Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/3230302e3232352e3130382e302f32322d3332203d3e20323633343431.roa
File:                     3230302e3232352e3130382e302f32322d3332203d3e20323633343431.roa (raw, json)
Hash identifier:          BRuarsVb9GOaOj9DY4QHBiwOAuG9mu+/NFdgHCHEWwU=
Subject key identifier:   06:DD:C3:08:8E:59:7F:10:1D:2A:94:0F:B2:30:38:B8:2E:42:0B:63
Certificate issuer:       /CN=26E3D1B009E7A8557F73668315C1AA6376A4A0C1
Certificate serial:       30A0358E50F7CC387B99EBC04372F4309AB1E6C4
Authority key identifier: 26:E3:D1:B0:09:E7:A8:55:7F:73:66:83:15:C1:AA:63:76:A4:A0:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26E3D1B009E7A8557F73668315C1AA6376A4A0C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/3230302e3232352e3130382e302f32322d3332203d3e20323633343431.roa
Signing time:             Sat 12 Sep 2026 15:28:38 +0000
ROA not before:           Sat 12 Sep 2026 15:23:38 +0000
ROA not after:            Sat 11 Sep 2027 15:28:38 +0000
asID:                     263441
IP address blocks:        200.225.108.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/26E3D1B009E7A8557F73668315C1AA6376A4A0C1.crl
                          rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/26E3D1B009E7A8557F73668315C1AA6376A4A0C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26E3D1B009E7A8557F73668315C1AA6376A4A0C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 18:57:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:a0:35:8e:50:f7:cc:38:7b:99:eb:c0:43:72:f4:30:9a:b1:e6:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26E3D1B009E7A8557F73668315C1AA6376A4A0C1
        Validity
            Not Before: Sep 12 15:23:38 2026 GMT
            Not After : Sep 11 15:28:38 2027 GMT
        Subject: CN=06DDC3088E597F101D2A940FB23038B82E420B63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5f:a5:cc:3a:70:5e:d4:bd:c4:6f:3e:a8:93:
                    0c:07:ac:8e:2e:ca:7e:8c:1d:d6:0f:ed:c3:8f:83:
                    1e:8f:7e:d2:42:79:76:28:7b:3d:eb:bb:ce:c3:f7:
                    e0:89:82:88:3d:8f:60:dd:15:ac:92:c0:d2:a3:54:
                    d9:f0:d5:d1:48:91:f2:28:f6:c2:9c:24:4b:12:c5:
                    80:c3:26:2d:fc:85:0d:50:a9:4e:12:31:98:c4:b9:
                    6b:d9:10:5b:74:b5:cc:9a:45:f8:fc:5c:dd:26:f3:
                    8d:0a:63:c4:ec:17:7e:68:65:60:b2:45:3d:a4:3b:
                    f9:f5:ad:99:b3:88:82:1c:b8:06:b8:68:22:c7:57:
                    82:7f:06:03:43:3c:ab:6f:e3:50:e0:95:70:d6:fe:
                    57:f1:68:8a:11:e7:24:c1:06:5d:62:e6:13:97:40:
                    04:a8:b5:d2:c5:5d:e1:2d:04:13:95:64:9d:c5:ca:
                    f6:6f:85:77:27:67:60:d0:1f:94:10:ff:df:d1:46:
                    0b:56:0b:94:3f:70:27:f8:9a:f5:13:de:2c:02:47:
                    55:4e:f4:80:5a:15:b7:7f:0b:f9:f1:e1:44:ed:f4:
                    9b:d4:83:23:af:32:32:8b:d6:0c:e1:1d:d8:f0:58:
                    42:5b:e8:29:a1:91:29:bf:b7:70:18:dd:dc:a3:7b:
                    11:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:DD:C3:08:8E:59:7F:10:1D:2A:94:0F:B2:30:38:B8:2E:42:0B:63
            X509v3 Authority Key Identifier:
