Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/3230302e3231352e3235342e302f32332d3233203d3e20323730363135.roa
File:                     3230302e3231352e3235342e302f32332d3233203d3e20323730363135.roa (raw, json)
Hash identifier:          xRla1L1DM25dOM6dFkPgZLIAfHpwjifefvuaEUTKQoA=
Subject key identifier:   7A:82:B7:E6:06:E9:55:91:67:69:35:5B:15:06:95:99:C8:1A:21:B4
Certificate issuer:       /CN=6114284DE6F274DEE8232CD8A210B10F99008FCB
Certificate serial:       31C8A7E75B0ECB5D505FB25433305AFBEE6474F3
Authority key identifier: 61:14:28:4D:E6:F2:74:DE:E8:23:2C:D8:A2:10:B1:0F:99:00:8F:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6114284DE6F274DEE8232CD8A210B10F99008FCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/3230302e3231352e3235342e302f32332d3233203d3e20323730363135.roa
Signing time:             Mon 06 Apr 2026 13:58:33 +0000
ROA not before:           Mon 06 Apr 2026 13:53:33 +0000
ROA not after:            Mon 05 Apr 2027 13:58:33 +0000
asID:                     270615
IP address blocks:        200.215.254.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/6114284DE6F274DEE8232CD8A210B10F99008FCB.crl
                          rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/6114284DE6F274DEE8232CD8A210B10F99008FCB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6114284DE6F274DEE8232CD8A210B10F99008FCB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 04:50:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:c8:a7:e7:5b:0e:cb:5d:50:5f:b2:54:33:30:5a:fb:ee:64:74:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6114284DE6F274DEE8232CD8A210B10F99008FCB
        Validity
            Not Before: Apr  6 13:53:33 2026 GMT
            Not After : Apr  5 13:58:33 2027 GMT
        Subject: CN=7A82B7E606E955916769355B15069599C81A21B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:45:03:28:4a:74:66:e9:2d:25:71:7a:df:cc:
                    df:19:d2:34:fa:05:72:e1:2e:26:8c:9c:3f:6f:59:
                    c6:f0:a6:e4:74:1a:44:eb:1c:69:2a:0b:5f:ba:31:
                    33:a8:06:6d:7f:ad:6a:5e:06:a3:37:56:b6:af:04:
                    f6:2f:df:d7:a4:33:c3:bc:87:5c:a7:b4:8b:5c:22:
                    04:fc:7e:87:f0:08:0b:67:bf:75:f5:9a:95:55:97:
                    89:86:ba:a6:74:e1:fa:97:1a:4b:a7:9a:cd:81:fe:
                    23:a3:5a:ef:cb:86:ba:b8:1c:cc:a2:37:ad:9b:6e:
                    9e:35:d6:c3:56:e2:a5:72:81:09:e8:dc:6e:6e:3d:
                    c9:7b:a8:c8:c8:97:60:a3:c9:b8:10:9a:84:22:12:
                    e9:8e:0e:6e:42:5c:59:b9:1c:4b:b8:f6:46:17:4d:
                    7f:d8:ad:e8:82:a7:3a:5b:54:32:0e:6f:56:10:40:
                    45:77:42:48:31:e0:a3:22:83:27:c4:0b:84:0c:e4:
                    bd:69:72:3e:c0:8e:da:f4:2b:a1:80:14:45:d6:79:
                    ae:11:f3:54:83:8e:a6:8f:dc:ca:c5:aa:ed:4d:ed:
                    8a:28:db:ce:b4:da:89:c7:93:df:05:f5:e3:a2:0b:
                    b5:16:b5:34:0a:b1:93:b7:cd:4f:cb:4b:19:4f:cd:
                    48:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:82:B7:E6:06:E9:55:91:67:69:35:5B:15:06:95:99:C8:1A:21:B4
            X509v3 Authority Key Identifier:
                keyid:61:14:28:4D:E6:F2:74:DE:E8:23:2C:D8:A2:10:B1:0F:99:00:8F:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/6114284DE6F274DEE8232CD8A210B10F99008FCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6114284DE6F274DEE8232CD8A210B10F99008FCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/3230302e3231352e3235342e302f32332d3233203d3e20323730363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.215.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b5:59:60:95:62:41:84:8f:f5:b1:0e:ea:e7:f5:7a:cb:b5:2e:
         50:75:a2:b3:89:f5:9b:12:94:b8:12:51:40:b2:e2:27:8b:6e:
         14:e5:7f:39:6f:9b:39:5b:46:21:01:f5:ac:1b:4f:3a:73:88:
         51:1a:0e:55:7d:91:40:03:93:9a:6d:5e:cc:9a:9c:68:e1:00:
         99:e9:fa:fe:aa:5e:ce:25:5e:46:2b:67:24:23:31:b4:66:ee:
         31:94:c7:ac:55:92:be:cb:c9:0f:b5:b8:03:b9:4e:0e:c5:55:
         c9:d9:14:45:d1:69:74:39:ba:5b:3e:1c:4a:e3:33:5e:95:da:
         21:c1:f1:73:17:0b:35:65:37:36:e0:75:55:4a:55:8e:23:7c:
         95:18:ae:b1:43:cb:c2:07:25:0e:23:24:eb:c9:00:ac:07:c8:
         e1:fc:72:a4:c3:c4:58:e7:d2:1a:4a:61:5c:73:c0:5c:1c:cc:
         e3:77:bf:21:4f:0a:af:5c:3b:da:38:c0:a7:d9:73:d0:dc:87:
         55:11:72:51:f7:97:cf:54:83:02:ea:e3:4a:b9:d1:10:80:1b:
         db:cc:e6:c8:67:e4:01:24:fe:24:08:0d:e6:96:70:2a:be:0f:
         6c:62:9f:19:66:cd:f1:c2:a3:38:c7:d6:26:61:18:7c:6b:48:
         44:10:d4:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 07:44:24 2026 by rpki-client