Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3131372e302f32342d3234203d3e203631393233.roa
File:                     3230302e372e3131372e302f32342d3234203d3e203631393233.roa (raw, json)
Hash identifier:          Zndd7MZYdHTAN9KfN6sVnBHA2voGZZVrccpoBBuI/ak=
Subject key identifier:   99:E3:B9:82:AA:D9:93:5B:76:52:7F:8E:2E:CE:3A:67:32:11:9F:EB
Certificate issuer:       /CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
Certificate serial:       53CC08A10D91875685479A288BD310C9E4BAB198
Authority key identifier: 1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3131372e302f32342d3234203d3e203631393233.roa
Signing time:             Tue 17 Mar 2026 16:11:35 +0000
ROA not before:           Tue 17 Mar 2026 16:06:35 +0000
ROA not after:            Tue 16 Mar 2027 16:11:35 +0000
asID:                     61923
IP address blocks:        200.7.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl
                          rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 07:03:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:cc:08:a1:0d:91:87:56:85:47:9a:28:8b:d3:10:c9:e4:ba:b1:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
        Validity
            Not Before: Mar 17 16:06:35 2026 GMT
            Not After : Mar 16 16:11:35 2027 GMT
        Subject: CN=99E3B982AAD9935B76527F8E2ECE3A6732119FEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:83:ab:8a:d4:78:02:7b:59:d8:ee:f6:3b:c5:
                    5b:d2:9c:b8:9e:a6:d7:0a:e6:c8:4f:ef:40:63:38:
                    7b:c1:e8:22:95:56:e6:64:c3:5a:b5:65:da:1f:98:
                    72:58:b2:fd:87:71:4f:61:21:c3:3f:6d:bc:0f:8a:
                    3c:03:33:08:03:fc:2d:25:c6:d6:f7:3a:e1:f0:78:
                    fd:25:3f:73:b4:6e:95:e0:8e:e0:1a:5f:00:7d:49:
                    5e:74:07:32:1f:3f:c4:f1:5e:e1:ab:2b:54:41:b1:
                    d9:fa:6f:09:13:11:69:e1:ff:0f:55:11:58:6a:f3:
                    49:1d:b7:75:04:33:9f:d3:29:ad:2c:82:c8:8c:d3:
                    0f:85:83:b0:f9:1d:c0:24:7a:02:5a:6f:21:e7:68:
                    63:60:0c:14:bb:ec:eb:0b:dc:8b:af:8e:1b:df:4a:
                    2a:d7:5c:3d:9f:ec:44:98:56:f6:8d:a7:b2:1b:59:
                    c6:7a:6b:3e:d2:39:cf:8a:99:7a:15:12:c1:21:63:
                    f3:e9:c6:55:bc:c0:4a:fc:bd:b1:5b:2b:ff:86:8b:
                    7d:45:99:c9:02:75:db:36:0b:a6:8b:27:3e:c6:fa:
                    b7:c2:1d:ea:bf:f3:ec:3f:b4:c5:f4:e1:5d:aa:0d:
                    fb:f2:a4:d7:b6:81:2c:fa:da:76:4e:5b:3d:d4:73:
                    16:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:E3:B9:82:AA:D9:93:5B:76:52:7F:8E:2E:CE:3A:67:32:11:9F:EB
            X509v3 Authority Key Identifier:
                keyid:1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3131372e302f32342d3234203d3e203631393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:c9:34:d1:f0:16:6c:b3:42:79:7f:88:0d:1c:1c:7e:9f:67:
