Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/0/3230302e3231392e31362e302f32322d3234203d3e20323730383130.roa
File:                     3230302e3231392e31362e302f32322d3234203d3e20323730383130.roa (raw, json)
Hash identifier:          RkSgjuqDpxhGKpEp/YwqC8I2wvciZaWOtToNm+61ejw=
Subject key identifier:   3C:40:EC:7D:74:60:47:DF:15:FD:17:0B:7D:E6:75:98:50:E4:09:AB
Certificate issuer:       /CN=A7C84915CF16E79310FF9CBBFEE36304988E1A20
Certificate serial:       200352F8EF211AA02F281FB9F5A29DA92FF35731
Authority key identifier: A7:C8:49:15:CF:16:E7:93:10:FF:9C:BB:FE:E3:63:04:98:8E:1A:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7C84915CF16E79310FF9CBBFEE36304988E1A20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/0/3230302e3231392e31362e302f32322d3234203d3e20323730383130.roa
Signing time:             Fri 27 Mar 2026 15:47:46 +0000
ROA not before:           Fri 27 Mar 2026 15:42:46 +0000
ROA not after:            Fri 26 Mar 2027 15:47:46 +0000
asID:                     270810
IP address blocks:        200.219.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/0/A7C84915CF16E79310FF9CBBFEE36304988E1A20.crl
                          rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/0/A7C84915CF16E79310FF9CBBFEE36304988E1A20.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7C84915CF16E79310FF9CBBFEE36304988E1A20.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 14:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:03:52:f8:ef:21:1a:a0:2f:28:1f:b9:f5:a2:9d:a9:2f:f3:57:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7C84915CF16E79310FF9CBBFEE36304988E1A20
        Validity
            Not Before: Mar 27 15:42:46 2026 GMT
            Not After : Mar 26 15:47:46 2027 GMT
        Subject: CN=3C40EC7D746047DF15FD170B7DE6759850E409AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7e:5f:f8:1e:f5:b2:92:fd:15:98:80:09:39:
                    28:0b:1b:16:5d:af:14:cd:aa:8d:93:a6:49:0b:e8:
                    6a:06:7b:22:3e:b3:5a:f9:d8:73:41:4c:cc:78:08:
                    8c:b0:2e:da:2c:e9:a0:9f:f9:52:eb:2e:b6:0d:c4:
                    15:b8:7d:71:85:74:1e:c3:05:f3:d4:85:08:32:9e:
                    0a:9b:08:24:7d:b2:f7:21:be:bb:fb:43:0f:6b:9f:
                    63:d5:f3:a7:04:b4:13:38:af:b5:45:da:a6:29:33:
                    93:37:d6:28:fd:27:75:b0:0e:ef:d1:17:56:1c:71:
                    6c:27:8d:00:0f:71:4c:c4:42:e5:b8:05:47:6c:e7:
                    71:35:75:ff:56:dc:56:22:c1:5e:66:12:cd:a3:e2:
                    dc:75:99:c2:6c:53:7d:9f:b4:ae:7c:e0:0d:50:e8:
                    11:4a:18:9d:bd:dd:6d:b0:a5:b2:d9:94:0b:b0:cb:
                    c2:a4:f4:49:35:4b:d5:da:e7:d2:14:69:a1:c7:10:
                    eb:85:56:54:f5:21:f4:66:0b:f2:8d:f6:b2:8a:d6:
                    74:e4:75:74:04:b0:2f:2e:ba:e0:ee:a4:59:9b:09:
                    93:5e:b8:d0:5b:48:03:e0:e4:0c:b3:0b:65:a0:79:
                    c1:cd:70:4b:89:c4:d6:13:fc:2c:a6:38:f3:9b:d8:
                    e5:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:40:EC:7D:74:60:47:DF:15:FD:17:0B:7D:E6:75:98:50:E4:09:AB
            X509v3 Authority Key Identifier:
                keyid:A7:C8:49:15:CF:16:E7:93:10:FF:9C:BB:FE:E3:63:04:98:8E:1A:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/0/A7C84915CF16E79310FF9CBBFEE36304988E1A20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7C84915CF16E79310FF9CBBFEE36304988E1A20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/0/3230302e3231392e31362e302f32322d3234203d3e20323730383130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:9a:82:10:9c:65:8b:8f:66:35:68:80:df:eb:57:6c:a8:a6:
         1c:49:78:87:73:7b:b9:46:c0:f2:db:0e:36:f5:4e:a1:25:0a:
         71:47:f3:a7:11:d5:4b:d4:a0:c9:96:88:c6:c0:44:7c:3c:65:
         f0:e1:a5:f0:c0:2a:6d:2f:a9:00:8a:8b:de:e8:17:b0:ae:dd:
         0e:1a:64:cf:a9:0b:e9:ea:a5:3e:22:9e:7b:84:2a:54:ee:64:
         4f:30:00:2f:0a:a0:9f:70:6c:59:4f:27:08:3f:4e:25:b3:55:
         70:0b:d3:de:1a:81:c2:1f:58:2b:a1:2e:57:97:52:e0:c6:32:
         17:65:e1:96:c2:cf:f0:c6:4e:a5:1f:2a:11:da:c3:89:fa:dd:
         ae:b0:04:b9:b5:cf:83:3a:84:a1:e2:5c:51:dc:07:22:a3:e0:
         cf:ff:fa:6b:70:98:ae:57:cf:82:54:ec:92:97:71:ba:b6:7d:
         76:99:73:ed:6a:4e:18:ee:c6:97:aa:76:5a:b9:51:e7:fa:22:
         d2:70:d8:79:02:1f:9f:11:53:1c:b5:56:e2:1f:3e:aa:ed:07:
         9f:17:5c:07:84:12:97:58:1d:a9:37:16:06:10:67:1e:ee:c8:
         f4:c4:ac:41:55:04:37:60:0e:8a:b1:26:5b:8d:d6:04:5d:b9:
         55:d4:48:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 15:48:58 2026 by rpki-client