Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3230302e3139362e3133382e302f32342d3234203d3e203631373736.roa
File:                     3230302e3139362e3133382e302f32342d3234203d3e203631373736.roa (raw, json)
Hash identifier:          ox0uWXZPmZazMNmD3rY+hx9bkroY0FWJ8WxZP05pgK8=
Subject key identifier:   97:64:E1:EF:79:64:06:21:07:66:9D:BF:61:4E:28:2D:1B:1D:EA:B1
Certificate issuer:       /CN=53072E0F229B5DEC1EBC8B3BB52B29D1DF86A0D4
Certificate serial:       5B35B96F371A8E422A1A8979C69B22BE60932567
Authority key identifier: 53:07:2E:0F:22:9B:5D:EC:1E:BC:8B:3B:B5:2B:29:D1:DF:86:A0:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53072E0F229B5DEC1EBC8B3BB52B29D1DF86A0D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3230302e3139362e3133382e302f32342d3234203d3e203631373736.roa
Signing time:             Tue 03 Mar 2026 22:03:11 +0000
ROA not before:           Tue 03 Mar 2026 21:58:11 +0000
ROA not after:            Tue 02 Mar 2027 22:03:11 +0000
asID:                     61776
IP address blocks:        200.196.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/53072E0F229B5DEC1EBC8B3BB52B29D1DF86A0D4.crl
                          rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/53072E0F229B5DEC1EBC8B3BB52B29D1DF86A0D4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53072E0F229B5DEC1EBC8B3BB52B29D1DF86A0D4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 09:57:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:35:b9:6f:37:1a:8e:42:2a:1a:89:79:c6:9b:22:be:60:93:25:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53072E0F229B5DEC1EBC8B3BB52B29D1DF86A0D4
        Validity
            Not Before: Mar  3 21:58:11 2026 GMT
            Not After : Mar  2 22:03:11 2027 GMT
        Subject: CN=9764E1EF7964062107669DBF614E282D1B1DEAB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b6:7b:1b:ba:8d:a0:5c:7f:4f:82:d8:63:82:
                    30:bc:22:ed:46:85:5d:29:a3:f0:8b:14:74:de:16:
                    33:72:21:c7:f1:b5:ce:aa:5c:03:c0:de:96:1a:40:
                    6e:73:3d:65:74:4a:d8:4a:83:5a:03:ae:c0:6d:03:
                    5e:ab:32:ee:50:31:1c:51:4a:aa:41:e6:9c:f0:3c:
                    94:5f:17:97:52:28:c9:b0:cb:e1:9d:a6:e3:b3:11:
                    42:bf:41:0b:b2:26:b2:bc:ce:40:ea:19:4d:55:8f:
                    be:15:a2:e3:dc:2f:1c:d3:6f:79:2b:2b:44:ce:4c:
                    51:1b:7f:23:57:04:85:51:c2:5e:40:3f:d8:0f:5b:
                    56:bd:d7:44:04:f7:67:51:8e:37:d4:73:77:0a:43:
                    bc:6c:63:14:0b:33:3f:8b:d4:0e:91:a6:57:86:ef:
                    6a:f5:77:e6:0d:3b:01:57:b3:07:7a:23:f5:89:39:
                    2d:41:d8:07:bb:78:a4:ac:0f:22:3b:d0:86:a9:2d:
                    cb:05:b8:da:86:1b:1b:c7:49:2e:31:c9:7f:3a:0f:
                    7e:e0:8b:91:ee:e4:c1:a7:46:54:d2:6d:df:10:35:
                    a2:58:55:d3:9f:59:aa:96:54:55:0d:95:2c:1d:c2:
                    82:18:52:c0:14:c9:4c:a4:33:3c:e0:86:fe:a4:13:
                    8c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:64:E1:EF:79:64:06:21:07:66:9D:BF:61:4E:28:2D:1B:1D:EA:B1
            X509v3 Authority Key Identifier:
