Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2LJ5xa4gu4enJSVuPLJbd9S5DkiJzSGJZCKyd5zVa6nH/0/3230312e3231362e37362e302f32322d3234203d3e20323734383431.roa
File:                     3230312e3231362e37362e302f32322d3234203d3e20323734383431.roa (raw, json)
Hash identifier:          mTVd+VNR4cmXDaYoos8iKUFccLcD0q2bykDdnN/OeNE=
Subject key identifier:   85:60:51:DC:EF:E4:82:44:77:A7:F4:FC:87:7B:E8:7C:6C:5C:C5:54
Certificate issuer:       /CN=23C68BB3ADF6D8ACECABEF4EFA2103504BB3B4C6
Certificate serial:       319E4FFC9F211457219CFD0F1E8D45B3304FAE87
Authority key identifier: 23:C6:8B:B3:AD:F6:D8:AC:EC:AB:EF:4E:FA:21:03:50:4B:B3:B4:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23C68BB3ADF6D8ACECABEF4EFA2103504BB3B4C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2LJ5xa4gu4enJSVuPLJbd9S5DkiJzSGJZCKyd5zVa6nH/0/3230312e3231362e37362e302f32322d3234203d3e20323734383431.roa
Signing time:             Thu 18 Jun 2026 15:18:19 +0000
ROA not before:           Thu 18 Jun 2026 15:13:19 +0000
ROA not after:            Thu 17 Jun 2027 15:18:19 +0000
asID:                     274841
IP address blocks:        201.216.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2LJ5xa4gu4enJSVuPLJbd9S5DkiJzSGJZCKyd5zVa6nH/0/23C68BB3ADF6D8ACECABEF4EFA2103504BB3B4C6.crl
                          rsync://rpki-repo.registro.br/repo/2LJ5xa4gu4enJSVuPLJbd9S5DkiJzSGJZCKyd5zVa6nH/0/23C68BB3ADF6D8ACECABEF4EFA2103504BB3B4C6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23C68BB3ADF6D8ACECABEF4EFA2103504BB3B4C6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 30 Jun 2026 03:57:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:9e:4f:fc:9f:21:14:57:21:9c:fd:0f:1e:8d:45:b3:30:4f:ae:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23C68BB3ADF6D8ACECABEF4EFA2103504BB3B4C6
        Validity
            Not Before: Jun 18 15:13:19 2026 GMT
            Not After : Jun 17 15:18:19 2027 GMT
        Subject: CN=856051DCEFE4824477A7F4FC877BE87C6C5CC554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:9d:ed:a9:78:df:6f:70:12:16:53:b3:28:18:
                    6d:f5:71:00:da:9d:fd:df:d0:c6:ea:c4:17:02:5f:
                    64:83:da:32:0b:c4:9b:f4:f6:1f:3d:ed:4d:a1:0e:
                    16:3a:7a:4b:ad:20:6f:c4:51:6b:64:5d:03:5a:70:
                    02:10:51:61:23:c1:ab:9c:a6:3b:d8:ee:1a:62:11:
                    31:ec:da:0d:f2:81:03:51:c9:f1:a4:ec:7c:db:97:
                    bd:36:a5:8f:79:b2:0e:56:7e:d6:c5:a9:f9:8b:4b:
                    b5:1e:42:86:0f:e0:6e:34:b2:de:bf:f7:54:95:9b:
                    3f:a7:40:a5:05:63:51:a4:53:19:03:73:cf:35:f7:
                    b4:d2:2d:f9:58:a5:54:99:7e:9d:4a:61:ae:36:ef:
                    9b:f4:02:bb:ae:3c:03:24:c8:19:ca:c0:cf:91:ce:
                    8b:b8:00:5b:26:c3:a1:a3:f0:65:4d:d4:52:6a:32:
                    8f:39:10:92:c6:8d:7e:37:f4:07:85:10:0c:0b:cc:
                    df:eb:34:42:8f:58:cf:dd:37:91:a1:26:79:f1:13:
                    89:93:60:7d:80:de:17:8b:aa:95:21:ae:fc:9a:24:
                    54:ea:c0:cf:a3:25:d0:4e:21:a6:20:12:f5:b4:83:
                    f4:13:14:ee:0b:89:e1:92:d1:55:db:db:7b:fb:77:
                    ef:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:60:51:DC:EF:E4:82:44:77:A7:F4:FC:87:7B:E8:7C:6C:5C:C5:54
            X509v3 Authority Key Identifier:
                keyid:23:C6:8B:B3:AD:F6:D8:AC:EC:AB:EF:4E:FA:21:03:50:4B:B3:B4:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2LJ5xa4gu4enJSVuPLJbd9S5DkiJzSGJZCKyd5zVa6nH/0/23C68BB3ADF6D8ACECABEF4EFA2103504BB3B4C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23C68BB3ADF6D8ACECABEF4EFA2103504BB3B4C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2LJ5xa4gu4enJSVuPLJbd9S5DkiJzSGJZCKyd5zVa6nH/0/3230312e3231362e37362e302f32322d3234203d3e20323734383431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.216.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:9f:f4:d3:4c:29:58:88:0b:23:e8:56:04:91:3a:9a:44:be:
         e5:3e:89:81:22:78:0c:43:94:4b:34:a3:29:3e:4d:56:93:22:
         6b:c4:71:51:83:0c:3f:36:cd:3c:00:c4:3c:78:f4:e5:4c:73:
         63:3f:70:8c:02:c0:12:c2:36:0b:4e:c8:c3:73:98:b5:1d:3a:
         0f:6e:22:5c:80:dc:f1:b7:ef:28:d5:bd:a9:82:53:f7:4e:59:
         f0:4a:93:f7:2a:83:24:43:2c:34:80:9a:97:70:96:35:4e:92:
         67:6a:eb:75:99:63:c4:d5:61:f8:1c:ab:43:45:b3:c3:ea:79:
         58:67:22:eb:7e:f7:f9:4a:ba:96:a5:3c:37:96:78:f5:ae:8e:
         ff:a4:24:d1:28:03:20:28:fe:ad:f9:eb:f8:f6:01:67:f8:80:
         97:3a:d8:37:99:41:78:97:71:7d:f5:a6:a6:b3:a6:8e:cc:32:
         f5:8f:44:49:7f:23:c7:37:c5:95:c0:20:b7:66:20:06:fc:eb:
         86:ac:5e:7f:9e:58:d6:2a:84:62:cf:14:58:a4:80:83:03:44:
         da:d2:e3:b0:11:f3:60:ad:4a:5e:f2:7e:04:e5:96:28:f0:58:
         dd:ca:98:84:ba:0a:fb:5a:0f:c8:1c:cb:94:ee:15:06:92:05:
         ce:d4:1a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:34:02 2026 by rpki-client