Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3132332e302f32342d3234203d3e203631393233.roa
File:                     3230302e372e3132332e302f32342d3234203d3e203631393233.roa (raw, json)
Hash identifier:          Bze0uJ0EqzFQMuqOwTXj0q3/Ao8OjuUBibpW3fKtKTw=
Subject key identifier:   13:2D:EC:0F:F3:97:C4:BF:E1:9B:E5:81:87:04:50:00:B8:76:49:4B
Certificate issuer:       /CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
Certificate serial:       7B9B6C0B1F544F182001117F883F018F37BF18DE
Authority key identifier: 1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3132332e302f32342d3234203d3e203631393233.roa
Signing time:             Tue 17 Mar 2026 16:11:35 +0000
ROA not before:           Tue 17 Mar 2026 16:06:35 +0000
ROA not after:            Tue 16 Mar 2027 16:11:35 +0000
asID:                     61923
IP address blocks:        200.7.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl
                          rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 07:03:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:9b:6c:0b:1f:54:4f:18:20:01:11:7f:88:3f:01:8f:37:bf:18:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
        Validity
            Not Before: Mar 17 16:06:35 2026 GMT
            Not After : Mar 16 16:11:35 2027 GMT
        Subject: CN=132DEC0FF397C4BFE19BE58187045000B876494B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5d:4d:c1:14:3e:7d:30:f0:aa:c2:4f:e7:9e:
                    87:40:17:29:49:0a:a1:43:27:a4:39:5c:4f:5d:16:
                    84:d8:fe:14:2c:07:0e:9b:96:2d:f0:54:c6:9a:40:
                    a2:2d:cb:f8:69:fa:d2:da:28:42:3b:e5:de:50:e6:
                    d9:de:04:8d:97:3e:91:20:93:83:eb:85:aa:65:12:
                    ea:52:2e:fc:62:e0:a5:27:76:13:9e:7d:1f:a3:72:
                    cc:b0:70:37:c6:44:56:d7:b9:bb:71:76:00:a6:9e:
                    5a:54:d5:33:0f:2a:de:ea:25:e1:f7:7b:dc:4c:8d:
                    34:6a:30:dd:45:7d:3e:1b:e8:22:8d:a8:b1:d8:1f:
                    31:2d:12:3d:94:46:27:05:27:bf:34:0c:97:8f:4b:
                    c0:c2:5a:dc:f0:c8:1b:17:e0:b0:ba:8a:30:36:6c:
                    2f:f0:d8:f1:92:33:08:67:66:f9:87:ab:0b:8d:6f:
                    b0:73:39:f3:ff:51:96:e6:76:32:85:f5:2b:5b:e1:
                    09:d4:f7:bc:db:dd:0b:63:9b:83:f2:de:e1:45:13:
                    a9:79:43:ed:25:cc:64:3b:fa:c7:8f:d4:35:2a:11:
                    f6:98:ae:21:d1:48:61:77:bf:26:a1:d6:5a:45:a6:
                    ff:68:42:cf:11:36:c9:fe:af:0a:fc:1e:6f:31:b8:
                    ec:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:2D:EC:0F:F3:97:C4:BF:E1:9B:E5:81:87:04:50:00:B8:76:49:4B
            X509v3 Authority Key Identifier:
                keyid:1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3132332e302f32342d3234203d3e203631393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:98:6d:79:3c:8e:48:11:cc:9d:c9:50:a8:f4:2d:a3:a7:37:
