Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/3230302e3232302e3135362e302f32342d3234203d3e203238353736.roa
File:                     3230302e3232302e3135362e302f32342d3234203d3e203238353736.roa (raw, json)
Hash identifier:          qcqjDM+4kEpWvGNN3iSXMwIDs8q/FqjMZcMjexZfyxo=
Subject key identifier:   40:4D:10:34:56:F1:E1:80:E5:8E:C3:D4:5A:19:DB:8D:0B:EA:E7:1C
Certificate issuer:       /CN=BD1E87C8514998E362292741C70F693178FDD20E
Certificate serial:       1170C7740562B5D19D9EC2D10140D9A13B34B550
Authority key identifier: BD:1E:87:C8:51:49:98:E3:62:29:27:41:C7:0F:69:31:78:FD:D2:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/3230302e3232302e3135362e302f32342d3234203d3e203238353736.roa
Signing time:             Fri 27 Mar 2026 23:30:33 +0000
ROA not before:           Fri 27 Mar 2026 23:25:33 +0000
ROA not after:            Fri 26 Mar 2027 23:30:33 +0000
asID:                     28576
IP address blocks:        200.220.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.crl
                          rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 08 Apr 2026 19:23:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:70:c7:74:05:62:b5:d1:9d:9e:c2:d1:01:40:d9:a1:3b:34:b5:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD1E87C8514998E362292741C70F693178FDD20E
        Validity
            Not Before: Mar 27 23:25:33 2026 GMT
            Not After : Mar 26 23:30:33 2027 GMT
        Subject: CN=404D103456F1E180E58EC3D45A19DB8D0BEAE71C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b3:5c:e6:a0:39:72:7b:e6:42:3c:fb:d7:5f:
                    98:96:22:b2:c5:ad:dc:07:21:ba:b4:c2:52:f7:dc:
                    7e:16:5b:a3:bb:21:f8:b6:20:46:4c:b2:b2:02:b7:
                    f2:10:e5:8c:99:62:c8:66:32:02:dc:37:7f:20:b5:
                    4d:ce:91:49:8d:4c:7a:d1:07:79:f4:0b:19:c1:22:
                    22:3e:e9:fd:ea:1f:b1:09:98:3b:81:8b:bf:2d:5e:
                    15:0a:88:10:be:42:b9:0a:48:86:79:f2:47:8c:fc:
                    a5:d1:b4:94:55:02:bb:33:a5:3c:05:7d:7f:14:d9:
                    01:33:91:6c:b0:5f:da:59:e9:83:6e:bd:cd:a0:76:
                    47:27:3d:64:b4:c4:14:40:56:fb:0d:c1:a7:60:bf:
                    f9:66:32:37:f9:7d:47:94:10:d8:4d:1c:8a:d9:e8:
                    43:6a:1e:03:1a:c6:14:2f:f6:cb:b5:f8:a7:b4:cd:
                    8e:df:a2:83:f7:10:af:6e:19:1d:4e:37:0d:fd:b0:
                    a2:65:56:ba:0c:67:15:2c:8e:31:b1:06:8e:b9:c1:
                    b6:cb:4b:e4:49:74:28:42:21:43:3f:5e:aa:8a:e7:
                    e6:e3:62:bb:a6:97:c2:a5:fb:bb:31:21:0c:72:73:
                    d7:f2:c5:aa:f9:2f:78:d0:b1:cf:97:47:72:22:27:
                    15:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:4D:10:34:56:F1:E1:80:E5:8E:C3:D4:5A:19:DB:8D:0B:EA:E7:1C
            X509v3 Authority Key Identifier:
                keyid:BD:1E:87:C8:51:49:98:E3:62:29:27:41:C7:0F:69:31:78:FD:D2:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/3230302e3232302e3135362e302f32342d3234203d3e203238353736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.220.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:ce:e8:ac:21:55:3d:0c:b9:b5:51:c3:2a:c4:d2:75:f1:22:
         46:cb:c2:c1:0a:44:29:1c:5d:ee:3f:97:39:ab:3a:e6:c4:c8:
         28:cf:e6:2f:75:74:1a:28:1c:8e:7e:f7:a4:22:11:a3:e3:ed:
         e6:c5:c1:f4:2b:3d:0c:64:b6:e6:98:14:0e:dc:b6:b5:06:50:
         ea:9a:77:ae:6e:f8:96:b7:2a:f4:69:69:ec:d7:12:ed:a7:33:
         be:91:c4:d4:79:34:a2:44:a0:d4:b5:29:86:05:ef:de:b7:95:
         41:11:4b:84:a7:30:07:2f:e8:64:c9:00:30:d1:40:44:e0:09:
         bf:0a:04:6d:84:33:e3:b6:de:3f:96:87:49:cd:b4:51:4a:a4:
         9f:63:ef:6d:2a:80:51:19:13:c4:cd:9f:3a:ed:14:28:1d:d9:
         ab:cb:3f:90:3a:14:b8:5b:b9:cc:96:de:7f:d5:d5:8c:53:6f:
         53:bf:c0:ce:cc:48:70:48:53:0f:d1:bd:70:19:b0:c8:5b:b1:
         e0:93:c1:7c:ef:2d:63:b5:30:2e:6a:06:f6:37:72:e2:f7:cc:
         1d:1c:2e:66:fd:fc:d7:09:04:97:34:9e:15:91:4a:5c:ab:65:
         57:d8:dc:7d:30:96:af:fd:df:4e:87:7c:01:bd:5d:af:61:d5:
         08:de:0c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 10:31:18 2026 by rpki-client