Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3139342e3130342e302f32312d3234203d3e203131393231.roa
File:                     3230302e3139342e3130342e302f32312d3234203d3e203131393231.roa (raw, json)
Hash identifier:          98VcxNavDBPh2mtK5fTEO/Hy4gAt7Ti4D9oNyOaYWGU=
Subject key identifier:   68:6C:38:EE:0C:09:45:A4:99:9D:41:9F:E6:FD:05:33:E2:A1:3E:2C
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       14292A638725E1C935FF8400C1B8ADCEA11E1D13
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3139342e3130342e302f32312d3234203d3e203131393231.roa
Signing time:             Tue 25 Aug 2026 19:43:20 +0000
ROA not before:           Tue 25 Aug 2026 19:38:20 +0000
ROA not after:            Tue 24 Aug 2027 19:43:20 +0000
asID:                     11921
IP address blocks:        200.194.104.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl
                          rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 11:12:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:29:2a:63:87:25:e1:c9:35:ff:84:00:c1:b8:ad:ce:a1:1e:1d:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Aug 25 19:38:20 2026 GMT
            Not After : Aug 24 19:43:20 2027 GMT
        Subject: CN=686C38EE0C0945A4999D419FE6FD0533E2A13E2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c7:d6:9b:61:e7:c5:8f:77:55:8b:54:03:94:
                    e3:f7:92:5b:ee:af:45:3b:f1:3c:0a:2c:2b:fb:60:
                    ba:e1:1e:4d:b9:1e:4a:79:78:58:9d:2b:be:76:79:
                    0e:37:aa:5a:23:03:4e:7f:f8:83:26:bf:ea:fc:80:
                    0b:1f:7e:88:59:1b:a2:5f:08:57:0a:b1:8c:8d:84:
                    2d:0a:0e:12:a0:f6:55:bf:ab:cd:61:3d:b9:3c:fe:
                    d1:1b:57:f4:2c:19:0f:c2:d2:c7:7d:14:ac:f4:21:
                    99:3e:d1:0c:25:d4:1b:48:b0:ab:3a:6f:2c:76:74:
                    f9:d0:fb:09:cb:31:ce:58:32:78:0c:6f:e8:6a:b1:
                    61:7a:71:e9:4a:44:a3:11:f5:26:54:e9:4a:74:8b:
                    c6:3a:3c:c0:58:04:42:cd:d1:c2:64:84:81:49:eb:
                    e4:c8:08:d1:3a:14:04:07:b9:b3:c3:38:a4:81:33:
                    6e:9c:03:c9:3a:67:69:8f:49:23:ff:0a:90:2a:fd:
                    0a:e2:58:6d:ff:06:76:17:79:05:54:12:36:55:89:
                    23:ed:63:89:ec:7d:ff:a1:46:20:50:21:96:18:5b:
                    02:74:65:02:fe:99:be:e5:e1:af:7a:59:f1:fd:7a:
                    6e:6c:ac:ad:50:fc:9d:56:a7:48:05:8d:64:52:45:
                    5e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:6C:38:EE:0C:09:45:A4:99:9D:41:9F:E6:FD:05:33:E2:A1:3E:2C
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3139342e3130342e302f32312d3234203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.194.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5e:bd:45:2e:0e:9b:41:96:0e:09:1b:11:26:e9:2e:aa:12:60:
