Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3132302e302f32342d3234203d3e203631393233.roa
File:                     3230302e372e3132302e302f32342d3234203d3e203631393233.roa (raw, json)
Hash identifier:          9kN3rG2xdckyjz/hxBfrbMcfvp2CEjPRBUnmiYHMd6M=
Subject key identifier:   A1:31:E9:EC:29:D2:FD:23:45:6E:A3:78:C7:88:4D:87:17:92:E0:1B
Certificate issuer:       /CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
Certificate serial:       2FC328D3A3CAAEC4835FAFD04C4CFF8B8DA850DC
Authority key identifier: 1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3132302e302f32342d3234203d3e203631393233.roa
Signing time:             Tue 17 Mar 2026 16:11:38 +0000
ROA not before:           Tue 17 Mar 2026 16:06:38 +0000
ROA not after:            Tue 16 Mar 2027 16:11:38 +0000
asID:                     61923
IP address blocks:        200.7.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl
                          rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 07:03:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:c3:28:d3:a3:ca:ae:c4:83:5f:af:d0:4c:4c:ff:8b:8d:a8:50:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
        Validity
            Not Before: Mar 17 16:06:38 2026 GMT
            Not After : Mar 16 16:11:38 2027 GMT
        Subject: CN=A131E9EC29D2FD23456EA378C7884D871792E01B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c5:fa:1e:b8:ac:84:6d:ac:35:e9:fe:12:eb:
                    a9:44:1f:dd:fc:34:af:b6:a0:a9:54:4c:1c:c4:83:
                    a5:de:94:8d:e0:f3:c6:b2:d1:0e:1d:22:10:9a:be:
                    12:23:89:6c:f8:9f:ba:8c:9d:e2:0b:85:2e:c6:03:
                    b4:09:ac:d2:8d:0e:d7:2c:70:09:a7:76:1b:b2:51:
                    5b:0f:56:ea:b7:6e:34:dc:ec:5c:8c:b8:da:1e:3f:
                    0f:2c:26:60:57:54:9f:bf:f3:31:17:de:7f:da:d4:
                    88:06:d0:a5:10:08:a6:d2:69:b4:98:40:f4:10:71:
                    0a:2b:56:08:62:67:eb:83:e2:47:24:35:9a:52:85:
                    da:cd:ed:2f:60:8a:b5:af:c9:d7:2b:f5:37:0b:9a:
                    3e:a0:ed:6e:5f:7b:27:f9:16:2a:36:cf:34:b0:1e:
                    23:c0:7c:8a:11:e0:4e:8d:51:a7:d9:c5:ef:42:7a:
                    6f:81:62:40:d1:20:59:a2:33:94:8c:5b:d8:65:66:
                    a6:2c:a0:3d:f4:cc:05:ac:81:7f:ec:f6:58:7a:b9:
                    16:a6:ed:7d:62:80:27:de:90:ba:f2:dc:5f:8a:01:
                    2b:42:c4:49:d9:f5:14:7a:2f:95:99:5f:0a:b8:21:
                    2f:1f:38:29:92:c6:a3:01:26:cf:78:bf:b5:2f:fd:
                    30:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:31:E9:EC:29:D2:FD:23:45:6E:A3:78:C7:88:4D:87:17:92:E0:1B
            X509v3 Authority Key Identifier:
                keyid:1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3132302e302f32342d3234203d3e203631393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:a1:4b:d2:6c:c3:8b:58:52:17:ce:a3:3b:d0:72:c5:d7:9e:
         bd:b1:b7:ab:f9:11:19:b6:54:10:fb:64:e7:7f:dc:28:49:dc:
         e3:72:2f:e7:57:aa:cc:01:76:0c:3e:80:b8:87:06:8d:bc:b9:
         a0:c6:2a:bf:0b:f3:97:f8:4f:2a:c3:07:93:23:6b:46:33:0e:
         aa:19:25:92:b6:69:e3:b1:15:5b:9b:0a:25:a2:6e:f0:33:0b:
         b1:73:81:b4:c2:58:25:31:bb:52:27:b3:c6:c8:6e:31:55:47:
         a1:dc:53:48:ce:b0:5e:d7:2f:a7:b3:e2:5d:5d:81:cd:af:dc:
         f2:71:c1:83:dd:b9:76:db:e8:f0:92:19:08:bf:83:b8:f5:f2:
         19:e0:52:11:e5:c9:f6:c7:11:53:b6:f7:2b:02:aa:1d:30:2c:
         dc:a9:30:1a:5f:4d:e7:b1:9f:35:5d:5a:44:bc:db:9d:78:d0:
         c0:bf:46:9d:e6:f7:40:36:7a:d7:17:da:07:55:55:ce:a1:bb:
         ee:e7:02:67:c3:3c:53:bf:7b:9f:ff:c7:26:1f:bf:d8:ea:53:
         ba:0c:ac:34:f9:a6:86:8e:c8:b9:5d:8a:29:30:fa:4f:67:f4:
         7f:a5:b2:8a:f0:e7:0f:bc:28:be:3d:e7:29:de:ec:1b:56:4a:
         20:5c:95:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:15:52 2026 by rpki-client