Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3230302e31312e382e302f32312d3234203d3e203532353437.roa
File:                     3230302e31312e382e302f32312d3234203d3e203532353437.roa (raw, json)
Hash identifier:          gv7GBF+d/RVLMJUU/geRLsgCOSbiNI8otyV1uLk3C0g=
Subject key identifier:   90:0B:D8:26:BF:9E:6F:23:5E:11:1F:23:54:3D:36:B0:4A:63:5D:9D
Certificate issuer:       /CN=FF5D171186C7F92AA82E56A3848B9D1390938458
Certificate serial:       42F1205025E6167D84F744A1CDE6B410E2DD9A6A
Authority key identifier: FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3230302e31312e382e302f32312d3234203d3e203532353437.roa
Signing time:             Wed 01 Apr 2026 19:08:43 +0000
ROA not before:           Wed 01 Apr 2026 19:03:43 +0000
ROA not after:            Wed 31 Mar 2027 19:08:43 +0000
asID:                     52547
IP address blocks:        200.11.8.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl
                          rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 15:45:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:f1:20:50:25:e6:16:7d:84:f7:44:a1:cd:e6:b4:10:e2:dd:9a:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF5D171186C7F92AA82E56A3848B9D1390938458
        Validity
            Not Before: Apr  1 19:03:43 2026 GMT
            Not After : Mar 31 19:08:43 2027 GMT
        Subject: CN=900BD826BF9E6F235E111F23543D36B04A635D9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:3f:f2:79:35:02:21:27:db:5c:28:8a:8c:bb:
                    28:df:37:dc:be:22:ca:4b:8e:46:4e:3f:2b:14:f0:
                    da:81:00:e0:13:0e:dc:c1:85:3b:98:68:64:51:c1:
                    09:27:99:ce:07:60:86:85:b0:fe:f3:2f:3a:94:48:
                    ac:de:5f:af:3c:30:9b:21:b7:00:b0:ac:51:95:31:
                    f7:b2:c3:de:20:28:42:ad:82:cb:6c:83:c5:49:be:
                    7f:fa:ff:ab:7e:18:bb:3e:a0:51:7f:0c:0c:4d:ba:
                    99:48:14:81:16:98:37:6f:7a:f2:50:26:58:42:97:
                    be:b0:0e:d6:e4:f8:ef:dc:cc:4d:c5:98:0a:61:0b:
                    7b:97:37:fe:d8:54:dc:1a:d3:5a:c9:27:40:81:81:
                    07:93:0c:79:ee:0a:41:c0:5e:de:24:f1:c7:d1:4f:
                    5a:28:cd:52:60:ba:7c:c0:92:82:ea:32:98:96:e6:
                    7a:b0:71:ce:85:f0:65:f4:5c:17:72:e5:f3:07:c9:
                    88:f1:e2:5e:f3:91:5e:7c:10:f7:6c:ef:f8:4e:86:
                    d5:f1:bd:b8:3e:b0:4d:68:88:da:fb:0e:13:f1:e3:
                    e1:46:91:61:8f:26:20:19:c3:1f:03:4d:d6:7d:f3:
                    96:2e:63:17:07:03:c3:52:f2:80:c6:b6:66:b5:81:
                    c0:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:0B:D8:26:BF:9E:6F:23:5E:11:1F:23:54:3D:36:B0:4A:63:5D:9D
            X509v3 Authority Key Identifier:
                keyid:FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3230302e31312e382e302f32312d3234203d3e203532353437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.11.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         90:b2:02:7e:0e:59:73:07:0f:a4:4c:6b:f3:6b:3e:de:f0:3b:
         cd:08:6b:a4:14:75:be:66:5f:bc:d4:45:fa:2e:c6:63:78:e3:
         0a:d2:c7:4e:26:7f:3b:f4:84:5b:a1:cc:7c:23:02:bd:43:0f:
         df:80:1c:99:26:d4:7d:ec:14:78:3a:55:c8:d4:fe:30:09:80:
         c0:46:50:c6:57:3e:a4:fb:71:0e:83:8d:6b:7f:96:e1:38:00:
         af:8a:5e:66:67:3e:14:b2:94:4c:0a:3a:1f:cc:9e:fd:7c:ac:
         e8:24:1c:a7:d9:8c:b1:11:d5:4c:e9:5e:68:9b:04:2b:34:46:
         cc:92:6e:ee:9f:4b:7e:0d:5b:1b:21:c3:3d:28:4e:ac:c3:34:
         ed:85:c3:e7:50:8c:48:cd:7c:cf:47:68:cf:59:db:82:b8:ec:
         de:53:d7:b0:7b:c3:b8:68:26:56:2a:c5:8f:12:ff:5e:19:30:
         03:78:fc:02:a5:9c:90:5e:0a:81:f2:08:f5:0f:b3:de:84:0c:
         9e:6a:09:34:c0:b7:27:8d:d0:b9:9d:42:6d:6a:a3:5b:9d:62:
         22:59:2f:16:18:ac:b5:d8:90:9d:41:9f:a2:45:31:ae:c1:6c:
         fc:1b:72:29:f0:b3:2c:5b:21:fb:6b:d3:35:7d:91:9b:af:3d:
         72:45:cb:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 16:00:36 2026 by rpki-client