Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DECPgwacdQM2yDQfsYNUsGuGWAzBBXxCPfjdWNRQ7Qs3/0/3230302e3130382e3136382e302f32322d3332203d3e20323730323535.roa
File:                     3230302e3130382e3136382e302f32322d3332203d3e20323730323535.roa (raw, json)
Hash identifier:          vbEj3OHSV5OeP8Rg2vaubFeF+efS8GKyXM+0cwfTt2A=
Subject key identifier:   0B:BD:CD:01:57:7E:98:F6:99:22:A0:34:A9:89:85:7E:C3:F5:0D:0C
Certificate issuer:       /CN=FB2788BCFA95BF2224E49278CDA51747D625BC3F
Certificate serial:       4CBD0C38A2EC3B387FBCA9BDA63D2C0B7372F868
Authority key identifier: FB:27:88:BC:FA:95:BF:22:24:E4:92:78:CD:A5:17:47:D6:25:BC:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB2788BCFA95BF2224E49278CDA51747D625BC3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DECPgwacdQM2yDQfsYNUsGuGWAzBBXxCPfjdWNRQ7Qs3/0/3230302e3130382e3136382e302f32322d3332203d3e20323730323535.roa
Signing time:             Tue 14 Jul 2026 13:18:24 +0000
ROA not before:           Tue 14 Jul 2026 13:13:24 +0000
ROA not after:            Tue 13 Jul 2027 13:18:24 +0000
asID:                     270255
IP address blocks:        200.108.168.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DECPgwacdQM2yDQfsYNUsGuGWAzBBXxCPfjdWNRQ7Qs3/0/FB2788BCFA95BF2224E49278CDA51747D625BC3F.crl
                          rsync://rpki-repo.registro.br/repo/DECPgwacdQM2yDQfsYNUsGuGWAzBBXxCPfjdWNRQ7Qs3/0/FB2788BCFA95BF2224E49278CDA51747D625BC3F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB2788BCFA95BF2224E49278CDA51747D625BC3F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 09:46:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:bd:0c:38:a2:ec:3b:38:7f:bc:a9:bd:a6:3d:2c:0b:73:72:f8:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB2788BCFA95BF2224E49278CDA51747D625BC3F
        Validity
            Not Before: Jul 14 13:13:24 2026 GMT
            Not After : Jul 13 13:18:24 2027 GMT
        Subject: CN=0BBDCD01577E98F69922A034A989857EC3F50D0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:20:b5:d2:6a:1e:00:ef:66:e0:1e:1a:12:46:
                    63:c6:88:6d:e6:ba:50:6e:f0:c5:30:76:36:c4:e6:
                    63:65:2d:6b:27:6e:9b:7c:bd:c9:78:16:b8:08:d5:
                    c0:23:1b:13:60:e1:23:69:47:65:8e:54:3c:e9:b8:
                    32:0b:dd:47:a6:89:b3:e8:27:7e:f8:0e:20:82:88:
                    d2:98:2f:58:3c:0b:46:e0:05:7f:58:2a:5e:6e:4b:
                    ad:8e:74:ab:d2:bb:33:5b:dc:1b:41:7f:4c:dc:05:
                    2a:28:aa:25:dd:d5:d7:69:d5:22:7a:0e:b1:a8:cb:
                    f9:19:41:95:b3:98:79:a8:85:0b:ab:95:91:92:e4:
                    61:f4:87:2c:60:03:e6:d5:90:b8:56:1f:81:69:63:
                    44:36:fc:f5:3b:f0:01:26:7e:73:1c:c3:03:f1:0c:
                    f9:a5:ce:dc:98:d0:98:62:e7:21:9f:6d:c1:96:5f:
                    ad:2c:fb:74:08:27:8f:7c:e7:75:12:82:64:73:51:
                    93:a2:98:22:c0:6a:bb:45:cd:60:c1:99:1b:09:49:
                    0c:40:1a:71:d1:c2:ac:92:b4:e4:42:26:c7:3f:5a:
                    e5:08:bc:bb:7e:31:86:9f:30:7c:68:41:39:5c:12:
                    58:3a:8d:0d:f3:b1:9a:66:fa:65:23:59:b6:00:70:
                    d2:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:BD:CD:01:57:7E:98:F6:99:22:A0:34:A9:89:85:7E:C3:F5:0D:0C
            X509v3 Authority Key Identifier:
                keyid:FB:27:88:BC:FA:95:BF:22:24:E4:92:78:CD:A5:17:47:D6:25:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DECPgwacdQM2yDQfsYNUsGuGWAzBBXxCPfjdWNRQ7Qs3/0/FB2788BCFA95BF2224E49278CDA51747D625BC3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB2788BCFA95BF2224E49278CDA51747D625BC3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DECPgwacdQM2yDQfsYNUsGuGWAzBBXxCPfjdWNRQ7Qs3/0/3230302e3130382e3136382e302f32322d3332203d3e20323730323535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:ed:91:3d:35:7e:5f:69:31:a0:35:df:e8:00:29:e7:11:c4:
         2c:6c:65:ff:b8:fe:cd:64:60:d4:a0:2e:ba:ff:60:72:f0:1a:
         eb:05:e0:a6:d8:25:9f:cc:6a:eb:ef:cf:06:a6:e1:c8:04:8b:
         37:e8:26:ae:79:1d:1c:b2:e0:40:84:b3:64:8d:f4:f3:ce:e8:
         3f:f7:1e:b1:6c:3e:17:94:da:2f:2f:ef:ba:50:0b:4f:14:26:
         21:9f:3c:80:3c:37:91:04:2f:5d:5d:16:f4:5e:b0:95:3e:dc:
         38:f5:45:83:13:bf:4f:d9:e0:ac:57:56:4e:bf:62:60:b2:e3:
         46:a7:ab:f9:46:50:6d:73:78:5b:97:68:7b:44:b1:b7:d5:41:
         43:38:e4:d9:cd:45:8e:43:15:94:ed:69:f5:0b:24:e1:76:35:
         b3:f9:40:38:b8:09:b0:cd:3d:4e:da:14:b4:c3:cb:12:d7:16:
         f2:48:10:8e:b8:e4:4e:8f:98:30:f1:33:4e:39:42:c7:f3:51:
         ea:d5:86:28:86:cc:f1:5c:22:df:1d:23:31:d5:47:35:b7:e2:
         06:28:81:fb:6f:d5:51:4d:8f:f5:3d:cd:13:8f:ae:98:9a:7c:
         64:b2:2b:e5:10:d9:26:6e:18:63:26:fb:7b:8a:c0:b5:9a:55:
         b5:e2:5c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:32:53 2026 by rpki-client