Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/0/3230302e31372e3139322e302f31382d3234203d3e203130383831.roa
File:                     3230302e31372e3139322e302f31382d3234203d3e203130383831.roa (raw, json)
Hash identifier:          CXanYOX14niUomlRyRkFoas6ml6TRHX/1gGNSPLOzVw=
Subject key identifier:   0F:19:8A:AB:AC:B6:8F:63:3C:9A:AE:F8:61:87:80:06:EA:17:D5:E8
Certificate issuer:       /CN=983BD0B1DCD77D1596BD13CAB219C2539B3BE1F8
Certificate serial:       74654CA143D23267D3B4561256D0F161937446D6
Authority key identifier: 98:3B:D0:B1:DC:D7:7D:15:96:BD:13:CA:B2:19:C2:53:9B:3B:E1:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/983BD0B1DCD77D1596BD13CAB219C2539B3BE1F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/0/3230302e31372e3139322e302f31382d3234203d3e203130383831.roa
Signing time:             Fri 03 Jul 2026 19:21:23 +0000
ROA not before:           Fri 03 Jul 2026 19:16:23 +0000
ROA not after:            Fri 02 Jul 2027 19:21:23 +0000
asID:                     10881
IP address blocks:        200.17.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/0/983BD0B1DCD77D1596BD13CAB219C2539B3BE1F8.crl
                          rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/0/983BD0B1DCD77D1596BD13CAB219C2539B3BE1F8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/983BD0B1DCD77D1596BD13CAB219C2539B3BE1F8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 16:49:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:65:4c:a1:43:d2:32:67:d3:b4:56:12:56:d0:f1:61:93:74:46:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=983BD0B1DCD77D1596BD13CAB219C2539B3BE1F8
        Validity
            Not Before: Jul  3 19:16:23 2026 GMT
            Not After : Jul  2 19:21:23 2027 GMT
        Subject: CN=0F198AABACB68F633C9AAEF861878006EA17D5E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:16:00:64:d2:d7:28:65:a5:48:45:6e:a4:3b:
                    28:a2:fe:d1:70:e6:37:51:37:25:0b:92:89:7d:bd:
                    54:01:e6:40:3d:19:a0:1a:3c:e7:93:87:3e:20:6e:
                    0a:db:e3:28:c9:33:b2:76:87:2d:4e:f1:10:3a:0f:
                    f3:de:dd:d8:7c:84:b9:50:29:8b:ad:64:19:39:a4:
                    cb:1c:1b:89:b4:67:20:15:5a:1f:dc:1b:2d:a2:0c:
                    f3:bc:84:b7:9e:77:1a:f1:25:7c:7e:ce:23:7d:04:
                    be:6d:bb:2c:60:40:6c:45:44:dd:38:25:bd:6e:bb:
                    22:e2:79:fb:0f:0d:c5:4a:e9:fc:79:b5:c0:d2:d5:
                    68:cc:ca:dc:55:cf:f8:93:04:bd:ef:d3:2c:a5:38:
                    f9:55:61:a3:97:51:27:70:ed:30:8e:48:2a:98:40:
                    77:e6:ae:44:26:4e:2c:b2:57:1d:8b:9c:a5:05:63:
                    e5:d1:03:69:f3:e9:fa:3b:2d:b4:42:49:92:25:55:
                    a7:a9:6e:f0:df:2d:31:ad:75:b6:6d:e5:40:35:6b:
                    83:68:39:45:9d:03:52:9e:a5:c1:7c:89:0a:ae:33:
                    75:6e:19:88:5d:f9:63:16:ba:d4:dc:3f:c4:3b:40:
                    05:f4:60:56:f4:7c:87:5f:16:a1:17:d1:2d:6c:2e:
                    97:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:19:8A:AB:AC:B6:8F:63:3C:9A:AE:F8:61:87:80:06:EA:17:D5:E8
            X509v3 Authority Key Identifier:
                keyid:98:3B:D0:B1:DC:D7:7D:15:96:BD:13:CA:B2:19:C2:53:9B:3B:E1:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/0/983BD0B1DCD77D1596BD13CAB219C2539B3BE1F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/983BD0B1DCD77D1596BD13CAB219C2539B3BE1F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/0/3230302e31372e3139322e302f31382d3234203d3e203130383831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.17.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a3:45:08:08:75:0b:b1:c2:ac:c9:ce:02:1c:b8:e8:45:b4:da:
         46:4f:4a:11:57:71:47:aa:b8:d5:c7:b5:e1:22:27:f3:8e:75:
         2c:7c:1b:07:1a:2d:bd:b6:e8:56:34:bd:a7:d8:30:b4:76:fa:
         3f:e6:c5:52:54:58:ce:34:3a:a4:9a:06:5e:f1:e5:89:37:9d:
         09:ee:1a:b7:e8:32:d5:c0:31:a9:39:fd:1d:3e:4d:96:26:af:
         ab:17:b5:a0:c4:34:04:2c:81:1c:b6:a1:3b:de:05:6c:ee:40:
         b6:2b:a2:2f:8b:cf:ef:0e:e5:22:fe:99:7f:f5:6e:d9:53:78:
         17:3c:00:73:7a:4d:61:a5:d9:c0:4f:5c:b9:24:ad:f9:95:97:
         d4:a9:1d:0e:95:92:55:46:4a:85:ae:19:2f:13:e0:5d:03:7d:
         46:2a:95:66:06:81:59:8c:80:a3:21:45:01:fe:6c:38:70:34:
         95:9f:90:82:44:e0:7a:2d:e2:16:87:53:f3:f7:eb:41:00:09:
         10:02:76:ae:5f:dd:09:d1:c2:08:a7:55:c2:69:ce:fa:4b:9f:
         72:e9:d3:bb:53:7d:30:be:47:4e:02:8b:3e:e6:43:8c:f7:bd:
         3c:7a:ce:1c:57:4f:ba:02:3b:df:bf:64:4e:59:5f:52:8e:ee:
         23:ef:7f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:35:03 2026 by rpki-client