Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/3230302e31372e3137362e302f32302d3237203d3e2031393136.roa
File:                     3230302e31372e3137362e302f32302d3237203d3e2031393136.roa (raw, json)
Hash identifier:          uN88CurwPmgTt1SYLpj+ltNs5LZ4Fx7NBb9IAcOUDSE=
Subject key identifier:   52:80:3F:11:56:AA:C6:BF:9E:51:DC:FE:F6:0F:07:7C:95:B3:67:4E
Certificate issuer:       /CN=9C26395E84B6168CD893F95EDAC6D4BDC4C7C9FD
Certificate serial:       5033A52F78CD121E65631BB1C55266BFFE872244
Authority key identifier: 9C:26:39:5E:84:B6:16:8C:D8:93:F9:5E:DA:C6:D4:BD:C4:C7:C9:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C26395E84B6168CD893F95EDAC6D4BDC4C7C9FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/3230302e31372e3137362e302f32302d3237203d3e2031393136.roa
Signing time:             Fri 19 Jun 2026 20:01:02 +0000
ROA not before:           Fri 19 Jun 2026 19:56:02 +0000
ROA not after:            Fri 18 Jun 2027 20:01:02 +0000
asID:                     1916
IP address blocks:        200.17.176.0/20 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/9C26395E84B6168CD893F95EDAC6D4BDC4C7C9FD.crl
                          rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/9C26395E84B6168CD893F95EDAC6D4BDC4C7C9FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C26395E84B6168CD893F95EDAC6D4BDC4C7C9FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 02 Jul 2026 01:56:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:33:a5:2f:78:cd:12:1e:65:63:1b:b1:c5:52:66:bf:fe:87:22:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C26395E84B6168CD893F95EDAC6D4BDC4C7C9FD
        Validity
            Not Before: Jun 19 19:56:02 2026 GMT
            Not After : Jun 18 20:01:02 2027 GMT
        Subject: CN=52803F1156AAC6BF9E51DCFEF60F077C95B3674E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ec:52:83:19:bb:a2:d6:33:ca:dd:6d:9a:81:
                    23:4c:b2:44:6a:0d:8e:42:c1:ef:6a:17:a1:a9:f2:
                    72:71:a3:e2:ab:01:19:61:4a:1d:5e:44:2a:42:57:
                    47:16:ad:62:fa:af:64:42:84:36:8c:ac:fb:41:b7:
                    0c:19:94:bf:72:49:9c:94:50:8b:ff:75:a0:f8:09:
                    7a:7c:b4:84:50:04:0c:9c:32:30:82:10:af:d2:48:
                    0d:02:5d:76:a5:84:d6:7b:27:b5:42:db:6b:06:42:
                    6e:88:a5:7c:e8:76:6c:75:fa:9d:86:43:be:25:01:
                    53:b6:5d:c1:8a:d5:78:1a:26:e1:43:e0:36:bd:c8:
                    c4:be:97:e6:26:24:a1:20:88:83:8c:e1:96:f7:bc:
                    eb:e1:f7:cf:96:3a:8f:c0:0b:b1:ea:d0:57:4b:c3:
                    03:f7:d9:5b:30:8f:49:45:b3:ba:f0:1e:2e:43:b0:
                    03:d6:0c:8b:58:0a:4c:a6:f4:8d:69:83:aa:8a:c1:
                    6e:c8:ac:8a:68:c1:99:52:1c:2c:96:d2:52:fe:89:
                    1b:da:7f:37:4e:dd:93:28:ea:e6:0b:1e:5c:34:2a:
                    57:dc:ea:08:c8:b7:fe:ee:1d:e6:e2:99:cc:f7:2b:
                    85:67:1a:2b:4a:5d:91:a4:67:72:6a:a4:a6:4e:79:
                    b9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:80:3F:11:56:AA:C6:BF:9E:51:DC:FE:F6:0F:07:7C:95:B3:67:4E
            X509v3 Authority Key Identifier:
                keyid:9C:26:39:5E:84:B6:16:8C:D8:93:F9:5E:DA:C6:D4:BD:C4:C7:C9:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/9C26395E84B6168CD893F95EDAC6D4BDC4C7C9FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C26395E84B6168CD893F95EDAC6D4BDC4C7C9FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/3230302e31372e3137362e302f32302d3237203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.17.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         04:9d:20:60:55:fe:5a:ca:c8:74:c6:f5:01:13:71:6c:4d:62:
         9b:f6:0c:b3:29:ac:c6:50:eb:cf:34:a7:bb:9b:50:e2:b0:98:
         d8:76:f5:52:9f:92:8f:18:37:20:91:55:d1:1f:e6:d8:15:7b:
         a9:85:e7:db:79:17:5b:51:2a:0f:1b:d7:5b:5d:73:86:ec:4f:
         e8:86:50:5a:cd:24:11:31:9f:36:ec:11:5c:83:3e:2b:16:b2:
         b9:8f:c1:e1:98:26:59:ec:58:5d:50:56:a6:52:eb:01:72:ec:
         14:c0:73:5a:bf:18:2b:c6:17:b4:bc:d1:2e:0e:f1:c9:92:b8:
         b3:d6:e9:5d:f1:e1:36:23:e9:69:59:87:91:c8:0c:75:16:7e:
         cc:95:3a:3c:ea:61:47:a2:5a:7c:83:51:02:23:85:4e:6d:92:
         8e:0b:b6:2e:09:97:86:99:f0:e7:e5:48:b1:fa:54:cc:4b:d9:
         cb:19:4a:25:17:c0:a2:3c:3f:34:78:1e:ea:1a:75:85:04:a2:
         0b:b7:c0:f9:cd:f2:9f:b6:1f:9a:2a:5a:27:8c:67:d6:7d:3e:
         ba:f0:80:c8:ab:a1:e7:55:f2:6e:1f:05:7f:5c:59:e0:fd:b1:
         91:48:64:71:e1:28:f4:e6:f1:d5:49:8e:d8:ec:fe:a7:bb:16:
         5e:87:9b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 08:21:42 2026 by rpki-client