Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/3230302e33392e36342e302f31392d3234203d3e203533303436.roa
File:                     3230302e33392e36342e302f31392d3234203d3e203533303436.roa (raw, json)
Hash identifier:          7QPLc4wDgswxYei0nhmyaIHihv1aZYBVzu0JNRcZZeA=
Subject key identifier:   C7:D2:C5:75:A4:7C:C4:42:3E:9F:1C:00:6C:91:F9:DD:F2:7A:27:3C
Certificate issuer:       /CN=CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3
Certificate serial:       44354225D44FABBB704ADE40157BABE95D9E7C31
Authority key identifier: CE:68:7B:DF:D3:E8:EB:AC:E7:EE:1E:A8:4F:7F:C1:BB:27:8B:3C:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/3230302e33392e36342e302f31392d3234203d3e203533303436.roa
Signing time:             Tue 07 Apr 2026 15:27:32 +0000
ROA not before:           Tue 07 Apr 2026 15:22:32 +0000
ROA not after:            Tue 06 Apr 2027 15:27:32 +0000
asID:                     53046
IP address blocks:        200.39.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.crl
                          rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 13:29:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:35:42:25:d4:4f:ab:bb:70:4a:de:40:15:7b:ab:e9:5d:9e:7c:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3
        Validity
            Not Before: Apr  7 15:22:32 2026 GMT
            Not After : Apr  6 15:27:32 2027 GMT
        Subject: CN=C7D2C575A47CC4423E9F1C006C91F9DDF27A273C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:36:cd:8e:db:6f:c5:fc:57:d6:55:53:e2:3e:
                    60:7c:0d:9f:f8:b5:f7:57:97:f3:78:7a:12:64:d1:
                    71:2e:4b:9b:fb:e2:b4:c8:d1:0b:95:79:85:de:6c:
                    11:74:6b:a3:9f:1a:b6:99:e9:ec:22:02:33:77:d9:
                    ee:63:95:0a:bb:d1:69:6b:31:f9:5f:39:34:23:28:
                    6b:10:7c:b3:23:ec:46:04:a8:b6:fe:b1:48:7a:6d:
                    dc:7f:a5:de:cb:2d:e4:d3:32:04:ee:57:53:0f:ed:
                    5b:9a:18:fa:73:81:85:ea:34:d8:4a:d9:e6:ff:eb:
                    fa:51:35:f5:42:fe:5e:7d:10:c8:48:91:fa:fc:86:
                    8e:c0:f9:55:65:28:90:1f:76:c7:ca:9e:a2:dd:56:
                    8a:c7:b5:ee:8d:8a:bb:cf:b7:23:e6:bb:4a:63:d5:
                    ab:ca:39:42:a7:0b:dc:53:3c:91:81:8a:f6:95:5f:
                    7c:57:b8:40:07:3e:76:73:83:56:10:d6:3a:22:34:
                    44:39:b4:31:b1:0a:12:54:13:50:f4:67:cf:36:ab:
                    8a:2e:e7:d3:5a:f7:c9:c7:0e:2b:53:7b:96:18:6b:
                    6f:5d:9b:54:d2:18:37:44:fa:1e:ff:7d:5e:c6:38:
                    1a:2c:13:db:10:de:fe:6b:8d:8e:51:1f:bd:57:ac:
                    2e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:D2:C5:75:A4:7C:C4:42:3E:9F:1C:00:6C:91:F9:DD:F2:7A:27:3C
            X509v3 Authority Key Identifier:
                keyid:CE:68:7B:DF:D3:E8:EB:AC:E7:EE:1E:A8:4F:7F:C1:BB:27:8B:3C:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/3230302e33392e36342e302f31392d3234203d3e203533303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         24:eb:32:2a:c1:a9:c3:58:2c:2a:c4:b9:05:52:d9:49:d0:cf:
         c8:55:07:0a:24:ee:79:7b:98:26:eb:42:63:03:ec:df:bc:c2:
         f4:c7:cc:50:29:36:d7:c0:62:c3:59:15:ae:85:fe:3a:fb:2d:
         8b:c0:d1:7c:1d:70:c4:ee:fc:ea:ca:c3:f1:71:2e:84:2e:af:
         11:80:e4:48:89:8b:f7:be:b9:51:74:e5:e5:a8:bb:c8:55:21:
         1e:61:65:97:e7:5e:85:05:f7:e9:05:e3:0f:d6:93:13:27:0d:
         b0:1e:59:0c:a0:66:60:29:3e:80:ed:01:09:e6:6e:60:8c:2d:
         59:ea:0a:97:f8:c4:70:ab:30:0d:a1:46:a9:e2:e7:00:1e:a3:
         c0:66:2d:37:3f:f6:a8:72:36:67:16:ce:dd:e6:66:13:a0:9e:
         30:48:85:e8:93:6c:5f:ba:6e:ba:83:86:3f:a9:cb:bf:27:4f:
         b8:08:99:81:62:2a:f9:df:09:6b:81:d3:4a:86:cd:f7:d2:a2:
         f9:6e:db:4a:2d:ea:e2:10:72:e2:bb:6c:f4:62:4c:c1:78:a8:
         4b:7e:d0:0b:11:a0:8f:b5:ed:f5:d5:d7:26:ec:f8:80:b5:c4:
         d2:2d:ff:66:b4:f3:35:0d:73:c4:d7:c2:66:40:0f:39:fe:77:
         81:e4:ef:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 18:14:09 2026 by rpki-client