Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/3230302e33362e3139362e302f32322d3332203d3e20323730353139.roa
File:                     3230302e33362e3139362e302f32322d3332203d3e20323730353139.roa (raw, json)
Hash identifier:          My+c2ZFaVg6htxdWQNdutohQqxixE90+QHzKTkYYobs=
Subject key identifier:   14:E4:BD:E1:A5:C6:0F:A7:7F:99:85:E0:0D:15:12:B4:6E:B1:46:1B
Certificate issuer:       /CN=1A5050EEA434138710D1F922949F1181F26D44A5
Certificate serial:       1E1ECC2C017ABFCF2D3CFEDDB3859FFE81A39501
Authority key identifier: 1A:50:50:EE:A4:34:13:87:10:D1:F9:22:94:9F:11:81:F2:6D:44:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A5050EEA434138710D1F922949F1181F26D44A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/3230302e33362e3139362e302f32322d3332203d3e20323730353139.roa
Signing time:             Thu 01 Oct 2026 14:04:30 +0000
ROA not before:           Thu 01 Oct 2026 13:59:30 +0000
ROA not after:            Thu 30 Sep 2027 14:04:30 +0000
asID:                     270519
IP address blocks:        200.36.196.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/1A5050EEA434138710D1F922949F1181F26D44A5.crl
                          rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/1A5050EEA434138710D1F922949F1181F26D44A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A5050EEA434138710D1F922949F1181F26D44A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 16:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:1e:cc:2c:01:7a:bf:cf:2d:3c:fe:dd:b3:85:9f:fe:81:a3:95:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A5050EEA434138710D1F922949F1181F26D44A5
        Validity
            Not Before: Oct  1 13:59:30 2026 GMT
            Not After : Sep 30 14:04:30 2027 GMT
        Subject: CN=14E4BDE1A5C60FA77F9985E00D1512B46EB1461B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ea:fe:8a:26:71:f5:bc:b9:cb:49:0e:c3:41:
                    08:d2:de:a3:f1:df:7e:c4:56:a2:75:93:92:34:9f:
                    6d:39:57:4f:34:0d:5b:8f:26:4f:02:1a:07:d8:9b:
                    c4:6a:58:42:7f:18:e2:76:01:92:6a:3f:0b:c4:e1:
                    72:38:ba:9d:b7:da:a8:58:36:13:f9:bb:06:af:a3:
                    99:c2:d2:18:57:0c:8f:e8:bb:20:30:4e:12:2b:52:
                    3f:a9:a5:b1:d2:10:8f:5e:4f:2d:28:07:23:1f:a4:
                    5c:5b:6a:91:05:dd:37:2e:ee:ba:83:41:a3:1b:0c:
                    ff:97:99:ed:00:67:8e:ff:50:eb:1d:f3:c6:8b:6c:
                    f6:b0:38:87:60:39:b4:57:ad:46:a0:37:f8:34:ab:
                    51:3a:47:4b:b1:7e:38:e8:dc:e6:88:04:c7:4f:45:
                    52:e2:9c:e2:27:28:95:5b:bb:6c:59:32:a7:8a:7c:
                    32:21:4a:ba:92:63:98:e8:95:e8:1f:6d:f3:ea:d0:
                    c1:3b:4a:f5:46:b9:af:7e:12:55:b2:05:a0:8b:69:
                    ed:64:e8:b6:ac:e9:ae:05:87:b0:e8:fb:8a:f0:f5:
                    10:20:8c:ed:76:18:cb:4e:2b:27:65:6d:9e:90:ad:
                    9f:2e:5c:9f:cc:4d:79:f7:a9:a7:ca:35:6c:c9:a9:
                    6b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:E4:BD:E1:A5:C6:0F:A7:7F:99:85:E0:0D:15:12:B4:6E:B1:46:1B
            X509v3 Authority Key Identifier:
                keyid:1A:50:50:EE:A4:34:13:87:10:D1:F9:22:94:9F:11:81:F2:6D:44:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/1A5050EEA434138710D1F922949F1181F26D44A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A5050EEA434138710D1F922949F1181F26D44A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/3230302e33362e3139362e302f32322d3332203d3e20323730353139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:81:23:5d:5d:8b:5b:8c:07:da:af:8c:49:69:35:f2:d8:4b:
         ec:a7:2f:f8:f1:0e:24:a4:f5:d3:07:b7:1c:87:3f:cf:38:6c:
         6e:ce:b8:a2:48:5e:bc:6c:aa:af:a0:15:a4:03:ec:37:cf:67:
         8b:00:0e:f3:2b:94:12:4c:a9:26:0a:8d:23:be:f1:73:70:52:
         c2:fd:82:1b:38:00:56:6a:9e:47:e7:74:d5:c5:1f:9b:54:9f:
         fc:11:6e:bc:dc:b2:11:8a:31:35:d0:c7:0f:46:7c:87:3c:bc:
         94:ee:ee:5b:9b:a2:d3:8e:9c:d0:68:c7:be:66:54:dd:88:66:
         0f:f8:4d:0b:4b:53:c0:b5:e1:f3:57:0d:20:74:aa:b1:c5:09:
         95:4f:bc:13:ad:f8:60:c9:34:31:86:db:6e:57:ce:a9:c7:31:
         1c:20:3f:74:d7:4f:c6:78:ff:70:4a:73:c0:d0:ad:db:5e:5f:
         47:57:9c:f9:3e:ae:d9:4d:15:b3:05:83:c4:7d:5c:9b:b3:52:
         e6:0b:3b:87:59:92:b0:d6:cf:51:9a:5a:6f:f6:86:59:23:11:
         44:83:b3:5a:43:ea:d2:f9:6d:b7:06:30:dd:23:bd:65:1e:07:
         f9:6f:b5:26:ed:f8:d7:5e:9b:73:16:a4:24:db:75:56:50:cd:
         f3:fa:0a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:11:26 2026 by rpki-client