Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/3230302e3232302e3135302e302f32332d3233203d3e203238353736.roa
File:                     3230302e3232302e3135302e302f32332d3233203d3e203238353736.roa (raw, json)
Hash identifier:          WuTZ5HKhPMzJ5fYjBKhd5yoxPbNZPbvIk19Rgx84RMw=
Subject key identifier:   B7:84:45:A3:D2:D7:8D:43:A6:BB:19:D5:DA:93:D3:6A:5E:40:A2:14
Certificate issuer:       /CN=BD1E87C8514998E362292741C70F693178FDD20E
Certificate serial:       46131C2B74708BE30BA8FF037E11735B4F08B2C0
Authority key identifier: BD:1E:87:C8:51:49:98:E3:62:29:27:41:C7:0F:69:31:78:FD:D2:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/3230302e3232302e3135302e302f32332d3233203d3e203238353736.roa
Signing time:             Fri 27 Mar 2026 23:30:33 +0000
ROA not before:           Fri 27 Mar 2026 23:25:33 +0000
ROA not after:            Fri 26 Mar 2027 23:30:33 +0000
asID:                     28576
IP address blocks:        200.220.150.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.crl
                          rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 08 Apr 2026 19:23:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:13:1c:2b:74:70:8b:e3:0b:a8:ff:03:7e:11:73:5b:4f:08:b2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD1E87C8514998E362292741C70F693178FDD20E
        Validity
            Not Before: Mar 27 23:25:33 2026 GMT
            Not After : Mar 26 23:30:33 2027 GMT
        Subject: CN=B78445A3D2D78D43A6BB19D5DA93D36A5E40A214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:12:35:b9:8c:98:11:24:a7:25:b5:8b:e8:2f:
                    07:28:67:84:cf:64:66:34:04:e6:8a:dd:91:4e:fb:
                    63:59:6c:24:b5:9d:ce:35:f5:83:54:d3:07:2a:1a:
                    29:b8:7c:11:91:c8:3f:15:b4:9c:8a:c6:5e:bf:8a:
                    93:0a:a3:c3:90:69:ba:bb:4c:e8:17:58:8c:d2:20:
                    92:4a:37:e4:f8:2c:ee:b3:90:d3:b3:1f:cb:70:b2:
                    7f:84:19:01:a4:ce:42:dd:c7:88:c0:fc:1e:b9:e4:
                    78:be:0e:d9:e3:7d:65:62:a4:f9:5b:de:06:a7:bd:
                    ea:70:c7:cc:ab:3a:4f:c5:bc:6e:25:68:e0:4a:28:
                    2d:78:c2:4a:7d:31:40:25:6a:af:f5:b1:5b:1a:a8:
                    80:a1:4b:4e:76:65:a4:fe:39:3d:44:fa:2c:23:e1:
                    4a:12:7a:ee:c8:6b:ee:e1:6d:ce:8e:17:17:3c:86:
                    84:48:92:36:ea:0d:b4:91:08:a6:42:95:3c:6c:44:
                    14:d5:ea:99:3b:49:2d:78:51:37:e0:86:89:8f:0f:
                    8d:21:a4:49:8d:b7:6e:7b:ac:e6:62:10:fb:63:38:
                    4e:09:65:a8:c3:fe:e0:1a:8b:98:6b:15:04:c6:75:
                    e6:5d:57:ca:4a:ad:a8:8b:40:bd:e7:dd:e7:77:a4:
                    71:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:84:45:A3:D2:D7:8D:43:A6:BB:19:D5:DA:93:D3:6A:5E:40:A2:14
            X509v3 Authority Key Identifier:
                keyid:BD:1E:87:C8:51:49:98:E3:62:29:27:41:C7:0F:69:31:78:FD:D2:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/3230302e3232302e3135302e302f32332d3233203d3e203238353736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.220.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:42:fc:ae:bd:51:07:37:15:c0:06:f5:d5:9c:db:ae:8e:35:
         f5:82:0e:d8:a1:04:7d:48:33:0e:7c:a0:a1:00:4d:75:b8:4c:
         41:7f:fb:35:c2:a4:f0:07:65:02:15:df:eb:3c:42:53:2b:25:
         23:e4:64:7d:18:bd:49:00:ad:32:6e:fb:70:ed:78:3a:26:90:
         71:69:ce:67:60:27:73:3e:ff:40:4e:20:0c:37:1c:8b:b7:3f:
         42:a5:3c:1b:ec:f3:6d:27:6e:ad:13:29:0a:eb:97:8e:5d:e6:
         a7:9a:93:c8:10:18:7b:cc:37:d9:97:dc:61:4a:cc:9c:e0:ca:
         0b:85:5d:af:7c:ba:57:c3:8e:a2:b7:f8:3a:ec:59:91:2f:39:
         24:b9:3b:46:b0:eb:b4:52:03:44:62:94:43:22:f0:64:fa:c0:
         df:5a:85:8d:e4:07:2e:b8:f9:08:40:74:7b:26:82:59:90:7c:
         7a:91:29:d5:9d:0e:d7:6f:d3:1b:a7:0a:46:97:b0:23:6b:48:
         e0:e6:a7:5e:fa:ce:0a:e3:b1:17:86:e7:1f:02:cb:47:7a:9f:
         cb:b8:b7:d3:a0:77:7e:05:16:2a:c8:e3:c8:a9:ea:8d:5c:52:
         ea:7a:d4:1d:aa:42:ae:ee:37:fb:ff:8f:71:61:6b:eb:b1:0b:
         9a:38:d1:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 10:29:22 2026 by rpki-client