Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/3230302e3232302e3134382e302f32332d3234203d3e203238353736.roa
File:                     3230302e3232302e3134382e302f32332d3234203d3e203238353736.roa (raw, json)
Hash identifier:          Tfj8lz1RqYM0gyqfYL03xMLfYxzHWOWclOo8i8+3BVc=
Subject key identifier:   CE:4D:9A:71:35:E9:88:7D:71:CF:2C:1C:9E:86:73:F4:FC:F6:4C:CF
Certificate issuer:       /CN=BD1E87C8514998E362292741C70F693178FDD20E
Certificate serial:       2AABD5BC9F47AD8D61CB6AFB62B2C2B0C84A4942
Authority key identifier: BD:1E:87:C8:51:49:98:E3:62:29:27:41:C7:0F:69:31:78:FD:D2:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/3230302e3232302e3134382e302f32332d3234203d3e203238353736.roa
Signing time:             Sat 28 Mar 2026 00:30:33 +0000
ROA not before:           Sat 28 Mar 2026 00:25:33 +0000
ROA not after:            Sat 27 Mar 2027 00:30:33 +0000
asID:                     28576
IP address blocks:        200.220.148.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.crl
                          rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 08 Apr 2026 19:23:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:ab:d5:bc:9f:47:ad:8d:61:cb:6a:fb:62:b2:c2:b0:c8:4a:49:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD1E87C8514998E362292741C70F693178FDD20E
        Validity
            Not Before: Mar 28 00:25:33 2026 GMT
            Not After : Mar 27 00:30:33 2027 GMT
        Subject: CN=CE4D9A7135E9887D71CF2C1C9E8673F4FCF64CCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:db:3f:89:10:b1:50:01:84:42:19:11:92:8b:
                    33:fe:ec:85:eb:ab:45:df:a9:c7:76:ea:e9:d3:d6:
                    4b:69:fb:69:7d:63:8d:89:d0:11:17:49:3a:a3:9e:
                    02:4c:5f:ce:8c:9e:56:ac:2e:5e:c8:67:00:8f:be:
                    f8:60:18:33:b6:3e:d6:17:a3:56:7d:19:03:44:8b:
                    07:6c:5f:27:d1:48:e8:c8:6e:88:f0:ac:34:29:e8:
                    24:9c:d4:91:bf:13:e0:5b:f1:97:c6:f3:50:ad:ec:
                    9a:4d:33:6e:c5:49:0d:6c:69:79:27:3e:5f:3b:9c:
                    bf:86:22:04:72:8d:d4:10:a0:6c:ee:36:b2:24:40:
                    dd:8e:d0:9a:0a:30:6f:f0:ef:73:8e:8d:21:4c:98:
                    e8:09:0f:4b:6f:8c:bd:55:5f:f3:d1:90:ee:b5:6d:
                    17:38:cf:23:2e:b8:16:c3:cc:58:71:72:83:ad:ac:
                    6e:1e:22:1d:c2:44:f5:0f:ca:34:b1:b1:6b:0d:7c:
                    50:58:53:82:f6:85:6f:53:09:98:12:0c:b3:f2:27:
                    90:8e:fc:89:fc:04:ef:44:63:17:98:07:99:58:34:
                    87:80:36:0b:58:4f:a3:67:3c:7d:70:d0:e6:05:0c:
                    80:cc:f9:6d:65:7e:38:3e:d6:60:9d:4a:de:7c:a7:
                    18:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:4D:9A:71:35:E9:88:7D:71:CF:2C:1C:9E:86:73:F4:FC:F6:4C:CF
            X509v3 Authority Key Identifier:
                keyid:BD:1E:87:C8:51:49:98:E3:62:29:27:41:C7:0F:69:31:78:FD:D2:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/3230302e3232302e3134382e302f32332d3234203d3e203238353736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.220.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:09:49:4f:e5:0b:cf:e5:ca:01:66:cf:30:12:c5:7e:5a:a0:
         b3:0c:6c:44:42:94:3b:11:ca:04:22:a8:0e:42:b9:e2:3a:e7:
         8c:2f:39:6e:28:d2:39:ef:fe:8a:e4:c1:4a:7f:4e:1b:7e:c7:
         10:50:e9:45:52:9e:71:77:85:3a:64:bb:65:de:b4:a3:08:06:
         8c:93:5a:13:51:6f:09:b8:cf:a9:76:04:63:4b:f5:5f:39:b4:
         c8:3d:53:a5:b5:fe:e1:8c:cb:ad:4e:77:d7:de:3a:ba:70:ac:
         42:ef:15:97:ae:06:d3:c5:05:69:f2:01:57:c0:6a:5d:5e:2b:
         6e:f3:43:21:1a:c4:a9:f7:04:5a:3a:5a:30:fe:5d:7b:dc:1b:
         9a:9b:b3:07:fe:33:51:55:bd:c2:25:6f:20:98:cc:35:ec:1f:
         71:3e:a9:f9:80:36:f0:50:c8:82:dd:d7:6a:35:b5:44:b8:3d:
         df:e1:17:57:88:5b:7e:5b:35:c2:da:1d:d7:6d:ad:81:70:2b:
         90:8a:c2:8d:d5:d8:75:bb:8e:7b:05:bc:bf:72:e2:26:9e:01:
         d5:92:42:9d:6c:7b:a6:bb:45:5b:5e:98:e4:23:fd:4c:53:72:
         38:5b:da:ad:94:d9:f8:b4:49:fd:90:c6:c9:9e:e3:b2:6f:91:
         67:ac:c1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 10:30:49 2026 by rpki-client