Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/0/3230302e3138392e34382e302f32312d3234203d3e203134323034.roa
File:                     3230302e3138392e34382e302f32312d3234203d3e203134323034.roa (raw, json)
Hash identifier:          6RqNEXlxCzioiGINKjRgfvoywpmMPp0+BQ3mMCosjPU=
Subject key identifier:   3F:A2:95:A3:E9:11:B3:8E:29:F4:C1:5E:41:88:8C:34:8E:A9:35:B5
Certificate issuer:       /CN=E3A05660BB6F81841BB49DE532F64F592B23928E
Certificate serial:       494EE2568CBB6271C90CC2931EAA7AC4DCBD59BB
Authority key identifier: E3:A0:56:60:BB:6F:81:84:1B:B4:9D:E5:32:F6:4F:59:2B:23:92:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3A05660BB6F81841BB49DE532F64F592B23928E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/0/3230302e3138392e34382e302f32312d3234203d3e203134323034.roa
Signing time:             Fri 20 Mar 2026 15:30:31 +0000
ROA not before:           Fri 20 Mar 2026 15:25:31 +0000
ROA not after:            Fri 19 Mar 2027 15:30:31 +0000
asID:                     14204
IP address blocks:        200.189.48.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/0/E3A05660BB6F81841BB49DE532F64F592B23928E.crl
                          rsync://rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/0/E3A05660BB6F81841BB49DE532F64F592B23928E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3A05660BB6F81841BB49DE532F64F592B23928E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 16:43:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:4e:e2:56:8c:bb:62:71:c9:0c:c2:93:1e:aa:7a:c4:dc:bd:59:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3A05660BB6F81841BB49DE532F64F592B23928E
        Validity
            Not Before: Mar 20 15:25:31 2026 GMT
            Not After : Mar 19 15:30:31 2027 GMT
        Subject: CN=3FA295A3E911B38E29F4C15E41888C348EA935B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:eb:e6:21:7d:b4:b8:08:d1:c8:f2:d4:c1:0a:
                    fd:58:1e:59:b9:cf:fa:57:ee:a4:b8:83:64:ef:6e:
                    8d:a1:94:76:63:2b:aa:d4:aa:91:7e:75:77:6c:c6:
                    9f:bf:b8:0a:24:3a:6b:ec:8b:91:5d:f5:d3:88:92:
                    98:a9:f9:d7:9a:97:d2:bc:26:9e:41:95:b9:7b:c3:
                    b7:e0:0c:cc:21:54:e5:31:e8:6c:e0:01:ab:6d:14:
                    88:d7:a2:36:0a:39:60:15:37:a4:5b:a2:d9:f3:b3:
                    85:08:60:0b:4e:07:1a:6f:c5:74:f4:36:6b:73:4e:
                    5b:aa:df:e9:7f:cd:39:c6:40:9b:11:bc:d5:e4:af:
                    02:ff:24:b6:52:98:4d:2e:53:27:18:70:77:3f:db:
                    ee:52:82:6c:30:d3:62:7a:78:c1:75:b5:a4:51:c6:
                    dd:7b:b8:b2:49:37:36:d8:e6:f7:2a:3d:98:c7:cf:
                    ac:61:bf:ec:46:82:76:42:8f:7e:aa:f6:41:81:0d:
                    7f:4b:ab:eb:05:fe:ee:94:e9:56:19:ec:47:5b:78:
                    79:e2:c3:e3:14:99:61:b8:a0:fe:de:2c:b3:7c:d0:
                    e9:04:e5:22:98:cd:10:ca:e5:2e:e0:75:f3:23:d9:
                    aa:e7:fb:ec:fe:2a:28:e4:70:1f:e0:11:c4:0c:7b:
                    74:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:A2:95:A3:E9:11:B3:8E:29:F4:C1:5E:41:88:8C:34:8E:A9:35:B5
            X509v3 Authority Key Identifier:
                keyid:E3:A0:56:60:BB:6F:81:84:1B:B4:9D:E5:32:F6:4F:59:2B:23:92:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/0/E3A05660BB6F81841BB49DE532F64F592B23928E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3A05660BB6F81841BB49DE532F64F592B23928E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/0/3230302e3138392e34382e302f32312d3234203d3e203134323034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.189.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5d:d5:c8:c8:42:f3:ad:d0:46:65:b8:9f:b2:98:7c:46:4c:ca:
         0e:25:de:32:27:9e:8c:f0:12:dc:e6:c5:7a:37:05:32:60:40:
         a8:ed:e9:96:8b:03:46:10:8f:c6:1a:25:fa:91:7d:1f:8e:d5:
         ea:84:5b:56:8e:86:b8:52:0c:5c:68:70:0b:42:7d:ad:06:84:
         19:88:e7:01:ac:72:0f:96:34:13:dd:37:86:a6:aa:5b:d9:7e:
         74:b4:40:61:b8:06:15:90:34:1a:44:cb:72:a8:79:19:cc:5b:
         8a:5c:75:09:4a:36:25:e2:9c:01:c0:a4:ff:8c:1e:02:34:1b:
         0c:24:d9:4d:93:7a:1c:57:b8:bb:1b:99:b0:f1:35:c0:cb:4a:
         bb:82:7e:9c:22:f1:bd:fa:0a:6b:3a:28:ad:f5:99:65:c9:38:
         7a:f0:eb:e1:c5:10:ac:c4:98:78:4b:b5:cd:b0:57:d4:a6:cb:
         fb:ba:cf:0e:df:0a:af:13:c1:e4:95:3b:84:c5:60:5b:6d:cb:
         7e:59:99:15:40:dc:92:78:36:3a:eb:9a:06:f0:9c:9f:8c:4f:
         9e:ad:a4:76:82:73:1d:76:4e:b3:c1:95:b1:87:8e:9c:ea:19:
         55:ff:6c:2a:c2:ee:14:d9:2c:d2:9d:77:b1:71:5d:98:db:7a:
         2e:e8:06:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:06:18 2026 by rpki-client