                keyid:26:E3:D1:B0:09:E7:A8:55:7F:73:66:83:15:C1:AA:63:76:A4:A0:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/26E3D1B009E7A8557F73668315C1AA6376A4A0C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26E3D1B009E7A8557F73668315C1AA6376A4A0C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/3230302e3232352e3130382e302f32322d3332203d3e20323633343431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.225.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:51:97:94:b0:1f:df:ad:d4:1c:b3:25:cf:72:41:ec:9b:ca:
         cb:ed:59:65:07:54:c4:dd:6e:2a:63:98:91:ea:bf:af:0a:c1:
         4d:e5:9a:71:a6:82:fe:ed:17:8f:b8:fd:c0:e3:5f:a9:8a:91:
         35:39:10:67:59:c5:b0:06:63:58:b2:e9:8c:74:27:35:16:f4:
         dc:14:4e:3d:dd:d9:31:33:2a:61:5c:04:b1:f4:0a:53:16:2e:
         d5:62:54:3a:59:cd:49:15:43:9a:64:39:06:ec:db:0a:be:17:
         c1:27:1f:2b:11:de:7a:65:ab:92:4e:cc:93:d7:ce:00:68:cb:
         1c:1c:a5:8a:7b:e1:ae:ff:c7:67:93:eb:e9:fc:b8:4b:83:f3:
         34:f6:a9:3b:b1:d3:6d:3b:f4:d7:4e:7e:35:28:ef:80:01:e1:
         9e:43:06:4d:a3:c2:76:2c:80:4e:58:b6:a6:03:7b:94:ef:0c:
         31:e9:b6:b2:a5:e2:15:b1:9f:94:df:2e:4c:77:b3:06:53:38:
         2a:09:a6:bb:83:2a:66:69:f8:09:38:e5:20:74:c2:58:ea:f4:
         e7:96:5d:87:2e:b0:cb:84:8f:d2:76:dc:af:c0:75:2e:57:02:
         84:e8:d8:cb:e8:aa:f5:b8:5f:a9:9a:11:cc:27:78:21:a2:05:
         50:21:63:f6
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUMKA1jlD3zDh7mevAQ3L0MJqx5sQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjZFM0QxQjAwOUU3QTg1NTdGNzM2NjgzMTVDMUFBNjM3
NkE0QTBDMTAeFw0yNjA5MTIxNTIzMzhaFw0yNzA5MTExNTI4MzhaMDMxMTAvBgNV
BAMTKDA2RERDMzA4OEU1OTdGMTAxRDJBOTQwRkIyMzAzOEI4MkU0MjBCNjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLX6XMOnBe1L3Ebz6okwwHrI4u
yn6MHdYP7cOPgx6PftJCeXYoez3ru87D9+CJgog9j2DdFaySwNKjVNnw1dFIkfIo
9sKcJEsSxYDDJi38hQ1QqU4SMZjEuWvZEFt0tcyaRfj8XN0m840KY8TsF35oZWCy
RT2kO/n1rZmziIIcuAa4aCLHV4J/BgNDPKtv41DglXDW/lfxaIoR5yTBBl1i5hOX
QASotdLFXeEtBBOVZJ3FyvZvhXcnZ2DQH5QQ/9/RRgtWC5Q/cCf4mvUT3iwCR1VO
9IBaFbd/C/nx4UTt9JvUgyOvMjKL1gzhHdjwWEJb6CmhkSm/t3AY3dyjexHXAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUBt3DCI5ZfxAdKpQPsjA4uC5CC2MwHwYDVR0j
BBgwFoAUJuPRsAnnqFV/c2aDFcGqY3akoMEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmNyaXpZVjlQNlRMd1RyaG45TDhaV1JrendNWHE3UFVlZkFXTk1iM3c1
emQvMC8yNkUzRDFCMDA5RTdBODU1N0Y3MzY2ODMxNUMxQUE2Mzc2QTRBMEMxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI2RTNEMUIwMDlFN0E4NTU3
RjczNjY4MzE1QzFBQTYzNzZBNEEwQzEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Zjcml6WVY5UDZUTHdUcmhuOUw4WldSa3p3TVhxN1BVZWZBV05NYjN3NXpkLzAv
MzIzMDMwMmUzMjMyMzUyZTMxMzAzODJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzYzMzM0MzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAsjhbDANBgkqhkiG9w0BAQsFAAOCAQEAYVGX
lLAf363UHLMlz3JB7JvKy+1ZZQdUxN1uKmOYkeq/rwrBTeWacaaC/u0Xj7j9wONf
qYqRNTkQZ1nFsAZjWLLpjHQnNRb03BROPd3ZMTMqYVwEsfQKUxYu1WJUOlnNSRVD
mmQ5BuzbCr4XwScfKxHeemWrkk7Mk9fOAGjLHBylinvhrv/HZ5Pr6fy4S4PzNPap
O7HTbTv0105+NSjvgAHhnkMGTaPCdiyATli2pgN7lO8MMem2sqXiFbGflN8uTHez
BlM4Kgmmu4MqZmn4CTjlIHTCWOr055Zdhy6wy4SP0nbcr8B1LlcChOjYy+iq9bhf
qZoRzCd4IaIFUCFj9g==
-----END CERTIFICATE-----
Generated at Thu Oct 15 08:18:25 2026 by rpki-client