Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2vWe8PfEetJr3Vv3FDN5qhKWaVo5pym3QCzG2BsiEpSQ/0/3230302e3137302e37362e302f32322d3234203d3e20323634353932.roa
File:                     3230302e3137302e37362e302f32322d3234203d3e20323634353932.roa (raw, json)
Hash identifier:          Q22C0Dz/lkZV82F7hV5bWuC1pFFzvROSKb/f0ejyGW4=
Subject key identifier:   68:5C:97:B9:63:21:17:22:00:95:7C:CD:4E:21:BA:A9:A7:54:A8:43
Certificate issuer:       /CN=B558F6219859A6C785E4275ABE0738E504D862DF
Certificate serial:       42B770842F68BF9EAD4757633C242A3097E85633
Authority key identifier: B5:58:F6:21:98:59:A6:C7:85:E4:27:5A:BE:07:38:E5:04:D8:62:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B558F6219859A6C785E4275ABE0738E504D862DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2vWe8PfEetJr3Vv3FDN5qhKWaVo5pym3QCzG2BsiEpSQ/0/3230302e3137302e37362e302f32322d3234203d3e20323634353932.roa
Signing time:             Thu 22 Oct 2026 18:24:50 +0000
ROA not before:           Thu 22 Oct 2026 18:19:50 +0000
ROA not after:            Thu 21 Oct 2027 18:24:50 +0000
asID:                     264592
IP address blocks:        200.170.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2vWe8PfEetJr3Vv3FDN5qhKWaVo5pym3QCzG2BsiEpSQ/0/B558F6219859A6C785E4275ABE0738E504D862DF.crl
                          rsync://rpki-repo.registro.br/repo/2vWe8PfEetJr3Vv3FDN5qhKWaVo5pym3QCzG2BsiEpSQ/0/B558F6219859A6C785E4275ABE0738E504D862DF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B558F6219859A6C785E4275ABE0738E504D862DF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Nov 2026 16:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:b7:70:84:2f:68:bf:9e:ad:47:57:63:3c:24:2a:30:97:e8:56:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B558F6219859A6C785E4275ABE0738E504D862DF
        Validity
            Not Before: Oct 22 18:19:50 2026 GMT
            Not After : Oct 21 18:24:50 2027 GMT
        Subject: CN=685C97B96321172200957CCD4E21BAA9A754A843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5b:78:44:ab:8e:64:fc:03:db:aa:03:8b:4a:
                    53:9f:da:8b:f1:f7:c8:94:67:f9:5d:85:88:43:6f:
                    71:33:02:75:45:26:a3:75:e9:18:13:40:72:07:32:
                    d9:53:e6:3a:87:05:ab:90:58:13:c7:ce:44:18:8f:
                    a0:50:22:f5:14:e3:d7:2d:25:8e:14:22:8c:34:9e:
                    07:44:28:c0:06:93:c1:a3:fc:e3:fc:79:d7:6c:77:
                    fc:56:d5:87:de:03:6e:0e:7d:67:cc:02:0e:e8:d0:
                    49:9f:24:10:ff:13:be:c4:b6:d6:74:2d:66:49:d8:
                    9c:db:92:de:84:b2:f7:cd:09:8f:e4:2d:e8:99:20:
                    56:d6:0d:59:a1:f9:7a:ca:eb:11:5a:39:9f:62:f9:
                    aa:b9:73:da:24:d5:43:ee:0e:df:1b:01:8b:5b:44:
                    64:03:45:e7:f5:5d:0a:51:6a:33:e9:45:85:d0:f5:
                    cd:0c:ce:a1:00:c5:94:6f:4c:68:56:f1:b3:a6:64:
                    33:9f:b9:eb:9c:fd:35:2b:19:7c:55:43:05:e2:55:
                    f4:c6:43:b5:bc:bb:00:c5:b4:28:bf:de:62:61:c3:
                    f8:f2:e9:69:ac:84:b4:b4:e1:e2:7b:d2:56:44:d2:
                    ee:93:ae:d1:91:19:6b:74:34:76:c3:aa:ed:38:a9:
                    e8:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:5C:97:B9:63:21:17:22:00:95:7C:CD:4E:21:BA:A9:A7:54:A8:43
            X509v3 Authority Key Identifier:
                keyid:B5:58:F6:21:98:59:A6:C7:85:E4:27:5A:BE:07:38:E5:04:D8:62:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2vWe8PfEetJr3Vv3FDN5qhKWaVo5pym3QCzG2BsiEpSQ/0/B558F6219859A6C785E4275ABE0738E504D862DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B558F6219859A6C785E4275ABE0738E504D862DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vWe8PfEetJr3Vv3FDN5qhKWaVo5pym3QCzG2BsiEpSQ/0/3230302e3137302e37362e302f32322d3234203d3e20323634353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.170.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:e2:d7:a8:5a:ad:b2:db:d7:2d:c1:7e:0d:0d:43:57:76:1c:
         7a:f7:b8:cb:b5:ea:00:f6:df:8c:9e:cb:22:0a:72:e4:b1:e2:
         51:0d:93:20:74:52:0d:75:18:3f:f4:4b:d9:11:6a:54:ae:c3:
         44:26:52:f8:68:98:6a:af:44:4d:1e:06:bb:cb:2d:fa:66:f0:
         d9:90:12:73:2c:8c:3d:85:43:02:e5:3b:b9:65:63:8c:9a:00:
         bd:b8:51:53:51:e1:d2:00:fd:b8:02:76:45:81:a7:c3:02:43:
         7d:c7:96:0a:ad:64:25:d3:cd:84:31:9f:15:96:06:54:57:45:
         6c:59:76:7b:ca:1c:ed:d4:03:e0:15:e3:44:39:9b:ff:81:51:
         6a:5c:a4:a5:dd:25:da:88:d7:c7:48:2b:5f:7e:0c:84:a2:1a:
         bb:48:6c:23:6e:04:4a:41:9b:0d:9d:d7:b4:61:7c:38:81:d7:
         01:88:25:3d:e9:0c:3e:06:4a:ea:43:14:18:15:cb:4d:65:2d:
         0e:12:d4:6a:bf:df:19:b5:44:02:94:5f:b3:20:1e:cd:d2:f5:
         88:4d:a4:52:84:04:99:3e:28:5a:0c:55:3c:f8:4b:be:9d:18:
         38:7b:0c:24:2d:72:97:51:e9:8d:0b:8e:25:d7:6e:fc:c8:a4:
         2c:7d:95:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 20:18:14 2026 by rpki-client