Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BPRnbCSNvcAZoGGQYyfogJqnYcvbHvfa6o8QgnTo87wQ/0/3230302e33392e34342e302f32322d3232203d3e20323731343235.roa
File:                     3230302e33392e34342e302f32322d3232203d3e20323731343235.roa (raw, json)
Hash identifier:          HedStYI9+gK9coKitVPxdYPadxaItsmC9dgv+guWdFw=
Subject key identifier:   A7:23:B5:88:18:3E:8E:20:A2:18:AC:25:4A:1E:3E:07:32:65:5F:F8
Certificate issuer:       /CN=9759E603436C9DE43EFF24E87D223F678D05568E
Certificate serial:       6CA569435DFD6A16979A6ADF1468579D4598416B
Authority key identifier: 97:59:E6:03:43:6C:9D:E4:3E:FF:24:E8:7D:22:3F:67:8D:05:56:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9759E603436C9DE43EFF24E87D223F678D05568E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BPRnbCSNvcAZoGGQYyfogJqnYcvbHvfa6o8QgnTo87wQ/0/3230302e33392e34342e302f32322d3232203d3e20323731343235.roa
Signing time:             Mon 20 Jul 2026 17:34:16 +0000
ROA not before:           Mon 20 Jul 2026 17:29:16 +0000
ROA not after:            Mon 19 Jul 2027 17:34:16 +0000
asID:                     271425
IP address blocks:        200.39.44.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BPRnbCSNvcAZoGGQYyfogJqnYcvbHvfa6o8QgnTo87wQ/0/9759E603436C9DE43EFF24E87D223F678D05568E.crl
                          rsync://rpki-repo.registro.br/repo/BPRnbCSNvcAZoGGQYyfogJqnYcvbHvfa6o8QgnTo87wQ/0/9759E603436C9DE43EFF24E87D223F678D05568E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9759E603436C9DE43EFF24E87D223F678D05568E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 17:52:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:a5:69:43:5d:fd:6a:16:97:9a:6a:df:14:68:57:9d:45:98:41:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9759E603436C9DE43EFF24E87D223F678D05568E
        Validity
            Not Before: Jul 20 17:29:16 2026 GMT
            Not After : Jul 19 17:34:16 2027 GMT
        Subject: CN=A723B588183E8E20A218AC254A1E3E0732655FF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ab:fb:00:ec:08:e5:e5:d7:aa:c2:7c:59:33:
                    55:f9:89:fd:6e:b9:d8:7e:f0:ca:16:c7:7c:5e:e9:
                    c9:7c:04:c3:d2:86:1e:b4:ca:c0:55:a3:38:93:f0:
                    9a:51:ec:72:7e:d2:e5:3d:f5:c7:eb:05:8d:0c:10:
                    4c:84:8d:bd:72:90:54:0c:93:41:0e:e6:9f:5c:7b:
                    75:8b:fb:0f:4c:17:ba:41:c0:b1:5f:a8:3e:f9:1c:
                    cb:e7:f4:ca:d8:7b:22:de:c4:63:14:83:80:f6:21:
                    0c:87:13:b0:71:f2:08:e0:e5:2a:0d:c2:85:57:30:
                    cd:5b:47:04:8a:85:08:51:43:66:dd:b8:f5:22:da:
                    16:bc:f3:01:8c:c9:7a:9c:55:68:77:df:51:0c:6e:
                    fb:3c:6d:05:ae:83:30:2b:c5:21:eb:34:82:aa:31:
                    25:45:e1:c9:05:83:d7:0c:d6:bd:14:ef:95:3e:ef:
                    32:97:1f:e1:be:09:46:4e:27:1f:9e:d9:e0:cb:9a:
                    39:34:33:55:6f:17:d7:a0:6c:3e:71:4c:bf:51:32:
                    72:9c:e0:49:21:88:57:5e:7d:9d:02:28:ff:1d:08:
                    fa:5f:c5:86:2f:f8:e2:96:90:10:59:d7:07:f6:18:
                    26:95:9e:50:62:85:d1:a0:ce:04:9b:e4:b2:ec:ca:
                    70:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:23:B5:88:18:3E:8E:20:A2:18:AC:25:4A:1E:3E:07:32:65:5F:F8
            X509v3 Authority Key Identifier:
                keyid:97:59:E6:03:43:6C:9D:E4:3E:FF:24:E8:7D:22:3F:67:8D:05:56:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BPRnbCSNvcAZoGGQYyfogJqnYcvbHvfa6o8QgnTo87wQ/0/9759E603436C9DE43EFF24E87D223F678D05568E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9759E603436C9DE43EFF24E87D223F678D05568E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BPRnbCSNvcAZoGGQYyfogJqnYcvbHvfa6o8QgnTo87wQ/0/3230302e33392e34342e302f32322d3232203d3e20323731343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:54:62:00:af:12:30:bd:46:39:99:dc:6b:4d:5a:f3:8f:01:
         43:83:71:ae:57:fb:89:e4:9c:3b:3d:5c:51:89:44:87:dc:99:
         ed:b9:49:31:8c:11:86:64:66:42:cc:4a:69:3b:97:e7:bc:26:
         10:43:cc:c9:fe:f9:6e:cc:96:3a:c5:88:a8:54:59:48:1a:9b:
         8f:4a:35:c2:67:89:c8:4e:34:be:54:05:d2:3c:ec:d0:60:c7:
         78:23:14:db:ac:cc:fd:38:9d:ed:7f:ad:78:b3:f7:e7:1e:99:
         36:1a:3e:1c:3b:f9:98:53:0c:1e:fa:41:9b:4c:8f:15:4d:30:
         e2:a0:f7:3c:2c:98:6f:22:92:78:54:fe:35:90:14:d1:13:2a:
         34:48:8d:a7:98:21:b4:39:46:22:f2:85:ec:c5:e4:88:78:66:
         ff:be:eb:5e:67:86:c9:ed:a8:e6:38:aa:e4:52:61:34:4c:d5:
         33:43:3f:57:5d:89:cf:63:c8:9e:9c:ee:c0:33:29:c0:27:f6:
         3b:95:66:9e:52:0c:3d:39:aa:55:a6:71:0b:77:eb:7b:63:f5:
         8d:d7:ea:d9:2b:3f:e6:2d:c1:e5:e2:80:bf:4d:30:13:85:b1:
         c2:cd:c5:71:c7:de:a4:69:5a:ab:06:be:68:be:5b:12:e3:cd:
         4a:41:e8:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:05:43 2026 by rpki-client