Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/3230302e3134342e3137342e302f32342d3234203d3e203238353731.roa
File:                     3230302e3134342e3137342e302f32342d3234203d3e203238353731.roa (raw, json)
Hash identifier:          UDT8bqqkC6hmLf94DlasCvD12z36rOgvgM4X8VkPwkA=
Subject key identifier:   36:59:B8:26:07:86:D7:17:04:EB:6E:14:A3:3A:72:78:77:89:D3:18
Certificate issuer:       /CN=2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44
Certificate serial:       038F917A0B0DE510C235F4F5F9DF6A30251BAEA7
Authority key identifier: 2C:AF:D9:D8:A7:9A:EC:27:7E:AB:A7:07:4D:7B:B2:B9:9D:EF:9A:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/3230302e3134342e3137342e302f32342d3234203d3e203238353731.roa
Signing time:             Wed 07 Oct 2026 20:46:06 +0000
ROA not before:           Wed 07 Oct 2026 20:41:06 +0000
ROA not after:            Wed 06 Oct 2027 20:46:06 +0000
asID:                     28571
IP address blocks:        200.144.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.crl
                          rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 06:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:8f:91:7a:0b:0d:e5:10:c2:35:f4:f5:f9:df:6a:30:25:1b:ae:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44
        Validity
            Not Before: Oct  7 20:41:06 2026 GMT
            Not After : Oct  6 20:46:06 2027 GMT
        Subject: CN=3659B8260786D71704EB6E14A33A72787789D318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:07:df:6d:66:dc:4d:49:29:56:83:a0:a8:e9:
                    9e:3a:ff:f6:e8:7a:c9:08:8b:50:a5:15:46:3d:07:
                    a6:6f:eb:3e:97:a9:1a:c3:dc:89:2c:6b:66:1b:ec:
                    3a:99:d5:01:59:f9:b3:af:dc:1d:a6:be:dc:bb:31:
                    51:fc:37:d2:7e:f7:27:b9:d5:6d:ca:4c:32:8f:2e:
                    84:df:68:7b:c9:0b:e7:13:c5:db:c8:d4:1b:b8:74:
                    ca:61:7e:83:a4:5b:b8:77:86:53:7a:8e:94:63:b5:
                    c5:6a:8d:bf:d0:16:46:3f:12:5e:75:3a:83:99:2d:
                    d7:60:37:57:bc:92:f5:71:4a:86:29:e2:ee:30:68:
                    4e:90:3f:7c:39:8e:9d:49:50:4a:a6:3f:d1:9a:a7:
                    78:c9:2b:b9:bc:64:94:ed:ea:f9:c0:4f:08:ea:06:
                    96:c6:20:8a:2c:3b:a0:58:04:6c:62:0b:c7:f9:2e:
                    08:f6:54:37:33:12:86:e8:6a:d9:b4:13:af:27:7a:
                    f0:b2:71:05:59:a1:3c:bc:21:63:0c:05:05:8d:dc:
                    5b:40:32:a6:b4:ef:21:32:7f:29:ad:58:52:d3:96:
                    de:b1:f7:6b:5a:2d:7d:99:70:15:83:bb:57:a7:36:
                    ab:46:23:24:1a:11:b8:c8:5c:15:b5:38:9a:dc:2c:
                    53:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:59:B8:26:07:86:D7:17:04:EB:6E:14:A3:3A:72:78:77:89:D3:18
            X509v3 Authority Key Identifier:
                keyid:2C:AF:D9:D8:A7:9A:EC:27:7E:AB:A7:07:4D:7B:B2:B9:9D:EF:9A:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/3230302e3134342e3137342e302f32342d3234203d3e203238353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.144.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:c0:cb:07:23:05:3a:a7:c3:95:35:91:f8:84:8e:5e:78:7e:
         84:85:49:3c:8f:9d:0c:44:68:81:63:5e:94:14:90:4c:25:1f:
         05:23:61:cf:31:bc:a9:45:2f:c2:1d:21:aa:e4:3c:57:c1:a1:
         99:db:7c:aa:b1:d3:93:54:47:44:7b:10:9f:25:86:7c:e1:a3:
         b8:d3:ac:3d:2a:67:9e:85:0b:a3:28:33:3c:a7:06:46:08:0e:
         8d:0e:85:54:88:12:23:f5:52:54:c8:09:31:b1:9f:cb:1c:e5:
         69:81:06:5a:e0:cf:ad:33:f7:62:5d:7d:0d:17:42:16:71:87:
         05:7c:f3:26:6f:4a:28:42:f8:96:6f:50:43:e8:c2:bc:03:ba:
         83:85:76:da:9f:c1:1f:30:6c:6a:95:a5:20:f9:b7:64:3c:72:
         dc:bd:bf:93:0b:a1:00:cd:fa:f9:d2:34:69:04:32:4e:00:c5:
         1d:b6:94:b1:82:c6:13:9c:f8:30:0f:60:e4:8b:b5:e6:3f:2e:
         9b:4e:02:84:f8:e3:9e:4e:f0:83:b6:7e:39:20:27:1e:1d:0a:
         5f:b1:94:5c:29:97:f6:7e:ab:0f:72:93:83:34:75:bd:47:a5:
         1f:b8:7b:10:c5:46:f8:44:a8:31:93:82:1d:7f:35:86:f9:34:
         44:3b:e5:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 08:16:08 2026 by rpki-client