Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BPRnbCSNvcAZoGGQYyfogJqnYcvbHvfa6o8QgnTo87wQ/0/3230302e33392e34362e302f32332d3233203d3e20323731343235.roa
File:                     3230302e33392e34362e302f32332d3233203d3e20323731343235.roa (raw, json)
Hash identifier:          ganp6W3ewWUyZog2yQWQg/A3QPUqzzGz7vFODRQgSZE=
Subject key identifier:   59:51:3B:EF:A7:B1:4B:20:E6:0C:42:6B:1A:24:69:87:7D:BA:C2:AF
Certificate issuer:       /CN=9759E603436C9DE43EFF24E87D223F678D05568E
Certificate serial:       7A8729832B21F4A4C8949DE5603669AB3F092E4E
Authority key identifier: 97:59:E6:03:43:6C:9D:E4:3E:FF:24:E8:7D:22:3F:67:8D:05:56:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9759E603436C9DE43EFF24E87D223F678D05568E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BPRnbCSNvcAZoGGQYyfogJqnYcvbHvfa6o8QgnTo87wQ/0/3230302e33392e34362e302f32332d3233203d3e20323731343235.roa
Signing time:             Mon 20 Jul 2026 17:34:29 +0000
ROA not before:           Mon 20 Jul 2026 17:29:29 +0000
ROA not after:            Mon 19 Jul 2027 17:34:29 +0000
asID:                     271425
IP address blocks:        200.39.46.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BPRnbCSNvcAZoGGQYyfogJqnYcvbHvfa6o8QgnTo87wQ/0/9759E603436C9DE43EFF24E87D223F678D05568E.crl
                          rsync://rpki-repo.registro.br/repo/BPRnbCSNvcAZoGGQYyfogJqnYcvbHvfa6o8QgnTo87wQ/0/9759E603436C9DE43EFF24E87D223F678D05568E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9759E603436C9DE43EFF24E87D223F678D05568E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 17:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:87:29:83:2b:21:f4:a4:c8:94:9d:e5:60:36:69:ab:3f:09:2e:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9759E603436C9DE43EFF24E87D223F678D05568E
        Validity
            Not Before: Jul 20 17:29:29 2026 GMT
            Not After : Jul 19 17:34:29 2027 GMT
        Subject: CN=59513BEFA7B14B20E60C426B1A2469877DBAC2AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:f9:5d:f2:ec:c1:22:b6:55:6b:3f:cc:f5:03:
                    4d:8e:37:72:01:cd:80:e3:ed:d0:04:4f:bd:4e:3f:
                    71:0a:7c:3b:88:0f:93:81:9e:c7:32:a5:87:e2:0b:
                    66:93:4d:3b:23:c4:3c:b8:29:96:ef:c7:46:76:3e:
                    cc:3b:fb:18:9c:12:e7:ef:2b:c5:b9:aa:dc:0c:32:
                    e7:31:64:41:5c:2d:1c:20:4f:ce:43:f1:98:f2:ab:
                    ef:ad:b3:9c:11:59:37:d4:06:25:be:4d:fc:a7:9e:
                    13:ea:19:a6:10:df:d0:4b:52:f9:da:c2:d0:06:09:
                    5e:34:85:1c:be:1c:63:67:09:17:2b:34:25:01:7d:
                    46:4a:e5:63:64:5a:56:19:20:77:19:e2:8d:04:08:
                    aa:27:07:06:36:74:cc:5c:ed:f9:69:06:19:2f:0f:
                    83:21:e7:8e:45:0a:23:7b:f2:52:3d:83:b1:61:78:
                    78:9a:49:07:8e:3d:fb:98:94:0f:97:8b:89:0f:aa:
                    74:2f:57:82:c2:cc:d2:a4:95:5c:c4:fe:35:be:97:
                    61:27:8b:c5:fc:7c:f6:af:3d:41:23:e6:b7:78:0f:
                    63:b1:ab:51:7f:31:3d:b7:18:12:42:1c:ba:1a:95:
                    5a:e2:1f:18:9c:70:27:3e:a2:9e:83:a4:f8:16:87:
                    35:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:51:3B:EF:A7:B1:4B:20:E6:0C:42:6B:1A:24:69:87:7D:BA:C2:AF
            X509v3 Authority Key Identifier:
