Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/3230302e3138372e39362e302f32322d3234203d3e20323636303230.roa
File:                     3230302e3138372e39362e302f32322d3234203d3e20323636303230.roa (raw, json)
Hash identifier:          XgqVQpDEgA6Y42EVaXmDwt+gW3mIu9YVY/YAl+ZTGVs=
Subject key identifier:   4E:F0:23:E4:68:19:05:82:4D:13:17:3B:74:9E:49:9B:5B:88:7E:CB
Certificate issuer:       /CN=2BB312B3051F7EC4E3021CE21956D0A2A50F76EF
Certificate serial:       79FEF48037CE87D1688339CB5E9C422B1BED425B
Authority key identifier: 2B:B3:12:B3:05:1F:7E:C4:E3:02:1C:E2:19:56:D0:A2:A5:0F:76:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/3230302e3138372e39362e302f32322d3234203d3e20323636303230.roa
Signing time:             Fri 25 Sep 2026 16:40:30 +0000
ROA not before:           Fri 25 Sep 2026 16:35:30 +0000
ROA not after:            Fri 24 Sep 2027 16:40:30 +0000
asID:                     266020
IP address blocks:        200.187.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.crl
                          rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 06:34:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:fe:f4:80:37:ce:87:d1:68:83:39:cb:5e:9c:42:2b:1b:ed:42:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BB312B3051F7EC4E3021CE21956D0A2A50F76EF
        Validity
            Not Before: Sep 25 16:35:30 2026 GMT
            Not After : Sep 24 16:40:30 2027 GMT
        Subject: CN=4EF023E4681905824D13173B749E499B5B887ECB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3e:f6:4d:09:4d:a1:aa:f2:61:89:4e:4d:e0:
                    b4:91:5c:59:23:b2:ae:b8:f7:99:e0:7e:f2:da:d0:
                    57:7f:b0:85:27:79:72:fa:91:3f:f3:4e:86:ca:a7:
                    be:31:4d:3c:b9:6a:77:90:e1:bc:1d:0d:85:9e:f9:
                    ae:53:e8:a6:ab:23:3a:66:4e:15:80:19:99:76:1f:
                    91:bf:28:90:81:49:b2:ae:70:63:67:db:6e:dc:85:
                    15:4a:76:70:04:f3:9f:eb:6a:b8:01:f4:22:62:8d:
                    f0:9d:4b:c1:24:1b:e1:5c:8b:8b:19:0e:93:4e:2c:
                    0e:cc:0e:40:c0:0d:81:a8:90:33:e9:42:47:91:2a:
                    ff:e9:c7:f5:49:e8:71:af:ac:31:c9:46:af:5a:46:
                    2e:6f:70:62:6d:8f:1c:53:97:45:3b:cc:23:a6:21:
                    3a:0f:95:c5:5f:4e:55:22:cd:a1:0a:f3:28:e1:ba:
                    7e:c0:f1:de:69:ee:c6:a4:c2:ad:b3:95:aa:e8:78:
                    04:14:81:6f:2b:62:0d:4f:b1:fd:10:e2:06:36:01:
                    02:14:04:04:5a:bc:d3:83:14:1a:b2:96:4b:52:0f:
                    19:c9:1b:87:fd:65:61:d2:7d:c8:2e:a6:33:dc:b2:
                    57:72:e7:71:1d:a4:75:d2:45:cf:5b:86:f7:30:9d:
                    ca:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:F0:23:E4:68:19:05:82:4D:13:17:3B:74:9E:49:9B:5B:88:7E:CB
            X509v3 Authority Key Identifier:
