Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/3230302e3133332e302e302f31372d3237203d3e2031393136.roa
File:                     3230302e3133332e302e302f31372d3237203d3e2031393136.roa (raw, json)
Hash identifier:          NR+xhrT6ygp43zNpK63cNvXFcdyhoSXG5Q2Ab/E4kEw=
Subject key identifier:   1A:EA:D8:8A:B7:6E:30:80:7A:05:A9:C2:D6:7B:25:76:F3:30:EE:B0
Certificate issuer:       /CN=9C26395E84B6168CD893F95EDAC6D4BDC4C7C9FD
Certificate serial:       1A92DA14DBB88AA0027943FDBA2E0AD383C578C6
Authority key identifier: 9C:26:39:5E:84:B6:16:8C:D8:93:F9:5E:DA:C6:D4:BD:C4:C7:C9:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C26395E84B6168CD893F95EDAC6D4BDC4C7C9FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/3230302e3133332e302e302f31372d3237203d3e2031393136.roa
Signing time:             Fri 19 Jun 2026 20:01:02 +0000
ROA not before:           Fri 19 Jun 2026 19:56:02 +0000
ROA not after:            Fri 18 Jun 2027 20:01:02 +0000
asID:                     1916
IP address blocks:        200.133.0.0/17 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/9C26395E84B6168CD893F95EDAC6D4BDC4C7C9FD.crl
                          rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/9C26395E84B6168CD893F95EDAC6D4BDC4C7C9FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C26395E84B6168CD893F95EDAC6D4BDC4C7C9FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 02 Jul 2026 01:56:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:92:da:14:db:b8:8a:a0:02:79:43:fd:ba:2e:0a:d3:83:c5:78:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C26395E84B6168CD893F95EDAC6D4BDC4C7C9FD
        Validity
            Not Before: Jun 19 19:56:02 2026 GMT
            Not After : Jun 18 20:01:02 2027 GMT
        Subject: CN=1AEAD88AB76E30807A05A9C2D67B2576F330EEB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ae:db:f4:db:c7:5b:94:76:38:d5:93:7e:66:
                    c0:d6:ae:18:13:a0:95:9e:94:13:24:29:29:e5:7f:
                    23:38:44:5c:20:5f:e2:e2:87:37:f5:18:6a:ca:af:
                    14:3e:4f:b2:2d:86:ed:6b:86:7a:7d:c4:bb:8b:f5:
                    41:d7:09:3e:55:13:cc:11:f7:7e:14:b1:b6:89:78:
                    51:03:75:c0:06:51:ae:37:5f:07:05:15:f0:86:37:
                    bc:a4:de:dd:25:c9:39:cc:18:86:44:fc:54:b0:47:
                    42:b3:a7:ff:3d:83:fb:0d:d4:a7:36:12:84:43:f9:
                    8f:70:be:b3:ff:03:49:70:63:74:3f:c2:52:c2:36:
                    e6:52:f6:0f:1e:8c:00:dd:f0:79:05:af:7e:c2:d9:
                    e7:70:ac:b1:30:cc:60:6a:bd:15:a8:fc:fc:6d:45:
                    c8:8d:37:38:c1:a5:49:a3:e9:fd:63:c2:d1:ad:50:
                    e6:49:6a:91:b9:97:e2:45:1f:00:de:bf:41:a3:cd:
                    85:12:c1:01:6a:d7:ff:02:b9:b2:5a:f4:f5:db:44:
                    17:ba:ec:29:da:19:f1:7d:d0:75:a2:0d:99:3c:0c:
                    bc:19:9b:3e:bc:19:dd:bf:a7:4e:a1:5b:82:cd:af:
                    cc:2f:82:91:d1:81:b1:9e:aa:f0:86:3c:97:85:66:
                    c6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:EA:D8:8A:B7:6E:30:80:7A:05:A9:C2:D6:7B:25:76:F3:30:EE:B0
            X509v3 Authority Key Identifier:
