Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4PSGd9CWKwZkPzwocXWMX6cH3zmVDJTD3dpXuVJkTM6/0/3230302e3130362e3138392e302f32342d3234203d3e2030.roa
File:                     3230302e3130362e3138392e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          XPx+TdOLBQ4eJEdk7ASjvt8KAow75BecU1zEWM6JEMo=
Subject key identifier:   11:4B:57:F0:8F:32:8B:93:59:CB:96:F2:D3:FA:EC:9D:64:66:E5:52
Certificate issuer:       /CN=7C00A61A802147A4FB025FCB9D4C063724EBC907
Certificate serial:       0837A96122D9265B1AAD2071095E29F4C41A4235
Authority key identifier: 7C:00:A6:1A:80:21:47:A4:FB:02:5F:CB:9D:4C:06:37:24:EB:C9:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C00A61A802147A4FB025FCB9D4C063724EBC907.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4PSGd9CWKwZkPzwocXWMX6cH3zmVDJTD3dpXuVJkTM6/0/3230302e3130362e3138392e302f32342d3234203d3e2030.roa
Signing time:             Tue 28 Apr 2026 14:11:45 +0000
ROA not before:           Tue 28 Apr 2026 14:06:45 +0000
ROA not after:            Tue 27 Apr 2027 14:11:45 +0000
asID:                     0
IP address blocks:        200.106.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F4PSGd9CWKwZkPzwocXWMX6cH3zmVDJTD3dpXuVJkTM6/0/7C00A61A802147A4FB025FCB9D4C063724EBC907.crl
                          rsync://rpki-repo.registro.br/repo/F4PSGd9CWKwZkPzwocXWMX6cH3zmVDJTD3dpXuVJkTM6/0/7C00A61A802147A4FB025FCB9D4C063724EBC907.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C00A61A802147A4FB025FCB9D4C063724EBC907.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 03:35:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:37:a9:61:22:d9:26:5b:1a:ad:20:71:09:5e:29:f4:c4:1a:42:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C00A61A802147A4FB025FCB9D4C063724EBC907
        Validity
            Not Before: Apr 28 14:06:45 2026 GMT
            Not After : Apr 27 14:11:45 2027 GMT
        Subject: CN=114B57F08F328B9359CB96F2D3FAEC9D6466E552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4d:f9:be:92:49:84:a7:bc:cf:38:f1:bb:6e:
                    e8:a0:35:3a:f0:7f:87:d2:dc:9d:c4:e1:3f:d7:14:
                    60:a8:d4:c2:2c:08:d8:60:97:9a:85:b2:fd:58:6d:
                    86:e5:82:9b:89:f3:cc:9d:b8:d8:60:a3:ba:f4:b6:
                    34:40:71:f1:85:87:52:74:60:81:91:53:ec:c1:d1:
                    ab:e8:6b:96:be:d6:6d:f4:2d:fa:54:4f:43:74:6d:
                    b3:d3:97:3b:4f:99:1a:58:65:47:ce:a5:55:eb:79:
                    a2:6c:e7:0f:30:9f:e4:24:82:81:03:32:17:ee:03:
                    df:f3:2f:2d:7c:4c:8b:e5:bc:af:18:56:4d:83:ed:
                    41:3f:b9:10:b2:e1:e6:92:30:db:a7:88:d8:96:74:
                    48:7c:69:0a:80:9d:99:ea:80:a7:dd:88:66:c3:9d:
                    ec:91:b9:0b:bd:6d:2d:34:99:e9:fb:5f:40:b4:91:
                    b5:c6:ec:5f:d5:d6:f4:b2:a6:60:7f:0d:b4:82:a8:
                    de:ce:76:24:20:f7:da:da:54:16:ab:31:3d:03:84:
                    ed:67:8a:ac:c3:ca:59:18:d7:65:0e:cc:16:8e:2e:
                    2f:67:2c:0f:fb:0e:dd:71:1f:4f:08:ef:26:05:ac:
                    74:df:97:d8:1c:82:26:ff:fd:72:9a:2e:1a:d1:20:
                    fa:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:4B:57:F0:8F:32:8B:93:59:CB:96:F2:D3:FA:EC:9D:64:66:E5:52
            X509v3 Authority Key Identifier:
                keyid:7C:00:A6:1A:80:21:47:A4:FB:02:5F:CB:9D:4C:06:37:24:EB:C9:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4PSGd9CWKwZkPzwocXWMX6cH3zmVDJTD3dpXuVJkTM6/0/7C00A61A802147A4FB025FCB9D4C063724EBC907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C00A61A802147A4FB025FCB9D4C063724EBC907.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4PSGd9CWKwZkPzwocXWMX6cH3zmVDJTD3dpXuVJkTM6/0/3230302e3130362e3138392e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.106.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:63:20:ad:73:da:90:a2:65:cc:c0:49:b4:4d:82:e9:0d:f2:
         a8:75:b7:03:fb:a6:7f:39:f9:83:a1:b5:0e:6c:0f:af:29:9a:
         57:20:5e:1c:af:40:2b:79:ce:52:bb:84:c2:42:c6:34:09:ae:
         c7:2b:8a:a2:7a:ee:87:28:a8:9c:bc:37:a6:75:1a:39:18:b9:
         18:d4:7e:ef:24:a7:96:08:9a:38:bc:dc:10:be:59:99:33:62:
         67:e5:fc:d5:9b:4b:db:25:f2:45:40:35:1a:e2:43:84:05:35:
         70:45:d9:70:81:d3:87:97:09:26:3b:81:a7:23:0a:d5:d1:c1:
         dd:bb:d7:91:6c:1d:15:2f:4d:35:c2:d4:15:65:7c:10:0a:ca:
         f3:dc:3e:1c:bd:45:d4:80:3a:3c:7b:b7:da:73:31:cb:42:48:
         74:d6:81:08:e1:2d:9d:a4:ab:bb:e5:d5:e9:04:5b:2f:6e:3b:
         42:a2:2f:1b:8d:70:35:52:d5:92:96:e6:27:04:00:ac:0c:d7:
         01:ec:47:4f:92:8e:a4:aa:eb:33:6c:3e:a3:54:20:be:4f:e9:
         cf:3d:ce:bf:e9:21:7c:2c:42:32:39:7e:c4:d6:ed:62:c8:56:
         f1:2e:ea:49:06:24:24:5e:2c:a2:8f:18:3a:68:67:b9:c8:61:
         45:c8:63:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:10:38 2026 by rpki-client