Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3230302e3232302e3132382e302f32302d3234203d3e203237363933.roa
File:                     3230302e3232302e3132382e302f32302d3234203d3e203237363933.roa (raw, json)
Hash identifier:          kKN4u3mydLYWTryTS2+BsqQqR7n/LskPBWKM7dZnue4=
Subject key identifier:   AB:C2:39:CD:14:90:9B:DE:6E:0B:2C:17:4C:FC:0B:0A:2B:1A:CA:74
Certificate issuer:       /CN=3345439099C79C13F583D2238E3BB7D0D60D6877
Certificate serial:       5C233122D96ECB5C9D74BCA07BCC092163313FF6
Authority key identifier: 33:45:43:90:99:C7:9C:13:F5:83:D2:23:8E:3B:B7:D0:D6:0D:68:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3230302e3232302e3132382e302f32302d3234203d3e203237363933.roa
Signing time:             Mon 08 Jun 2026 12:35:31 +0000
ROA not before:           Mon 08 Jun 2026 12:30:31 +0000
ROA not after:            Mon 07 Jun 2027 12:35:31 +0000
asID:                     27693
IP address blocks:        200.220.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.crl
                          rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 13 Jun 2026 22:11:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:23:31:22:d9:6e:cb:5c:9d:74:bc:a0:7b:cc:09:21:63:31:3f:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3345439099C79C13F583D2238E3BB7D0D60D6877
        Validity
            Not Before: Jun  8 12:30:31 2026 GMT
            Not After : Jun  7 12:35:31 2027 GMT
        Subject: CN=ABC239CD14909BDE6E0B2C174CFC0B0A2B1ACA74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:24:9b:44:2d:8f:e0:08:2f:9d:90:5b:b3:87:
                    f0:4f:50:15:c2:16:58:31:dc:b0:a1:bb:da:9d:54:
                    8b:5b:6d:68:f0:5d:59:76:b5:0a:30:87:35:71:ad:
                    e5:5d:63:bf:ea:1e:43:c5:15:a4:0b:23:5f:b5:94:
                    59:0a:32:4a:a3:61:de:d8:f9:db:40:d5:ec:56:c4:
                    87:5e:32:77:21:c3:30:2d:9b:c4:05:d4:cc:60:71:
                    6b:82:3e:88:5a:ee:80:1a:24:00:9d:1d:b9:a1:65:
                    1b:e2:ec:3a:53:2c:db:14:9d:6f:d9:cd:f3:ca:8e:
                    f1:96:eb:4a:23:04:c4:0f:89:95:58:20:36:54:05:
                    bc:96:3a:ce:0f:6e:26:ba:1f:d6:ad:ef:1d:b9:4a:
                    86:ee:eb:95:c7:31:c2:38:fb:ca:c8:55:ac:b3:58:
                    b2:8e:93:bf:32:35:49:14:87:61:0b:45:1f:c1:8e:
                    98:0d:47:0a:6a:3d:54:19:f1:10:1d:ec:aa:d2:5d:
                    99:18:86:43:9a:61:77:6d:6f:6e:f4:2e:11:5c:87:
                    54:b2:67:05:0a:90:3a:e5:8a:64:6b:d9:e1:f9:82:
                    da:f9:58:00:3e:cf:71:d5:9b:58:21:16:0d:ff:6c:
                    49:2f:d8:8f:af:43:3d:38:2f:ba:fd:b8:11:1a:83:
                    03:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:C2:39:CD:14:90:9B:DE:6E:0B:2C:17:4C:FC:0B:0A:2B:1A:CA:74
            X509v3 Authority Key Identifier:
                keyid:33:45:43:90:99:C7:9C:13:F5:83:D2:23:8E:3B:B7:D0:D6:0D:68:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3230302e3232302e3132382e302f32302d3234203d3e203237363933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.220.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         37:25:ba:df:ee:63:13:c3:59:26:fe:8f:f8:e9:2a:99:cc:24:
         a6:c5:48:22:2e:9f:a9:2e:14:67:03:84:26:90:34:b7:b8:7a:
         8d:bd:7b:76:46:ac:71:02:47:f0:8b:e4:a4:db:96:a7:29:ba:
         d3:4d:64:4f:f1:77:fd:1d:a3:39:a7:dd:3e:09:20:12:86:29:
         15:c5:be:86:97:78:09:2e:57:d4:6d:78:a7:8f:1f:6a:0d:91:
         cc:93:1c:d6:d4:50:a3:09:13:9d:23:b5:c3:f6:61:04:a1:51:
         f7:3e:70:4b:50:07:73:e2:e0:f9:8d:c5:6d:16:3f:a6:45:d8:
         d1:27:a6:11:1b:63:d2:a0:8f:88:94:ee:d2:62:1a:c4:81:2e:
         7f:44:6a:f4:78:dc:fe:55:ab:1f:83:dd:77:28:7d:d9:e4:a7:
         07:7e:98:a8:54:43:7f:a0:b5:f6:94:2a:af:c8:f2:b8:69:8e:
         cb:fc:4f:dd:67:ad:43:71:4f:5d:f1:12:d4:ee:8b:24:ac:07:
         80:cd:d2:6e:6a:50:96:e5:b2:6f:8a:5c:12:36:c4:77:8c:2b:
         77:84:14:71:36:7a:74:39:b5:a8:97:97:f6:eb:f9:ef:91:41:
         58:48:04:ef:a0:9c:86:9e:6e:85:d5:08:ea:49:6f:29:ed:53:
         de:82:4b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:15:30 2026 by rpki-client