Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/3230302e3130382e3136302e302f32322d3234203d3e20323632323939.roa
File:                     3230302e3130382e3136302e302f32322d3234203d3e20323632323939.roa (raw, json)
Hash identifier:          OVHDz6PP1+iz6GEcn/fbN1++1CQcfEXpa4zlPZyeAZM=
Subject key identifier:   BE:0D:EC:7B:1C:D3:82:99:73:71:D8:35:B1:6E:C5:A8:D6:53:65:50
Certificate issuer:       /CN=203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7
Certificate serial:       0AE19053E4178688DF56C3E91236D0E7FDCE6CE6
Authority key identifier: 20:3D:CC:A7:DE:79:C8:C4:DA:BA:A1:0A:6C:A9:E9:3E:A7:D3:9D:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/3230302e3130382e3136302e302f32322d3234203d3e20323632323939.roa
Signing time:             Mon 13 Jul 2026 20:09:44 +0000
ROA not before:           Mon 13 Jul 2026 20:04:44 +0000
ROA not after:            Mon 12 Jul 2027 20:09:44 +0000
asID:                     262299
IP address blocks:        200.108.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.crl
                          rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 15:57:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:e1:90:53:e4:17:86:88:df:56:c3:e9:12:36:d0:e7:fd:ce:6c:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7
        Validity
            Not Before: Jul 13 20:04:44 2026 GMT
            Not After : Jul 12 20:09:44 2027 GMT
        Subject: CN=BE0DEC7B1CD382997371D835B16EC5A8D6536550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:10:a9:c4:8d:06:eb:49:fb:f0:7d:f9:1c:21:
                    1f:c1:20:08:bb:05:aa:44:ba:14:48:62:c7:ee:e4:
                    29:4d:17:04:d9:eb:b4:4b:e0:62:24:78:c7:4a:1f:
                    f3:e0:74:91:b8:cf:a1:c9:01:0e:9a:4f:89:28:a4:
                    85:93:79:6f:12:85:cb:a8:5f:bb:8e:99:31:ee:11:
                    0d:8c:17:2c:83:cc:d4:24:f8:6a:1a:6a:37:f1:de:
                    d9:11:10:2f:26:19:5d:00:1c:7b:56:4f:58:5d:62:
                    8e:46:91:76:50:bc:b7:24:6d:ab:f1:de:0b:e8:eb:
                    ef:7f:0d:06:9f:dc:81:d9:d1:82:86:4f:63:ab:d0:
                    86:72:4e:b4:04:55:04:92:14:d1:17:0f:36:23:56:
                    7c:14:81:fb:e1:e1:aa:bd:e8:25:be:e1:44:2e:44:
                    e1:06:f6:47:7b:0b:b7:b6:fe:9a:3f:9f:a0:eb:a7:
                    b8:f1:14:a9:04:f0:df:c3:0f:4f:0a:c1:1f:2a:22:
                    17:98:ea:df:be:02:6d:68:c2:7a:b9:b8:85:e9:ca:
                    19:3f:77:de:db:de:48:07:51:cd:b2:43:01:f6:f7:
                    7e:c4:fc:d1:fe:50:ff:fe:bf:01:3e:3e:89:e3:a2:
                    fa:ec:82:55:4a:a6:e2:91:0c:7d:68:a7:1e:f5:b6:
                    82:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:0D:EC:7B:1C:D3:82:99:73:71:D8:35:B1:6E:C5:A8:D6:53:65:50
            X509v3 Authority Key Identifier:
                keyid:20:3D:CC:A7:DE:79:C8:C4:DA:BA:A1:0A:6C:A9:E9:3E:A7:D3:9D:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/3230302e3130382e3136302e302f32322d3234203d3e20323632323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:62:be:d3:1f:93:2a:5e:f6:e7:9f:d7:92:8a:2b:08:15:99:
         da:4d:cb:91:ab:7f:0d:ad:9a:db:1c:6a:d0:32:ea:8d:2a:07:
         e3:3e:5f:75:3f:f3:1a:19:54:d6:31:0d:75:ca:d9:b9:71:a1:
         4c:fa:85:6f:8f:fd:25:e5:59:df:0b:cc:58:01:0e:eb:e3:f7:
         b5:1b:72:5d:5f:99:fc:f1:62:c7:e4:56:44:75:f9:36:b4:12:
         9b:36:ff:1e:69:bd:1c:23:69:20:ec:82:76:88:ce:2f:03:89:
         b9:37:9b:b4:49:7a:55:54:77:24:de:67:12:98:ce:49:d1:b9:
         20:87:c8:09:89:73:8b:4c:95:63:ee:8f:85:48:59:f7:f9:5b:
         2c:12:8c:b8:ed:88:30:89:c8:dc:6c:5a:d0:07:71:25:6c:90:
         11:95:4b:bf:5b:91:26:6b:9b:d6:c0:37:e8:10:31:ff:39:cd:
         d1:fd:d3:2c:85:24:a5:ee:0d:e0:38:8f:71:4c:67:93:36:01:
         0e:e8:e6:75:4f:b3:32:dc:9b:3c:fc:65:d2:fc:d5:5a:ba:d5:
         25:e8:64:0d:21:df:31:28:c6:81:16:ef:12:20:64:89:09:6c:
         2c:22:b9:30:13:19:00:55:21:6a:78:68:cd:17:fb:f8:78:e8:
         68:cb:68:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:30:41 2026 by rpki-client