Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3131322e302f32312d3231203d3e203631393233.roa
File:                     3230302e372e3131322e302f32312d3231203d3e203631393233.roa (raw, json)
Hash identifier:          8NaiZnKVsUjv+/SgeDZkNgvvlDvmBOVrND2MRRGxnP4=
Subject key identifier:   26:30:63:40:7D:15:2D:CB:49:3B:36:94:F6:B1:70:C0:E6:EF:89:33
Certificate issuer:       /CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
Certificate serial:       77128B17899DBEE36E67EFBE48431F86FBA9D3CC
Authority key identifier: 1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3131322e302f32312d3231203d3e203631393233.roa
Signing time:             Tue 17 Mar 2026 15:11:33 +0000
ROA not before:           Tue 17 Mar 2026 15:06:33 +0000
ROA not after:            Tue 16 Mar 2027 15:11:33 +0000
asID:                     61923
IP address blocks:        200.7.112.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl
                          rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 07:03:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:12:8b:17:89:9d:be:e3:6e:67:ef:be:48:43:1f:86:fb:a9:d3:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
        Validity
            Not Before: Mar 17 15:06:33 2026 GMT
            Not After : Mar 16 15:11:33 2027 GMT
        Subject: CN=263063407D152DCB493B3694F6B170C0E6EF8933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fd:d3:38:11:6f:3e:e5:3f:9d:2b:d2:0f:ad:
                    77:88:36:67:99:fa:c5:52:78:0a:4e:61:7e:ae:c4:
                    03:47:40:55:b9:2f:fa:05:6b:2f:3e:e1:1c:9f:34:
                    d6:a1:e2:4b:42:6c:9e:43:4c:c4:5a:f5:6b:96:23:
                    cd:fd:f6:a6:b4:ed:30:7d:4e:7f:71:b7:77:36:6f:
                    45:df:c7:8e:4f:92:00:c6:55:74:b6:7d:c6:92:1e:
                    91:6e:f3:33:97:e6:26:9c:39:eb:12:76:8c:2d:d9:
                    e6:a2:ee:07:82:7c:de:7e:3e:40:a1:90:31:4d:2a:
                    9b:d0:a5:d5:4d:d5:e7:04:f8:0c:f4:a0:47:c7:8c:
                    8c:f2:d1:90:54:f3:09:b4:d5:49:38:5a:10:d3:ed:
                    a6:e9:9f:d7:4e:13:4d:6a:3b:c7:2b:96:ba:b8:6e:
                    72:c3:3b:67:3f:35:56:9c:3e:8d:c8:8c:21:4d:37:
                    a1:c8:25:48:91:0c:03:8b:62:f7:ed:8f:05:a9:87:
                    d9:42:9e:ec:81:af:96:41:24:5c:29:00:07:bc:b1:
                    47:1f:99:66:37:3d:6a:8f:8c:63:e3:0a:8d:e7:69:
                    be:da:05:7e:7f:9d:ab:ea:15:07:1e:89:73:bc:24:
                    ae:d0:45:0b:d2:5c:28:41:af:6f:24:3e:42:b3:d2:
                    47:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:30:63:40:7D:15:2D:CB:49:3B:36:94:F6:B1:70:C0:E6:EF:89:33
            X509v3 Authority Key Identifier:
                keyid:1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3131322e302f32312d3231203d3e203631393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c4:c8:e0:33:45:92:7b:17:ca:ca:bf:e6:bc:a8:97:16:a6:b7:
