Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/3230302e37312e38322e302f32332d3233203d3e20323731323030.roa
File:                     3230302e37312e38322e302f32332d3233203d3e20323731323030.roa (raw, json)
Hash identifier:          f56Q/Fieb9tfMWmyzIbiTvqj9p1hIf3Q6auf3VDNchE=
Subject key identifier:   87:9C:AC:3A:9F:AE:BC:56:17:74:C9:D4:C1:61:30:F1:06:FA:CC:2F
Certificate issuer:       /CN=3E0B8EABE833BAEF9500DCA41B249BFBECF5DA97
Certificate serial:       571D3AC70E3ADB026F171BED80C7571202BCD09E
Authority key identifier: 3E:0B:8E:AB:E8:33:BA:EF:95:00:DC:A4:1B:24:9B:FB:EC:F5:DA:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E0B8EABE833BAEF9500DCA41B249BFBECF5DA97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/3230302e37312e38322e302f32332d3233203d3e20323731323030.roa
Signing time:             Sat 15 Aug 2026 20:52:44 +0000
ROA not before:           Sat 15 Aug 2026 20:47:44 +0000
ROA not after:            Sat 14 Aug 2027 20:52:44 +0000
asID:                     271200
IP address blocks:        200.71.82.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/3E0B8EABE833BAEF9500DCA41B249BFBECF5DA97.crl
                          rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/3E0B8EABE833BAEF9500DCA41B249BFBECF5DA97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E0B8EABE833BAEF9500DCA41B249BFBECF5DA97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 04:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:1d:3a:c7:0e:3a:db:02:6f:17:1b:ed:80:c7:57:12:02:bc:d0:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E0B8EABE833BAEF9500DCA41B249BFBECF5DA97
        Validity
            Not Before: Aug 15 20:47:44 2026 GMT
            Not After : Aug 14 20:52:44 2027 GMT
        Subject: CN=879CAC3A9FAEBC561774C9D4C16130F106FACC2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:bb:79:16:8e:5e:a2:ee:85:3d:12:c7:fe:fc:
                    d7:5e:87:2b:0e:19:f6:8b:aa:09:8f:8b:0c:5e:df:
                    a4:1f:11:b5:d9:b7:8e:b0:59:46:7a:96:1f:f9:c3:
                    88:8f:a1:3d:ba:aa:cb:e4:b1:fd:b4:10:bb:c2:21:
                    35:48:3e:00:7d:6d:75:17:13:9a:7e:01:3c:1a:bb:
                    86:ad:de:ac:74:97:02:c8:30:6c:b3:2f:6a:01:60:
                    69:83:ed:75:fb:24:62:31:b9:be:e2:ee:07:ec:ca:
                    e0:6b:48:06:53:f2:94:56:1e:92:4b:fe:5d:7a:9f:
                    91:b7:e9:c6:09:83:a4:0f:ab:3f:3b:54:34:a9:f8:
                    2a:a8:21:89:5e:32:14:15:6a:8d:bc:54:d2:eb:cc:
                    bd:19:36:07:9d:90:aa:88:08:18:ad:73:d9:00:0f:
                    bb:a8:00:56:14:e7:8e:4a:f0:dd:59:e4:f6:00:ab:
                    4c:8a:61:f7:a7:6b:40:21:9e:8d:a7:e7:f2:ee:29:
                    13:44:55:9f:35:5b:76:ce:18:2e:28:8a:7b:f9:1f:
                    e8:13:1d:aa:09:d7:e6:8e:7d:79:55:79:05:18:b4:
                    c4:47:f6:f3:79:7d:73:7b:3e:15:4c:6f:60:e1:86:
                    7d:9a:71:3f:33:7b:82:7c:89:88:dc:f9:01:10:7d:
                    d5:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:9C:AC:3A:9F:AE:BC:56:17:74:C9:D4:C1:61:30:F1:06:FA:CC:2F
            X509v3 Authority Key Identifier:
                keyid:3E:0B:8E:AB:E8:33:BA:EF:95:00:DC:A4:1B:24:9B:FB:EC:F5:DA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/3E0B8EABE833BAEF9500DCA41B249BFBECF5DA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E0B8EABE833BAEF9500DCA41B249BFBECF5DA97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/3230302e37312e38322e302f32332d3233203d3e20323731323030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:66:fc:8a:e8:66:4d:3d:2d:ad:b6:74:af:cb:28:4b:7e:0b:
         cc:75:aa:ab:30:d6:0b:1e:e6:9f:ea:f8:22:81:37:b5:a4:00:
         82:ab:a8:25:75:1e:05:57:82:71:07:38:87:19:e3:ab:d5:23:
         15:aa:85:2f:6d:d4:91:a6:74:83:7b:a5:ec:c3:ce:f1:6e:5b:
         80:81:a0:37:f8:c9:f1:60:5c:d4:d6:64:38:06:8f:bb:ae:73:
         bc:59:a4:2a:74:6f:0e:fc:d6:39:f1:18:53:63:55:58:85:a2:
         b8:a4:a9:a5:ec:48:8d:0d:46:27:fe:ae:9c:2d:56:48:eb:1c:
         a4:ee:c6:b2:70:00:33:4f:50:55:74:41:72:b6:1e:47:3f:c6:
         88:42:57:42:5b:bf:22:4a:e8:a7:d8:f7:b6:ee:51:02:7f:ff:
         4a:5d:e0:2a:4b:cb:fe:ef:79:6e:68:6b:57:ba:e0:a0:6b:4d:
         03:ca:32:10:23:13:b4:63:11:e9:0f:83:15:3b:b2:e0:3a:fb:
         d7:42:7e:7a:1b:b3:a9:00:a7:16:9d:f6:ce:e7:99:46:8b:4f:
         3a:ce:6d:cb:16:d8:76:f9:dd:30:fc:e1:2a:00:6f:3e:87:14:
         f0:dc:aa:d8:5c:bb:d4:4e:7b:42:af:94:8d:5e:a1:6e:0f:c1:
         79:e0:af:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 21:12:17 2026 by rpki-client