Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/3230302e31312e3130362e302f32332d3233203d3e20323730343337.roa
File:                     3230302e31312e3130362e302f32332d3233203d3e20323730343337.roa (raw, json)
Hash identifier:          630qGb/qKM6aR4RZLI2lF3ZsF3e21AnlAYsYtLlaKR8=
Subject key identifier:   74:00:8A:DB:7A:B2:4C:1C:37:2B:E0:77:90:C0:D7:11:51:FB:35:6A
Certificate issuer:       /CN=D23AEA3BF9686D794967BECAC226FA9648876870
Certificate serial:       2ECEC7D9210A5A493F8853AFB6E5A711B6CEABA5
Authority key identifier: D2:3A:EA:3B:F9:68:6D:79:49:67:BE:CA:C2:26:FA:96:48:87:68:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23AEA3BF9686D794967BECAC226FA9648876870.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/3230302e31312e3130362e302f32332d3233203d3e20323730343337.roa
Signing time:             Tue 31 Mar 2026 22:17:19 +0000
ROA not before:           Tue 31 Mar 2026 22:12:19 +0000
ROA not after:            Tue 30 Mar 2027 22:17:19 +0000
asID:                     270437
IP address blocks:        200.11.106.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/D23AEA3BF9686D794967BECAC226FA9648876870.crl
                          rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/D23AEA3BF9686D794967BECAC226FA9648876870.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23AEA3BF9686D794967BECAC226FA9648876870.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 17:06:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:ce:c7:d9:21:0a:5a:49:3f:88:53:af:b6:e5:a7:11:b6:ce:ab:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D23AEA3BF9686D794967BECAC226FA9648876870
        Validity
            Not Before: Mar 31 22:12:19 2026 GMT
            Not After : Mar 30 22:17:19 2027 GMT
        Subject: CN=74008ADB7AB24C1C372BE07790C0D71151FB356A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:68:b9:1a:03:3f:12:20:fb:ea:fb:6e:00:73:
                    92:50:5c:68:80:ce:13:15:c7:1a:3d:4f:9b:3f:64:
                    6b:86:54:7f:41:7c:4d:30:bd:09:b5:09:2f:5a:f8:
                    d6:6b:93:5e:b5:5a:e7:59:77:f1:d8:6a:a3:a6:29:
                    0e:bf:69:8a:66:24:e1:91:32:df:3c:94:90:1f:c4:
                    97:bd:0a:a4:12:e5:c1:11:ef:08:db:43:fa:21:1d:
                    55:e7:71:2d:16:74:06:04:e1:fd:43:42:98:76:fa:
                    f8:eb:72:21:90:ea:94:d4:bb:da:ad:24:f5:77:95:
                    f4:00:cd:19:f7:df:92:ee:13:13:9a:93:fb:a2:df:
                    07:fd:d6:07:42:3e:d7:ea:ec:db:73:4d:50:8d:67:
                    1b:3d:dc:1b:eb:9e:2f:50:72:6d:f7:0e:7d:94:6c:
                    2d:d7:aa:0d:91:8a:aa:28:62:b1:81:ff:4e:bd:31:
                    dd:4b:d7:ab:62:d8:33:e5:b2:d7:42:2b:57:12:ce:
                    25:21:70:a8:03:c9:9b:6b:d5:36:b3:0f:8e:a0:cc:
                    fd:04:ca:a3:c0:b9:ff:85:15:75:94:2d:8b:70:c8:
                    f5:d6:42:d2:a0:b2:11:06:0a:ca:73:fa:9a:ff:b9:
                    ef:1f:24:c0:88:80:a9:2e:1c:63:9b:6a:5b:aa:1d:
                    d6:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:00:8A:DB:7A:B2:4C:1C:37:2B:E0:77:90:C0:D7:11:51:FB:35:6A
            X509v3 Authority Key Identifier:
                keyid:D2:3A:EA:3B:F9:68:6D:79:49:67:BE:CA:C2:26:FA:96:48:87:68:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/D23AEA3BF9686D794967BECAC226FA9648876870.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23AEA3BF9686D794967BECAC226FA9648876870.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/3230302e31312e3130362e302f32332d3233203d3e20323730343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.11.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:4c:e0:ee:c7:1c:ca:7a:66:20:24:6c:56:cc:d8:a0:67:a3:
         a5:b5:8e:e7:ee:ec:b1:49:ec:f8:77:f9:2a:dd:f4:9f:d4:08:
         21:af:4a:ba:a3:f5:f6:cf:90:0c:71:0f:01:c4:10:bd:79:25:
         b3:dd:d6:6d:10:7b:f2:33:d9:88:ed:5d:65:7c:7a:b0:b4:62:
         6f:4a:2d:b6:88:85:ff:c3:88:1c:07:a0:43:6c:d0:4b:02:28:
         da:72:9e:ad:f5:8f:4b:9e:a6:cb:55:60:0b:ca:bd:c8:eb:bb:
         80:56:13:41:35:f0:0a:93:f9:82:e1:7f:99:19:65:60:89:25:
         24:15:7b:ce:fa:3c:02:d4:87:d1:99:c8:5e:cf:0f:9d:93:1a:
         ac:f9:d5:93:bb:ba:52:6c:c1:e7:72:da:4d:05:22:59:88:95:
         38:e4:cb:31:22:48:dd:5c:c9:a9:1a:19:e6:9f:22:0a:d7:92:
         ab:9f:76:c8:3a:fe:c1:fd:6d:3f:4e:59:a0:d9:2b:aa:36:58:
         0d:88:30:91:9f:95:58:18:5e:ec:cd:4c:ff:06:64:96:42:e8:
         b6:fb:2b:b1:9d:b9:39:1b:e5:0d:24:f1:19:03:06:ca:e7:72:
         fa:f6:ca:98:f4:91:46:38:c4:86:13:77:e7:c2:ff:97:1e:e3:
         b5:0b:86:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 21:03:02 2026 by rpki-client