Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/3230302e3233352e3132382e302f31372d3332203d3e20323731363430.roa
File:                     3230302e3233352e3132382e302f31372d3332203d3e20323731363430.roa (raw, json)
Hash identifier:          vY/8gWzHyJNVtcP73EOqleugjRdaz2bN8soqmH1fJ74=
Subject key identifier:   EC:C7:DD:E6:72:5D:88:29:F5:A4:AB:BA:0D:12:27:10:67:28:51:8F
Certificate issuer:       /CN=42CDD454B3E8670C26A58056A69FE952D8C533F3
Certificate serial:       0830B59C63604EE8DA0C2CE984EF4E11F13BA2AB
Authority key identifier: 42:CD:D4:54:B3:E8:67:0C:26:A5:80:56:A6:9F:E9:52:D8:C5:33:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42CDD454B3E8670C26A58056A69FE952D8C533F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/3230302e3233352e3132382e302f31372d3332203d3e20323731363430.roa
Signing time:             Thu 15 Oct 2026 20:22:10 +0000
ROA not before:           Thu 15 Oct 2026 20:17:10 +0000
ROA not after:            Thu 14 Oct 2027 20:22:10 +0000
asID:                     271640
IP address blocks:        200.235.128.0/17 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/42CDD454B3E8670C26A58056A69FE952D8C533F3.crl
                          rsync://rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/42CDD454B3E8670C26A58056A69FE952D8C533F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42CDD454B3E8670C26A58056A69FE952D8C533F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 20:48:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:30:b5:9c:63:60:4e:e8:da:0c:2c:e9:84:ef:4e:11:f1:3b:a2:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42CDD454B3E8670C26A58056A69FE952D8C533F3
        Validity
            Not Before: Oct 15 20:17:10 2026 GMT
            Not After : Oct 14 20:22:10 2027 GMT
        Subject: CN=ECC7DDE6725D8829F5A4ABBA0D1227106728518F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:62:6e:c7:fc:90:79:ae:4f:03:8b:ec:d7:98:
                    c8:c2:00:b6:49:01:83:63:82:4c:cb:91:ed:67:61:
                    71:54:1f:c6:85:c1:c8:0e:55:45:79:40:b8:57:84:
                    48:c8:05:ee:c2:26:0e:fc:5e:0f:0e:65:a3:3e:12:
                    a5:c1:9b:cc:f2:54:c8:ed:d9:7b:32:04:4c:dd:db:
                    0b:7f:16:ee:a3:5b:0b:ee:6b:53:06:90:0b:d9:05:
                    18:21:0d:fa:03:a2:6b:10:cf:c6:06:49:de:00:30:
                    c4:ab:77:f2:34:e3:32:1c:1f:42:00:36:fb:d4:24:
                    5c:7d:22:7e:52:81:0a:d3:3d:73:ea:1b:82:97:bf:
                    0f:07:e9:14:67:7d:f1:8c:60:c0:43:9f:3b:b1:63:
                    67:2e:0a:6d:ed:17:35:7d:64:9f:32:a4:21:2b:e5:
                    47:29:a3:62:fa:79:60:c5:df:75:18:a0:7f:71:a6:
                    89:fd:50:5e:56:3e:93:7d:1b:61:04:c2:f1:54:0c:
                    cf:d6:ce:60:d3:4a:fb:50:15:99:9b:c9:63:95:78:
                    3c:1e:71:08:aa:b0:7b:12:c4:26:c7:ab:c1:d8:f9:
                    0e:b9:e1:6a:34:bc:5c:3e:bf:2e:3b:7e:7f:d2:99:
                    b7:c8:81:ba:06:ca:bf:c3:0d:a9:cb:05:f1:58:06:
                    11:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:C7:DD:E6:72:5D:88:29:F5:A4:AB:BA:0D:12:27:10:67:28:51:8F
            X509v3 Authority Key Identifier:
