Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5fL73DmQQbfDovfqppPcgGEv1VkQnuxkPiGiMzcKcx4h/0/3230302e3135302e302e302f31382d3234203d3e203233313036.roa
File:                     3230302e3135302e302e302f31382d3234203d3e203233313036.roa (raw, json)
Hash identifier:          sn0sK88dD3JOPzUuHJMCtuqk/6WqYy56IcTANNqTBSk=
Subject key identifier:   D4:E0:E1:94:C0:AA:B6:B0:7C:E6:C6:A0:A5:5C:A0:27:8A:50:AD:92
Certificate issuer:       /CN=E6DD4A59FA8FF5B919C1CC8CB63B8ED9502AB7CC
Certificate serial:       1ED094E19356A062086EEE69AD01C9A0EECBDAD6
Authority key identifier: E6:DD:4A:59:FA:8F:F5:B9:19:C1:CC:8C:B6:3B:8E:D9:50:2A:B7:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6DD4A59FA8FF5B919C1CC8CB63B8ED9502AB7CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5fL73DmQQbfDovfqppPcgGEv1VkQnuxkPiGiMzcKcx4h/0/3230302e3135302e302e302f31382d3234203d3e203233313036.roa
Signing time:             Mon 04 May 2026 18:54:56 +0000
ROA not before:           Mon 04 May 2026 18:49:56 +0000
ROA not after:            Mon 03 May 2027 18:54:56 +0000
asID:                     23106
IP address blocks:        200.150.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5fL73DmQQbfDovfqppPcgGEv1VkQnuxkPiGiMzcKcx4h/0/E6DD4A59FA8FF5B919C1CC8CB63B8ED9502AB7CC.crl
                          rsync://rpki-repo.registro.br/repo/5fL73DmQQbfDovfqppPcgGEv1VkQnuxkPiGiMzcKcx4h/0/E6DD4A59FA8FF5B919C1CC8CB63B8ED9502AB7CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6DD4A59FA8FF5B919C1CC8CB63B8ED9502AB7CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 10:47:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:d0:94:e1:93:56:a0:62:08:6e:ee:69:ad:01:c9:a0:ee:cb:da:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6DD4A59FA8FF5B919C1CC8CB63B8ED9502AB7CC
        Validity
            Not Before: May  4 18:49:56 2026 GMT
            Not After : May  3 18:54:56 2027 GMT
        Subject: CN=D4E0E194C0AAB6B07CE6C6A0A55CA0278A50AD92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b1:f0:63:ee:42:4b:7e:39:ad:04:7c:8e:bd:
                    38:ef:0a:e8:ba:b9:d4:81:d0:f6:3d:60:30:d3:d7:
                    ed:0a:fa:f3:dc:07:6b:46:fa:f5:a3:50:4d:d9:93:
                    c4:31:ce:1b:5e:31:a3:47:1f:94:9d:41:8a:d7:80:
                    b3:d2:d8:31:de:3c:c5:f8:52:5b:0c:ab:32:1c:fe:
                    f1:ba:15:30:22:67:82:15:26:f5:d7:f2:7c:33:14:
                    d4:1f:ba:ef:ce:d3:21:d0:3a:f3:c9:08:0e:4d:01:
                    11:1c:52:37:5e:bd:0c:24:a1:c2:a7:46:f4:aa:0e:
                    e2:d6:ff:c5:73:9b:33:c7:82:8d:b7:70:a1:d6:96:
                    d8:6d:55:f1:be:53:ba:09:c3:10:ab:8c:42:3f:7e:
                    c2:af:b9:84:18:18:5b:75:dd:4d:9e:f9:04:e0:b9:
                    a7:c3:66:f5:e9:04:c5:7a:df:bb:88:c9:b1:99:ef:
                    d4:ec:09:bd:a8:81:db:8d:85:aa:ee:3a:4c:2b:23:
                    be:6a:cc:ce:83:9e:78:c2:82:1e:0b:80:d5:24:f6:
                    3c:50:86:98:ea:d2:55:06:c8:2b:7a:5c:2c:95:3f:
                    43:89:19:3c:fd:cf:08:16:d0:3d:ed:ce:aa:80:3b:
                    0d:1c:da:f3:8d:ac:39:fa:88:2b:49:9f:eb:39:12:
                    1f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:E0:E1:94:C0:AA:B6:B0:7C:E6:C6:A0:A5:5C:A0:27:8A:50:AD:92
            X509v3 Authority Key Identifier:
                keyid:E6:DD:4A:59:FA:8F:F5:B9:19:C1:CC:8C:B6:3B:8E:D9:50:2A:B7:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5fL73DmQQbfDovfqppPcgGEv1VkQnuxkPiGiMzcKcx4h/0/E6DD4A59FA8FF5B919C1CC8CB63B8ED9502AB7CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6DD4A59FA8FF5B919C1CC8CB63B8ED9502AB7CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5fL73DmQQbfDovfqppPcgGEv1VkQnuxkPiGiMzcKcx4h/0/3230302e3135302e302e302f31382d3234203d3e203233313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.150.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         37:b8:41:b0:30:ee:89:3e:b7:89:03:3e:71:91:88:ad:4d:17:
         77:c9:a8:53:1e:47:76:38:ed:76:6d:c6:ca:36:a2:15:f7:b6:
         c9:ac:e6:24:52:92:19:bf:fe:15:fc:c9:90:66:46:eb:41:da:
         2d:ca:cf:01:a6:46:2c:d6:5c:ca:af:18:42:2c:f3:d8:1c:82:
         af:39:29:9c:98:76:81:3e:fe:fe:c2:a4:15:63:24:c0:ec:4d:
         58:70:0c:69:ba:0a:c8:c0:ff:5c:40:d7:b2:fc:3e:ff:62:18:
         2d:76:ce:5d:b6:6b:6d:59:4c:4c:fa:e3:91:ee:56:c9:3d:e2:
         f0:58:a1:e7:b1:42:1d:5c:9d:fe:e5:db:93:10:a6:2f:77:91:
         69:1d:23:22:ff:cf:5c:0a:33:3c:41:65:a0:0d:65:f3:14:05:
         68:a8:52:8a:27:b0:d9:a2:b3:11:f2:5e:0e:3d:47:96:56:f6:
         aa:89:58:66:98:78:8d:e9:c7:a7:56:d6:6d:be:24:81:ff:48:
         58:8b:00:94:00:11:cd:7d:64:9b:c7:3a:ec:8d:ad:a4:c0:d0:
         e2:ed:cc:d2:3c:03:34:a0:cf:5f:72:e4:06:21:4b:99:4c:41:
         e3:ce:df:0b:e6:ad:ff:de:b3:b8:13:c9:00:99:46:0a:92:e4:
         e5:50:9b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:57:07 2026 by rpki-client