                keyid:53:07:2E:0F:22:9B:5D:EC:1E:BC:8B:3B:B5:2B:29:D1:DF:86:A0:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/53072E0F229B5DEC1EBC8B3BB52B29D1DF86A0D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53072E0F229B5DEC1EBC8B3BB52B29D1DF86A0D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3230302e3139362e3133382e302f32342d3234203d3e203631373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.196.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:bd:b9:7f:93:84:23:78:54:dd:91:73:a7:e5:fe:49:a1:8b:
         80:b9:0b:fb:d6:13:c7:9a:e0:6d:e2:2b:55:76:40:34:74:95:
         9b:a6:3b:69:55:24:35:0a:40:eb:32:ba:7b:c1:70:79:c1:35:
         97:a9:cf:c0:80:d2:ac:a8:10:e9:76:dd:1a:2f:ed:19:71:d1:
         82:b0:28:c1:70:b1:77:22:3a:57:06:fa:36:31:f9:56:57:89:
         eb:3c:b2:7c:bd:1e:13:40:8a:ce:be:5f:03:91:6b:7f:4e:1f:
         7a:cc:b5:bb:0f:33:9f:50:6e:7a:0b:37:27:a0:e6:79:fa:d9:
         a4:a7:a3:51:fb:51:8d:7d:4b:e2:97:36:af:42:70:b8:95:30:
         92:f2:be:c2:d7:71:21:07:60:2d:aa:4e:8e:b5:11:e3:07:c9:
         24:d1:f8:c5:d7:8d:da:62:2d:04:e5:ed:5f:05:e7:80:c0:c1:
         83:25:c0:ee:69:63:1b:c9:6a:0b:8b:9d:c5:ab:27:ec:87:01:
         90:9d:2b:c9:70:53:f5:9f:0c:95:e1:c0:86:1d:91:95:8d:67:
         4c:ba:4b:87:97:58:14:4c:b6:37:5c:f7:26:f9:8e:df:ce:9b:
         09:fe:81:d3:2f:38:b9:fc:33:e1:a3:e4:97:22:06:f9:03:fe:
         7b:63:89:22
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWzW5bzcajkIqGol5xpsivmCTJWcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTMwNzJFMEYyMjlCNURFQzFFQkM4QjNCQjUyQjI5RDFE
Rjg2QTBENDAeFw0yNjAzMDMyMTU4MTFaFw0yNzAzMDIyMjAzMTFaMDMxMTAvBgNV
BAMTKDk3NjRFMUVGNzk2NDA2MjEwNzY2OURCRjYxNEUyODJEMUIxREVBQjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0tnsbuo2gXH9PgthjgjC8Iu1G
hV0po/CLFHTeFjNyIcfxtc6qXAPA3pYaQG5zPWV0SthKg1oDrsBtA16rMu5QMRxR
SqpB5pzwPJRfF5dSKMmwy+GdpuOzEUK/QQuyJrK8zkDqGU1Vj74VouPcLxzTb3kr
K0TOTFEbfyNXBIVRwl5AP9gPW1a910QE92dRjjfUc3cKQ7xsYxQLMz+L1A6RpleG
72r1d+YNOwFXswd6I/WJOS1B2Ae7eKSsDyI70IapLcsFuNqGGxvHSS4xyX86D37g
i5Hu5MGnRlTSbd8QNaJYVdOfWaqWVFUNlSwdwoIYUsAUyUykMzzghv6kE4zPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUl2Th73lkBiEHZp2/YU4oLRsd6rEwHwYDVR0j
BBgwFoAUUwcuDyKbXewevIs7tSsp0d+GoNQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOE1BeW1WOTg5c1g4a3FKU2ZLUGFXdkZKYVZHTGl2alliblQ5UnRXQXRS
cWYvMC81MzA3MkUwRjIyOUI1REVDMUVCQzhCM0JCNTJCMjlEMURGODZBMEQ0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUzMDcyRTBGMjI5QjVERUMx
RUJDOEIzQkI1MkIyOUQxREY4NkEwRDQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhNQXltVjk4OXNYOGtxSlNmS1BhV3ZGSmFWR0xpdmpZYm5UOVJ0V0F0UnFmLzAv
MzIzMDMwMmUzMTM5MzYyZTMxMzMzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2
MzEzNzM3MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADIxIowDQYJKoZIhvcNAQELBQADggEBAES9uX+T
hCN4VN2Rc6fl/kmhi4C5C/vWE8ea4G3iK1V2QDR0lZumO2lVJDUKQOsyunvBcHnB
NZepz8CA0qyoEOl23Rov7Rlx0YKwKMFwsXciOlcG+jYx+VZXies8sny9HhNAis6+
XwORa39OH3rMtbsPM59QbnoLNyeg5nn62aSno1H7UY19S+KXNq9CcLiVMJLyvsLX
cSEHYC2qTo61EeMHySTR+MXXjdpiLQTl7V8F54DAwYMlwO5pYxvJaguLncWrJ+yH
AZCdK8lwU/WfDJXhwIYdkZWNZ0y6S4eXWBRMtjdc9yb5jt/Omwn+gdMvOLn8M+Gj
5JciBvkD/ntjiSI=
-----END CERTIFICATE-----
Generated at Fri Mar 27 02:35:41 2026 by rpki-client