         77:d6:5c:3c:ac:83:cc:ed:8d:99:d2:1e:c7:84:23:71:4d:8a:
         27:cc:59:74:22:9a:47:84:74:cd:c6:d8:d0:e0:94:cd:ef:a8:
         1e:22:54:fc:98:16:c0:38:a9:0a:50:52:1e:5a:d7:9e:86:0d:
         25:d3:ce:1b:53:dd:d7:d0:eb:5f:00:1b:18:bb:3b:ba:ec:20:
         7d:59:c3:d7:fb:6c:73:ab:13:be:49:04:50:86:ca:f7:ab:e0:
         70:20:a3:49:b8:85:bd:08:ce:ef:e0:c9:7f:9a:e3:40:9f:5d:
         34:73:9c:30:eb:40:ca:0d:64:7a:b2:5f:30:4d:91:b7:03:0b:
         2d:92:4c:49:f2:80:da:47:a5:ab:bd:ce:26:27:42:35:18:91:
         90:0b:09:09:9d:45:83:e6:88:16:e8:45:ff:69:e0:fe:4a:31:
         c6:10:78:8b:6a:a1:91:8f:6b:52:cc:23:51:23:b5:7a:ee:a8:
         fa:84:ca:30:f3:3c:d4:60:f3:6c:32:80:a2:c2:52:52:23:7f:
         04:39:ac:7c:e6:11:78:c6:b8:8d:de:ac:2b:74:97:59:d6:08:
         ad:89:b9:66:ca:0f:3c:24:99:a4:ce:26:20:fb:e1:f5:b8:97:
         b7:db:22:19
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUFCkqY4cl4ck1/4QAwbitzqEeHRMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDc5QzdFNEJBRTQ5NTM3MzBGRTcyMTI1RTk0MTkwMUFG
QzU5MEMwQjAeFw0yNjA4MjUxOTM4MjBaFw0yNzA4MjQxOTQzMjBaMDMxMTAvBgNV
BAMTKDY4NkMzOEVFMEMwOTQ1QTQ5OTlENDE5RkU2RkQwNTMzRTJBMTNFMkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUx9abYefFj3dVi1QDlOP3klvu
r0U78TwKLCv7YLrhHk25Hkp5eFidK752eQ43qlojA05/+IMmv+r8gAsffohZG6Jf
CFcKsYyNhC0KDhKg9lW/q81hPbk8/tEbV/QsGQ/C0sd9FKz0IZk+0Qwl1BtIsKs6
byx2dPnQ+wnLMc5YMngMb+hqsWF6celKRKMR9SZU6Up0i8Y6PMBYBELN0cJkhIFJ
6+TICNE6FAQHubPDOKSBM26cA8k6Z2mPSSP/CpAq/QriWG3/BnYXeQVUEjZViSPt
Y4nsff+hRiBQIZYYWwJ0ZQL+mb7l4a96WfH9em5srK1Q/J1Wp0gFjWRSRV4RAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUaGw47gwJRaSZnUGf5v0FM+KhPiwwHwYDVR0j
BBgwFoAU15x+S65JU3MP5yEl6UGQGvxZDAswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGFQcU5mdUc3WEZDMVVha0pDZnVOUDlwaXQ2ekN3dzhwVUNabm1xMWo2
cWgvMS9ENzlDN0U0QkFFNDk1MzczMEZFNzIxMjVFOTQxOTAxQUZDNTkwQzBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q3OUM3RTRCQUU0OTUzNzMw
RkU3MjEyNUU5NDE5MDFBRkM1OTBDMEIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hhUHFOZnVHN1hGQzFVYWtKQ2Z1TlA5cGl0NnpDd3c4cFVDWm5tcTFqNnFoLzEv
MzIzMDMwMmUzMTM5MzQyZTMxMzAzNDJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDMx
MzEzOTMyMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAPIwmgwDQYJKoZIhvcNAQELBQADggEBAF69RS4O
m0GWDgkbESbpLqoSYHfWXDysg8ztjZnSHseEI3FNiifMWXQimkeEdM3G2NDglM3v
qB4iVPyYFsA4qQpQUh5a156GDSXTzhtT3dfQ618AGxi7O7rsIH1Zw9f7bHOrE75J
BFCGyver4HAgo0m4hb0Izu/gyX+a40CfXTRznDDrQMoNZHqyXzBNkbcDCy2STEny
gNpHpau9ziYnQjUYkZALCQmdRYPmiBboRf9p4P5KMcYQeItqoZGPa1LMI1EjtXru
qPqEyjDzPNRg82wygKLCUlIjfwQ5rHzmEXjGuI3erCt0l1nWCK2JuWbKDzwkmaTO
JiD74fW4l7fbIhk=
-----END CERTIFICATE-----
Generated at Fri Oct 30 22:49:13 2026 by rpki-client