Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/0/3230302e3233382e3132382e302f31382d3234203d3e203130383831.roa
File:                     3230302e3233382e3132382e302f31382d3234203d3e203130383831.roa (raw, json)
Hash identifier:          dZpHK3HhonmlrZYRiiUr+K78+Kf7KQMtDfqBdiLCFFo=
Subject key identifier:   B6:F0:69:E8:45:B7:80:D8:4B:FE:AA:B6:3C:78:F6:73:D3:86:37:11
Certificate issuer:       /CN=983BD0B1DCD77D1596BD13CAB219C2539B3BE1F8
Certificate serial:       6AA472DD43B212182792705975BDE6F9EFF8C5DC
Authority key identifier: 98:3B:D0:B1:DC:D7:7D:15:96:BD:13:CA:B2:19:C2:53:9B:3B:E1:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/983BD0B1DCD77D1596BD13CAB219C2539B3BE1F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/0/3230302e3233382e3132382e302f31382d3234203d3e203130383831.roa
Signing time:             Fri 03 Jul 2026 19:21:23 +0000
ROA not before:           Fri 03 Jul 2026 19:16:23 +0000
ROA not after:            Fri 02 Jul 2027 19:21:23 +0000
asID:                     10881
IP address blocks:        200.238.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/0/983BD0B1DCD77D1596BD13CAB219C2539B3BE1F8.crl
                          rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/0/983BD0B1DCD77D1596BD13CAB219C2539B3BE1F8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/983BD0B1DCD77D1596BD13CAB219C2539B3BE1F8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 16:49:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:a4:72:dd:43:b2:12:18:27:92:70:59:75:bd:e6:f9:ef:f8:c5:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=983BD0B1DCD77D1596BD13CAB219C2539B3BE1F8
        Validity
            Not Before: Jul  3 19:16:23 2026 GMT
            Not After : Jul  2 19:21:23 2027 GMT
        Subject: CN=B6F069E845B780D84BFEAAB63C78F673D3863711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6e:70:f1:62:19:09:65:30:3d:6c:89:59:7a:
                    53:73:e2:44:2c:21:7b:66:d2:b8:45:d9:df:7a:f3:
                    4e:70:08:53:eb:9d:76:b4:67:cf:d3:12:6d:74:9e:
                    64:ef:68:41:e4:e2:9c:bd:79:bd:8a:55:57:7b:9c:
                    ee:a9:26:3f:9e:a3:e9:40:ad:a6:68:15:d9:aa:d9:
                    e8:1f:66:e6:c9:17:c5:da:b8:b9:f3:15:3a:15:cb:
                    a4:95:b5:95:b6:84:a5:91:b1:e9:22:13:59:74:f9:
                    ce:3b:ee:0d:d4:33:55:67:22:a5:fb:c4:c9:d1:3f:
                    a4:63:ba:f9:9a:ac:8e:3b:bf:df:8c:4a:d9:1f:22:
                    36:3d:36:72:94:4a:c3:7b:5c:1f:d9:68:0d:b9:6b:
                    ed:a9:13:7c:d6:16:59:1c:50:f9:1f:8a:65:0b:18:
                    62:2d:cc:e1:06:11:0a:de:8e:3b:d9:5d:4d:ec:51:
                    c4:5b:d5:14:27:76:b5:f5:d4:04:cd:35:f4:ab:f2:
                    e4:9f:a6:46:7a:ce:2b:c3:1c:a9:9b:a0:ed:55:79:
                    c1:b0:98:b0:03:8c:54:3d:bd:49:ec:6d:0c:bd:81:
                    b2:df:99:ea:18:5f:14:34:fb:be:2e:6f:65:23:2d:
                    a6:94:5b:46:05:15:70:f2:57:84:be:36:42:75:93:
                    c3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:F0:69:E8:45:B7:80:D8:4B:FE:AA:B6:3C:78:F6:73:D3:86:37:11
            X509v3 Authority Key Identifier:
                keyid:98:3B:D0:B1:DC:D7:7D:15:96:BD:13:CA:B2:19:C2:53:9B:3B:E1:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/0/983BD0B1DCD77D1596BD13CAB219C2539B3BE1F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/983BD0B1DCD77D1596BD13CAB219C2539B3BE1F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/0/3230302e3233382e3132382e302f31382d3234203d3e203130383831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.238.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         6e:30:ad:a4:bc:8c:f4:db:81:39:9a:f8:bd:24:0a:99:96:38:
         33:48:29:63:f6:a9:78:01:51:a1:f5:47:59:35:ad:bf:fb:22:
         86:7e:5f:90:ba:bf:af:c1:01:c1:4f:ac:a5:0c:a6:ba:25:74:
         51:44:30:4a:f4:3d:7d:b2:f8:3a:e5:b0:fa:de:ba:f4:fe:5d:
         80:01:11:d8:c7:43:b9:c1:aa:7a:78:5f:da:6b:aa:80:c6:fd:
         de:70:57:ec:b0:7a:41:7f:b3:03:d2:83:ba:8d:24:23:c5:ce:
         7a:06:6c:0c:5e:e7:ee:03:bb:7b:a3:d9:f2:08:79:d5:93:1f:
         55:df:5c:07:08:25:b8:03:09:cb:00:50:ee:0a:a7:9e:e1:1d:
         2e:f7:4b:4a:73:97:9c:cf:25:ec:c9:69:9f:03:0c:e8:72:ca:
         a4:7c:2d:00:1c:62:8c:ed:11:5f:07:b9:f8:52:44:8c:77:ed:
         5c:25:99:c9:4c:bd:5c:2f:32:3f:6d:3b:8c:f4:c1:58:5f:08:
         cc:f0:45:63:56:c1:a4:d1:8b:67:36:0f:d0:b1:28:1e:5c:44:
         6e:74:0f:fa:f3:c2:1e:fb:58:01:50:a7:36:97:12:bd:ae:fe:
         52:86:93:c5:0a:44:9c:4d:06:4c:f3:9c:9e:82:3f:b6:07:ba:
         3a:28:a9:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:35:04 2026 by rpki-client