Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/3230302e37352e3137362e302f32312d3332203d3e203631393339.roa
File:                     3230302e37352e3137362e302f32312d3332203d3e203631393339.roa (raw, json)
Hash identifier:          zO4x1TXCAHr1YUywwb/WdCGyvwPecOUmoq9Q9dERssA=
Subject key identifier:   63:0C:F9:3A:A2:EA:5D:D6:F8:82:EF:4D:C2:D3:C7:70:EA:A4:E2:5C
Certificate issuer:       /CN=8620EF4AC59B5A865792F0E67652FA1A7C5AA43A
Certificate serial:       48BE2EFC66C14617AFFCA5F10590762950D11C82
Authority key identifier: 86:20:EF:4A:C5:9B:5A:86:57:92:F0:E6:76:52:FA:1A:7C:5A:A4:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8620EF4AC59B5A865792F0E67652FA1A7C5AA43A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/3230302e37352e3137362e302f32312d3332203d3e203631393339.roa
Signing time:             Fri 20 Mar 2026 20:30:32 +0000
ROA not before:           Fri 20 Mar 2026 20:25:32 +0000
ROA not after:            Fri 19 Mar 2027 20:30:32 +0000
asID:                     61939
IP address blocks:        200.75.176.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/8620EF4AC59B5A865792F0E67652FA1A7C5AA43A.crl
                          rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/8620EF4AC59B5A865792F0E67652FA1A7C5AA43A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8620EF4AC59B5A865792F0E67652FA1A7C5AA43A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 09:31:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:be:2e:fc:66:c1:46:17:af:fc:a5:f1:05:90:76:29:50:d1:1c:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8620EF4AC59B5A865792F0E67652FA1A7C5AA43A
        Validity
            Not Before: Mar 20 20:25:32 2026 GMT
            Not After : Mar 19 20:30:32 2027 GMT
        Subject: CN=630CF93AA2EA5DD6F882EF4DC2D3C770EAA4E25C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:cb:bc:8e:7f:b9:f2:73:77:b9:b9:de:5b:c8:
                    2a:8b:e6:97:fa:cd:d8:19:09:5f:8f:45:17:cb:59:
                    0d:02:46:e5:ed:81:8e:52:63:ac:b8:38:06:df:2e:
                    75:58:f1:6a:3a:24:35:27:08:b2:42:15:23:6d:ff:
                    46:34:b7:34:0b:b7:f6:62:02:90:8c:59:c3:70:e4:
                    23:09:aa:99:0f:1f:08:be:2b:12:e7:82:c5:1b:70:
                    02:ba:cc:fa:35:1b:e2:8e:41:b1:ed:ed:4d:38:ed:
                    81:31:c8:a3:46:dc:5e:31:79:5d:e9:b2:bf:d6:48:
                    51:85:04:92:8b:c3:04:af:dd:5f:38:96:23:52:aa:
                    7c:32:ed:2b:b3:ed:18:56:94:f8:30:b3:54:0d:51:
                    4f:7a:4b:94:cf:87:85:e8:25:9b:ad:ca:79:6b:95:
                    c0:32:37:ce:65:6c:45:0d:2f:ba:39:46:dd:49:76:
                    ad:8a:f1:98:67:dc:85:ef:e9:56:87:43:82:d5:37:
                    55:ad:1e:28:7f:c8:2f:08:20:e2:86:3a:dd:1b:7c:
                    8f:03:db:3c:85:6c:4d:a5:32:b6:b3:64:cd:34:f1:
                    ab:39:4c:35:0e:a9:af:e5:3f:0c:59:dc:a7:00:ee:
                    c8:3d:28:fe:15:0b:2d:7f:25:af:fb:3a:25:8a:50:
                    1a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:0C:F9:3A:A2:EA:5D:D6:F8:82:EF:4D:C2:D3:C7:70:EA:A4:E2:5C
            X509v3 Authority Key Identifier:
                keyid:86:20:EF:4A:C5:9B:5A:86:57:92:F0:E6:76:52:FA:1A:7C:5A:A4:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/8620EF4AC59B5A865792F0E67652FA1A7C5AA43A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8620EF4AC59B5A865792F0E67652FA1A7C5AA43A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/3230302e37352e3137362e302f32312d3332203d3e203631393339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.75.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         db:6e:a2:31:14:a6:ac:d0:52:0d:a5:49:d5:4c:fd:7e:c9:63:
         22:fa:df:3e:99:3d:54:2a:5a:aa:27:94:f1:63:ca:96:4e:ae:
         e8:6a:fc:ae:50:37:26:e7:82:da:5b:fc:01:28:94:09:07:b1:
         3e:ea:36:2c:46:db:53:ce:f3:62:31:6d:4e:14:f2:3c:44:43:
         ab:84:6d:71:24:07:59:d4:45:e4:bf:09:52:e5:27:87:bf:95:
         5f:b4:7c:15:59:49:c8:56:b0:45:8e:5d:9e:b6:95:93:f7:c6:
         b9:6f:43:5a:b0:97:0c:69:0c:58:ca:20:b3:5d:20:69:a0:ed:
         a6:6b:49:57:77:20:8a:a7:fa:cc:12:8f:af:38:b1:bc:93:c7:
         37:4c:97:e6:d7:1c:b3:9f:5d:85:1d:1a:72:d5:09:38:9d:35:
         32:41:01:80:e4:e8:06:30:5b:cb:a3:45:04:3c:f3:88:79:a6:
         7c:21:1d:88:92:74:2b:f6:b4:6b:89:02:c4:ab:7f:34:5b:26:
         85:6d:86:56:31:b1:8e:27:c9:3a:67:95:e6:1b:d1:01:f8:25:
         3f:1a:46:f6:b3:1e:51:82:af:0d:ca:66:95:1c:c2:63:16:d3:
         d3:b7:ca:b8:60:5c:f0:3d:6e:1e:ab:5b:07:c6:6c:94:41:97:
         5a:08:90:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:17:26 2026 by rpki-client