         82:35:c6:93:86:fb:98:2e:e6:0c:81:c4:02:37:d0:68:b5:70:
         7c:4b:8b:d2:97:00:af:cc:69:d5:95:e4:5d:12:fc:28:bc:f5:
         9c:69:4e:15:68:29:0d:b7:51:ab:49:be:37:61:1b:dc:ff:aa:
         dd:3b:ac:7c:3a:49:94:f3:72:0c:22:4c:02:36:d7:7b:b6:7f:
         51:5e:67:dc:de:7c:4e:92:06:71:59:b5:a3:f3:eb:c2:1b:0e:
         b5:76:75:8d:80:b1:20:75:c0:0e:24:6e:b1:80:6b:d9:80:48:
         a8:71:cc:78:ec:12:a3:44:76:d9:ee:84:a6:58:3c:33:c2:e2:
         90:19:e4:54:20:1a:22:85:18:f3:72:55:1b:c9:0f:64:b8:70:
         c7:45:0d:55:a4:5f:70:54:e2:ec:63:c3:e4:76:df:80:e9:21:
         4e:2c:35:dc:d3:1c:9e:f7:b5:5e:f5:83:98:e4:27:97:e9:7d:
         8a:48:d8:2b:38:9f:7d:1a:20:b0:ed:af:56:c9:e3:24:bf:6b:
         e6:bb:b4:72:a2:a7:44:04:dd:7e:ba:9d:c9:cd:31:b3:ec:a7:
         bc:0a:13:9d:b4:2d:b0:f0:0f:ea:1b:57:e7:e6:93:9c:b7:f8:
         dd:a1:00:ba
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUU8wIoQ2Rh1aFR5ooi9MQyeS6sZgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUY1RjgzMUU5ODgzQUVGOEI3NkRBMTk0QTFFNUMxREYw
NzE3RDNFMTAeFw0yNjAzMTcxNjA2MzVaFw0yNzAzMTYxNjExMzVaMDMxMTAvBgNV
BAMTKDk5RTNCOTgyQUFEOTkzNUI3NjUyN0Y4RTJFQ0UzQTY3MzIxMTlGRUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLg6uK1HgCe1nY7vY7xVvSnLie
ptcK5shP70BjOHvB6CKVVuZkw1q1ZdofmHJYsv2HcU9hIcM/bbwPijwDMwgD/C0l
xtb3OuHweP0lP3O0bpXgjuAaXwB9SV50BzIfP8TxXuGrK1RBsdn6bwkTEWnh/w9V
EVhq80kdt3UEM5/TKa0sgsiM0w+Fg7D5HcAkegJabyHnaGNgDBS77OsL3Iuvjhvf
SirXXD2f7ESYVvaNp7IbWcZ6az7SOc+KmXoVEsEhY/PpxlW8wEr8vbFbK/+Gi31F
mckCdds2C6aLJz7G+rfCHeq/8+w/tMX04V2qDfvypNe2gSz62nZOWz3UcxaXAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUmeO5gqrZk1t2Un+OLs46ZzIRn+swHwYDVR0j
BBgwFoAUH1+DHpiDrvi3baGUoeXB3wcX0+EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTdZeEF2aXNEU2FCaVlkdllnekRGVEF0eDNkc1JianFaVjdRYkxYNnVt
cDEvMC8xRjVGODMxRTk4ODNBRUY4Qjc2REExOTRBMUU1QzFERjA3MTdEM0UxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFGNUY4MzFFOTg4M0FFRjhC
NzZEQTE5NEExRTVDMURGMDcxN0QzRTEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzU3WXhBdmlzRFNhQmlZZHZZZ3pERlRBdHgzZHNSYmpxWlY3UWJMWDZ1bXAxLzAv
MzIzMDMwMmUzNzJlMzEzMTM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMTM5
MzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAMgHdTANBgkqhkiG9w0BAQsFAAOCAQEAl8k00fAWbLNC
eX+IDRwcfp9ngjXGk4b7mC7mDIHEAjfQaLVwfEuL0pcAr8xp1ZXkXRL8KLz1nGlO
FWgpDbdRq0m+N2Eb3P+q3TusfDpJlPNyDCJMAjbXe7Z/UV5n3N58TpIGcVm1o/Pr
whsOtXZ1jYCxIHXADiRusYBr2YBIqHHMeOwSo0R22e6Eplg8M8LikBnkVCAaIoUY
83JVG8kPZLhwx0UNVaRfcFTi7GPD5HbfgOkhTiw13NMcnve1XvWDmOQnl+l9ikjY
KziffRogsO2vVsnjJL9r5ru0cqKnRATdfrqdyc0xs+ynvAoTnbQtsPAP6htX5+aT
nLf43aEAug==
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:47:48 2026 by rpki-client