Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BqQweyCz1SZz59J982Ym2ptUzdjN4rducYWwLtaTAge3/0/3230302e342e3131322e302f32342d3234203d3e20323731333332.roa
File:                     3230302e342e3131322e302f32342d3234203d3e20323731333332.roa (raw, json)
Hash identifier:          SclR7jTY5+hknjjOMHHp/801rwcJ7Y9KwjLE0V1noIk=
Subject key identifier:   E5:94:3B:6F:0A:E3:0D:B7:54:3E:3C:8C:E5:9D:D7:27:DE:47:32:0F
Certificate issuer:       /CN=C5B411ABE7B141FAA0BC5CF1DBF199B86DE2B269
Certificate serial:       11D35E9D68FB9D2E53AECD3501D433B22A5921EB
Authority key identifier: C5:B4:11:AB:E7:B1:41:FA:A0:BC:5C:F1:DB:F1:99:B8:6D:E2:B2:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5B411ABE7B141FAA0BC5CF1DBF199B86DE2B269.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BqQweyCz1SZz59J982Ym2ptUzdjN4rducYWwLtaTAge3/0/3230302e342e3131322e302f32342d3234203d3e20323731333332.roa
Signing time:             Fri 13 Mar 2026 12:51:52 +0000
ROA not before:           Fri 13 Mar 2026 12:46:52 +0000
ROA not after:            Fri 12 Mar 2027 12:51:52 +0000
asID:                     271332
IP address blocks:        200.4.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BqQweyCz1SZz59J982Ym2ptUzdjN4rducYWwLtaTAge3/0/C5B411ABE7B141FAA0BC5CF1DBF199B86DE2B269.crl
                          rsync://rpki-repo.registro.br/repo/BqQweyCz1SZz59J982Ym2ptUzdjN4rducYWwLtaTAge3/0/C5B411ABE7B141FAA0BC5CF1DBF199B86DE2B269.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5B411ABE7B141FAA0BC5CF1DBF199B86DE2B269.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 07:57:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:d3:5e:9d:68:fb:9d:2e:53:ae:cd:35:01:d4:33:b2:2a:59:21:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5B411ABE7B141FAA0BC5CF1DBF199B86DE2B269
        Validity
            Not Before: Mar 13 12:46:52 2026 GMT
            Not After : Mar 12 12:51:52 2027 GMT
        Subject: CN=E5943B6F0AE30DB7543E3C8CE59DD727DE47320F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:88:b8:46:c4:21:9b:17:e5:3f:de:73:d4:c2:
                    79:41:a4:4b:74:5b:51:20:ef:e5:57:5e:6f:07:9e:
                    c5:6a:8e:df:79:3d:18:15:1d:43:a2:33:23:6e:eb:
                    0c:bf:68:c4:0b:52:b8:24:f6:cc:c6:7e:29:8f:fc:
                    11:37:1f:d4:f9:8c:a8:26:dd:1a:1b:e7:c4:bf:97:
                    11:20:a2:50:39:08:fb:d4:9e:c5:61:11:e2:f5:86:
                    3d:cf:93:e7:35:1c:65:87:3b:11:52:7e:d9:0d:2c:
                    24:f2:49:df:08:3d:59:c6:9e:9f:f7:d8:37:1a:95:
                    0e:dd:ce:d2:2f:c2:2d:61:1c:ce:32:ea:3c:89:2d:
                    fe:87:fe:0b:e1:b7:17:fe:72:de:05:f0:e2:e9:5b:
                    23:36:76:b5:20:04:3c:fb:6f:33:62:b6:b9:a0:c5:
                    01:ce:09:79:19:24:3e:87:e5:78:fc:50:b7:28:fe:
                    19:f4:e4:3f:d2:02:30:72:42:b1:bd:49:3b:71:b0:
                    b5:86:e1:7d:f7:27:b6:51:35:b4:db:48:93:15:d6:
                    f0:b9:49:0e:b0:da:63:19:33:e2:37:a8:d6:0a:29:
                    04:8c:7c:2c:44:00:98:e6:11:53:7c:01:5a:7c:0e:
                    3a:ab:c4:76:71:55:42:44:4c:ca:3d:7f:16:7a:22:
                    0f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:94:3B:6F:0A:E3:0D:B7:54:3E:3C:8C:E5:9D:D7:27:DE:47:32:0F
            X509v3 Authority Key Identifier:
                keyid:C5:B4:11:AB:E7:B1:41:FA:A0:BC:5C:F1:DB:F1:99:B8:6D:E2:B2:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BqQweyCz1SZz59J982Ym2ptUzdjN4rducYWwLtaTAge3/0/C5B411ABE7B141FAA0BC5CF1DBF199B86DE2B269.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5B411ABE7B141FAA0BC5CF1DBF199B86DE2B269.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BqQweyCz1SZz59J982Ym2ptUzdjN4rducYWwLtaTAge3/0/3230302e342e3131322e302f32342d3234203d3e20323731333332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.4.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:83:70:b5:1c:aa:6c:42:83:f7:d3:71:51:c4:9f:84:87:c7:
         54:0e:ea:7b:39:65:90:b7:a9:57:06:13:3d:08:52:1c:0d:fc:
         d6:f1:dd:69:e2:3f:a6:de:75:36:09:ef:29:d8:65:c1:ab:50:
         83:47:d6:e2:11:56:cd:df:92:96:21:c0:b2:58:e9:0b:da:61:
         eb:df:7d:69:83:8f:0b:ac:37:e1:ae:19:60:dc:1f:c8:b9:d0:
         f8:68:d9:3f:22:06:d9:0a:78:02:b0:9b:3d:8a:6c:93:88:b9:
         ad:64:90:e1:a9:be:7f:79:d6:58:ba:53:c9:46:ae:f5:2c:3d:
         08:4e:22:ff:f5:d7:20:ca:7a:2e:4d:17:87:f4:c5:2b:55:fb:
         e9:38:f6:0b:61:ae:b0:23:95:18:9e:5a:4e:e3:34:54:80:3c:
         62:b9:1b:3c:66:94:f1:9f:1c:97:c6:9a:26:9c:7d:03:45:20:
         c3:8e:de:65:c8:ca:41:c0:52:a1:6f:77:2e:2d:01:c3:fe:99:
         a0:98:1f:71:cb:ad:21:b0:a5:76:8b:f4:98:53:8e:21:9f:dc:
         18:8a:ff:67:c8:74:d5:ce:a5:09:de:22:b3:a6:2a:90:b4:b9:
         76:04:6c:7f:ac:fd:93:31:f6:46:41:c6:52:2f:9b:2e:ae:c1:
         f8:9b:00:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:49:12 2026 by rpki-client