Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/0/3230302e35322e3232382e302f32332d3233203d3e20323731303138.roa
File:                     3230302e35322e3232382e302f32332d3233203d3e20323731303138.roa (raw, json)
Hash identifier:          sIVFphwDnEmew+bSjqsLLuknrpFA6vUIwMzkHppEZks=
Subject key identifier:   4A:60:2F:32:E7:70:0B:E6:39:BD:D1:0B:7C:79:53:44:54:99:25:D0
Certificate issuer:       /CN=0FE69FC7DC93FF658E2579D8E571015F60D2AE0B
Certificate serial:       1494CD696ECFF43AB3E7675E4D5E7D3BF46A0B74
Authority key identifier: 0F:E6:9F:C7:DC:93:FF:65:8E:25:79:D8:E5:71:01:5F:60:D2:AE:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FE69FC7DC93FF658E2579D8E571015F60D2AE0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/0/3230302e35322e3232382e302f32332d3233203d3e20323731303138.roa
Signing time:             Thu 16 Jul 2026 11:50:19 +0000
ROA not before:           Thu 16 Jul 2026 11:45:19 +0000
ROA not after:            Thu 15 Jul 2027 11:50:19 +0000
asID:                     271018
IP address blocks:        200.52.228.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/0/0FE69FC7DC93FF658E2579D8E571015F60D2AE0B.crl
                          rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/0/0FE69FC7DC93FF658E2579D8E571015F60D2AE0B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FE69FC7DC93FF658E2579D8E571015F60D2AE0B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 15:35:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:94:cd:69:6e:cf:f4:3a:b3:e7:67:5e:4d:5e:7d:3b:f4:6a:0b:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FE69FC7DC93FF658E2579D8E571015F60D2AE0B
        Validity
            Not Before: Jul 16 11:45:19 2026 GMT
            Not After : Jul 15 11:50:19 2027 GMT
        Subject: CN=4A602F32E7700BE639BDD10B7C795344549925D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c6:75:6c:ed:b3:93:97:c8:a4:4c:d0:3e:a0:
                    e1:da:a0:01:b9:ba:5c:fb:cb:57:7a:c2:71:ef:40:
                    67:9b:ad:6c:44:66:79:37:63:2f:cb:90:7e:94:ad:
                    69:88:c7:f6:ea:7c:77:d3:e3:45:f4:f7:9c:f0:c4:
                    dd:b3:10:33:3d:18:cb:cf:15:4a:38:6d:89:15:ee:
                    b3:00:62:61:93:55:ef:17:8f:ce:34:f6:c7:1f:bb:
                    5e:4b:ef:25:73:33:d1:cc:d9:43:99:71:39:f0:b6:
                    76:e9:db:85:3a:ba:8f:90:94:bc:b4:33:8b:78:a5:
                    d7:23:76:1e:0b:36:80:5b:49:dc:df:b4:03:b3:5f:
                    bf:90:88:0e:61:9c:ea:00:d2:2c:c9:6c:aa:c1:f4:
                    19:fb:8a:1c:80:06:e0:4d:f0:cd:6b:85:2b:d0:04:
                    7e:66:04:bf:07:fa:25:2b:b7:80:f7:ab:ff:21:5e:
                    84:b9:24:18:0b:ce:c3:c4:59:43:bd:72:21:c6:7a:
                    5c:6d:46:db:fe:2f:a8:31:21:30:16:a8:27:be:d9:
                    06:ab:7f:19:b6:9f:e2:6c:9b:4a:2e:9d:ab:b7:0c:
                    ff:75:c6:a0:5b:9b:43:e0:cb:46:d6:d3:a2:3c:b9:
                    fd:11:9f:b1:03:85:4d:63:ea:35:0b:ab:dd:b0:72:
                    39:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:60:2F:32:E7:70:0B:E6:39:BD:D1:0B:7C:79:53:44:54:99:25:D0
            X509v3 Authority Key Identifier:
                keyid:0F:E6:9F:C7:DC:93:FF:65:8E:25:79:D8:E5:71:01:5F:60:D2:AE:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/0/0FE69FC7DC93FF658E2579D8E571015F60D2AE0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FE69FC7DC93FF658E2579D8E571015F60D2AE0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/0/3230302e35322e3232382e302f32332d3233203d3e20323731303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.52.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ab:85:8d:72:9a:c8:e2:8c:a6:2c:bb:1e:9b:a8:15:53:c2:c9:
         cf:cb:86:e0:8e:1d:69:68:38:51:a7:a3:b9:fb:7d:5e:6c:cc:
         e9:51:7a:a4:22:9e:ec:a6:8e:39:80:be:4f:6f:63:48:49:86:
         c2:47:1c:33:81:24:e5:50:29:9b:3e:02:c8:ec:c1:3f:91:cf:
         b3:d3:6f:90:17:ee:28:ee:61:8a:94:e6:7c:71:1c:84:ce:5c:
         64:90:d4:34:4f:42:6a:c2:fc:b1:6d:ac:f0:8d:40:c7:5d:e7:
         9f:5c:a4:a4:8e:93:8b:18:9b:8b:40:26:0d:e2:5e:38:f5:63:
         45:af:ea:9b:e0:2c:5e:2f:44:5a:8e:01:37:c5:96:be:4c:e6:
         94:39:39:76:6e:15:3d:a1:d5:e2:f5:a0:64:b8:61:8f:c0:f2:
         65:5d:10:41:da:12:f6:a7:b5:74:ad:0b:f5:cb:49:87:ab:af:
         ba:18:c7:c6:83:2f:89:b6:18:2e:bc:ea:62:60:cd:41:7d:69:
         a1:f5:96:a5:0c:03:e7:a7:d2:21:3d:18:90:10:dd:6b:54:03:
         4a:29:f3:19:63:b9:21:43:75:3a:68:81:24:e8:c0:60:67:41:
         a1:a2:7b:83:a6:31:dd:67:fd:e7:e0:f7:f2:30:c4:2f:3e:7b:
         ca:01:cc:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:49:53 2026 by rpki-client