Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/0/3230302e31392e36342e302f32302d3234203d3e203130383831.roa
File:                     3230302e31392e36342e302f32302d3234203d3e203130383831.roa (raw, json)
Hash identifier:          VFUaL017OFX0mwnMlKgaPJwchP+3XzHcew/nsStknKQ=
Subject key identifier:   4B:8B:99:7E:42:A9:FD:EB:D2:D1:E6:35:42:AC:D0:06:1B:F0:3F:86
Certificate issuer:       /CN=983BD0B1DCD77D1596BD13CAB219C2539B3BE1F8
Certificate serial:       0579D6DE391A42F2A77159997EF3B5C13CB93AE7
Authority key identifier: 98:3B:D0:B1:DC:D7:7D:15:96:BD:13:CA:B2:19:C2:53:9B:3B:E1:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/983BD0B1DCD77D1596BD13CAB219C2539B3BE1F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/0/3230302e31392e36342e302f32302d3234203d3e203130383831.roa
Signing time:             Fri 03 Jul 2026 19:21:23 +0000
ROA not before:           Fri 03 Jul 2026 19:16:23 +0000
ROA not after:            Fri 02 Jul 2027 19:21:23 +0000
asID:                     10881
IP address blocks:        200.19.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/0/983BD0B1DCD77D1596BD13CAB219C2539B3BE1F8.crl
                          rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/0/983BD0B1DCD77D1596BD13CAB219C2539B3BE1F8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/983BD0B1DCD77D1596BD13CAB219C2539B3BE1F8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 16:49:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:79:d6:de:39:1a:42:f2:a7:71:59:99:7e:f3:b5:c1:3c:b9:3a:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=983BD0B1DCD77D1596BD13CAB219C2539B3BE1F8
        Validity
            Not Before: Jul  3 19:16:23 2026 GMT
            Not After : Jul  2 19:21:23 2027 GMT
        Subject: CN=4B8B997E42A9FDEBD2D1E63542ACD0061BF03F86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:70:8f:71:f4:28:7d:4b:5d:c6:aa:c9:84:e3:
                    e6:09:bf:d7:98:11:db:33:cb:84:e9:9f:4e:03:bf:
                    f9:d9:aa:81:f3:1e:76:19:e4:ae:a3:0a:4b:65:26:
                    d3:f2:ba:23:c2:e2:26:64:e3:02:ad:0a:a6:c5:38:
                    61:44:a8:36:fd:6e:d7:d9:cd:10:e6:da:86:35:88:
                    8b:c0:01:c4:0a:4d:d1:99:d8:50:03:94:61:f2:83:
                    87:58:b1:b5:1b:57:06:bd:dd:78:2f:76:eb:7d:3e:
                    32:54:eb:83:81:2b:fd:cf:20:89:bd:74:b2:39:20:
                    bb:a2:7a:1c:d8:b8:56:10:cc:be:32:20:93:e1:ba:
                    d0:1d:1e:af:bb:d8:dd:11:d7:aa:d3:7f:0c:97:1c:
                    d4:b8:30:0d:7f:af:f1:3a:d5:70:a4:2e:fe:fa:c0:
                    a0:5b:95:8e:dd:d2:0f:0a:7f:34:6b:22:08:b0:c8:
                    da:8d:b5:dc:d1:95:cf:91:59:e1:3c:e0:00:67:61:
                    e9:d0:c5:7e:2f:da:0c:7a:5c:8a:87:55:a4:69:29:
                    a6:70:70:b8:81:fb:6a:2e:51:5c:d2:db:d3:14:d4:
                    b6:6f:a0:53:2e:ed:28:17:1b:ed:72:e7:78:d2:26:
                    46:b7:e9:b1:73:e2:16:e3:98:1e:68:9e:b9:fb:6d:
                    9a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:8B:99:7E:42:A9:FD:EB:D2:D1:E6:35:42:AC:D0:06:1B:F0:3F:86
            X509v3 Authority Key Identifier:
                keyid:98:3B:D0:B1:DC:D7:7D:15:96:BD:13:CA:B2:19:C2:53:9B:3B:E1:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/0/983BD0B1DCD77D1596BD13CAB219C2539B3BE1F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/983BD0B1DCD77D1596BD13CAB219C2539B3BE1F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/0/3230302e31392e36342e302f32302d3234203d3e203130383831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.19.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4b:20:31:d8:56:3c:55:98:3e:60:a5:16:34:d8:67:b7:95:6e:
         8c:d6:83:e0:87:4f:8e:30:18:dc:3c:ae:1a:75:42:aa:c4:03:
         13:1e:ab:ca:ea:ad:d2:28:76:4d:1f:87:db:f5:34:98:01:23:
         83:06:89:0a:7c:9c:83:0e:30:e9:bb:64:72:98:58:bf:bc:d0:
         28:c2:01:d4:b0:bc:c2:e6:c0:db:8d:c4:6a:05:cb:1e:8d:75:
         60:1d:8a:0f:4b:bc:15:e5:e1:55:18:2f:cd:19:f8:b7:37:17:
         ff:e7:f5:96:70:97:86:3e:76:c7:77:4a:81:0b:1b:a5:aa:48:
         de:dc:38:05:58:5a:1b:b8:08:65:2d:9c:21:61:40:98:d7:22:
         89:d5:40:7d:a9:1c:e9:85:77:d9:ae:c7:c0:c0:4a:bc:f9:7a:
         6a:21:27:97:89:32:fd:54:7a:e2:65:d0:1a:dc:b8:98:ad:ee:
         d5:02:7b:e9:a3:db:b3:38:9e:81:09:37:04:76:2e:bb:b7:db:
         1b:cd:01:81:99:1d:55:81:aa:81:2a:f6:39:b8:65:85:d4:f0:
         f0:ac:bf:dd:4d:96:9c:3b:f8:26:be:bb:eb:41:bb:a7:3d:cd:
         8b:a1:1b:82:c3:a7:61:44:47:89:df:bf:d8:53:1d:6c:bb:e4:
         85:f2:85:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:35:07 2026 by rpki-client