Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/0/3230302e35322e3233312e302f32342d3234203d3e20323731303138.roa
File:                     3230302e35322e3233312e302f32342d3234203d3e20323731303138.roa (raw, json)
Hash identifier:          pDlpv2gjbpzlJ0eUW7TD8hgIfA0W8XKosqkEJzhcMis=
Subject key identifier:   ED:0F:14:83:AC:4A:8D:D1:D9:07:2E:3B:84:32:64:66:86:C1:02:C4
Certificate issuer:       /CN=0FE69FC7DC93FF658E2579D8E571015F60D2AE0B
Certificate serial:       53495F0F8334F71CF801974A35B13AB76CB609D3
Authority key identifier: 0F:E6:9F:C7:DC:93:FF:65:8E:25:79:D8:E5:71:01:5F:60:D2:AE:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FE69FC7DC93FF658E2579D8E571015F60D2AE0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/0/3230302e35322e3233312e302f32342d3234203d3e20323731303138.roa
Signing time:             Thu 16 Jul 2026 11:50:20 +0000
ROA not before:           Thu 16 Jul 2026 11:45:20 +0000
ROA not after:            Thu 15 Jul 2027 11:50:20 +0000
asID:                     271018
IP address blocks:        200.52.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/0/0FE69FC7DC93FF658E2579D8E571015F60D2AE0B.crl
                          rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/0/0FE69FC7DC93FF658E2579D8E571015F60D2AE0B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FE69FC7DC93FF658E2579D8E571015F60D2AE0B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 15:35:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:49:5f:0f:83:34:f7:1c:f8:01:97:4a:35:b1:3a:b7:6c:b6:09:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FE69FC7DC93FF658E2579D8E571015F60D2AE0B
        Validity
            Not Before: Jul 16 11:45:20 2026 GMT
            Not After : Jul 15 11:50:20 2027 GMT
        Subject: CN=ED0F1483AC4A8DD1D9072E3B8432646686C102C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:a3:60:2f:30:2f:42:97:06:e3:93:78:5a:f8:
                    e4:a0:6d:25:54:2c:2b:88:0c:a4:2a:6a:ab:ef:be:
                    6d:f2:7e:ea:5e:99:03:5f:08:de:49:b9:b7:9b:da:
                    bb:de:8a:f8:6b:2f:8f:d2:be:82:29:5b:a3:61:07:
                    31:68:e9:01:47:94:c4:6f:d2:7f:92:e4:bd:56:68:
                    16:53:90:74:39:dc:05:80:96:5b:04:7b:5d:9b:44:
                    46:fe:04:8c:a4:ec:b4:24:ed:e2:ec:98:95:86:59:
                    aa:88:de:f9:c6:81:55:e2:d1:c4:8e:8e:0a:3c:94:
                    32:ae:d0:be:e9:e0:bf:9d:70:46:9d:42:1a:87:01:
                    e5:7f:1d:e6:68:ac:ea:58:9d:06:97:61:90:31:93:
                    d1:be:02:96:e0:fa:e0:f0:70:b2:a8:57:cd:f6:a8:
                    92:1f:f6:8a:f8:4b:fe:79:a7:23:0e:7d:ab:8b:65:
                    63:95:6c:fb:18:2b:97:a7:80:d4:db:e2:15:3d:b9:
                    bb:f5:17:38:fb:17:2d:4f:3b:78:61:e1:ec:8b:ff:
                    1b:e0:83:17:79:a2:f3:98:af:89:a1:1e:54:41:52:
                    1e:f9:76:18:c5:47:e4:05:97:27:12:97:fb:3a:f0:
                    4c:a9:e8:af:14:c9:14:69:e1:24:20:d1:d5:5d:a8:
                    c0:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:0F:14:83:AC:4A:8D:D1:D9:07:2E:3B:84:32:64:66:86:C1:02:C4
            X509v3 Authority Key Identifier:
                keyid:0F:E6:9F:C7:DC:93:FF:65:8E:25:79:D8:E5:71:01:5F:60:D2:AE:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/0/0FE69FC7DC93FF658E2579D8E571015F60D2AE0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FE69FC7DC93FF658E2579D8E571015F60D2AE0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/0/3230302e35322e3233312e302f32342d3234203d3e20323731303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.52.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:ab:49:86:71:66:36:92:90:ac:a8:ff:89:ca:bd:51:c8:12:
         7b:05:e2:a7:2f:39:99:12:21:0d:3d:c3:53:50:61:9e:b7:6e:
         ec:04:31:c5:3f:c8:56:17:cb:a9:67:34:a9:db:ce:ed:6f:67:
         ee:d5:d3:3e:ba:2a:6f:c4:1b:f8:c8:7c:b6:43:f4:4f:b3:b3:
         a6:f6:a5:6d:13:e0:83:aa:8d:0d:ea:6e:6b:0d:9c:36:3f:16:
         6d:b0:ac:8b:04:4a:c2:88:ca:3e:2b:de:11:da:11:4b:e5:a7:
         0d:b6:92:2f:77:4e:71:89:09:b5:07:d7:aa:d9:b0:e3:36:69:
         74:c0:53:0c:09:fc:56:0f:01:5f:2c:fc:7a:57:10:1d:04:10:
         b4:7d:14:17:06:9a:b1:40:49:8a:57:11:f9:2b:2e:90:e3:52:
         a6:d8:ca:ab:2d:06:81:a2:dd:6d:dc:c6:b4:53:95:6a:ae:77:
         5a:4d:c2:c6:e8:02:26:d8:84:dd:5b:ad:2e:ca:55:76:23:32:
         d5:ae:4e:6f:5a:61:67:39:6d:8a:4f:71:a2:f9:7a:62:40:a1:
         99:f6:e6:07:df:8c:44:da:32:6a:81:d6:e5:fa:62:33:14:17:
         a0:ac:0a:4c:e1:bc:56:b0:06:e0:3d:14:c0:ae:7d:14:05:31:
         26:95:d9:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:49:50 2026 by rpki-client