Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3230302e3139362e3133392e302f32342d3234203d3e203631373736.roa
File:                     3230302e3139362e3133392e302f32342d3234203d3e203631373736.roa (raw, json)
Hash identifier:          zSsz9CrmMpKCtSIIyKNjopBoMoum7CABn6sx6UpiPaw=
Subject key identifier:   25:29:C1:0C:59:47:DF:AA:F7:2A:63:E0:04:C6:05:E4:2E:B8:52:F6
Certificate issuer:       /CN=53072E0F229B5DEC1EBC8B3BB52B29D1DF86A0D4
Certificate serial:       0B48BD1A37F4A780E8D661A56E321472B0B50A0F
Authority key identifier: 53:07:2E:0F:22:9B:5D:EC:1E:BC:8B:3B:B5:2B:29:D1:DF:86:A0:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53072E0F229B5DEC1EBC8B3BB52B29D1DF86A0D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3230302e3139362e3133392e302f32342d3234203d3e203631373736.roa
Signing time:             Tue 03 Mar 2026 22:03:10 +0000
ROA not before:           Tue 03 Mar 2026 21:58:10 +0000
ROA not after:            Tue 02 Mar 2027 22:03:10 +0000
asID:                     61776
IP address blocks:        200.196.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/53072E0F229B5DEC1EBC8B3BB52B29D1DF86A0D4.crl
                          rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/53072E0F229B5DEC1EBC8B3BB52B29D1DF86A0D4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53072E0F229B5DEC1EBC8B3BB52B29D1DF86A0D4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 17:14:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:48:bd:1a:37:f4:a7:80:e8:d6:61:a5:6e:32:14:72:b0:b5:0a:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53072E0F229B5DEC1EBC8B3BB52B29D1DF86A0D4
        Validity
            Not Before: Mar  3 21:58:10 2026 GMT
            Not After : Mar  2 22:03:10 2027 GMT
        Subject: CN=2529C10C5947DFAAF72A63E004C605E42EB852F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0e:ed:f5:61:7f:9b:a6:53:e0:c1:65:3d:5b:
                    19:b9:07:c9:e6:b8:69:39:7e:62:eb:24:43:30:36:
                    00:45:f7:f7:4a:03:b3:69:30:a4:9d:50:8d:12:48:
                    ce:82:c8:10:9d:0d:09:da:0f:2b:ed:5b:31:b9:32:
                    38:1a:33:a9:8f:8f:0f:b0:c3:9b:42:70:66:2d:e8:
                    65:35:58:12:c5:91:6c:90:a9:db:76:d0:8d:07:03:
                    ee:bc:80:e3:8a:a0:93:79:d3:59:43:50:78:81:f0:
                    8f:45:a3:ac:9b:d6:b2:c1:31:d9:15:40:aa:6c:5e:
                    e5:94:81:58:5d:69:8f:5e:42:75:a6:ec:7d:c2:22:
                    65:ff:39:45:91:03:97:c6:41:d9:87:c7:50:c2:08:
                    b3:00:9f:57:f3:b2:b5:83:5f:5c:39:82:2e:30:c0:
                    f7:53:77:c9:ba:aa:84:6e:e6:d4:ed:5e:5c:6a:84:
                    4e:b8:80:0d:37:4a:9d:6e:7d:9e:5d:26:3c:e3:22:
                    4a:8f:db:12:72:79:ad:7e:0e:61:5d:1a:46:76:e9:
                    8b:61:df:39:fc:ea:be:ca:75:0d:85:01:72:d5:05:
                    ce:d5:c4:18:42:7e:64:4a:c4:e5:70:4a:c5:68:87:
                    e6:cc:07:e9:35:88:c7:5c:fb:2f:5e:b1:40:3b:00:
                    52:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:29:C1:0C:59:47:DF:AA:F7:2A:63:E0:04:C6:05:E4:2E:B8:52:F6
            X509v3 Authority Key Identifier:
                keyid:53:07:2E:0F:22:9B:5D:EC:1E:BC:8B:3B:B5:2B:29:D1:DF:86:A0:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/53072E0F229B5DEC1EBC8B3BB52B29D1DF86A0D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53072E0F229B5DEC1EBC8B3BB52B29D1DF86A0D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3230302e3139362e3133392e302f32342d3234203d3e203631373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.196.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:07:e7:f3:e2:23:7e:a4:0b:74:15:04:a5:0a:96:1d:68:b9:
         97:46:bc:2f:74:05:a8:6f:e8:a4:7c:be:9e:85:c7:d9:ae:e8:
         39:af:4b:51:16:d8:11:2b:cc:30:95:d2:39:69:5d:4f:46:64:
         21:0d:25:87:7b:7a:ef:15:d1:7c:bd:77:9b:58:be:ce:5b:7c:
         62:dd:0a:ff:36:20:b8:11:5f:7c:18:d7:a4:f0:57:50:dc:47:
         cb:08:2b:c6:88:67:c5:d7:8f:d2:1d:37:9d:d8:ba:1e:b3:ea:
         75:64:89:06:2d:0a:d6:06:98:3f:8c:67:cd:f8:c7:83:93:bf:
         ea:4a:0e:68:de:70:52:d0:98:df:e2:fd:55:2f:17:58:94:64:
         53:ee:5a:d0:1d:47:a4:7e:73:70:06:0f:04:7c:5d:b8:76:a5:
         8b:bd:ea:07:9a:88:48:c4:e3:50:90:e0:f0:66:2c:21:a0:ee:
         2a:c9:35:99:75:6f:45:4f:1c:8d:4b:e0:84:86:6d:df:74:be:
         e0:83:c8:a1:24:36:b0:d9:de:59:03:15:e7:c4:d2:d4:7e:d0:
         66:7a:47:34:65:0c:b8:0c:e8:5f:8b:fd:ac:77:7b:ca:68:76:
         d4:08:e2:11:80:25:3d:c3:54:99:4d:5e:98:45:84:8f:f3:99:
         ff:91:2f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:52:57 2026 by rpki-client