                keyid:97:59:E6:03:43:6C:9D:E4:3E:FF:24:E8:7D:22:3F:67:8D:05:56:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BPRnbCSNvcAZoGGQYyfogJqnYcvbHvfa6o8QgnTo87wQ/0/9759E603436C9DE43EFF24E87D223F678D05568E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9759E603436C9DE43EFF24E87D223F678D05568E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BPRnbCSNvcAZoGGQYyfogJqnYcvbHvfa6o8QgnTo87wQ/0/3230302e33392e34362e302f32332d3233203d3e20323731343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b1:5f:6c:10:21:db:00:36:7a:0b:91:40:27:2e:db:18:e5:5a:
         fa:3d:7b:7f:74:e1:af:b7:36:3f:91:f0:62:97:ba:3b:b8:c3:
         bc:f3:02:5f:7d:86:a3:c1:9f:a8:7b:66:39:ca:51:95:22:89:
         95:6c:a3:a6:2d:63:a8:e8:d6:e9:51:60:5f:fb:f6:0d:39:a3:
         6b:a9:10:eb:f5:c6:2a:91:78:81:4b:70:5e:a5:c1:70:89:a7:
         f5:c3:50:39:56:bb:6d:16:34:d3:80:4a:af:57:dc:79:3e:fb:
         81:b8:4d:88:16:da:ae:2d:e5:1e:58:ed:7b:aa:12:bf:cd:61:
         19:0d:ef:06:2a:e5:ed:8d:f1:eb:5c:6f:f5:45:6c:33:41:3d:
         9e:17:8e:1d:3e:47:6a:2b:66:7c:3e:39:d3:49:59:6b:c5:02:
         13:ae:19:16:53:8a:d0:bd:b7:82:9a:96:9a:01:66:77:a9:d2:
         6f:72:51:42:7f:10:d3:74:c8:b5:67:8a:47:08:81:4e:79:61:
         78:34:a9:5c:eb:fb:fe:bd:5e:06:23:c1:43:41:3f:68:3f:43:
         d9:12:33:02:fc:1d:ed:d2:0c:55:b7:f2:81:18:84:35:46:df:
         c4:c5:dd:63:41:f7:54:e2:a1:ad:fa:0a:66:4d:2b:42:20:ed:
         d7:15:fe:49
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUeocpgysh9KTIlJ3lYDZpqz8JLk4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTc1OUU2MDM0MzZDOURFNDNFRkYyNEU4N0QyMjNGNjc4
RDA1NTY4RTAeFw0yNjA3MjAxNzI5MjlaFw0yNzA3MTkxNzM0MjlaMDMxMTAvBgNV
BAMTKDU5NTEzQkVGQTdCMTRCMjBFNjBDNDI2QjFBMjQ2OTg3N0RCQUMyQUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDu+V3y7MEitlVrP8z1A02ON3IB
zYDj7dAET71OP3EKfDuID5OBnscypYfiC2aTTTsjxDy4KZbvx0Z2Psw7+xicEufv
K8W5qtwMMucxZEFcLRwgT85D8Zjyq++ts5wRWTfUBiW+TfynnhPqGaYQ39BLUvna
wtAGCV40hRy+HGNnCRcrNCUBfUZK5WNkWlYZIHcZ4o0ECKonBwY2dMxc7flpBhkv
D4Mh545FCiN78lI9g7FheHiaSQeOPfuYlA+Xi4kPqnQvV4LCzNKklVzE/jW+l2En
i8X8fPavPUEj5rd4D2Oxq1F/MT23GBJCHLoalVriHxiccCc+op6DpPgWhzXFAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUWVE776exSyDmDEJrGiRph326wq8wHwYDVR0j
BBgwFoAUl1nmA0NsneQ+/yTofSI/Z40FVo4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlBSbmJDU052Y0Fab0dHUVl5Zm9nSnFuWWN2Ykh2ZmE2bzhRZ25Ubzg3
d1EvMC85NzU5RTYwMzQzNkM5REU0M0VGRjI0RTg3RDIyM0Y2NzhEMDU1NjhFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk3NTlFNjAzNDM2QzlERTQz
RUZGMjRFODdEMjIzRjY3OEQwNTU2OEUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JQUm5iQ1NOdmNBWm9HR1FZeWZvZ0pxblljdmJIdmZhNm84UWduVG84N3dRLzAv
MzIzMDMwMmUzMzM5MmUzNDM2MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNzMx
MzQzMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQByCcuMA0GCSqGSIb3DQEBCwUAA4IBAQCxX2wQIdsA
NnoLkUAnLtsY5Vr6PXt/dOGvtzY/kfBil7o7uMO88wJffYajwZ+oe2Y5ylGVIomV
bKOmLWOo6NbpUWBf+/YNOaNrqRDr9cYqkXiBS3BepcFwiaf1w1A5VrttFjTTgEqv
V9x5PvuBuE2IFtquLeUeWO17qhK/zWEZDe8GKuXtjfHrXG/1RWwzQT2eF44dPkdq
K2Z8PjnTSVlrxQITrhkWU4rQvbeCmpaaAWZ3qdJvclFCfxDTdMi1Z4pHCIFOeWF4
NKlc6/v+vV4GI8FDQT9oP0PZEjMC/B3t0gxVt/KBGIQ1Rt/Exd1jQfdU4qGt+gpm
TStCIO3XFf5J
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:53 2026 by rpki-client