Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/3230302e3231392e3134392e302f32342d3332203d3e20323634393731.roa
File:                     3230302e3231392e3134392e302f32342d3332203d3e20323634393731.roa (raw, json)
Hash identifier:          h3qrxvQHYvIHWATQtylOTBGiwfp1KYpMfgIxKyAHwOs=
Subject key identifier:   11:59:CF:37:73:DE:BD:EB:2C:63:0C:49:43:D8:B8:BD:9F:A6:B5:44
Certificate issuer:       /CN=2BFE43B6FF62C8A8E2F366F5504AAC6D182D2B8B
Certificate serial:       66503DD272C53B54AE04801F045F6D26F4CCFB4E
Authority key identifier: 2B:FE:43:B6:FF:62:C8:A8:E2:F3:66:F5:50:4A:AC:6D:18:2D:2B:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BFE43B6FF62C8A8E2F366F5504AAC6D182D2B8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/3230302e3231392e3134392e302f32342d3332203d3e20323634393731.roa
Signing time:             Thu 19 Mar 2026 13:13:58 +0000
ROA not before:           Thu 19 Mar 2026 13:08:58 +0000
ROA not after:            Thu 18 Mar 2027 13:13:58 +0000
asID:                     264971
IP address blocks:        200.219.149.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/2BFE43B6FF62C8A8E2F366F5504AAC6D182D2B8B.crl
                          rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/2BFE43B6FF62C8A8E2F366F5504AAC6D182D2B8B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BFE43B6FF62C8A8E2F366F5504AAC6D182D2B8B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 20:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:50:3d:d2:72:c5:3b:54:ae:04:80:1f:04:5f:6d:26:f4:cc:fb:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BFE43B6FF62C8A8E2F366F5504AAC6D182D2B8B
        Validity
            Not Before: Mar 19 13:08:58 2026 GMT
            Not After : Mar 18 13:13:58 2027 GMT
        Subject: CN=1159CF3773DEBDEB2C630C4943D8B8BD9FA6B544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cb:d5:68:3d:fd:c5:05:64:7d:fa:d8:5e:84:
                    e4:0c:5e:a3:cf:40:71:95:73:eb:ac:f0:1b:ff:dc:
                    60:fa:ca:3f:46:a1:8b:c4:ec:66:3c:d7:ad:7d:db:
                    b4:17:57:c0:9f:73:f1:9d:22:c4:9f:4f:06:be:5c:
                    fb:a3:76:12:83:e4:d7:94:e8:63:0e:81:a4:fa:d3:
                    d2:26:cd:7e:f3:e7:ab:4a:13:13:86:3b:05:d7:fa:
                    cb:50:b7:ec:d8:f1:fc:0c:8e:92:1a:58:d1:86:fa:
                    00:a8:3f:c8:85:6b:14:91:48:54:e0:e9:23:53:40:
                    d1:40:fc:3a:d8:97:6a:a7:1e:6c:86:96:0f:b4:69:
                    0f:d0:75:02:6f:cb:92:2b:8a:83:15:8a:9f:b3:4c:
                    32:3d:93:27:a8:37:c4:14:6f:ae:cb:a2:97:dd:59:
                    78:e4:36:2e:2b:f4:03:e9:db:3f:88:fc:7f:d6:a8:
                    11:06:ce:fc:65:b9:c8:72:b1:ff:8d:80:69:92:c8:
                    c3:a1:74:49:88:cd:53:f7:3a:4f:d5:a4:7a:b7:b7:
                    bd:f4:24:3d:7e:2b:63:3a:33:9b:a4:fe:f0:bd:60:
                    c2:94:d7:6b:b2:ef:57:69:36:32:4b:21:6f:af:06:
                    9f:15:83:06:44:21:1a:6c:53:e0:69:2c:26:1c:e9:
                    3e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:59:CF:37:73:DE:BD:EB:2C:63:0C:49:43:D8:B8:BD:9F:A6:B5:44
            X509v3 Authority Key Identifier:
                keyid:2B:FE:43:B6:FF:62:C8:A8:E2:F3:66:F5:50:4A:AC:6D:18:2D:2B:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/2BFE43B6FF62C8A8E2F366F5504AAC6D182D2B8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BFE43B6FF62C8A8E2F366F5504AAC6D182D2B8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/3230302e3231392e3134392e302f32342d3332203d3e20323634393731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:ea:d9:6b:57:00:c4:c5:23:56:c7:80:43:75:6e:36:58:7a:
         fd:7d:0a:48:ea:ce:43:5c:04:1a:20:62:ce:6b:47:0b:74:cc:
         c0:fb:fd:e2:88:2b:1b:27:66:1d:dd:94:a8:f8:e4:38:af:07:
         63:e8:d7:6e:fd:3e:d6:59:cd:2d:4d:c3:d1:56:6d:4f:4a:62:
         60:b2:44:60:3a:b8:f1:78:92:91:03:f0:ba:aa:f4:2b:20:ad:
         d3:18:a6:34:e0:6b:c7:b9:5b:be:b1:66:da:02:3e:7e:38:13:
         25:ab:7d:b7:59:61:9e:3f:ec:63:ce:3c:2a:57:28:1b:d2:73:
         de:f6:5a:e7:4a:76:a8:f6:0b:9b:4c:3a:07:c5:77:71:df:01:
         5d:4e:30:14:81:ca:10:af:29:49:cf:f5:11:45:f2:20:5d:6e:
         d0:ef:dc:eb:f0:7d:3c:80:f7:84:f0:3f:92:d0:70:eb:7d:0a:
         32:b1:49:8d:f7:f9:63:b0:0c:14:92:bc:2a:ac:b6:ac:61:d1:
         89:b3:f7:7e:25:30:d3:65:bf:b2:2b:5b:bc:2a:7c:26:7b:c8:
         0f:36:8e:69:a9:1d:a6:56:88:32:05:73:a4:74:d8:11:fd:77:
         e3:37:e2:5e:2e:5a:ab:dd:ac:33:1f:aa:e9:2f:7d:29:b3:9b:
         8a:ab:ef:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:39:21 2026 by rpki-client