                keyid:9C:26:39:5E:84:B6:16:8C:D8:93:F9:5E:DA:C6:D4:BD:C4:C7:C9:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/9C26395E84B6168CD893F95EDAC6D4BDC4C7C9FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C26395E84B6168CD893F95EDAC6D4BDC4C7C9FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/3230302e3133332e302e302f31372d3237203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.133.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         79:37:9b:25:12:d5:98:67:e1:6d:34:67:69:a1:76:53:d6:99:
         58:08:47:36:c3:ee:0f:05:69:f4:43:c6:31:a3:28:ba:d5:00:
         b0:e5:a4:b5:88:2f:01:0e:72:9e:d4:ff:50:6a:2b:80:3b:a5:
         aa:b7:bf:d1:59:fa:b3:cc:d6:4b:ea:0e:11:ae:63:a5:06:6f:
         a8:1c:7a:1c:5d:d8:e3:f0:1c:ae:23:d0:14:83:d1:49:fc:f4:
         76:ae:9a:d4:ee:08:02:31:dd:2f:c0:6f:68:4b:41:fe:66:33:
         5b:56:e8:b2:3e:c6:d3:1c:34:dc:44:09:fc:a8:10:e2:ab:2a:
         c2:bb:ed:de:76:18:36:f5:58:42:12:1c:c2:34:69:7e:fc:ce:
         e1:b1:a8:7c:7d:2d:bc:1f:ec:3a:35:03:2e:db:92:4d:00:84:
         28:e4:b7:b6:87:8f:48:1e:29:a8:41:9c:af:ea:30:c6:ac:d9:
         16:d9:c3:fe:69:91:ec:91:9e:1b:fc:47:0c:02:a5:67:ff:2f:
         ff:ce:03:69:67:c8:4d:5d:76:ba:43:7f:d3:61:b5:aa:5f:df:
         49:59:e6:c8:b5:ff:d1:0f:2c:53:57:ce:ac:85:3a:48:83:37:
         ba:35:f5:f7:5f:2f:59:a7:02:f4:1d:ed:bb:79:5e:62:0f:ba:
         d1:f5:df:c9
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUGpLaFNu4iqACeUP9ui4K04PFeMYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUMyNjM5NUU4NEI2MTY4Q0Q4OTNGOTVFREFDNkQ0QkRD
NEM3QzlGRDAeFw0yNjA2MTkxOTU2MDJaFw0yNzA2MTgyMDAxMDJaMDMxMTAvBgNV
BAMTKDFBRUFEODhBQjc2RTMwODA3QTA1QTlDMkQ2N0IyNTc2RjMzMEVFQjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxrtv028dblHY41ZN+ZsDWrhgT
oJWelBMkKSnlfyM4RFwgX+Lihzf1GGrKrxQ+T7Ithu1rhnp9xLuL9UHXCT5VE8wR
934UsbaJeFEDdcAGUa43XwcFFfCGN7yk3t0lyTnMGIZE/FSwR0Kzp/89g/sN1Kc2
EoRD+Y9wvrP/A0lwY3Q/wlLCNuZS9g8ejADd8HkFr37C2edwrLEwzGBqvRWo/Pxt
RciNNzjBpUmj6f1jwtGtUOZJapG5l+JFHwDev0GjzYUSwQFq1/8CubJa9PXbRBe6
7CnaGfF90HWiDZk8DLwZmz68Gd2/p06hW4LNr8wvgpHRgbGeqvCGPJeFZsZ7AgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUGurYirduMIB6BanC1nsldvMw7rAwHwYDVR0j
BBgwFoAUnCY5XoS2FozYk/le2sbUvcTHyf0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkgyYW00SDNUYUdEcGlUZHdpaDZKeXc3SGZwZ1VwTWl6TDhpOU14Vk1V
dWQvMS85QzI2Mzk1RTg0QjYxNjhDRDg5M0Y5NUVEQUM2RDRCREM0QzdDOUZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlDMjYzOTVFODRCNjE2OENE
ODkzRjk1RURBQzZENEJEQzRDN0M5RkQuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJIMmFtNEgzVGFHRHBpVGR3aWg2Snl3N0hmcGdVcE1pekw4aTlNeFZNVXVkLzEv
MzIzMDMwMmUzMTMzMzMyZTMwMmUzMDJmMzEzNzJkMzIzNzIwM2QzZTIwMzEzOTMx
MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAfIhQAwDQYJKoZIhvcNAQELBQADggEBAHk3myUS1Zhn4W00
Z2mhdlPWmVgIRzbD7g8FafRDxjGjKLrVALDlpLWILwEOcp7U/1BqK4A7paq3v9FZ
+rPM1kvqDhGuY6UGb6gcehxd2OPwHK4j0BSD0Un89HaumtTuCAIx3S/Ab2hLQf5m
M1tW6LI+xtMcNNxECfyoEOKrKsK77d52GDb1WEISHMI0aX78zuGxqHx9Lbwf7Do1
Ay7bkk0AhCjkt7aHj0geKahBnK/qMMas2RbZw/5pkeyRnhv8RwwCpWf/L//OA2ln
yE1ddrpDf9Nhtapf30lZ5si1/9EPLFNXzqyFOkiDN7o19fdfL1mnAvQd7bt5XmIP
utH138k=
-----END CERTIFICATE-----
Generated at Wed Jul 1 08:22:09 2026 by rpki-client