Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/3230302e31382e32342e302f32312d3237203d3e2031393136.roa
File:                     3230302e31382e32342e302f32312d3237203d3e2031393136.roa (raw, json)
Hash identifier:          T0P9/LNr3O7XLvsB2dIkT7kIkaS2HJt4fG+MdLudlr0=
Subject key identifier:   1D:4E:3B:00:1D:4B:D4:97:AF:F3:EB:35:2E:95:C9:29:1C:60:C8:FF
Certificate issuer:       /CN=9C26395E84B6168CD893F95EDAC6D4BDC4C7C9FD
Certificate serial:       64B2E9F2C77DE0C0569B264C83ED93CE8B681917
Authority key identifier: 9C:26:39:5E:84:B6:16:8C:D8:93:F9:5E:DA:C6:D4:BD:C4:C7:C9:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C26395E84B6168CD893F95EDAC6D4BDC4C7C9FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/3230302e31382e32342e302f32312d3237203d3e2031393136.roa
Signing time:             Fri 19 Jun 2026 20:01:05 +0000
ROA not before:           Fri 19 Jun 2026 19:56:05 +0000
ROA not after:            Fri 18 Jun 2027 20:01:05 +0000
asID:                     1916
IP address blocks:        200.18.24.0/21 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/9C26395E84B6168CD893F95EDAC6D4BDC4C7C9FD.crl
                          rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/9C26395E84B6168CD893F95EDAC6D4BDC4C7C9FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C26395E84B6168CD893F95EDAC6D4BDC4C7C9FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 02 Jul 2026 01:56:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:b2:e9:f2:c7:7d:e0:c0:56:9b:26:4c:83:ed:93:ce:8b:68:19:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C26395E84B6168CD893F95EDAC6D4BDC4C7C9FD
        Validity
            Not Before: Jun 19 19:56:05 2026 GMT
            Not After : Jun 18 20:01:05 2027 GMT
        Subject: CN=1D4E3B001D4BD497AFF3EB352E95C9291C60C8FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:3f:fb:59:76:45:96:e2:60:fb:66:19:ed:94:
                    74:10:d6:9d:b2:74:ae:28:38:8e:5f:66:5a:2f:fb:
                    e7:71:26:2c:ea:fe:3d:fe:22:7e:03:40:e3:b4:e2:
                    5b:00:ab:51:47:4b:b3:58:1c:df:b9:37:48:4f:52:
                    e2:03:89:47:a5:24:73:ed:e0:9a:fb:89:c8:6c:fe:
                    0d:26:82:b7:ce:3b:cd:16:8b:db:02:d0:6e:67:95:
                    ee:d0:94:bc:7e:20:48:5c:05:76:11:2f:ef:97:1d:
                    f2:13:73:17:9a:db:9b:f0:31:9d:9b:db:06:05:7e:
                    d2:cd:7c:94:3f:f1:1c:d9:e1:f2:35:a8:fb:5e:84:
                    b5:89:be:17:39:45:d1:04:c4:1e:54:21:cf:f0:c5:
                    25:46:b9:86:d1:65:59:62:12:87:a4:24:65:5b:f0:
                    e6:f9:0f:5d:07:b8:34:0f:43:d2:81:72:52:e6:df:
                    87:23:dc:50:31:84:63:40:24:c9:ac:cf:1f:ba:0e:
                    d7:c8:d3:e0:ef:44:60:c8:d1:f1:f2:95:5e:b8:88:
                    1f:70:fd:cc:cd:47:90:80:48:f2:36:38:e3:35:44:
                    9b:dd:6f:e3:e6:bf:64:b4:c0:c0:e9:09:00:b4:ff:
                    b3:bc:e3:1f:07:6f:f2:3c:c8:e7:01:4c:51:23:30:
                    b1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:4E:3B:00:1D:4B:D4:97:AF:F3:EB:35:2E:95:C9:29:1C:60:C8:FF
            X509v3 Authority Key Identifier:
                keyid:9C:26:39:5E:84:B6:16:8C:D8:93:F9:5E:DA:C6:D4:BD:C4:C7:C9:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/9C26395E84B6168CD893F95EDAC6D4BDC4C7C9FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C26395E84B6168CD893F95EDAC6D4BDC4C7C9FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/3230302e31382e32342e302f32312d3237203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.18.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         d2:4b:55:90:c0:a9:a1:ec:47:07:1a:4b:63:af:60:19:57:45:
         53:ec:83:d8:69:3c:d1:cd:92:fb:86:66:d2:f8:03:5a:f0:54:
         6c:78:69:96:6a:d9:ea:f8:f4:c3:83:6c:ba:28:eb:3a:c2:13:
         af:9e:77:c3:6d:6f:a6:54:ca:2d:01:38:ee:87:92:b0:e0:4b:
         b0:75:37:40:c7:11:b5:45:a5:11:52:ba:d5:8d:90:8a:39:66:
         51:a5:94:85:b7:5f:cb:4e:b6:34:eb:96:01:06:08:3f:e2:98:
         bf:48:e7:fb:84:69:92:a9:4f:91:a9:de:c1:fe:c5:cd:89:da:
         79:32:5b:31:9b:0c:d9:9a:83:6c:ce:07:b9:fa:9d:bf:60:4f:
         ea:ee:4d:89:d5:54:f7:7d:04:c5:4b:45:cf:b9:98:78:95:59:
         c2:24:8f:76:bc:3e:33:cf:1b:90:d2:d2:2c:19:24:71:c1:15:
         c8:c4:6f:cb:53:4e:91:0c:4e:b9:be:4a:67:0b:91:c2:ad:d0:
         17:00:5a:c2:69:24:1d:35:a0:73:b2:fd:b9:32:4d:fe:be:1c:
         88:0b:c7:69:95:4c:73:77:70:6e:f7:9c:89:7b:b3:cb:f3:47:
         2c:9f:cf:fe:4b:81:a6:2e:12:89:48:12:89:7f:34:66:19:dc:
         52:68:9c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 08:20:14 2026 by rpki-client