Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3135302e3132382e302f32302d3234203d3e203131393231.roa
File:                     3230302e3135302e3132382e302f32302d3234203d3e203131393231.roa (raw, json)
Hash identifier:          vU+cROvNEnRYi1RaxtI1qj8v12CQk4veDZODqiVgS1A=
Subject key identifier:   D4:6D:14:0D:73:85:DA:8D:CA:1A:F0:07:0D:D0:59:39:BB:AA:4A:6F
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       3E9EFF150F59513F09D4AB161AF571BA207D4D73
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3135302e3132382e302f32302d3234203d3e203131393231.roa
Signing time:             Fri 16 Oct 2026 01:43:20 +0000
ROA not before:           Fri 16 Oct 2026 01:38:20 +0000
ROA not after:            Fri 15 Oct 2027 01:43:20 +0000
asID:                     11921
IP address blocks:        200.150.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl
                          rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 16:48:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:9e:ff:15:0f:59:51:3f:09:d4:ab:16:1a:f5:71:ba:20:7d:4d:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Oct 16 01:38:20 2026 GMT
            Not After : Oct 15 01:43:20 2027 GMT
        Subject: CN=D46D140D7385DA8DCA1AF0070DD05939BBAA4A6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:83:84:41:2f:b0:7a:74:52:60:ce:bb:e4:5e:
                    24:e0:64:bb:74:f0:39:ab:cd:cb:19:25:b7:45:48:
                    02:c1:eb:10:1f:d5:1d:1f:34:8e:c3:90:09:7b:f1:
                    41:81:0f:8f:c2:13:e6:73:6a:cd:d3:20:77:86:2e:
                    54:28:c9:63:e5:b5:fc:3a:c2:e4:38:50:19:51:9a:
                    a0:4c:c3:da:8b:69:2b:f0:0d:79:06:dd:9d:61:07:
                    cf:7d:e7:63:0a:a8:b6:1f:1c:f8:44:88:a0:26:ee:
                    a8:21:91:c5:a0:25:5d:b9:36:b9:10:74:51:6f:e0:
                    fe:09:d0:fd:2e:b3:7d:1a:33:fd:44:3c:f8:38:b9:
                    24:f1:5c:2a:f7:0d:bc:a7:3b:90:da:dc:52:0b:2e:
                    3f:62:17:d9:a3:87:31:9e:92:27:cf:47:8f:1d:59:
                    d0:b5:a8:39:a7:ee:41:3c:ac:96:53:aa:18:74:a5:
                    13:4d:69:ea:e1:e3:92:80:5c:13:82:11:77:7b:e6:
                    f0:c8:64:66:7d:70:b6:54:8d:09:bb:3a:cf:09:b3:
                    74:1d:f0:3e:41:ba:05:28:d8:84:ac:fa:e7:43:7f:
                    da:dc:fb:14:b9:04:01:38:3a:38:c7:e5:3f:e6:91:
                    ac:5c:28:af:33:44:5c:df:d4:97:47:82:83:d6:07:
                    a2:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:6D:14:0D:73:85:DA:8D:CA:1A:F0:07:0D:D0:59:39:BB:AA:4A:6F
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3135302e3132382e302f32302d3234203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.150.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         80:10:b0:36:cf:2a:45:16:51:0c:51:91:63:e8:ea:ca:35:df:
         03:78:c9:bb:89:70:78:18:89:5a:b3:a5:7d:69:d9:17:15:b5:
         01:ed:f7:92:22:ee:e5:00:da:bd:ca:52:09:f5:e7:f6:33:71:
         0b:00:99:f9:30:45:93:18:c9:ef:e2:4d:fa:26:48:b5:c2:97:
         29:56:2b:1e:80:f3:25:e6:de:eb:20:37:dd:79:26:34:ea:25:
         2b:04:51:5c:0e:fc:f8:fa:87:de:e9:27:90:9f:5f:5e:2d:4d:
         d5:de:7b:c6:bc:55:8d:e8:d1:80:f7:76:0e:cc:35:b1:0f:a2:
         da:8a:78:e6:f7:1d:2d:2d:eb:53:b2:8c:5f:dd:1a:55:9b:7e:
         35:5d:97:c5:7e:2e:67:18:94:5b:f4:93:b5:36:d4:ca:8c:e2:
         62:b2:29:9c:8d:d0:34:05:56:38:6d:b3:11:25:1e:51:7b:3b:
         09:5f:35:ea:fd:85:36:a1:c9:f6:71:17:6b:b6:10:8d:bf:33:
         34:bd:50:bd:a6:24:9b:de:89:f7:0e:5e:81:1f:8a:6e:e4:1d:
         a3:17:73:0c:b5:e6:a9:21:a7:22:c2:10:2d:ae:64:7d:8f:44:
         24:75:67:c7:46:22:9f:54:fa:c1:3c:24:f4:95:4b:ba:85:8b:
         87:f4:68:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 03:04:51 2026 by rpki-client