Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/3230302e37312e38322e302f32332d3233203d3e20323731323030.roa
File:                     3230302e37312e38322e302f32332d3233203d3e20323731323030.roa (raw, json)
Hash identifier:          o6GXZrJYFipMA+xotEyN34SZ6d5nDYvEmMmFm8eF5WI=
Subject key identifier:   F7:1E:8B:B7:07:7E:78:48:32:BD:98:E6:DE:81:B6:91:BF:62:F0:63
Certificate issuer:       /CN=00062F0CCB274AAB3BE95F0DA0FA1F54CFF4652F
Certificate serial:       02BD71899FD4839CEA8FDA9EC09B52F39F88DAEC
Authority key identifier: 00:06:2F:0C:CB:27:4A:AB:3B:E9:5F:0D:A0:FA:1F:54:CF:F4:65:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00062F0CCB274AAB3BE95F0DA0FA1F54CFF4652F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/3230302e37312e38322e302f32332d3233203d3e20323731323030.roa
Signing time:             Mon 23 Mar 2026 17:09:39 +0000
ROA not before:           Mon 23 Mar 2026 17:04:39 +0000
ROA not after:            Mon 22 Mar 2027 17:09:39 +0000
asID:                     271200
IP address blocks:        200.71.82.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/00062F0CCB274AAB3BE95F0DA0FA1F54CFF4652F.crl
                          rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/00062F0CCB274AAB3BE95F0DA0FA1F54CFF4652F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00062F0CCB274AAB3BE95F0DA0FA1F54CFF4652F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:bd:71:89:9f:d4:83:9c:ea:8f:da:9e:c0:9b:52:f3:9f:88:da:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00062F0CCB274AAB3BE95F0DA0FA1F54CFF4652F
        Validity
            Not Before: Mar 23 17:04:39 2026 GMT
            Not After : Mar 22 17:09:39 2027 GMT
        Subject: CN=F71E8BB7077E784832BD98E6DE81B691BF62F063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7d:da:0c:94:a6:17:a4:e7:3e:84:a7:12:c7:
                    70:fb:b7:d0:a8:5a:ab:bd:74:70:d4:71:bc:69:25:
                    fb:86:32:12:86:86:cb:a5:61:fb:2c:d3:4b:22:82:
                    9a:fe:48:8d:85:95:aa:38:81:3c:75:22:e2:e0:dd:
                    38:37:69:32:15:c1:be:9e:b2:42:0d:44:23:3d:ee:
                    54:39:48:ce:a4:49:ea:67:bf:c4:4f:16:de:82:e4:
                    fa:e7:0c:1b:f3:a2:92:60:28:d0:79:ba:ff:bf:0d:
                    ee:60:e6:ca:51:f3:a0:46:34:84:ac:c3:d4:90:61:
                    fb:45:98:ce:9a:79:1c:95:f6:f0:8b:10:ee:90:05:
                    b1:ca:89:70:67:61:d2:16:6b:cf:38:8c:2a:59:9a:
                    18:04:f4:d4:64:1e:e2:d1:a0:bb:cf:3d:aa:9f:52:
                    04:12:54:ba:25:5b:05:19:49:27:92:59:38:e6:09:
                    8e:d7:e2:0b:57:2a:03:4c:7e:27:58:65:1f:09:b0:
                    0a:a4:80:a6:29:47:8f:4d:74:b0:39:8f:81:d4:c4:
                    ad:e0:71:dd:a5:da:72:18:b0:0d:5c:7c:3f:7c:ec:
                    19:60:d1:9f:d9:0d:6e:53:2a:40:c0:12:52:42:82:
                    36:ea:60:49:fb:b6:d5:7c:03:45:c0:1b:bd:84:2f:
                    16:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:1E:8B:B7:07:7E:78:48:32:BD:98:E6:DE:81:B6:91:BF:62:F0:63
            X509v3 Authority Key Identifier:
                keyid:00:06:2F:0C:CB:27:4A:AB:3B:E9:5F:0D:A0:FA:1F:54:CF:F4:65:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/00062F0CCB274AAB3BE95F0DA0FA1F54CFF4652F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00062F0CCB274AAB3BE95F0DA0FA1F54CFF4652F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/3230302e37312e38322e302f32332d3233203d3e20323731323030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:59:ff:12:f0:10:8f:7e:d5:2d:d1:63:2e:25:7c:1e:71:3b:
         cf:9e:ac:75:cd:39:33:93:05:4f:c2:57:1b:9e:71:dd:cf:32:
         4f:e1:a0:db:69:18:ba:f4:ec:20:53:42:40:a2:03:ad:cc:81:
         15:84:1c:f8:37:e4:73:5e:e5:c6:51:ae:23:73:d6:14:c2:78:
         fc:b5:9f:73:fa:6f:74:7c:c5:79:86:9c:f3:a1:0c:f4:c0:80:
         53:b6:68:9a:72:fb:73:77:d5:c4:1e:a1:d2:87:a3:69:9e:f4:
         72:ad:73:4a:35:06:72:cb:e3:82:50:dc:33:97:31:3b:82:f4:
         fa:c1:ac:12:d7:dc:f7:62:dc:24:04:7d:92:0c:87:e4:94:fe:
         06:74:61:8b:24:65:67:69:76:3a:81:51:9b:c4:5d:52:92:2e:
         62:20:96:22:c6:c0:25:e8:65:c0:bf:99:cb:61:46:7d:fa:33:
         b4:cf:98:2d:1a:ab:75:ed:bb:b3:bd:00:77:53:36:57:86:2e:
         f5:96:05:f9:14:cf:5f:31:b7:c5:5a:3c:91:69:6e:29:79:d7:
         91:e1:6b:a2:8b:a5:d3:ab:c2:60:08:8f:0e:8b:8d:b8:3c:3d:
         27:27:59:3c:b3:ee:e9:50:14:62:c7:e5:c3:ce:d4:e7:75:6f:
         0e:d7:a6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:05:06 2026 by rpki-client