Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/3rCMzsJ6LRvBwJw8hrtoQsTb2CpsZthZrDs8MT5Px4di/0/3230302e33332e3137342e302f32342d3234203d3e20323635343530.roa
File:                     3230302e33332e3137342e302f32342d3234203d3e20323635343530.roa (raw, json)
Hash identifier:          lXvTrWyONDRuKXy3+BZnIjpdWpsSoPSviI58OxHBNEc=
Subject key identifier:   8F:A7:55:CB:47:FD:E0:65:6C:AC:52:95:57:5E:70:D5:8E:6B:30:81
Certificate issuer:       /CN=D2678822F77D5B4277ACFA3BEBB8316A4A7A0994
Certificate serial:       157ED3051FBA789C9BEDF6B0349E3699219E2615
Authority key identifier: D2:67:88:22:F7:7D:5B:42:77:AC:FA:3B:EB:B8:31:6A:4A:7A:09:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2678822F77D5B4277ACFA3BEBB8316A4A7A0994.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3rCMzsJ6LRvBwJw8hrtoQsTb2CpsZthZrDs8MT5Px4di/0/3230302e33332e3137342e302f32342d3234203d3e20323635343530.roa
Signing time:             Thu 03 Sep 2026 14:24:12 +0000
ROA not before:           Thu 03 Sep 2026 14:19:12 +0000
ROA not after:            Thu 02 Sep 2027 14:24:12 +0000
asID:                     265450
IP address blocks:        200.33.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3rCMzsJ6LRvBwJw8hrtoQsTb2CpsZthZrDs8MT5Px4di/0/D2678822F77D5B4277ACFA3BEBB8316A4A7A0994.crl
                          rsync://rpki-repo.registro.br/repo/3rCMzsJ6LRvBwJw8hrtoQsTb2CpsZthZrDs8MT5Px4di/0/D2678822F77D5B4277ACFA3BEBB8316A4A7A0994.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2678822F77D5B4277ACFA3BEBB8316A4A7A0994.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 13:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:7e:d3:05:1f:ba:78:9c:9b:ed:f6:b0:34:9e:36:99:21:9e:26:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2678822F77D5B4277ACFA3BEBB8316A4A7A0994
        Validity
            Not Before: Sep  3 14:19:12 2026 GMT
            Not After : Sep  2 14:24:12 2027 GMT
        Subject: CN=8FA755CB47FDE0656CAC5295575E70D58E6B3081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:eb:4c:77:00:cf:6c:2f:02:96:d7:8d:4d:b0:
                    fc:d7:07:39:07:11:94:c5:7d:30:ad:ef:3e:f0:b6:
                    31:d7:aa:f2:a7:26:30:f5:42:cd:f5:71:06:56:99:
                    79:0f:86:82:f8:8e:48:e4:51:f2:ec:f7:f2:d5:f7:
                    28:28:ed:0d:83:a6:ab:14:71:f5:e6:1d:f3:e0:e1:
                    9d:26:cf:a9:3c:70:1a:96:2b:83:9d:73:f9:68:65:
                    74:2d:39:3b:ec:e4:0a:ad:cd:12:8e:09:8f:18:40:
                    99:de:25:9d:ac:fa:b8:33:dd:66:c0:f2:8d:d4:2d:
                    57:2d:e2:f6:9a:6e:53:64:9c:89:09:2e:44:cc:54:
                    42:32:2f:02:5d:41:9f:40:a5:ca:80:06:48:c0:57:
                    e0:ca:db:f3:42:1b:49:53:0b:28:4f:23:10:83:88:
                    d1:2d:e3:b9:f7:41:31:44:59:99:da:90:95:33:7d:
                    3a:9f:53:b2:5f:8b:86:ad:1f:01:ea:d3:9c:37:56:
                    6b:75:fc:bb:42:34:74:d2:8a:21:13:e6:f3:be:9f:
                    71:b9:72:e3:b9:71:94:1e:24:ad:3a:e0:bf:9d:22:
                    f4:0b:da:e1:73:90:ce:c8:ab:6f:38:e2:40:10:8a:
                    2c:20:2d:b9:1d:f0:a4:38:a8:38:49:93:f2:60:a8:
                    1d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:A7:55:CB:47:FD:E0:65:6C:AC:52:95:57:5E:70:D5:8E:6B:30:81
            X509v3 Authority Key Identifier:
                keyid:D2:67:88:22:F7:7D:5B:42:77:AC:FA:3B:EB:B8:31:6A:4A:7A:09:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3rCMzsJ6LRvBwJw8hrtoQsTb2CpsZthZrDs8MT5Px4di/0/D2678822F77D5B4277ACFA3BEBB8316A4A7A0994.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2678822F77D5B4277ACFA3BEBB8316A4A7A0994.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3rCMzsJ6LRvBwJw8hrtoQsTb2CpsZthZrDs8MT5Px4di/0/3230302e33332e3137342e302f32342d3234203d3e20323635343530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:d1:66:25:3b:72:bf:6f:60:ec:02:9f:2a:aa:82:a0:54:4e:
         1b:76:30:10:63:32:69:f7:09:8a:38:20:10:0b:3c:36:6a:b8:
         3f:31:40:8c:77:31:87:95:7c:1d:41:58:da:d0:31:29:60:37:
         ec:ea:49:0c:a7:f6:4c:04:91:34:4a:94:16:9d:9f:ab:a7:a9:
         b5:f9:01:8e:e5:9e:f8:c1:f6:44:e1:e2:a1:55:fd:3e:6d:c4:
         1c:5e:1d:97:4a:d4:0c:0f:ae:6b:3e:44:99:4b:fd:9d:f4:9f:
         f6:ba:39:ec:01:6c:39:5b:6d:6e:0a:a6:f2:e2:06:c0:e7:6f:
         25:aa:06:e2:3c:3c:be:2f:ad:e2:21:53:66:2a:b7:97:74:9a:
         a8:11:bc:ae:5b:04:24:00:73:f8:6a:9a:c5:ca:cc:c1:83:bd:
         6d:5f:74:71:df:65:b0:04:93:49:d0:c5:e1:8b:dc:5b:81:14:
         eb:6c:83:db:b5:45:ff:cc:2e:0b:36:42:a9:b6:bb:5a:cd:05:
         f5:3c:c0:dd:68:07:ab:fd:78:2f:c1:e6:c0:63:f0:18:f9:28:
         91:79:ca:09:e6:04:74:eb:59:e4:25:02:97:35:68:51:f7:a0:
         12:19:76:3a:82:dd:ea:49:3c:7f:4f:34:e1:20:51:bb:17:3f:
         77:03:fd:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 20:31:58 2026 by rpki-client