Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/3230302e3231352e3235342e302f32342d3234203d3e20323730363135.roa
File:                     3230302e3231352e3235342e302f32342d3234203d3e20323730363135.roa (raw, json)
Hash identifier:          +17aGXb9ll8PeLHQqAMQMEsPa0toy/v6YUZlPRnBu4c=
Subject key identifier:   91:2A:EA:A0:D9:67:81:C4:AF:84:0E:28:91:D9:BB:83:8C:51:A8:07
Certificate issuer:       /CN=DB85469981D62F9ABEE701953EC3BE74F4D6E638
Certificate serial:       1B6660AF9D62B27B85E454C46DBAF93012310876
Authority key identifier: DB:85:46:99:81:D6:2F:9A:BE:E7:01:95:3E:C3:BE:74:F4:D6:E6:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB85469981D62F9ABEE701953EC3BE74F4D6E638.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/3230302e3231352e3235342e302f32342d3234203d3e20323730363135.roa
Signing time:             Tue 21 Jul 2026 23:04:14 +0000
ROA not before:           Tue 21 Jul 2026 22:59:14 +0000
ROA not after:            Tue 20 Jul 2027 23:04:14 +0000
asID:                     270615
IP address blocks:        200.215.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/DB85469981D62F9ABEE701953EC3BE74F4D6E638.crl
                          rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/DB85469981D62F9ABEE701953EC3BE74F4D6E638.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB85469981D62F9ABEE701953EC3BE74F4D6E638.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 07:04:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:66:60:af:9d:62:b2:7b:85:e4:54:c4:6d:ba:f9:30:12:31:08:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB85469981D62F9ABEE701953EC3BE74F4D6E638
        Validity
            Not Before: Jul 21 22:59:14 2026 GMT
            Not After : Jul 20 23:04:14 2027 GMT
        Subject: CN=912AEAA0D96781C4AF840E2891D9BB838C51A807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:91:9c:83:b6:2a:ee:35:41:3a:8c:e6:1e:4b:
                    2e:bd:8e:fa:e5:bc:ba:68:7b:91:7f:2e:76:d9:37:
                    3a:04:5d:02:c9:99:3b:c8:36:08:31:45:2a:cf:11:
                    bb:16:26:b0:cf:2c:cc:3c:05:8e:25:44:6f:ce:54:
                    e7:7f:41:83:b7:02:4f:10:c1:02:73:a9:61:5b:73:
                    bf:e8:b2:af:c8:8d:34:64:1b:ab:39:ad:88:8e:fd:
                    bd:b1:31:39:67:dc:d0:dd:79:cd:d3:9e:5c:15:62:
                    2a:99:f9:6a:6e:2f:b2:b1:c1:6e:49:2c:fa:66:7b:
                    fa:91:43:41:b5:da:02:27:02:27:22:6a:4c:f1:ac:
                    a0:70:31:85:45:00:47:c6:d8:6c:18:47:77:62:0d:
                    1f:77:35:71:41:d1:bb:3e:c3:b5:e1:a0:46:3e:6e:
                    af:35:01:58:fc:42:58:3b:14:11:0b:2f:41:03:a6:
                    9d:23:85:bb:bb:6d:fc:40:e2:68:0a:df:ff:87:bf:
                    92:15:6d:c1:1f:32:0a:70:96:83:ee:d9:08:9a:62:
                    82:cd:36:fe:45:cc:50:d0:f9:f7:ca:88:db:b0:82:
                    86:e9:cb:f5:ef:94:34:17:8b:c7:69:bf:ee:cf:9c:
                    d7:b2:54:bf:1c:bf:bc:7f:72:c8:d9:40:52:ea:25:
                    d8:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:2A:EA:A0:D9:67:81:C4:AF:84:0E:28:91:D9:BB:83:8C:51:A8:07
            X509v3 Authority Key Identifier:
                keyid:DB:85:46:99:81:D6:2F:9A:BE:E7:01:95:3E:C3:BE:74:F4:D6:E6:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/DB85469981D62F9ABEE701953EC3BE74F4D6E638.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB85469981D62F9ABEE701953EC3BE74F4D6E638.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/3230302e3231352e3235342e302f32342d3234203d3e20323730363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.215.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:b2:7f:81:59:0c:5f:f7:38:df:43:75:dd:39:3f:36:c5:79:
         65:a7:18:55:5d:9e:c6:29:a4:e2:34:a0:79:c1:7f:70:13:20:
         88:d2:5f:ff:98:2e:76:6e:bf:ee:f1:90:f8:0c:83:63:a8:8f:
         9c:8c:a2:85:b8:8d:51:62:ec:2e:f7:96:ca:f3:7a:4d:7b:f9:
         95:98:1e:a9:02:43:92:d8:6d:92:7e:75:97:01:65:1e:1b:3d:
         4f:9c:8a:48:b0:c4:25:d3:15:97:61:9f:f8:50:6d:8a:8d:9f:
         da:19:93:28:48:9a:c1:d9:b8:02:c3:24:aa:7a:ee:bf:ed:1f:
         e7:d3:45:fe:74:00:e9:d8:a4:c2:47:d3:56:95:2c:43:db:39:
         cd:e6:c5:f1:b2:53:b9:46:6c:c6:35:cd:ad:9d:d7:e6:04:8d:
         6f:9c:62:ab:b5:55:36:2a:46:c0:12:8a:32:87:ce:cf:47:2b:
         17:0e:fc:8b:49:f8:23:2c:69:27:04:98:32:7e:28:61:90:e0:
         cf:3a:2a:4e:59:3f:5c:33:6b:bb:1f:a7:72:e6:77:2d:e5:5a:
         bd:e0:d8:83:c3:24:11:8b:77:47:b3:1b:00:e1:5c:5f:40:72:
         60:c9:f1:6a:51:23:86:f0:33:c5:8f:7e:b9:87:7a:19:ce:0a:
         ab:e2:a3:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:19:08 2026 by rpki-client