                keyid:2B:B3:12:B3:05:1F:7E:C4:E3:02:1C:E2:19:56:D0:A2:A5:0F:76:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/3230302e3138372e39362e302f32322d3234203d3e20323636303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.187.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:8d:47:90:af:43:34:ab:50:0a:c7:7c:90:32:68:f8:65:a1:
         4e:c6:b9:fe:b8:32:e5:3b:18:0b:86:ef:3f:d0:27:b2:c9:5d:
         8d:9f:a1:27:bc:31:3c:c8:5e:61:71:c9:88:5f:2c:6a:d3:61:
         1a:42:d5:94:1b:57:e3:4b:42:f4:5b:76:64:85:22:4b:23:9b:
         16:c2:30:ad:81:d0:5c:20:0c:57:cc:ad:b9:20:5f:64:95:fb:
         ec:50:4d:24:b1:f8:a9:33:c3:d9:b5:0e:b2:5d:df:cb:bd:ea:
         e4:ca:df:2f:db:ae:f6:1b:2e:35:6b:ea:f9:80:b9:a9:0c:58:
         64:ad:9a:41:f5:04:e4:7c:fe:2d:7b:a7:af:01:fb:90:92:5b:
         7d:dc:1a:6d:0d:e0:0f:9a:c6:ca:6c:84:a5:01:69:6f:ac:c7:
         94:a9:49:20:90:8c:4a:09:ee:7f:7a:12:68:c3:70:5a:94:21:
         d7:e8:18:6b:a8:af:95:13:92:c6:4d:bb:8a:24:7c:2c:d1:71:
         8d:60:d9:9b:7b:e6:65:c7:2f:ab:f6:59:72:33:d8:bf:a2:55:
         69:a3:c6:d7:de:71:46:c5:cd:8e:c8:88:24:82:d1:5b:b6:8b:
         4d:b8:23:58:69:f2:f5:ba:cb:68:16:7e:7a:7e:54:ec:f8:e7:
         46:be:a9:d9
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUef70gDfOh9FogznLXpxCKxvtQlswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkJCMzEyQjMwNTFGN0VDNEUzMDIxQ0UyMTk1NkQwQTJB
NTBGNzZFRjAeFw0yNjA5MjUxNjM1MzBaFw0yNzA5MjQxNjQwMzBaMDMxMTAvBgNV
BAMTKDRFRjAyM0U0NjgxOTA1ODI0RDEzMTczQjc0OUU0OTlCNUI4ODdFQ0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCPvZNCU2hqvJhiU5N4LSRXFkj
sq6495ngfvLa0Fd/sIUneXL6kT/zTobKp74xTTy5aneQ4bwdDYWe+a5T6KarIzpm
ThWAGZl2H5G/KJCBSbKucGNn227chRVKdnAE85/rargB9CJijfCdS8EkG+Fci4sZ
DpNOLA7MDkDADYGokDPpQkeRKv/px/VJ6HGvrDHJRq9aRi5vcGJtjxxTl0U7zCOm
IToPlcVfTlUizaEK8yjhun7A8d5p7sakwq2zlaroeAQUgW8rYg1Psf0Q4gY2AQIU
BARavNODFBqylktSDxnJG4f9ZWHSfcgupjPcsldy53EdpHXSRc9bhvcwncqJAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUTvAj5GgZBYJNExc7dJ5Jm1uIfsswHwYDVR0j
BBgwFoAUK7MSswUffsTjAhziGVbQoqUPdu8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0FUeXFEdXBkcXA2Vzd3VUhkM3o0SFBIUWdyNlZTSGVoWllkdFRWckVB
RU4vMC8yQkIzMTJCMzA1MUY3RUM0RTMwMjFDRTIxOTU2RDBBMkE1MEY3NkVGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCQjMxMkIzMDUxRjdFQzRF
MzAyMUNFMjE5NTZEMEEyQTUwRjc2RUYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNBVHlxRHVwZHFwNlc3d1VIZDN6NEhQSFFncjZWU0hlaFpZZHRUVnJFQUVOLzAv
MzIzMDMwMmUzMTM4MzcyZTM5MzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzYzMDMyMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALIu2AwDQYJKoZIhvcNAQELBQADggEBAGSNR5Cv
QzSrUArHfJAyaPhloU7Guf64MuU7GAuG7z/QJ7LJXY2foSe8MTzIXmFxyYhfLGrT
YRpC1ZQbV+NLQvRbdmSFIksjmxbCMK2B0FwgDFfMrbkgX2SV++xQTSSx+Kkzw9m1
DrJd38u96uTK3y/brvYbLjVr6vmAuakMWGStmkH1BOR8/i17p68B+5CSW33cGm0N
4A+axspshKUBaW+sx5SpSSCQjEoJ7n96EmjDcFqUIdfoGGuor5UTksZNu4okfCzR
cY1g2Zt75mXHL6v2WXIz2L+iVWmjxtfecUbFzY7IiCSC0Vu2i024I1hp8vW6y2gW
fnp+VOz450a+qdk=
-----END CERTIFICATE-----
Generated at Sun Oct 11 18:26:16 2026 by rpki-client