Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/3230302e3134332e3139322e302f31382d3237203d3e2031393136.roa
File:                     3230302e3134332e3139322e302f31382d3237203d3e2031393136.roa (raw, json)
Hash identifier:          +IIhdlqdg113jkCD3Rq7U1saNfkn1MxjrXyVrAvG+FE=
Subject key identifier:   8F:E1:A6:16:7B:18:79:89:CD:04:2F:5D:66:D7:CC:B6:3E:7C:BD:26
Certificate issuer:       /CN=9C26395E84B6168CD893F95EDAC6D4BDC4C7C9FD
Certificate serial:       1FBC84860C8022D871C2A4E5E4E5DD9DF970F47E
Authority key identifier: 9C:26:39:5E:84:B6:16:8C:D8:93:F9:5E:DA:C6:D4:BD:C4:C7:C9:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C26395E84B6168CD893F95EDAC6D4BDC4C7C9FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/3230302e3134332e3139322e302f31382d3237203d3e2031393136.roa
Signing time:             Fri 19 Jun 2026 20:01:04 +0000
ROA not before:           Fri 19 Jun 2026 19:56:04 +0000
ROA not after:            Fri 18 Jun 2027 20:01:04 +0000
asID:                     1916
IP address blocks:        200.143.192.0/18 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/9C26395E84B6168CD893F95EDAC6D4BDC4C7C9FD.crl
                          rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/9C26395E84B6168CD893F95EDAC6D4BDC4C7C9FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C26395E84B6168CD893F95EDAC6D4BDC4C7C9FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 02 Jul 2026 01:56:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:bc:84:86:0c:80:22:d8:71:c2:a4:e5:e4:e5:dd:9d:f9:70:f4:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C26395E84B6168CD893F95EDAC6D4BDC4C7C9FD
        Validity
            Not Before: Jun 19 19:56:04 2026 GMT
            Not After : Jun 18 20:01:04 2027 GMT
        Subject: CN=8FE1A6167B187989CD042F5D66D7CCB63E7CBD26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8c:8a:b5:ca:b5:91:04:39:4c:99:cc:c4:af:
                    d4:97:1a:36:bc:2e:db:e2:20:bf:20:47:46:ff:86:
                    49:98:12:d7:6d:8e:88:a4:da:3d:b3:9e:a1:92:a4:
                    c4:3a:75:cd:20:d6:b6:92:b7:13:2a:76:a7:32:3a:
                    da:bc:cd:e4:9a:11:2e:77:cf:59:58:62:52:8a:c3:
                    cc:3d:9c:f9:ef:ec:58:ef:71:0d:03:8c:88:de:86:
                    3a:d2:e9:c0:a6:92:2d:b5:ca:0f:25:43:3d:1a:3e:
                    4c:ff:6b:9f:9f:13:64:81:76:c9:8b:af:dd:bf:f4:
                    3c:4e:8a:52:3e:06:76:42:0f:9f:ab:07:e7:40:6a:
                    d0:31:8c:85:31:43:ea:c2:be:99:b0:c5:64:e4:5b:
                    6d:3a:17:b6:09:9e:94:bf:e5:69:4e:5d:c3:db:27:
                    cc:52:2a:5b:9a:0e:bc:2d:63:bc:b3:50:3e:31:31:
                    a5:3d:7b:4d:25:1e:37:d0:89:3a:63:d6:dd:99:b4:
                    eb:31:d5:e4:b2:f0:f7:a0:c9:e8:5b:24:d1:6a:0f:
                    2d:7d:db:a0:cf:9a:06:e7:36:50:20:c6:2e:cc:37:
                    69:f2:bf:ca:63:4e:50:06:bc:ff:7d:34:95:81:d8:
                    dc:67:ae:35:73:bd:e6:21:54:4b:5a:c3:77:23:fc:
                    c2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:E1:A6:16:7B:18:79:89:CD:04:2F:5D:66:D7:CC:B6:3E:7C:BD:26
            X509v3 Authority Key Identifier:
                keyid:9C:26:39:5E:84:B6:16:8C:D8:93:F9:5E:DA:C6:D4:BD:C4:C7:C9:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/9C26395E84B6168CD893F95EDAC6D4BDC4C7C9FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C26395E84B6168CD893F95EDAC6D4BDC4C7C9FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/3230302e3134332e3139322e302f31382d3237203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.143.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         77:a0:9d:eb:a4:2b:15:93:1f:da:b4:55:a6:d3:e0:93:fd:e1:
         5a:67:e4:16:d6:cf:d1:a5:32:24:a8:b4:b9:26:95:03:c6:5f:
         0e:e7:ce:b2:fc:ba:ec:03:f5:c8:80:37:8a:36:d5:88:7f:27:
         cc:72:ec:8a:3b:d1:da:0c:3c:07:0b:8b:d3:67:96:cb:52:44:
         b8:41:95:f3:8a:29:99:5b:71:06:f0:f1:87:e4:2a:53:91:32:
         b6:ac:df:ad:b2:fe:a0:52:41:c8:57:c7:94:2c:cb:ff:ca:47:
         66:d6:2c:55:9d:73:b1:aa:1c:02:c0:96:f5:9f:24:09:4b:38:
         3f:e0:3c:e0:85:90:59:89:bd:54:13:58:ca:a9:d1:64:ff:8f:
         ed:e8:83:d6:43:38:2c:07:bd:68:67:f8:23:65:12:76:e7:80:
         09:37:d0:2a:99:fb:23:70:a7:d6:d2:9b:d0:7d:8a:5b:25:4f:
         a7:46:f6:c8:04:5a:db:ac:31:06:51:3a:7c:51:fa:d9:99:50:
         09:2a:37:9d:e6:06:14:d4:4f:73:59:6a:52:29:99:1e:0b:90:
         d8:20:16:bc:fd:3f:42:34:d2:7f:e1:31:64:5b:c1:00:03:41:
         dd:2e:8f:9d:2b:31:fc:ec:3a:20:e1:cb:5e:c0:c4:6c:d8:ff:
         d1:82:44:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 08:22:09 2026 by rpki-client