                keyid:42:CD:D4:54:B3:E8:67:0C:26:A5:80:56:A6:9F:E9:52:D8:C5:33:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/42CDD454B3E8670C26A58056A69FE952D8C533F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42CDD454B3E8670C26A58056A69FE952D8C533F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/3230302e3233352e3132382e302f31372d3332203d3e20323731363430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.235.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         18:e7:37:92:03:43:22:33:e0:8b:7c:e0:29:ba:e7:aa:d1:c7:
         b6:a8:10:ce:97:d2:57:61:68:7d:4e:11:cd:8f:1f:19:a5:ff:
         1a:82:48:54:b4:a6:14:cf:d2:54:b6:bc:36:14:4d:19:de:1d:
         63:04:1f:3b:a4:b1:d4:3f:1c:8d:00:08:d2:d3:41:16:ea:5d:
         a1:ab:00:9a:21:9e:ba:7f:9e:b2:66:cf:0b:7a:62:6d:dc:05:
         1e:cb:21:82:c7:c4:27:bb:ed:5d:02:e3:89:60:df:2e:12:f7:
         fb:eb:bb:9f:0b:81:c8:d7:2f:cb:e8:ac:e9:5a:12:db:72:c4:
         de:20:24:0d:36:69:db:85:7f:d8:77:d7:42:0d:6a:1c:c0:5f:
         6f:b9:3d:df:2d:42:6a:f1:3d:98:15:b1:61:86:80:fd:e0:2b:
         a4:40:0a:cf:2b:55:7a:39:dc:51:07:64:46:98:86:19:89:a7:
         f3:ad:02:85:20:c9:ba:38:0d:89:ad:30:eb:02:f1:f6:0f:f7:
         62:aa:bd:01:05:17:37:fd:64:f4:a3:b3:f9:0a:30:53:8b:d6:
         2b:7a:c8:e8:aa:ee:5a:7d:12:a1:1c:79:68:98:74:41:fe:2e:
         e7:5a:e7:dd:c2:0c:55:82:68:5c:0d:a3:59:45:b2:ee:d4:a9:
         6c:0b:3f:30
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUCDC1nGNgTujaDCzphO9OEfE7oqswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDJDREQ0NTRCM0U4NjcwQzI2QTU4MDU2QTY5RkU5NTJE
OEM1MzNGMzAeFw0yNjEwMTUyMDE3MTBaFw0yNzEwMTQyMDIyMTBaMDMxMTAvBgNV
BAMTKEVDQzdEREU2NzI1RDg4MjlGNUE0QUJCQTBEMTIyNzEwNjcyODUxOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjYm7H/JB5rk8Di+zXmMjCALZJ
AYNjgkzLke1nYXFUH8aFwcgOVUV5QLhXhEjIBe7CJg78Xg8OZaM+EqXBm8zyVMjt
2XsyBEzd2wt/Fu6jWwvua1MGkAvZBRghDfoDomsQz8YGSd4AMMSrd/I04zIcH0IA
NvvUJFx9In5SgQrTPXPqG4KXvw8H6RRnffGMYMBDnzuxY2cuCm3tFzV9ZJ8ypCEr
5Ucpo2L6eWDF33UYoH9xpon9UF5WPpN9G2EEwvFUDM/WzmDTSvtQFZmbyWOVeDwe
cQiqsHsSxCbHq8HY+Q654Wo0vFw+vy47fn/SmbfIgboGyr/DDanLBfFYBhH3AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU7Mfd5nJdiCn1pKu6DRInEGcoUY8wHwYDVR0j
BBgwFoAUQs3UVLPoZwwmpYBWpp/pUtjFM/MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNmtwY1Q3bWRzYmJtczZuTHVjckpETVhvTmlrYjJiRXRWbTJwVXl3UmdU
UDgvMC80MkNERDQ1NEIzRTg2NzBDMjZBNTgwNTZBNjlGRTk1MkQ4QzUzM0YzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQyQ0RENDU0QjNFODY3MEMy
NkE1ODA1NkE2OUZFOTUyRDhDNTMzRjMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZrcGNUN21kc2JibXM2bkx1Y3JKRE1Yb05pa2IyYkV0Vm0ycFV5d1JnVFA4LzAv
MzIzMDMwMmUzMjMzMzUyZTMxMzIzODJlMzAyZjMxMzcyZDMzMzIyMDNkM2UyMDMy
MzczMTM2MzQzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEB8jrgDANBgkqhkiG9w0BAQsFAAOCAQEAGOc3
kgNDIjPgi3zgKbrnqtHHtqgQzpfSV2FofU4RzY8fGaX/GoJIVLSmFM/SVLa8NhRN
Gd4dYwQfO6Sx1D8cjQAI0tNBFupdoasAmiGeun+esmbPC3pibdwFHsshgsfEJ7vt
XQLjiWDfLhL3++u7nwuByNcvy+is6VoS23LE3iAkDTZp24V/2HfXQg1qHMBfb7k9
3y1CavE9mBWxYYaA/eArpEAKzytVejncUQdkRpiGGYmn860ChSDJujgNia0w6wLx
9g/3Yqq9AQUXN/1k9KOz+QowU4vWK3rI6KruWn0SoRx5aJh0Qf4u51rn3cIMVYJo
XA2jWUWy7tSpbAs/MA==
-----END CERTIFICATE-----
Generated at Mon Oct 19 02:30:15 2026 by rpki-client