Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/3230302e37312e38322e302f32342d3234203d3e20323731323030.roa
File:                     3230302e37312e38322e302f32342d3234203d3e20323731323030.roa (raw, json)
Hash identifier:          yXxtXtbNx8/8rAV8CQ4eclgxKCZqyGt+rc/L4pGkToM=
Subject key identifier:   F4:40:76:29:9D:55:EC:D0:05:56:E2:F8:75:44:63:62:B8:48:99:A8
Certificate issuer:       /CN=00062F0CCB274AAB3BE95F0DA0FA1F54CFF4652F
Certificate serial:       5282355CAB8E561C5F575C156EFE95B196619397
Authority key identifier: 00:06:2F:0C:CB:27:4A:AB:3B:E9:5F:0D:A0:FA:1F:54:CF:F4:65:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00062F0CCB274AAB3BE95F0DA0FA1F54CFF4652F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/3230302e37312e38322e302f32342d3234203d3e20323731323030.roa
Signing time:             Mon 23 Mar 2026 17:09:32 +0000
ROA not before:           Mon 23 Mar 2026 17:04:32 +0000
ROA not after:            Mon 22 Mar 2027 17:09:32 +0000
asID:                     271200
IP address blocks:        200.71.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/00062F0CCB274AAB3BE95F0DA0FA1F54CFF4652F.crl
                          rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/00062F0CCB274AAB3BE95F0DA0FA1F54CFF4652F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00062F0CCB274AAB3BE95F0DA0FA1F54CFF4652F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:82:35:5c:ab:8e:56:1c:5f:57:5c:15:6e:fe:95:b1:96:61:93:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00062F0CCB274AAB3BE95F0DA0FA1F54CFF4652F
        Validity
            Not Before: Mar 23 17:04:32 2026 GMT
            Not After : Mar 22 17:09:32 2027 GMT
        Subject: CN=F44076299D55ECD00556E2F875446362B84899A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:75:23:57:95:8b:26:1f:46:10:cf:1b:f5:3f:
                    24:44:1b:b7:1e:c2:1d:47:09:0f:63:a0:6a:81:a7:
                    c7:65:78:4b:3a:15:6e:9d:9e:48:24:69:9b:1a:26:
                    0e:cb:72:9e:b9:fb:dc:df:7a:eb:1e:7f:25:84:89:
                    f8:43:18:0a:d5:8e:08:9e:56:db:be:26:e7:e4:6f:
                    e0:36:64:ce:e2:46:8e:cb:06:7d:74:7f:ce:44:cd:
                    87:2d:24:88:49:34:49:45:a1:30:a6:be:b3:3b:91:
                    5d:3d:24:1f:5f:3f:fb:11:cb:b0:3a:7f:c2:eb:1b:
                    7c:ea:f4:35:f4:aa:30:7f:e3:aa:6a:1c:87:22:cd:
                    97:ee:10:a1:69:3c:1f:a2:7e:15:1b:90:c7:79:9f:
                    1b:f5:77:70:19:2e:c1:fa:4d:50:2f:15:48:79:0a:
                    cd:f2:05:0d:0e:1d:47:14:b3:ad:fb:12:7e:33:e0:
                    82:99:5f:2c:a7:e4:58:50:96:0d:41:24:f9:fa:ed:
                    64:9c:58:6e:2f:57:30:fe:1b:a5:62:27:20:2c:c0:
                    2f:0a:86:c7:f2:c4:b1:78:15:3c:94:c2:b9:58:95:
                    6f:cb:3f:8a:40:57:bb:d7:fa:ae:1c:6c:c6:97:73:
                    c4:16:14:e7:70:d7:7a:1e:e4:92:ea:70:65:fd:19:
                    b6:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:40:76:29:9D:55:EC:D0:05:56:E2:F8:75:44:63:62:B8:48:99:A8
            X509v3 Authority Key Identifier:
                keyid:00:06:2F:0C:CB:27:4A:AB:3B:E9:5F:0D:A0:FA:1F:54:CF:F4:65:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/00062F0CCB274AAB3BE95F0DA0FA1F54CFF4652F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00062F0CCB274AAB3BE95F0DA0FA1F54CFF4652F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/3230302e37312e38322e302f32342d3234203d3e20323731323030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:12:0d:4b:5d:53:b3:87:32:6b:7b:ec:70:51:1e:d6:11:9a:
         5b:fe:6d:3c:ee:e4:54:17:d6:f0:ac:08:fa:b9:16:54:d6:13:
         01:ad:3f:ce:c0:92:f3:3f:bd:20:2d:75:73:42:c1:68:ff:3b:
         d9:e4:e6:77:d6:69:48:ff:1e:aa:65:82:31:32:6d:79:70:ac:
         da:da:95:c5:6a:62:e1:1d:b8:7b:39:6f:03:de:2e:ad:30:9a:
         97:5b:16:6e:60:f5:df:8b:68:71:6d:2c:e3:19:01:b8:1b:78:
         32:fa:c1:13:17:90:a5:62:3f:6c:bc:df:e1:43:6b:00:d6:8e:
         83:53:44:07:dc:ac:b7:e5:56:2b:ae:00:eb:35:0c:e7:de:87:
         80:6c:28:4b:0f:45:4f:a1:fb:ea:06:8a:ad:81:74:1d:b5:ab:
         19:1e:27:e4:2b:6f:d4:bb:e3:9d:4e:01:74:b2:77:32:d4:8d:
         d9:a2:70:77:1f:1e:16:82:f8:01:6d:4c:d5:35:40:73:60:45:
         44:22:a2:2e:96:86:d0:d0:f0:15:21:3c:8f:fc:38:54:c8:10:
         ae:b0:a1:07:e5:d9:7d:66:a2:ff:2a:a6:b4:77:4d:42:04:2e:
         b5:30:52:7b:68:f4:05:88:4b:ca:d7:a1:22:ba:8b:f8:e4:6a:
         4f:96:a0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:21:14 2026 by rpki-client