Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/3230302e3231352e3235322e302f32332d3233203d3e20323730363135.roa
File:                     3230302e3231352e3235322e302f32332d3233203d3e20323730363135.roa (raw, json)
Hash identifier:          3dCidhoCQYdAebDa5Pq+4+1S3MoVKFo90H9wnnPV4jk=
Subject key identifier:   09:53:35:20:B6:CF:68:FA:4F:BA:AE:2F:17:98:CA:10:AD:22:40:C6
Certificate issuer:       /CN=6114284DE6F274DEE8232CD8A210B10F99008FCB
Certificate serial:       021C78C9D30226FB46A81F3C6183BF2B28F794FC
Authority key identifier: 61:14:28:4D:E6:F2:74:DE:E8:23:2C:D8:A2:10:B1:0F:99:00:8F:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6114284DE6F274DEE8232CD8A210B10F99008FCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/3230302e3231352e3235322e302f32332d3233203d3e20323730363135.roa
Signing time:             Mon 06 Apr 2026 13:58:34 +0000
ROA not before:           Mon 06 Apr 2026 13:53:34 +0000
ROA not after:            Mon 05 Apr 2027 13:58:34 +0000
asID:                     270615
IP address blocks:        200.215.252.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/6114284DE6F274DEE8232CD8A210B10F99008FCB.crl
                          rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/6114284DE6F274DEE8232CD8A210B10F99008FCB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6114284DE6F274DEE8232CD8A210B10F99008FCB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 04:50:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:1c:78:c9:d3:02:26:fb:46:a8:1f:3c:61:83:bf:2b:28:f7:94:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6114284DE6F274DEE8232CD8A210B10F99008FCB
        Validity
            Not Before: Apr  6 13:53:34 2026 GMT
            Not After : Apr  5 13:58:34 2027 GMT
        Subject: CN=09533520B6CF68FA4FBAAE2F1798CA10AD2240C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f4:c8:ed:15:7c:32:24:a7:6f:f2:5a:9a:08:
                    db:c4:e6:bb:d8:09:90:93:68:09:ff:fa:d8:dd:17:
                    7b:47:35:5a:57:9c:5f:4f:bf:20:9e:f1:10:bf:b2:
                    f8:d9:bc:fc:11:cc:f1:3a:9e:1e:32:e9:81:fc:61:
                    54:1e:e8:5b:42:c2:0a:56:b5:b7:46:1a:e9:45:40:
                    60:ca:d9:54:e7:14:e7:f1:fe:33:3a:36:fa:6a:3f:
                    f0:e5:33:f0:0a:45:70:15:57:1c:0d:d3:4f:cb:79:
                    51:c9:1a:b8:fa:ab:71:4d:f6:bd:8e:5c:7f:57:a8:
                    53:0d:69:bc:eb:17:26:4c:4e:f4:55:6c:0b:8a:17:
                    02:a7:2a:fb:9c:c9:76:e3:ce:7e:98:90:56:87:f6:
                    25:bf:4e:61:66:32:8b:fa:6c:1d:a6:14:8b:36:51:
                    50:4b:df:5c:1e:51:d6:3a:61:9f:50:55:47:81:f0:
                    1e:58:46:39:b1:7c:de:32:84:e9:f4:cb:d7:3f:55:
                    fa:4e:78:10:df:2f:d2:c0:11:d3:7e:c5:c4:c8:80:
                    48:bd:61:20:b0:7a:cd:39:72:78:ee:5e:c6:08:00:
                    4d:6a:8c:f4:c4:7f:e3:c3:ee:fd:c9:65:cc:99:b0:
                    7f:7d:63:ab:6b:68:1e:73:c3:0d:05:25:25:ca:24:
                    a0:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:53:35:20:B6:CF:68:FA:4F:BA:AE:2F:17:98:CA:10:AD:22:40:C6
            X509v3 Authority Key Identifier:
                keyid:61:14:28:4D:E6:F2:74:DE:E8:23:2C:D8:A2:10:B1:0F:99:00:8F:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/6114284DE6F274DEE8232CD8A210B10F99008FCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6114284DE6F274DEE8232CD8A210B10F99008FCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/3230302e3231352e3235322e302f32332d3233203d3e20323730363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.215.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         83:10:73:09:d6:3e:69:19:82:5d:15:42:55:cd:8e:c1:e7:2b:
         80:f1:99:ef:2f:f3:c7:d2:95:bc:f9:bc:9c:16:bb:7c:44:25:
         e8:58:72:65:0f:4c:d8:1e:52:59:75:6a:10:58:43:22:5f:a2:
         2d:2d:db:a0:8b:1f:5f:1d:47:01:3d:c8:e8:08:b3:8c:1a:9c:
         3f:da:dc:f7:e0:fb:84:69:67:e6:13:0e:33:1e:47:d3:f5:e2:
         73:d8:0a:0a:d9:c9:6d:e5:22:f5:de:4c:5e:b6:93:60:74:e0:
         ff:fc:46:ba:d2:b3:1b:f4:58:6a:03:a5:ae:9b:2a:79:63:02:
         9a:cf:c6:3b:46:14:bb:c9:4f:a9:be:bc:dc:49:a6:bd:72:09:
         6f:44:19:79:9d:2d:60:78:63:e2:3d:7d:b7:f2:95:a1:79:11:
         6f:6e:45:9b:87:b3:1b:fa:5d:7f:be:8e:ee:65:f2:e4:66:5b:
         cd:82:d7:6c:78:f3:f7:24:2b:d7:86:75:98:b7:1f:d1:31:62:
         57:ad:b0:68:22:20:a6:ec:9f:6e:67:0b:c9:b5:47:b8:d3:38:
         3b:d9:80:4d:89:23:20:66:a3:c9:c5:07:11:2c:c6:7d:e8:07:
         ac:bb:73:07:d5:7a:9d:cc:e3:0f:05:00:ea:16:e5:0c:46:5a:
         d3:8d:51:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 07:44:43 2026 by rpki-client