Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/3230302e3132342e37392e302f32342d3234203d3e20323733363633.roa
File:                     3230302e3132342e37392e302f32342d3234203d3e20323733363633.roa (raw, json)
Hash identifier:          mt1jxbg4cF9r6Iuz7iLPYRdkd8QHtcjbgv1104oW6yA=
Subject key identifier:   F0:9D:46:23:F3:08:CB:07:4E:2B:2F:B2:DF:CA:B9:DD:4E:6C:3D:B2
Certificate issuer:       /CN=7A2D9BBABC9B9CDA4EC74440C03DB4258E307977
Certificate serial:       6A3701225FC7136B6F5F479F445E2E475AA725C4
Authority key identifier: 7A:2D:9B:BA:BC:9B:9C:DA:4E:C7:44:40:C0:3D:B4:25:8E:30:79:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A2D9BBABC9B9CDA4EC74440C03DB4258E307977.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/3230302e3132342e37392e302f32342d3234203d3e20323733363633.roa
Signing time:             Wed 29 Apr 2026 01:15:53 +0000
ROA not before:           Wed 29 Apr 2026 01:10:53 +0000
ROA not after:            Wed 28 Apr 2027 01:15:53 +0000
asID:                     273663
IP address blocks:        200.124.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/7A2D9BBABC9B9CDA4EC74440C03DB4258E307977.crl
                          rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/7A2D9BBABC9B9CDA4EC74440C03DB4258E307977.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A2D9BBABC9B9CDA4EC74440C03DB4258E307977.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 15:05:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:37:01:22:5f:c7:13:6b:6f:5f:47:9f:44:5e:2e:47:5a:a7:25:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A2D9BBABC9B9CDA4EC74440C03DB4258E307977
        Validity
            Not Before: Apr 29 01:10:53 2026 GMT
            Not After : Apr 28 01:15:53 2027 GMT
        Subject: CN=F09D4623F308CB074E2B2FB2DFCAB9DD4E6C3DB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ea:a5:16:b8:4f:ad:7e:d0:75:1e:49:ac:23:
                    ff:2f:a4:0b:34:ce:fb:b7:b8:e3:f6:b4:4f:6c:d7:
                    22:37:87:60:18:30:30:07:d5:36:49:92:c0:4b:d0:
                    e3:a6:23:e3:71:80:8e:82:c3:9f:4d:19:44:13:97:
                    e1:b6:2e:c5:76:13:1f:16:4b:8c:79:26:88:68:69:
                    04:4d:7f:c0:ab:12:39:0f:b2:80:ff:16:45:a2:65:
                    73:5a:ab:22:db:01:ce:bd:2f:2b:a0:04:29:f0:4a:
                    68:54:3d:0b:f4:5b:42:d8:87:1c:8e:b8:11:8e:a8:
                    65:f5:c0:c1:8b:54:e3:4f:57:bf:d1:1f:e9:22:be:
                    5b:9a:2f:2e:d6:fc:bc:ad:a7:28:9a:77:12:78:a7:
                    ce:69:d1:14:d0:8a:11:6f:06:bd:b3:77:0a:d4:aa:
                    4a:0d:ec:8b:de:2e:1f:cb:5e:10:09:42:85:d8:63:
                    24:be:b6:56:21:9b:b3:5c:35:d3:2f:b7:6e:3a:8b:
                    ec:b7:0a:e1:35:63:5b:80:b4:3a:27:d8:18:c9:73:
                    35:75:22:c0:c6:38:05:eb:cd:3d:8a:86:0c:cb:25:
                    fc:db:07:8a:85:54:f6:9c:b9:ec:f3:d4:e7:b2:c2:
                    13:c9:8e:a5:76:b9:b8:5f:43:25:0a:1d:02:90:17:
                    23:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:9D:46:23:F3:08:CB:07:4E:2B:2F:B2:DF:CA:B9:DD:4E:6C:3D:B2
            X509v3 Authority Key Identifier:
                keyid:7A:2D:9B:BA:BC:9B:9C:DA:4E:C7:44:40:C0:3D:B4:25:8E:30:79:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/7A2D9BBABC9B9CDA4EC74440C03DB4258E307977.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A2D9BBABC9B9CDA4EC74440C03DB4258E307977.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/3230302e3132342e37392e302f32342d3234203d3e20323733363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:c5:5e:3e:8f:7b:47:90:94:60:99:92:aa:81:df:46:47:55:
         a7:ed:c2:2f:ae:06:29:63:8d:01:c1:33:e2:e0:8a:29:28:2f:
         5a:52:13:43:8d:51:a4:8a:48:f8:8b:c3:4e:80:07:17:72:ab:
         67:be:b2:fe:c0:91:6d:30:92:9e:d5:c4:b2:8d:be:e8:02:c1:
         5a:67:31:13:c5:6d:3e:d3:9d:ea:4f:09:ae:c6:65:d2:49:fb:
         9b:73:f9:6b:15:61:37:83:95:0f:39:0c:e4:5d:81:97:61:a8:
         b0:7b:e9:9d:1e:36:06:bc:58:14:fc:94:3b:69:19:01:27:fa:
         03:71:55:f6:e5:50:7c:4f:db:d8:b2:2c:00:2d:f7:2d:52:e0:
         1c:d1:9a:e1:fd:c5:b1:92:99:e6:e7:d4:77:05:63:25:0b:98:
         3c:f5:f3:95:c2:38:9e:43:8a:44:fc:1f:09:7e:3f:7c:b4:53:
         6a:db:30:30:93:98:c1:a0:1c:10:b5:5f:7b:2b:53:ae:9c:ac:
         b6:ae:52:1d:0e:ea:ea:65:30:8f:73:53:37:39:83:11:07:fc:
         41:5a:3e:ec:4a:d8:f2:83:65:d4:e1:4a:85:78:1f:78:51:d6:
         9f:f3:53:e2:2f:45:42:13:34:3b:d8:f7:f8:39:e5:8a:81:8a:
         9e:30:0d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:57:23 2026 by rpki-client