Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/0/3230302e31312e3130342e302f32332d3234203d3e20323730343337.roa
File:                     3230302e31312e3130342e302f32332d3234203d3e20323730343337.roa (raw, json)
Hash identifier:          8Y9xX1CLSpZcjqj4i5EH61JUj1hpY0sfqXARlnQ1fUM=
Subject key identifier:   7F:31:E7:24:1F:70:0B:BB:15:4F:FD:32:9A:D6:5D:97:0F:A9:57:C0
Certificate issuer:       /CN=E678198063C3D4302A92839A1B091585EA45BD03
Certificate serial:       7FCDFBEA2846BFC92F6202E7CFAA7CD0B7CEF51E
Authority key identifier: E6:78:19:80:63:C3:D4:30:2A:92:83:9A:1B:09:15:85:EA:45:BD:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E678198063C3D4302A92839A1B091585EA45BD03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/0/3230302e31312e3130342e302f32332d3234203d3e20323730343337.roa
Signing time:             Fri 04 Sep 2026 12:06:16 +0000
ROA not before:           Fri 04 Sep 2026 12:01:16 +0000
ROA not after:            Fri 03 Sep 2027 12:06:16 +0000
asID:                     270437
IP address blocks:        200.11.104.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/0/E678198063C3D4302A92839A1B091585EA45BD03.crl
                          rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/0/E678198063C3D4302A92839A1B091585EA45BD03.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E678198063C3D4302A92839A1B091585EA45BD03.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 15:49:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:cd:fb:ea:28:46:bf:c9:2f:62:02:e7:cf:aa:7c:d0:b7:ce:f5:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E678198063C3D4302A92839A1B091585EA45BD03
        Validity
            Not Before: Sep  4 12:01:16 2026 GMT
            Not After : Sep  3 12:06:16 2027 GMT
        Subject: CN=7F31E7241F700BBB154FFD329AD65D970FA957C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5a:c8:d6:27:1e:f9:06:02:c5:3f:05:4d:23:
                    f2:f0:5f:d0:ce:88:6c:06:ce:1e:c8:ee:98:3c:67:
                    4f:cf:c7:b8:a0:cc:5c:0a:ed:74:3a:48:c6:b3:e4:
                    60:f6:3d:13:72:d3:1f:f9:b6:9a:12:de:49:c1:cf:
                    23:1f:ea:38:93:c9:72:de:b8:7a:e9:84:19:71:1d:
                    7c:ef:e4:9c:ef:b2:74:70:14:49:51:82:f3:c2:c5:
                    f0:e8:65:b4:66:05:eb:f0:c0:5a:44:ce:6b:3b:a8:
                    ec:92:77:7b:ac:6a:5d:02:5e:e1:65:e0:a2:f1:d7:
                    95:f2:0b:d9:34:ec:1e:62:e1:4d:d2:fd:c4:e6:41:
                    be:ad:4b:80:33:a0:36:b3:6a:27:f5:b6:8f:53:40:
                    42:c9:7b:b1:d2:05:f4:1c:6f:4b:f2:dd:2c:1e:9c:
                    11:a1:7f:2f:3d:b0:69:89:07:7e:9c:f5:c6:1e:23:
                    45:25:26:b8:12:3b:3f:44:2f:59:62:98:e8:1c:c0:
                    70:86:85:b1:56:d9:4c:65:c8:42:c9:9e:07:7d:53:
                    47:e0:17:2b:9e:a0:9c:6c:bc:d5:8b:d4:33:4e:80:
                    db:ad:3d:01:aa:71:24:6e:e9:dc:89:a3:20:41:a9:
                    c8:77:8e:d9:c9:4d:b0:13:6d:a2:ef:a9:47:09:dc:
                    03:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:31:E7:24:1F:70:0B:BB:15:4F:FD:32:9A:D6:5D:97:0F:A9:57:C0
            X509v3 Authority Key Identifier:
                keyid:E6:78:19:80:63:C3:D4:30:2A:92:83:9A:1B:09:15:85:EA:45:BD:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/0/E678198063C3D4302A92839A1B091585EA45BD03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E678198063C3D4302A92839A1B091585EA45BD03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/0/3230302e31312e3130342e302f32332d3234203d3e20323730343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.11.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:ea:62:62:a8:65:5b:50:c2:46:24:ea:d0:f9:44:30:88:0e:
         6a:3a:11:13:e0:87:9e:ef:9b:52:ad:19:3b:15:ac:b2:2d:89:
         99:18:7f:cf:c1:f1:76:09:a1:c7:7a:3c:3c:b5:d7:5d:d3:6c:
         8a:2c:fe:d3:72:8c:63:28:1d:b1:b6:2b:76:7a:c3:d5:1b:11:
         59:bf:45:2c:90:4d:20:06:55:04:67:75:82:b7:e0:9a:31:a4:
         ce:60:3a:43:ee:9d:e1:23:f0:46:8c:8b:53:2b:47:f9:c4:5f:
         72:df:f7:59:23:fd:14:8e:38:68:4e:5b:71:36:58:b1:a9:a1:
         e9:47:64:71:bc:fd:a9:4c:28:8a:70:48:a7:64:28:3e:72:57:
         73:31:cd:da:1a:cf:2b:73:29:9a:c7:c7:d4:8c:8b:43:29:24:
         e0:6f:a1:0d:19:26:98:eb:1a:17:29:8f:d1:76:8e:c0:47:7d:
         01:41:ce:95:8f:ce:ba:ab:46:68:0d:e5:3a:80:2d:af:79:5e:
         5c:a3:d0:32:74:b0:8e:66:c3:0b:71:0a:4e:ae:0d:bd:34:b6:
         33:15:0b:c5:5e:cb:41:9d:47:86:5c:b7:14:f4:66:e1:50:4b:
         37:ab:71:a5:bb:9f:90:1f:7e:52:5e:96:69:37:eb:89:12:17:
         cd:4c:bb:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:59:28 2026 by rpki-client