Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ei4jmNZrcWfTjuLjBXGQUV6bC5GdUwqdq5j7rZs1cyKz/0/3230302e38312e34382e302f32322d3332203d3e20323730343633.roa
File:                     3230302e38312e34382e302f32322d3332203d3e20323730343633.roa (raw, json)
Hash identifier:          DgvUiQdRFM+Gqj/Hd+tt21jHdkQrDqTdk4egC1Kx1AQ=
Subject key identifier:   F5:17:D6:F4:B0:46:0C:09:43:3C:96:A5:72:A9:3F:55:08:2A:51:74
Certificate issuer:       /CN=F34540F415C65F1B5B88778AA4D5682AF7418D6B
Certificate serial:       13777D7CA1E6CA5A615A140F66713B3366341378
Authority key identifier: F3:45:40:F4:15:C6:5F:1B:5B:88:77:8A:A4:D5:68:2A:F7:41:8D:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F34540F415C65F1B5B88778AA4D5682AF7418D6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ei4jmNZrcWfTjuLjBXGQUV6bC5GdUwqdq5j7rZs1cyKz/0/3230302e38312e34382e302f32322d3332203d3e20323730343633.roa
Signing time:             Mon 23 Mar 2026 17:51:15 +0000
ROA not before:           Mon 23 Mar 2026 17:46:15 +0000
ROA not after:            Mon 22 Mar 2027 17:51:15 +0000
asID:                     270463
IP address blocks:        200.81.48.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ei4jmNZrcWfTjuLjBXGQUV6bC5GdUwqdq5j7rZs1cyKz/0/F34540F415C65F1B5B88778AA4D5682AF7418D6B.crl
                          rsync://rpki-repo.registro.br/repo/Ei4jmNZrcWfTjuLjBXGQUV6bC5GdUwqdq5j7rZs1cyKz/0/F34540F415C65F1B5B88778AA4D5682AF7418D6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F34540F415C65F1B5B88778AA4D5682AF7418D6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 04:53:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:77:7d:7c:a1:e6:ca:5a:61:5a:14:0f:66:71:3b:33:66:34:13:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F34540F415C65F1B5B88778AA4D5682AF7418D6B
        Validity
            Not Before: Mar 23 17:46:15 2026 GMT
            Not After : Mar 22 17:51:15 2027 GMT
        Subject: CN=F517D6F4B0460C09433C96A572A93F55082A5174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2e:d8:52:fb:2f:6d:c1:15:f9:63:6c:f4:fd:
                    51:c9:cb:14:3b:e4:87:8b:dd:a4:27:d1:8b:67:06:
                    93:d1:45:8a:e9:08:c1:ad:d6:12:b2:6b:eb:65:05:
                    00:6b:12:4c:5f:fb:24:7a:21:63:ee:58:d4:8b:b5:
                    5d:43:c7:4f:78:27:4c:1c:67:7a:67:f8:4f:11:c7:
                    40:0d:67:ba:be:85:12:b2:ed:c2:e1:8a:80:e9:78:
                    93:8e:cc:90:30:9a:3b:b1:71:85:f7:74:ac:b0:d5:
                    f3:d4:0c:ea:8b:aa:19:52:36:0d:59:3b:91:d3:b0:
                    15:b5:27:20:28:cb:a2:1e:1c:e5:cb:32:c3:ca:f0:
                    cc:43:39:1f:7a:06:e6:c5:0d:b3:d8:7a:ad:c9:b2:
                    c6:72:56:5a:60:b0:1d:78:a8:6f:f5:11:0d:56:dc:
                    b0:99:9e:24:70:07:98:21:be:08:f0:f0:5f:5e:0d:
                    e0:cc:c5:e8:b0:8b:d3:dd:79:f9:fb:20:18:65:9e:
                    88:e8:93:55:89:68:54:c7:a9:2e:54:02:3a:ca:41:
                    eb:7a:a4:47:9f:fd:d7:4d:40:55:41:64:00:b1:28:
                    4f:bf:1f:4d:a5:10:af:82:eb:27:c2:64:a6:73:f1:
                    37:45:e3:fd:26:4a:b5:14:75:d0:97:95:c2:b5:31:
                    bb:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:17:D6:F4:B0:46:0C:09:43:3C:96:A5:72:A9:3F:55:08:2A:51:74
            X509v3 Authority Key Identifier:
