Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/3230302e3232392e3135362e302f32322d3332203d3e203631383035.roa
File:                     3230302e3232392e3135362e302f32322d3332203d3e203631383035.roa (raw, json)
Hash identifier:          lnza7vc0v99582acyGPp4niTunmKJt/v6+0ebAYCqts=
Subject key identifier:   39:32:E9:BE:84:2F:D7:C7:24:B7:D9:47:84:74:6F:8F:89:FD:FB:1B
Certificate issuer:       /CN=B3516EB774935A87013A509DC395B99B1CF2E06E
Certificate serial:       2B681B5012550478FC7EB7D5190B4587881942E6
Authority key identifier: B3:51:6E:B7:74:93:5A:87:01:3A:50:9D:C3:95:B9:9B:1C:F2:E0:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3516EB774935A87013A509DC395B99B1CF2E06E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/3230302e3232392e3135362e302f32322d3332203d3e203631383035.roa
Signing time:             Thu 19 Mar 2026 19:40:41 +0000
ROA not before:           Thu 19 Mar 2026 19:35:41 +0000
ROA not after:            Thu 18 Mar 2027 19:40:41 +0000
asID:                     61805
IP address blocks:        200.229.156.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/B3516EB774935A87013A509DC395B99B1CF2E06E.crl
                          rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/B3516EB774935A87013A509DC395B99B1CF2E06E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3516EB774935A87013A509DC395B99B1CF2E06E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 15:17:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:68:1b:50:12:55:04:78:fc:7e:b7:d5:19:0b:45:87:88:19:42:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3516EB774935A87013A509DC395B99B1CF2E06E
        Validity
            Not Before: Mar 19 19:35:41 2026 GMT
            Not After : Mar 18 19:40:41 2027 GMT
        Subject: CN=3932E9BE842FD7C724B7D94784746F8F89FDFB1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1f:f6:f9:0c:5e:fd:2e:a7:e4:88:60:37:f9:
                    33:35:c9:c2:2e:28:73:7f:3d:1b:51:cb:0a:e5:b0:
                    b6:86:d4:e8:f0:dc:6b:2b:6d:83:65:ee:ec:25:ce:
                    6d:74:66:b7:5a:8c:76:c1:1a:51:4e:14:94:1c:73:
                    7f:6f:fa:3e:65:74:d3:5b:6c:5d:21:8b:66:0e:a0:
                    6f:e6:0f:45:3a:aa:8c:f0:82:82:43:12:9b:fb:74:
                    f3:58:fb:7b:f7:2b:67:6a:81:f0:52:ae:27:6c:60:
                    be:15:31:50:1d:db:dc:69:a4:29:ef:bc:0d:77:52:
                    fe:c7:f5:cb:e9:c4:c2:4f:2c:d3:64:79:87:0a:b9:
                    b8:7d:9b:97:bb:7c:31:70:f1:6e:79:10:b9:db:20:
                    b8:95:d6:c0:bf:8a:d3:03:89:6a:43:91:cb:37:67:
                    7e:c7:d5:7d:a6:b7:bb:25:06:86:d3:3c:21:c0:d9:
                    8b:81:d8:3b:48:9d:e6:37:b6:5b:1f:e1:78:29:e6:
                    21:1d:54:29:11:67:42:52:c6:f6:e8:40:e3:38:7c:
                    30:14:e5:ad:f4:36:1f:09:b5:b8:e6:4e:83:4a:ee:
                    01:6f:a7:83:f8:5f:43:5f:d9:72:c9:12:83:f2:11:
                    8f:14:36:ef:26:1f:f4:19:83:c5:a8:87:63:3f:05:
                    51:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:32:E9:BE:84:2F:D7:C7:24:B7:D9:47:84:74:6F:8F:89:FD:FB:1B
            X509v3 Authority Key Identifier:
                keyid:B3:51:6E:B7:74:93:5A:87:01:3A:50:9D:C3:95:B9:9B:1C:F2:E0:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/B3516EB774935A87013A509DC395B99B1CF2E06E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3516EB774935A87013A509DC395B99B1CF2E06E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/3230302e3232392e3135362e302f32322d3332203d3e203631383035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:60:3d:7a:9b:54:ff:1d:8b:e7:ed:40:93:2e:d3:bd:f9:4c:
         1c:ad:9c:37:8a:31:b8:a5:48:e2:30:bf:30:9f:4d:e3:08:e8:
         5f:e1:d6:d9:93:1f:b0:49:f8:23:fc:dd:b2:63:2d:02:b0:1d:
         34:aa:22:8b:79:04:24:c2:ef:60:11:94:80:61:54:50:44:29:
         a5:b9:21:4a:09:90:16:5f:40:34:4e:ba:30:51:f3:28:b3:b0:
         64:47:a4:52:c6:4e:b7:12:d5:f2:9d:3d:c5:95:de:53:a9:71:
         9d:36:4e:3b:b8:9b:2f:ee:88:12:43:29:72:96:bb:b7:d9:d8:
         3a:fa:13:21:7f:11:41:a4:ac:63:2f:1f:2f:7c:b2:06:66:5c:
         26:0a:e1:29:8a:58:14:f3:3f:1b:8c:a1:8a:7e:e6:79:9f:17:
         fb:1b:d0:38:55:0b:2e:fa:9b:89:8d:60:41:8e:04:1e:eb:08:
         fe:34:9b:47:e3:a0:a5:a1:81:57:1a:d8:19:fd:a5:6e:95:9d:
         f0:d5:11:33:25:1f:7f:2e:1f:13:aa:62:3a:c6:b8:bb:00:e7:
         76:6e:df:e2:e3:f2:c3:78:70:38:47:e5:74:76:d7:6a:0b:33:
         55:5e:8a:8b:72:e2:28:48:1a:fc:7d:62:3b:ba:db:9a:dd:c3:
         79:3a:f3:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 07:12:28 2026 by rpki-client