         16:99:29:00:79:98:7f:3c:26:58:dc:02:88:59:e6:74:b6:91:
         f9:cb:d2:f2:0a:6d:7e:bb:25:e1:33:45:f7:17:09:8e:d1:8c:
         56:15:4d:82:b2:90:a1:61:b6:26:f1:26:70:80:c4:7c:f3:29:
         42:b6:77:9d:5c:34:62:e8:a9:b0:e9:33:76:eb:24:5a:6c:c3:
         a2:e0:49:74:72:7b:60:40:f1:34:ae:61:4f:8b:fd:ee:4e:e1:
         f6:b8:c8:f2:e6:3a:b5:02:fe:02:1e:aa:e1:b1:ff:66:6a:5a:
         9d:ba:40:11:73:a3:33:cd:1c:32:b1:9c:60:0f:2f:ca:cd:37:
         4d:82:72:09:fe:5b:b5:e6:b1:2d:3b:c6:d8:13:ab:b6:8e:0c:
         ff:8d:0b:3a:e3:c5:ff:54:b2:0d:c5:cc:34:73:b6:d7:04:44:
         64:4c:01:21:fd:bb:ce:e6:0e:7f:07:5a:dc:bd:f2:f9:3c:ae:
         54:f7:bc:2e:d7:d5:df:b3:89:2c:8b:42:37:12:09:11:e7:5f:
         52:ac:5e:b9:f0:a2:1a:07:29:30:f7:1b:9a:bc:d5:ff:2e:fb:
         68:90:34:99:fc:9f:db:9c:c6:e8:e4:70:83:3e:13:43:59:67:
         2f:00:2f:0f
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUdxKLF4mdvuNuZ+++SEMfhvup08wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUY1RjgzMUU5ODgzQUVGOEI3NkRBMTk0QTFFNUMxREYw
NzE3RDNFMTAeFw0yNjAzMTcxNTA2MzNaFw0yNzAzMTYxNTExMzNaMDMxMTAvBgNV
BAMTKDI2MzA2MzQwN0QxNTJEQ0I0OTNCMzY5NEY2QjE3MEMwRTZFRjg5MzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs/dM4EW8+5T+dK9IPrXeINmeZ
+sVSeApOYX6uxANHQFW5L/oFay8+4RyfNNah4ktCbJ5DTMRa9WuWI8399qa07TB9
Tn9xt3c2b0Xfx45PkgDGVXS2fcaSHpFu8zOX5iacOesSdowt2eai7geCfN5+PkCh
kDFNKpvQpdVN1ecE+Az0oEfHjIzy0ZBU8wm01Uk4WhDT7abpn9dOE01qO8crlrq4
bnLDO2c/NVacPo3IjCFNN6HIJUiRDAOLYvftjwWph9lCnuyBr5ZBJFwpAAe8sUcf
mWY3PWqPjGPjCo3nab7aBX5/navqFQceiXO8JK7QRQvSXChBr28kPkKz0kd3AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUJjBjQH0VLctJOzaU9rFwwObviTMwHwYDVR0j
BBgwFoAUH1+DHpiDrvi3baGUoeXB3wcX0+EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTdZeEF2aXNEU2FCaVlkdllnekRGVEF0eDNkc1JianFaVjdRYkxYNnVt
cDEvMC8xRjVGODMxRTk4ODNBRUY4Qjc2REExOTRBMUU1QzFERjA3MTdEM0UxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFGNUY4MzFFOTg4M0FFRjhC
NzZEQTE5NEExRTVDMURGMDcxN0QzRTEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzU3WXhBdmlzRFNhQmlZZHZZZ3pERlRBdHgzZHNSYmpxWlY3UWJMWDZ1bXAxLzAv
MzIzMDMwMmUzNzJlMzEzMTMyMmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzYzMTM5
MzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEA8gHcDANBgkqhkiG9w0BAQsFAAOCAQEAxMjgM0WSexfK
yr/mvKiXFqa3FpkpAHmYfzwmWNwCiFnmdLaR+cvS8gptfrsl4TNF9xcJjtGMVhVN
grKQoWG2JvEmcIDEfPMpQrZ3nVw0YuipsOkzduskWmzDouBJdHJ7YEDxNK5hT4v9
7k7h9rjI8uY6tQL+Ah6q4bH/ZmpanbpAEXOjM80cMrGcYA8vys03TYJyCf5bteax
LTvG2BOrto4M/40LOuPF/1SyDcXMNHO21wREZEwBIf27zuYOfwda3L3y+TyuVPe8
LtfV37OJLItCNxIJEedfUqxeufCiGgcpMPcbmrzV/y77aJA0mfyf25zG6ORwgz4T
Q1lnLwAvDw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:47:59 2026 by rpki-client