                keyid:F3:45:40:F4:15:C6:5F:1B:5B:88:77:8A:A4:D5:68:2A:F7:41:8D:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ei4jmNZrcWfTjuLjBXGQUV6bC5GdUwqdq5j7rZs1cyKz/0/F34540F415C65F1B5B88778AA4D5682AF7418D6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F34540F415C65F1B5B88778AA4D5682AF7418D6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ei4jmNZrcWfTjuLjBXGQUV6bC5GdUwqdq5j7rZs1cyKz/0/3230302e38312e34382e302f32322d3332203d3e20323730343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.81.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:5c:df:80:c2:b5:29:50:99:16:20:5d:9a:36:9d:ab:c8:e7:
         b6:2b:03:e7:0d:7f:93:47:cd:bd:53:c1:6f:1a:20:42:d4:3d:
         f6:72:ed:af:09:04:02:c4:9e:23:c0:ff:2a:22:65:cc:33:ec:
         05:5f:aa:32:3d:dd:71:75:14:df:b7:af:7d:1e:a2:fd:c6:86:
         ab:1c:72:33:13:8f:49:df:9c:17:25:f2:ed:81:14:85:2b:78:
         ab:a1:2d:47:4a:f3:b4:9b:22:df:34:ba:2b:e0:05:e4:ec:d2:
         51:27:ec:27:b1:5e:b5:76:6a:20:65:3e:f5:b9:2d:02:ce:35:
         6a:c9:d2:5f:c5:4c:da:93:b6:68:4c:b6:c8:b4:3c:15:59:51:
         22:13:b6:7f:3f:7a:71:5a:24:86:6d:8b:49:62:59:d7:e7:63:
         d2:7d:c9:1a:97:d8:07:1e:da:7a:06:f1:a2:d5:88:40:be:3e:
         e9:3b:77:bc:64:e7:8f:8f:90:91:3b:9c:c7:87:fa:d7:7c:9f:
         9b:50:2e:fb:ec:da:e3:68:8a:7b:dc:40:e3:96:d9:7b:c2:87:
         51:8f:89:9a:45:4e:eb:06:3d:ad:22:af:e8:b2:03:e3:df:a6:
         c3:71:9f:99:8a:c7:5f:df:96:35:79:ed:a6:c8:8f:dc:95:8d:
         2b:ca:bc:73
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUE3d9fKHmylphWhQPZnE7M2Y0E3gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjM0NTQwRjQxNUM2NUYxQjVCODg3NzhBQTRENTY4MkFG
NzQxOEQ2QjAeFw0yNjAzMjMxNzQ2MTVaFw0yNzAzMjIxNzUxMTVaMDMxMTAvBgNV
BAMTKEY1MTdENkY0QjA0NjBDMDk0MzNDOTZBNTcyQTkzRjU1MDgyQTUxNzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzLthS+y9twRX5Y2z0/VHJyxQ7
5IeL3aQn0YtnBpPRRYrpCMGt1hKya+tlBQBrEkxf+yR6IWPuWNSLtV1Dx094J0wc
Z3pn+E8Rx0ANZ7q+hRKy7cLhioDpeJOOzJAwmjuxcYX3dKyw1fPUDOqLqhlSNg1Z
O5HTsBW1JyAoy6IeHOXLMsPK8MxDOR96BubFDbPYeq3JssZyVlpgsB14qG/1EQ1W
3LCZniRwB5ghvgjw8F9eDeDMxeiwi9Pdefn7IBhlnojok1WJaFTHqS5UAjrKQet6
pEef/ddNQFVBZACxKE+/H02lEK+C6yfCZKZz8TdF4/0mSrUUddCXlcK1MbtZAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU9RfW9LBGDAlDPJalcqk/VQgqUXQwHwYDVR0j
BBgwFoAU80VA9BXGXxtbiHeKpNVoKvdBjWswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWk0am1OWnJjV2ZUanVMakJYR1FVVjZiQzVHZFV3cWRxNWo3clpzMWN5
S3ovMC9GMzQ1NDBGNDE1QzY1RjFCNUI4ODc3OEFBNEQ1NjgyQUY3NDE4RDZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YzNDU0MEY0MTVDNjVGMUI1
Qjg4Nzc4QUE0RDU2ODJBRjc0MThENkIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VpNGptTlpyY1dmVGp1TGpCWEdRVVY2YkM1R2RVd3FkcTVqN3JaczFjeUt6LzAv
MzIzMDMwMmUzODMxMmUzNDM4MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNzMw
MzQzNjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCyFEwMA0GCSqGSIb3DQEBCwUAA4IBAQA5XN+AwrUp
UJkWIF2aNp2ryOe2KwPnDX+TR829U8FvGiBC1D32cu2vCQQCxJ4jwP8qImXMM+wF
X6oyPd1xdRTft699HqL9xoarHHIzE49J35wXJfLtgRSFK3iroS1HSvO0myLfNLor
4AXk7NJRJ+wnsV61dmogZT71uS0CzjVqydJfxUzak7ZoTLbItDwVWVEiE7Z/P3px
WiSGbYtJYlnX52PSfckal9gHHtp6BvGi1YhAvj7pO3e8ZOePj5CRO5zHh/rXfJ+b
UC777NrjaIp73EDjltl7wodRj4maRU7rBj2tIq/osgPj36bDcZ+Zisdf35Y1ee2m
yI/clY0ryrxz
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:29:07 2026 by rpki-client