         78:3a:ee:ca:e1:31:17:43:68:2e:73:de:d5:b6:77:c7:3d:d4:
         21:60:1a:4f:1d:04:d1:bd:06:35:cd:57:95:dd:1a:72:2e:a6:
         87:22:28:c6:e3:ca:57:20:29:a4:4d:79:83:8e:34:ea:ef:36:
         bf:cd:51:10:3f:53:ad:44:a1:68:63:03:2c:8a:28:52:fd:fa:
         ce:57:85:93:8a:ac:30:35:76:9a:e7:12:ef:93:8f:60:54:bf:
         69:8f:06:9b:35:a6:de:4b:6d:34:29:20:36:fb:10:7a:42:05:
         d6:fa:96:fc:ab:ca:9f:73:7f:8c:b4:ba:42:7b:cb:c9:52:7d:
         86:35:7b:20:19:42:60:6f:5f:6d:91:1e:c7:24:43:0c:40:de:
         4f:ed:c3:f9:49:44:bf:15:75:59:c8:c0:87:31:f7:d4:87:32:
         21:8d:58:c9:3b:e3:27:d5:41:f7:63:33:3b:3b:e2:a9:01:2f:
         a1:dd:12:15:49:b9:15:7e:1b:93:c8:77:66:f7:f5:65:a4:65:
         d5:3a:21:f4:09:4c:3d:5f:ed:23:cc:c6:39:88:9b:f5:9b:d2:
         f7:1c:d3:73:7c:4a:32:7a:b0:7d:2b:5f:71:cf:ba:0c:21:a2:
         a9:a6:43:22
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUe5tsCx9UTxggARF/iD8Bjze/GN4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUY1RjgzMUU5ODgzQUVGOEI3NkRBMTk0QTFFNUMxREYw
NzE3RDNFMTAeFw0yNjAzMTcxNjA2MzVaFw0yNzAzMTYxNjExMzVaMDMxMTAvBgNV
BAMTKDEzMkRFQzBGRjM5N0M0QkZFMTlCRTU4MTg3MDQ1MDAwQjg3NjQ5NEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsXU3BFD59MPCqwk/nnodAFylJ
CqFDJ6Q5XE9dFoTY/hQsBw6bli3wVMaaQKIty/hp+tLaKEI75d5Q5tneBI2XPpEg
k4PrhaplEupSLvxi4KUndhOefR+jcsywcDfGRFbXubtxdgCmnlpU1TMPKt7qJeH3
e9xMjTRqMN1FfT4b6CKNqLHYHzEtEj2URicFJ780DJePS8DCWtzwyBsX4LC6ijA2
bC/w2PGSMwhnZvmHqwuNb7BzOfP/UZbmdjKF9Stb4QnU97zb3Qtjm4Py3uFFE6l5
Q+0lzGQ7+seP1DUqEfaYriHRSGF3vyah1lpFpv9oQs8RNsn+rwr8Hm8xuOy1AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUEy3sD/OXxL/hm+WBhwRQALh2SUswHwYDVR0j
BBgwFoAUH1+DHpiDrvi3baGUoeXB3wcX0+EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTdZeEF2aXNEU2FCaVlkdllnekRGVEF0eDNkc1JianFaVjdRYkxYNnVt
cDEvMC8xRjVGODMxRTk4ODNBRUY4Qjc2REExOTRBMUU1QzFERjA3MTdEM0UxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFGNUY4MzFFOTg4M0FFRjhC
NzZEQTE5NEExRTVDMURGMDcxN0QzRTEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzU3WXhBdmlzRFNhQmlZZHZZZ3pERlRBdHgzZHNSYmpxWlY3UWJMWDZ1bXAxLzAv
MzIzMDMwMmUzNzJlMzEzMjMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMTM5
MzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAMgHezANBgkqhkiG9w0BAQsFAAOCAQEAXZhteTyOSBHM
nclQqPQto6c3eDruyuExF0NoLnPe1bZ3xz3UIWAaTx0E0b0GNc1Xld0aci6mhyIo
xuPKVyAppE15g4406u82v81RED9TrUShaGMDLIooUv36zleFk4qsMDV2mucS75OP
YFS/aY8GmzWm3kttNCkgNvsQekIF1vqW/KvKn3N/jLS6QnvLyVJ9hjV7IBlCYG9f
bZEexyRDDEDeT+3D+UlEvxV1WcjAhzH31IcyIY1YyTvjJ9VB92MzOzviqQEvod0S
FUm5FX4bk8h3Zvf1ZaRl1Toh9AlMPV/tI8zGOYib9ZvS9xzTc3xKMnqwfStfcc+6
DCGiqaZDIg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:48:01 2026 by rpki-client