Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3235342e302f32332d3233203d3e203238353934.roa
File:                     3230302e3231382e3235342e302f32332d3233203d3e203238353934.roa (raw, json)
Hash identifier:          onnQGqOeL9qQwhC5rLcvW+8rjTxchGNeikYJcoXdt1w=
Subject key identifier:   43:82:C4:4B:E0:58:ED:8F:D0:94:E7:E5:B8:32:98:1D:FD:C1:5E:E6
Certificate issuer:       /CN=0ADE98861008384C202CF7E0C8750CB9D0883315
Certificate serial:       0B8A0F1C5912983763050A9ECF86998074D2F766
Authority key identifier: 0A:DE:98:86:10:08:38:4C:20:2C:F7:E0:C8:75:0C:B9:D0:88:33:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0ADE98861008384C202CF7E0C8750CB9D0883315.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3235342e302f32332d3233203d3e203238353934.roa
Signing time:             Wed 01 Jul 2026 14:48:23 +0000
ROA not before:           Wed 01 Jul 2026 14:43:23 +0000
ROA not after:            Wed 30 Jun 2027 14:48:23 +0000
asID:                     28594
IP address blocks:        200.218.254.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/0ADE98861008384C202CF7E0C8750CB9D0883315.crl
                          rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/0ADE98861008384C202CF7E0C8750CB9D0883315.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0ADE98861008384C202CF7E0C8750CB9D0883315.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 03:56:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:8a:0f:1c:59:12:98:37:63:05:0a:9e:cf:86:99:80:74:d2:f7:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ADE98861008384C202CF7E0C8750CB9D0883315
        Validity
            Not Before: Jul  1 14:43:23 2026 GMT
            Not After : Jun 30 14:48:23 2027 GMT
        Subject: CN=4382C44BE058ED8FD094E7E5B832981DFDC15EE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9e:7d:93:ba:ed:d5:d4:3f:be:c3:f7:a9:e1:
                    1b:7b:1b:c0:b3:95:f8:24:fe:f1:1b:8f:0e:74:a7:
                    f7:f2:db:2a:ec:62:a5:77:00:9d:8c:37:d2:07:a2:
                    31:9d:47:8f:3f:31:84:cd:d6:04:16:18:98:df:4e:
                    7d:c1:21:47:21:a5:b8:20:61:cd:21:73:f3:7a:cb:
                    f4:b0:e2:e0:0e:76:a5:fc:f5:14:83:c0:b9:22:93:
                    63:e0:38:2a:6c:25:6a:2e:96:37:bf:c3:58:41:c3:
                    58:0b:e3:3f:49:f7:77:80:cd:51:c8:ba:d2:ec:6e:
                    59:06:e3:3a:4c:60:59:30:90:38:1d:14:73:1e:34:
                    84:e2:ac:28:ac:ae:01:b3:13:98:e8:f0:2d:6f:32:
                    09:7c:9b:d7:0a:e7:e6:34:09:af:a8:3d:84:26:ae:
                    e6:39:6b:b4:06:d5:46:2b:e3:0d:d0:6c:f2:1a:5b:
                    32:42:2d:0f:46:37:ce:22:61:81:02:c1:27:b3:49:
                    31:8e:52:d7:e3:75:58:64:01:5f:40:80:91:6e:79:
                    f7:8c:0f:d2:82:6e:87:9c:90:31:b0:f5:32:5a:cd:
                    bb:1c:85:63:05:6b:ee:1e:ee:a7:f1:d9:33:bb:56:
                    1c:e0:5c:02:f7:97:d4:10:fd:12:89:a4:c6:83:7a:
                    fb:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:82:C4:4B:E0:58:ED:8F:D0:94:E7:E5:B8:32:98:1D:FD:C1:5E:E6
            X509v3 Authority Key Identifier:
                keyid:0A:DE:98:86:10:08:38:4C:20:2C:F7:E0:C8:75:0C:B9:D0:88:33:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/0ADE98861008384C202CF7E0C8750CB9D0883315.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0ADE98861008384C202CF7E0C8750CB9D0883315.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3235342e302f32332d3233203d3e203238353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.218.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7b:56:6f:f9:97:cd:e8:99:c4:57:5b:18:10:76:da:6a:ce:b8:
         02:17:14:c9:c1:92:de:3e:04:14:47:4f:8d:12:4a:a1:10:6b:
         32:e8:0a:ed:1e:15:7a:f1:93:9b:4f:fa:5a:4b:de:8f:f3:39:
         10:d3:49:c5:56:52:fc:d2:19:73:95:57:ca:e3:43:92:9b:27:
         fe:87:9d:25:14:9f:f7:32:29:1a:7f:3d:9f:0c:5f:bc:bd:da:
         19:24:d6:e0:99:20:46:75:ee:d8:9a:5a:2a:b8:7f:02:85:0e:
         db:f0:69:f5:1e:af:95:ac:48:64:16:47:bf:79:95:64:7f:cb:
         6d:15:99:28:e9:d9:cf:49:32:42:83:59:5e:42:08:dd:07:fe:
         a0:b4:9f:d1:6d:14:6e:19:66:0b:57:93:22:2f:90:77:ad:c9:
         bb:13:24:7e:9e:3f:3b:ce:1f:26:4f:1a:e3:75:ec:26:04:8e:
         07:38:bc:c0:39:96:14:d9:5e:76:37:12:6c:a1:71:a2:24:dd:
         0d:22:de:e2:71:7b:fd:90:7c:9d:33:e5:d6:8d:db:77:4d:36:
         32:63:66:28:19:84:22:45:3e:68:ff:6f:6f:ec:f9:90:03:03:
         ef:71:25:ec:6c:64:97:d3:74:42:bd:08:72:bf:e7:74:b0:8c:
         15:c1:c6:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:10:27 2026 by rpki-client