Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/3230302e3233372e302e302f31382d3237203d3e2031393136.roa
File:                     3230302e3233372e302e302f31382d3237203d3e2031393136.roa (raw, json)
Hash identifier:          xfY+MV7jggemPW3LtZFHwRHsO3Ydd9mlT9idiSS4nxk=
Subject key identifier:   E9:F5:3D:0E:48:91:53:3A:DE:86:B1:26:36:9E:7B:C4:A4:5A:87:F7
Certificate issuer:       /CN=9C26395E84B6168CD893F95EDAC6D4BDC4C7C9FD
Certificate serial:       65C1C4CF309F042E577833C0A836BC1AF2CE119D
Authority key identifier: 9C:26:39:5E:84:B6:16:8C:D8:93:F9:5E:DA:C6:D4:BD:C4:C7:C9:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C26395E84B6168CD893F95EDAC6D4BDC4C7C9FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/3230302e3233372e302e302f31382d3237203d3e2031393136.roa
Signing time:             Fri 19 Jun 2026 20:01:05 +0000
ROA not before:           Fri 19 Jun 2026 19:56:05 +0000
ROA not after:            Fri 18 Jun 2027 20:01:05 +0000
asID:                     1916
IP address blocks:        200.237.0.0/18 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/9C26395E84B6168CD893F95EDAC6D4BDC4C7C9FD.crl
                          rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/9C26395E84B6168CD893F95EDAC6D4BDC4C7C9FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C26395E84B6168CD893F95EDAC6D4BDC4C7C9FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 02 Jul 2026 01:56:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:c1:c4:cf:30:9f:04:2e:57:78:33:c0:a8:36:bc:1a:f2:ce:11:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C26395E84B6168CD893F95EDAC6D4BDC4C7C9FD
        Validity
            Not Before: Jun 19 19:56:05 2026 GMT
            Not After : Jun 18 20:01:05 2027 GMT
        Subject: CN=E9F53D0E4891533ADE86B126369E7BC4A45A87F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:82:9a:c1:2c:01:9b:99:b2:50:e9:aa:11:3f:
                    4b:07:88:19:64:ad:cf:53:d2:5a:7f:7d:c2:ea:7e:
                    be:46:13:ee:dc:15:80:4b:cc:c4:9b:b2:95:e4:8c:
                    4b:65:42:06:04:9a:da:fc:93:02:33:07:09:33:09:
                    fb:eb:97:2f:3e:42:a3:c0:b6:2e:e9:20:70:8f:2a:
                    1f:65:68:b4:c5:d2:9a:44:6f:41:89:25:08:94:3e:
                    22:f7:eb:91:5d:2d:dc:04:b9:f3:9e:d7:16:68:64:
                    0d:4e:7c:a1:d9:4c:98:d3:7c:0c:77:66:87:bf:61:
                    43:cf:ce:9e:23:01:98:d8:5a:f0:9f:cf:ee:92:d6:
                    bc:4e:b5:f4:ba:6e:71:8b:8f:e8:8d:4a:9c:5f:02:
                    1a:49:87:59:1b:67:1c:5d:27:89:8c:58:89:d9:26:
                    5d:79:67:eb:f3:86:99:a8:e9:34:dd:aa:2d:e1:14:
                    c9:a0:40:ba:45:91:35:76:1a:6d:7f:84:e6:78:3c:
                    84:69:8a:6a:6a:2d:50:40:05:75:7e:70:37:79:b7:
                    62:c7:94:db:e6:e9:b8:26:8e:cc:12:70:a4:0a:9f:
                    1b:72:e9:6d:25:92:50:9b:86:4b:55:2a:1e:65:77:
                    49:da:21:9a:5e:15:0c:70:b2:f8:33:2c:ce:db:4e:
                    56:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:F5:3D:0E:48:91:53:3A:DE:86:B1:26:36:9E:7B:C4:A4:5A:87:F7
            X509v3 Authority Key Identifier:
                keyid:9C:26:39:5E:84:B6:16:8C:D8:93:F9:5E:DA:C6:D4:BD:C4:C7:C9:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/9C26395E84B6168CD893F95EDAC6D4BDC4C7C9FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C26395E84B6168CD893F95EDAC6D4BDC4C7C9FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/3230302e3233372e302e302f31382d3237203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.237.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         d3:fe:cb:f5:5e:9e:fa:40:92:5a:ef:e2:b8:8c:bc:e7:02:2a:
         b4:75:83:00:a3:39:c2:67:73:1d:66:37:3f:82:66:32:e1:03:
         cf:78:20:15:60:9f:58:6d:d0:4d:b4:ed:9e:d2:4f:e3:af:a7:
         bc:85:84:cd:9f:a2:d4:60:99:48:91:8a:59:7e:cf:65:15:c1:
         d8:f1:8a:87:aa:f8:33:a2:fc:95:58:1c:d9:fa:12:e2:33:3a:
         ef:ab:b5:b7:74:63:a9:b3:b9:1c:be:ec:d4:32:5f:2a:36:47:
         79:cb:49:db:8c:24:c0:5e:16:16:d7:ee:10:03:b0:46:11:aa:
         89:58:e4:90:45:3d:ba:4b:fb:b0:34:d4:53:74:93:81:fb:a5:
         9b:00:2c:4e:3a:94:75:4e:b0:4c:cf:d3:e2:eb:b7:04:ac:27:
         ab:17:ac:79:6d:77:72:e1:f8:0b:56:50:a9:da:d6:f2:f3:2c:
         eb:d9:f7:1c:8e:32:af:f0:67:d3:7e:0c:86:a1:f9:2c:b7:39:
         8f:ea:37:1b:94:e1:61:a4:18:34:84:a5:76:07:4a:b4:2f:e8:
         ad:b2:4c:c2:1a:70:74:06:9f:f7:26:93:7e:21:b7:45:8d:36:
         af:03:99:91:0f:98:bf:ad:14:8a:51:03:07:97:ec:1c:0a:38:
         be:62:aa:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 08:20:51 2026 by rpki-client