Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/etSLVnxx52Xm1vGKuXNk4brPEnRGE3VQQE7qUb6EpQJ/0/3230302e31342e33322e302f32332d3332203d3e20323734373037.roa
File:                     3230302e31342e33322e302f32332d3332203d3e20323734373037.roa (raw, json)
Hash identifier:          O77tHFuzZb+h2XEbvf0+VPgaqTcIWyPMnZz0Ud3Qm6I=
Subject key identifier:   BF:3B:32:00:6A:3C:9A:1D:C0:7F:74:1D:98:58:6E:60:E2:D9:7A:E6
Certificate issuer:       /CN=3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407
Certificate serial:       6951129416AE68F4B2408FA4611C472EE01C1DA6
Authority key identifier: 33:24:A1:D7:2C:5C:01:91:DA:1B:47:B8:BF:D1:BC:84:5B:5A:A4:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/etSLVnxx52Xm1vGKuXNk4brPEnRGE3VQQE7qUb6EpQJ/0/3230302e31342e33322e302f32332d3332203d3e20323734373037.roa
Signing time:             Thu 30 Apr 2026 14:52:22 +0000
ROA not before:           Thu 30 Apr 2026 14:47:22 +0000
ROA not after:            Thu 29 Apr 2027 14:52:22 +0000
asID:                     274707
IP address blocks:        200.14.32.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/etSLVnxx52Xm1vGKuXNk4brPEnRGE3VQQE7qUb6EpQJ/0/3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.crl
                          rsync://rpki-repo.registro.br/repo/etSLVnxx52Xm1vGKuXNk4brPEnRGE3VQQE7qUb6EpQJ/0/3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 09:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:51:12:94:16:ae:68:f4:b2:40:8f:a4:61:1c:47:2e:e0:1c:1d:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407
        Validity
            Not Before: Apr 30 14:47:22 2026 GMT
            Not After : Apr 29 14:52:22 2027 GMT
        Subject: CN=BF3B32006A3C9A1DC07F741D98586E60E2D97AE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f1:f1:b9:12:99:15:25:d2:d3:30:a6:34:ef:
                    9e:cb:49:3f:32:96:8f:6d:69:9b:d3:68:c1:00:e6:
                    00:d0:80:2e:94:8f:63:b2:d8:7d:a1:7d:13:f7:6c:
                    21:d1:92:f4:61:b7:f0:84:91:dd:1e:c5:e0:cc:e1:
                    55:58:27:96:7c:56:c3:7f:e2:20:00:72:82:cb:7e:
                    34:6f:1b:d1:94:e8:64:6b:c7:87:d4:50:3a:80:95:
                    ec:f2:09:ff:4f:f2:44:d3:fc:38:61:60:18:f0:80:
                    e0:02:00:64:5b:17:e9:66:b5:89:d6:d1:40:15:4a:
                    ac:3a:2e:2e:06:ba:e9:ed:51:f7:b3:96:e2:8d:21:
                    27:11:cd:04:50:48:ea:ba:92:69:ac:fa:9d:98:e4:
                    fc:3f:2b:80:95:92:07:91:e9:88:04:e4:e8:ec:c0:
                    67:52:b0:60:44:a2:c4:cf:8b:cf:a5:f6:69:32:dc:
                    91:0c:d4:a9:76:a5:31:a3:60:7a:3e:bf:9c:a9:c7:
                    81:71:d2:e8:07:ef:5d:dc:46:e7:0a:08:2e:9e:2a:
                    f7:9d:a9:a1:cc:49:21:f5:21:97:c3:a5:bd:a6:68:
                    f3:8b:34:45:63:41:cb:08:fc:43:9d:74:75:a3:ca:
                    e1:c3:53:70:86:db:4b:be:ba:af:64:cd:e8:17:7f:
                    ac:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:3B:32:00:6A:3C:9A:1D:C0:7F:74:1D:98:58:6E:60:E2:D9:7A:E6
            X509v3 Authority Key Identifier:
                keyid:33:24:A1:D7:2C:5C:01:91:DA:1B:47:B8:BF:D1:BC:84:5B:5A:A4:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/etSLVnxx52Xm1vGKuXNk4brPEnRGE3VQQE7qUb6EpQJ/0/3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/etSLVnxx52Xm1vGKuXNk4brPEnRGE3VQQE7qUb6EpQJ/0/3230302e31342e33322e302f32332d3332203d3e20323734373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:ca:87:0a:43:20:42:6a:1f:70:25:7f:fc:0a:78:7f:ca:e2:
         fb:9c:47:c8:54:0f:47:2f:7e:d7:47:08:7f:20:e8:37:d0:94:
         71:2e:d3:b7:e3:a8:ac:b9:cf:22:58:0c:fa:cf:41:41:83:e6:
         be:7f:12:50:a2:c1:56:8e:9e:7a:fe:9d:31:0b:be:7e:c0:cb:
         7f:2f:d4:42:00:11:39:1d:ee:d4:3e:01:d7:66:c9:ff:60:49:
         8a:17:72:ef:15:5a:4e:6f:8f:9b:38:79:8b:cd:3b:16:9d:63:
         d3:7d:90:e1:55:1e:80:c6:77:25:8f:34:f2:86:49:45:86:e4:
         ee:0f:cb:ca:d6:1f:7d:0f:b7:38:b6:0f:49:e1:11:6a:a0:17:
         72:a4:90:85:cd:09:96:21:89:f8:f7:d8:28:50:e9:9a:ed:99:
         2e:28:49:f7:a6:71:38:0b:5f:0f:05:74:e5:6f:9e:7c:fe:30:
         b7:42:f3:ed:a9:72:76:79:f9:d7:20:da:6f:b9:08:81:ff:d1:
         11:37:b1:59:d8:00:7f:07:ce:91:77:61:56:9b:74:ea:01:f4:
         04:9b:6b:76:18:1c:da:3a:72:f5:b8:b3:47:73:b2:b7:c8:c7:
         50:6e:63:bb:f7:90:2e:39:a8:6e:65:1b:58:74:77:03:bd:56:
         9f:5d:b3:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:43:46 2026 by rpki-client