Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3230302e3233362e3232342e302f31392d3332203d3e203238363439.roa
File:                     3230302e3233362e3232342e302f31392d3332203d3e203238363439.roa (raw, json)
Hash identifier:          mZEJWW+uxC/upOGRtjxGA1QVszz+NrQgI1wjawy+O9I=
Subject key identifier:   95:C1:55:E2:CA:F2:20:02:D2:00:21:93:20:BE:10:A1:B2:DA:0F:C5
Certificate issuer:       /CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
Certificate serial:       692E66BB243EB7B64BA0434F88C6DE8F06089123
Authority key identifier: 01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3230302e3233362e3232342e302f31392d3332203d3e203238363439.roa
Signing time:             Fri 17 Jul 2026 21:01:10 +0000
ROA not before:           Fri 17 Jul 2026 20:56:10 +0000
ROA not after:            Fri 16 Jul 2027 21:01:10 +0000
asID:                     28649
IP address blocks:        200.236.224.0/19 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl
                          rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 22:36:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:2e:66:bb:24:3e:b7:b6:4b:a0:43:4f:88:c6:de:8f:06:08:91:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
        Validity
            Not Before: Jul 17 20:56:10 2026 GMT
            Not After : Jul 16 21:01:10 2027 GMT
        Subject: CN=95C155E2CAF22002D200219320BE10A1B2DA0FC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c6:ce:ce:76:7b:2a:2f:f9:76:e5:96:5e:09:
                    33:24:ba:8f:98:58:12:99:94:ed:62:c6:b4:4e:7b:
                    87:11:01:4d:40:df:35:ce:84:e6:14:1a:de:a2:35:
                    eb:25:4c:c0:0e:df:27:3c:6c:59:a3:7e:0a:bd:4b:
                    4a:0b:73:b6:4f:03:67:57:2c:c5:6c:6e:6b:30:b5:
                    f9:04:32:aa:6d:01:f4:eb:79:e1:6a:e9:e3:04:dd:
                    45:44:0f:f2:4d:51:e6:31:5b:50:0f:4b:34:27:a0:
                    6b:e7:9a:9b:7c:db:83:ac:ff:14:7a:28:d2:63:96:
                    92:8d:79:2f:d2:0a:1f:22:b4:e6:48:98:c1:40:4d:
                    78:71:b6:4a:ce:b1:4b:90:de:27:80:39:67:f5:4b:
                    71:66:87:32:db:47:13:eb:3c:db:01:15:eb:2f:47:
                    0c:9b:0a:16:66:c5:2b:fc:32:7f:81:22:de:e0:d0:
                    db:ad:bb:7e:c6:a6:d4:58:cd:09:8c:d5:02:61:3f:
                    5c:e0:13:ac:69:b9:f9:5c:89:b9:fb:d6:0d:8e:b6:
                    68:b7:a3:f9:89:ec:bc:c0:e9:f7:0f:aa:d2:38:06:
                    d9:93:38:c4:11:45:d1:87:87:8d:71:c8:0e:bb:aa:
                    e4:0e:9d:84:9d:db:fc:b5:d3:aa:90:45:ce:72:13:
                    3f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:C1:55:E2:CA:F2:20:02:D2:00:21:93:20:BE:10:A1:B2:DA:0F:C5
            X509v3 Authority Key Identifier:
