd:
                    b2:ee:4a:7d:1c:04:d5:29:c3:f0:35:b3:04:b6:a4:
                    3a:5a:85:88:e1:00:d7:eb:b5:49:74:7d:91:5c:99:
                    d5:37:ac:8e:e3:f2:39:25:9b:fd:32:04:47:ce:b3:
                    23:50:e6:95:76:ac:04:95:b9:67:f9:68:0b:24:1d:
                    8a:12:c6:8c:71:f6:02:43:9a:c7:ca:fe:f3:1b:5e:
                    be:aa:de:db:b7:1a:62:aa:65:45:c0:87:e5:67:03:
                    e5:ec:08:dc:63:bb:cd:a8:b8:ac:17:6d:59:77:1f:
                    6a:42:0d:bc:ec:02:c4:cd:f4:52:8d:4d:ce:fe:cc:
                    82:fe:1b:f2:dc:4e:fb:78:01:d0:b7:c7:53:74:5e:
                    e3:81:df:de:2c:0c:e3:1f:b1:7d:6a:e9:34:b5:c5:
                    3a:3a:61:90:11:d8:83:60:97:34:3c:ae:86:f3:7e:
                    69:d5:33:94:a8:b8:bf:db:11:05:ef:81:95:9e:29:
                    7a:70:10:80:8d:55:0d:85:0b:41:f5:8e:65:21:33:
                    4e:ef:30:dd:3a:ff:db:f2:cc:3f:ad:01:bd:6e:09:
                    ce:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:9F:5F:EF:5D:25:6E:CE:01:47:BD:06:75:3D:7C:71:33:A5:09:9B
            X509v3 Authority Key Identifier:
                keyid:0A:DE:98:86:10:08:38:4C:20:2C:F7:E0:C8:75:0C:B9:D0:88:33:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/0ADE98861008384C202CF7E0C8750CB9D0883315.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0ADE98861008384C202CF7E0C8750CB9D0883315.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3234382e302f32332d3233203d3e203238353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.218.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:24:39:c6:2e:e5:6a:a2:2f:5a:39:c7:ff:68:75:c6:e9:13:
         a6:ec:d0:46:e8:44:b1:93:6f:f5:7d:1f:a3:7b:3b:08:4e:30:
         e3:30:c5:44:fe:0c:ec:a8:b8:a3:6e:5b:93:0c:92:6d:6b:dd:
         46:ad:df:bc:c1:20:61:13:b9:94:93:57:bd:da:fa:0d:d1:49:
         1b:b7:73:f3:9e:b8:57:1d:32:b2:ea:80:c4:05:a1:c2:7b:9c:
         c3:ee:68:61:ac:58:46:96:f4:5e:e1:56:4e:11:d6:8d:c4:1a:
         83:5b:8d:93:99:06:65:fe:8d:b4:75:27:4f:2f:b1:0d:f9:f4:
         1d:aa:4d:57:d1:9d:58:41:e0:cc:d3:d4:1b:d8:94:48:36:17:
         3c:9c:b3:03:4e:4c:40:e1:f8:df:bf:b2:72:77:27:31:4a:06:
         86:43:0d:9a:be:f4:63:3e:71:dc:45:cc:2b:12:cb:aa:fd:dc:
         cb:60:74:5a:07:15:61:cb:81:20:6f:bd:50:de:f5:48:03:66:
         26:d0:c0:8a:37:09:64:ae:50:11:69:fd:a9:39:2c:ae:f1:71:
         a5:43:16:fe:a1:ea:8d:c6:44:9f:80:de:81:7c:75:f9:c2:00:
         88:27:be:fc:65:a4:1a:8d:b3:d8:8d:50:64:4c:65:93:3f:f0:
         c9:22:c7:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:10:26 2026 by rpki-client