Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/3230302e3232302e3134342e302f32322d3234203d3e203238353736.roa
File:                     3230302e3232302e3134342e302f32322d3234203d3e203238353736.roa (raw, json)
Hash identifier:          dNwtlqasajvIj7EmKykWPvvRnPxtwfbwKagyW2Ze7Vs=
Subject key identifier:   54:49:7A:E7:D0:A7:7D:23:5A:E3:3E:3D:36:AD:84:27:EE:8B:2C:E0
Certificate issuer:       /CN=BD1E87C8514998E362292741C70F693178FDD20E
Certificate serial:       24417B6C305DE5A2DF961E20942646258C85070B
Authority key identifier: BD:1E:87:C8:51:49:98:E3:62:29:27:41:C7:0F:69:31:78:FD:D2:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/3230302e3232302e3134342e302f32322d3234203d3e203238353736.roa
Signing time:             Sat 28 Mar 2026 00:30:33 +0000
ROA not before:           Sat 28 Mar 2026 00:25:33 +0000
ROA not after:            Sat 27 Mar 2027 00:30:33 +0000
asID:                     28576
IP address blocks:        200.220.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.crl
                          rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 08 Apr 2026 19:23:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:41:7b:6c:30:5d:e5:a2:df:96:1e:20:94:26:46:25:8c:85:07:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD1E87C8514998E362292741C70F693178FDD20E
        Validity
            Not Before: Mar 28 00:25:33 2026 GMT
            Not After : Mar 27 00:30:33 2027 GMT
        Subject: CN=54497AE7D0A77D235AE33E3D36AD8427EE8B2CE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d3:8f:e6:49:6d:92:cc:9c:55:be:6a:58:1a:
                    51:2b:06:cf:01:e4:5b:92:fa:cb:cb:d1:0b:ba:b5:
                    22:59:54:8e:ed:10:13:97:79:c0:d8:97:11:cb:14:
                    83:bf:26:e2:55:a1:01:be:31:4c:c6:32:04:6c:33:
                    f3:a7:c3:a6:94:37:67:54:5f:12:bd:22:f3:18:4e:
                    18:b4:6a:6d:de:ef:05:cd:0e:41:bb:59:3f:90:40:
                    e6:f8:d0:ae:7e:a0:4f:a6:f0:ff:f5:93:76:78:6a:
                    85:c5:9f:ef:f8:7a:9c:08:e2:fa:8a:47:f7:a7:5d:
                    a6:34:67:93:e7:1a:61:35:9a:9f:94:9d:9c:1b:0b:
                    29:80:d2:fc:47:8e:9a:22:75:2a:f5:98:f3:52:33:
                    a5:b8:98:31:ad:f6:40:41:09:19:74:77:00:91:d7:
                    e5:de:e8:cd:dc:fc:c8:ca:ae:2b:08:78:f7:7e:0f:
                    1c:98:d6:de:40:f3:7c:28:68:56:73:d7:aa:39:71:
                    b0:a3:c5:54:cf:0a:0d:0d:e9:e7:3a:88:6b:f5:4f:
                    50:55:52:15:dc:35:86:d8:c3:8e:69:70:cb:07:55:
                    3a:ce:87:34:6c:0d:c9:6f:3f:49:d8:23:74:b9:62:
                    a8:8a:4d:61:ac:9b:1e:03:bd:48:25:3b:be:a4:0e:
                    55:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:49:7A:E7:D0:A7:7D:23:5A:E3:3E:3D:36:AD:84:27:EE:8B:2C:E0
            X509v3 Authority Key Identifier:
                keyid:BD:1E:87:C8:51:49:98:E3:62:29:27:41:C7:0F:69:31:78:FD:D2:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/3230302e3232302e3134342e302f32322d3234203d3e203238353736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.220.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:44:1f:bc:60:4c:a6:99:11:af:a6:b2:9d:66:05:76:e2:22:
         fd:c8:fd:8c:65:f6:b4:b3:fb:bf:11:89:9a:bb:ba:34:c4:5e:
         d6:99:c0:ac:fe:aa:81:8e:53:1e:d1:2e:33:c1:87:6c:a3:ab:
         11:bf:2c:af:5b:89:f6:32:01:27:49:94:d6:3a:0c:fb:ff:6c:
         23:23:c0:1a:99:e5:63:8e:06:9f:c1:c6:ac:f6:c2:a9:d0:b9:
         0d:76:cd:36:41:3d:89:73:f1:78:b1:5f:ce:4e:c4:3a:cb:3f:
         3c:bf:6f:5f:7b:bc:20:48:7f:b0:a6:3f:83:ab:4a:af:e5:73:
         42:e4:1d:41:c6:34:ca:79:63:15:83:cf:f0:be:51:b6:25:d0:
         2a:f9:67:0f:61:96:92:0e:83:9c:a6:7c:b6:0c:c3:86:b9:80:
         1b:10:d2:09:93:9c:cf:b5:e3:3c:46:94:30:ab:e2:98:33:ac:
         74:0b:59:c3:f9:d2:50:38:82:9d:d5:16:07:68:cf:cf:2f:f4:
         c8:44:78:67:0d:28:d1:f4:48:30:4b:d8:55:58:14:11:c7:9b:
         db:4d:6a:54:b5:ac:ee:63:26:86:8d:48:bf:5f:ea:82:70:d1:
         5a:6f:5f:bc:7f:17:20:e2:1b:77:bb:0a:22:fd:aa:a5:da:08:
         4e:ed:a5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 10:31:15 2026 by rpki-client