Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2mjfsoNSv6ZwzyhVwSHNu7MAGVK6Nzf7UW7BY5QiJmqd/0/3230312e35342e3139392e302f32342d3234203d3e203238363134.roa
File:                     3230312e35342e3139392e302f32342d3234203d3e203238363134.roa (raw, json)
Hash identifier:          KbSFWZsxLGilSgUEMZwTi0UA8Vfrm/wUsJs3cvRFwo0=
Subject key identifier:   F3:45:3B:08:4B:5C:6A:0B:7F:E8:5A:0C:DF:A7:52:B5:34:76:AA:E8
Certificate issuer:       /CN=35248DE460997A8581D1487D69B81A4E42C335CA
Certificate serial:       114651987F9A9442BA98A4E7D5FCEA3D6169F127
Authority key identifier: 35:24:8D:E4:60:99:7A:85:81:D1:48:7D:69:B8:1A:4E:42:C3:35:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35248DE460997A8581D1487D69B81A4E42C335CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2mjfsoNSv6ZwzyhVwSHNu7MAGVK6Nzf7UW7BY5QiJmqd/0/3230312e35342e3139392e302f32342d3234203d3e203238363134.roa
Signing time:             Tue 28 Jul 2026 13:54:03 +0000
ROA not before:           Tue 28 Jul 2026 13:49:03 +0000
ROA not after:            Tue 27 Jul 2027 13:54:03 +0000
asID:                     28614
IP address blocks:        201.54.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2mjfsoNSv6ZwzyhVwSHNu7MAGVK6Nzf7UW7BY5QiJmqd/0/35248DE460997A8581D1487D69B81A4E42C335CA.crl
                          rsync://rpki-repo.registro.br/repo/2mjfsoNSv6ZwzyhVwSHNu7MAGVK6Nzf7UW7BY5QiJmqd/0/35248DE460997A8581D1487D69B81A4E42C335CA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35248DE460997A8581D1487D69B81A4E42C335CA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 05:10:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:46:51:98:7f:9a:94:42:ba:98:a4:e7:d5:fc:ea:3d:61:69:f1:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35248DE460997A8581D1487D69B81A4E42C335CA
        Validity
            Not Before: Jul 28 13:49:03 2026 GMT
            Not After : Jul 27 13:54:03 2027 GMT
        Subject: CN=F3453B084B5C6A0B7FE85A0CDFA752B53476AAE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:96:30:6c:22:e4:25:43:00:29:10:af:ae:ae:
                    e9:f6:ca:7a:10:0f:e4:3f:83:1b:d3:af:a5:f0:04:
                    cf:58:77:77:1d:d1:02:0e:e6:8e:b1:f1:dc:a8:ae:
                    be:d3:14:01:be:f9:23:9a:5f:53:6e:f8:f9:f6:54:
                    10:8d:89:46:a3:d6:b3:a3:01:95:3d:23:c9:f9:7b:
                    04:1d:8e:7b:f0:6e:29:57:da:d9:59:8c:69:46:84:
                    0a:e5:08:ef:b3:89:56:49:e6:a2:84:d1:08:ef:c4:
                    f6:09:f2:e4:a6:38:69:4e:01:c9:7e:14:21:ed:26:
                    8d:be:93:47:08:7a:c2:bf:36:63:b7:af:f0:16:60:
                    98:57:8f:a4:4c:73:31:62:59:d5:4c:29:65:3b:83:
                    f0:b6:10:61:04:0b:99:86:2d:2c:f0:3d:d1:65:49:
                    ee:54:cf:fd:a4:c3:be:d3:19:7d:33:6c:80:04:ef:
                    44:e6:d4:bf:0f:62:1a:3b:a4:cc:e9:32:7c:20:b1:
                    c3:bd:b2:cb:29:17:ae:d3:5e:91:cf:e1:77:f3:7b:
                    84:e1:f8:47:0e:55:ad:ac:ea:53:5d:be:92:a0:34:
                    6e:f7:85:94:bb:72:c9:13:10:4f:f9:02:39:e3:76:
                    8c:4d:39:38:63:f5:16:f8:86:68:7c:f0:54:71:a7:
                    fc:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:45:3B:08:4B:5C:6A:0B:7F:E8:5A:0C:DF:A7:52:B5:34:76:AA:E8
            X509v3 Authority Key Identifier:
                keyid:35:24:8D:E4:60:99:7A:85:81:D1:48:7D:69:B8:1A:4E:42:C3:35:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2mjfsoNSv6ZwzyhVwSHNu7MAGVK6Nzf7UW7BY5QiJmqd/0/35248DE460997A8581D1487D69B81A4E42C335CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35248DE460997A8581D1487D69B81A4E42C335CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2mjfsoNSv6ZwzyhVwSHNu7MAGVK6Nzf7UW7BY5QiJmqd/0/3230312e35342e3139392e302f32342d3234203d3e203238363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.54.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:f8:7c:ca:1f:89:0c:52:60:70:d8:20:8d:7a:ac:ad:b7:86:
         cd:06:ed:98:4e:4a:a3:9e:57:3e:88:f6:2b:08:82:8e:84:45:
         c9:84:92:6b:92:31:83:19:40:53:5b:aa:63:bb:94:27:43:ef:
         fa:e5:75:84:23:61:70:03:a9:3a:3c:98:b7:81:b8:83:81:e9:
         74:b4:8e:9c:f3:d1:dc:a7:32:bd:3a:c4:ce:ff:8a:07:d0:c9:
         c9:81:b4:fc:93:6b:c8:d8:41:80:1e:75:8e:86:69:3a:a0:34:
         38:69:7d:0b:c7:82:b4:33:3d:8d:f6:25:24:fe:29:d3:ca:1f:
         56:51:07:88:dc:41:09:83:f3:02:db:2d:9f:6e:95:8e:90:73:
         f3:94:fd:db:81:c3:2b:3e:4f:2c:9f:21:29:8d:c4:30:54:ea:
         b4:df:2c:96:8b:6b:0d:b2:dc:f5:ed:64:eb:4d:39:c2:78:89:
         22:db:93:5f:39:fc:e1:eb:65:aa:d4:e8:9c:71:bd:41:89:07:
         5c:5a:6e:3e:c1:1a:48:38:5a:81:f4:14:48:2f:fb:5d:82:be:
         69:05:94:f4:8d:f4:1a:46:ba:fb:14:5e:3b:26:a5:80:d1:7c:
         c2:d2:68:28:48:31:bb:36:16:2e:26:96:15:ab:b4:c7:b1:22:
         1a:75:bd:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 13:00:19 2026 by rpki-client