                keyid:01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3230302e3233362e3232342e302f31392d3332203d3e203238363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.236.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6a:5d:73:f0:cb:5b:ad:a7:c4:05:d0:e8:a8:b5:3a:c1:40:85:
         65:9e:b8:ef:7f:60:55:ef:a1:4c:b5:75:7d:35:a4:60:4c:8f:
         88:8e:36:ce:a3:71:ce:86:19:3e:54:6b:6d:c2:77:c4:55:9f:
         76:a7:20:7c:93:d4:f0:75:63:63:54:e6:ed:02:a1:3d:fe:18:
         65:68:97:af:19:6d:e4:76:1e:1a:5d:ac:69:af:0f:4d:97:66:
         eb:73:44:32:70:36:8c:82:80:21:de:34:d9:6d:83:4b:c7:b8:
         aa:06:44:af:14:8b:f9:0c:17:18:5b:92:45:ee:f8:e4:fc:9f:
         6a:99:07:7e:0b:9c:e5:bd:63:7d:41:bb:ea:34:3d:c5:fb:9c:
         a7:c4:30:e8:77:8c:d9:ee:fb:7d:03:f1:0e:18:a1:4d:84:a4:
         48:40:c7:66:e0:7a:9b:53:60:30:27:9b:5e:91:1c:32:41:22:
         c6:a0:b5:87:be:cc:d5:a3:a9:bb:d4:e7:66:88:24:6c:45:1a:
         e3:8b:83:c7:5c:11:be:26:c1:73:45:32:f3:a5:10:3c:f2:f9:
         d0:d1:a9:38:20:12:76:c0:f4:25:0f:52:b7:90:10:c6:33:77:
         47:10:1c:6b:9f:db:69:38:7d:2b:b6:b8:a7:09:eb:3e:a1:8a:
         a8:c0:20:ed
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUaS5muyQ+t7ZLoENPiMbejwYIkSMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDFBNTc0MTM4RDBEOEZDMEEzNzZBQTIzREI0RTE1MzNG
RjBDNTY1MjAeFw0yNjA3MTcyMDU2MTBaFw0yNzA3MTYyMTAxMTBaMDMxMTAvBgNV
BAMTKDk1QzE1NUUyQ0FGMjIwMDJEMjAwMjE5MzIwQkUxMEExQjJEQTBGQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhxs7OdnsqL/l25ZZeCTMkuo+Y
WBKZlO1ixrROe4cRAU1A3zXOhOYUGt6iNeslTMAO3yc8bFmjfgq9S0oLc7ZPA2dX
LMVsbmswtfkEMqptAfTreeFq6eME3UVED/JNUeYxW1APSzQnoGvnmpt824Os/xR6
KNJjlpKNeS/SCh8itOZImMFATXhxtkrOsUuQ3ieAOWf1S3FmhzLbRxPrPNsBFesv
RwybChZmxSv8Mn+BIt7g0Nutu37GptRYzQmM1QJhP1zgE6xpuflcibn71g2Otmi3
o/mJ7LzA6fcPqtI4BtmTOMQRRdGHh41xyA67quQOnYSd2/y106qQRc5yEz/rAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUlcFV4sryIALSACGTIL4QobLaD8UwHwYDVR0j
BBgwFoAUAaV0E40Nj8Cjdqoj204VM/8MVlIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXQxSlpzODhqa3BqaEgyZVhiZDhjZWFvMnRrNFJ5MmlUaEJYc1VmVm8z
ZEsvMC8wMUE1NzQxMzhEMEQ4RkMwQTM3NkFBMjNEQjRFMTUzM0ZGMEM1NjUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAxQTU3NDEzOEQwRDhGQzBB
Mzc2QUEyM0RCNEUxNTMzRkYwQzU2NTIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F0MUpaczg4amtwamhIMmVYYmQ4Y2VhbzJ0azRSeTJpVGhCWHNVZlZvM2RLLzAv
MzIzMDMwMmUzMjMzMzYyZTMyMzIzNDJlMzAyZjMxMzkyZDMzMzIyMDNkM2UyMDMy
MzgzNjM0Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAXI7OAwDQYJKoZIhvcNAQELBQADggEBAGpdc/DL
W62nxAXQ6Ki1OsFAhWWeuO9/YFXvoUy1dX01pGBMj4iONs6jcc6GGT5Ua23Cd8RV
n3anIHyT1PB1Y2NU5u0CoT3+GGVol68ZbeR2HhpdrGmvD02XZutzRDJwNoyCgCHe
NNltg0vHuKoGRK8Ui/kMFxhbkkXu+OT8n2qZB34LnOW9Y31Bu+o0PcX7nKfEMOh3
jNnu+30D8Q4YoU2EpEhAx2bgeptTYDAnm16RHDJBIsagtYe+zNWjqbvU52aIJGxF
GuOLg8dcEb4mwXNFMvOlEDzy+dDRqTggEnbA9CUPUreQEMYzd0cQHGuf22k4fSu2
uKcJ6z6hiqjAIO0=
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:36:14 2026 by rpki-client