Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3234382e302f32342d3234203d3e203238353934.roa
File:                     3230302e3231382e3234382e302f32342d3234203d3e203238353934.roa (raw, json)
Hash identifier:          cE0caNm64abfoTXcxUQmxB/11WMS5cwgTchgNmMdkSo=
Subject key identifier:   F6:3B:D3:E3:73:06:21:B5:5D:35:27:8A:4D:AC:0A:56:8B:ED:65:9C
Certificate issuer:       /CN=0ADE98861008384C202CF7E0C8750CB9D0883315
Certificate serial:       7113E10DCE1EDEC2839C6CA6CF90C1756DF3016D
Authority key identifier: 0A:DE:98:86:10:08:38:4C:20:2C:F7:E0:C8:75:0C:B9:D0:88:33:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0ADE98861008384C202CF7E0C8750CB9D0883315.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3234382e302f32342d3234203d3e203238353934.roa
Signing time:             Wed 01 Jul 2026 14:48:21 +0000
ROA not before:           Wed 01 Jul 2026 14:43:21 +0000
ROA not after:            Wed 30 Jun 2027 14:48:21 +0000
asID:                     28594
IP address blocks:        200.218.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/0ADE98861008384C202CF7E0C8750CB9D0883315.crl
                          rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/0ADE98861008384C202CF7E0C8750CB9D0883315.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0ADE98861008384C202CF7E0C8750CB9D0883315.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 03:56:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:13:e1:0d:ce:1e:de:c2:83:9c:6c:a6:cf:90:c1:75:6d:f3:01:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ADE98861008384C202CF7E0C8750CB9D0883315
        Validity
            Not Before: Jul  1 14:43:21 2026 GMT
            Not After : Jun 30 14:48:21 2027 GMT
        Subject: CN=F63BD3E3730621B55D35278A4DAC0A568BED659C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0d:c1:7a:92:6d:02:8f:89:fa:de:dd:26:f0:
                    3a:f3:bf:1e:1a:b2:a8:83:d6:6a:16:fc:84:de:e9:
                    23:34:98:ae:d6:98:0e:12:8a:b2:fe:1c:1b:c5:2a:
                    63:72:cb:c6:97:36:d2:f1:b9:db:b8:cb:ef:05:90:
                    1a:3a:8a:60:f8:ca:8a:8a:31:6d:9c:de:56:f6:8f:
                    3b:ea:3d:69:9f:d5:c4:65:f4:39:f1:e6:97:f9:65:
                    4f:10:5d:69:67:0a:f3:00:5c:21:62:7e:f8:50:28:
                    ff:60:24:30:95:ab:e0:ba:d5:ad:b2:52:ff:51:4f:
                    b4:72:bc:ff:97:8e:c6:41:0f:c9:d8:c4:ac:53:e4:
                    05:42:90:ba:a7:31:61:b5:eb:8d:5e:79:f5:ce:40:
                    92:0f:d9:96:bb:3f:f6:75:41:77:26:e1:f5:95:45:
                    c5:b1:5f:ed:47:e0:73:22:f3:d7:72:87:b3:9b:17:
                    46:4d:15:54:68:f4:a5:b3:80:99:af:bd:df:b3:86:
                    5e:73:2d:6e:90:59:fb:93:7d:ad:f2:3f:41:ad:17:
                    37:5b:85:ba:eb:57:73:b4:5e:e7:aa:78:57:45:ff:
                    ad:82:a5:f1:60:bc:c4:13:aa:60:6d:01:cd:3d:50:
                    18:54:4b:58:73:ad:96:17:8e:b8:2d:20:2c:d5:a9:
                    ee:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:3B:D3:E3:73:06:21:B5:5D:35:27:8A:4D:AC:0A:56:8B:ED:65:9C
            X509v3 Authority Key Identifier:
                keyid:0A:DE:98:86:10:08:38:4C:20:2C:F7:E0:C8:75:0C:B9:D0:88:33:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/0ADE98861008384C202CF7E0C8750CB9D0883315.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0ADE98861008384C202CF7E0C8750CB9D0883315.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3234382e302f32342d3234203d3e203238353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.218.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:2d:2c:67:2b:27:a6:7d:39:05:d4:07:70:37:aa:de:11:24:
         78:de:5d:18:0d:cf:18:be:46:5a:8a:91:8e:4d:91:b3:e1:83:
         e9:9e:d6:cd:93:a8:9d:db:71:9d:dc:26:81:60:c6:53:de:99:
         ca:84:7c:7a:16:95:27:98:44:59:1a:46:2a:8c:49:85:5f:11:
         8d:29:eb:f7:38:a4:68:b0:3b:b9:43:31:6b:c0:de:34:4a:1b:
         6a:61:4e:31:99:54:af:85:29:7e:5a:ac:93:02:68:d9:04:3e:
         7d:f2:ed:ee:90:d3:82:e7:c2:aa:53:9b:ea:be:c2:3b:25:0c:
         d6:a5:39:ce:4e:f1:ce:3f:69:f9:4b:a1:5f:36:45:32:00:8c:
         9a:93:a0:4c:a3:a8:3d:cd:9d:5d:27:38:38:e9:63:13:c3:46:
         1f:05:82:92:4f:c8:13:d5:30:26:c1:42:23:82:05:4b:75:34:
         ab:0f:64:14:73:7a:de:c8:bf:7b:f6:18:f2:aa:60:d4:9d:3b:
         95:3b:c2:de:c9:49:92:f1:76:b2:74:90:54:3b:31:b9:0d:eb:
         f0:e5:6b:9c:55:10:aa:c0:56:cc:43:02:ca:5b:2a:2f:be:75:
         eb:0b:ee:91:fa:f9:0a:31:fa:25:30:2a:08:9e:e9:88:6a:62:
         c4:86:b0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:10:21 2026 by rpki-client