Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/3230302e38302e3131312e302f32342d3234203d3e20323636343436.roa
File:                     3230302e38302e3131312e302f32342d3234203d3e20323636343436.roa (raw, json)
Hash identifier:          thgzCauyCFbmPctun+d7WAAeoumqXWM19U+Qn3f3mPY=
Subject key identifier:   5D:7A:25:03:A3:F2:64:5D:6F:1B:D1:43:14:28:3C:32:10:8C:ED:90
Certificate issuer:       /CN=FAAF4A0114705E793040DF20B3E879E5974C7C8D
Certificate serial:       4309F3BD6D43C376D03A56AC3DBEADD5CD42FA75
Authority key identifier: FA:AF:4A:01:14:70:5E:79:30:40:DF:20:B3:E8:79:E5:97:4C:7C:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAAF4A0114705E793040DF20B3E879E5974C7C8D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/3230302e38302e3131312e302f32342d3234203d3e20323636343436.roa
Signing time:             Fri 30 Oct 2026 14:05:28 +0000
ROA not before:           Fri 30 Oct 2026 14:00:28 +0000
ROA not after:            Fri 29 Oct 2027 14:05:28 +0000
asID:                     266446
IP address blocks:        200.80.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/FAAF4A0114705E793040DF20B3E879E5974C7C8D.crl
                          rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/FAAF4A0114705E793040DF20B3E879E5974C7C8D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAAF4A0114705E793040DF20B3E879E5974C7C8D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 03:56:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:09:f3:bd:6d:43:c3:76:d0:3a:56:ac:3d:be:ad:d5:cd:42:fa:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAAF4A0114705E793040DF20B3E879E5974C7C8D
        Validity
            Not Before: Oct 30 14:00:28 2026 GMT
            Not After : Oct 29 14:05:28 2027 GMT
        Subject: CN=5D7A2503A3F2645D6F1BD14314283C32108CED90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c4:d5:f0:54:a1:47:ea:dd:dc:bb:a9:14:72:
                    74:2a:8a:f8:48:93:0a:64:07:cf:8f:54:56:8f:ab:
                    d6:19:c4:07:98:e8:80:15:49:ca:a0:c9:b4:2f:d0:
                    24:32:79:a3:45:94:34:82:98:af:8b:1a:6e:2a:d0:
                    76:7b:07:c8:13:56:d3:f8:53:0c:5f:74:a9:a3:20:
                    32:52:78:89:81:b1:c6:c6:35:0f:11:20:7c:6f:85:
                    2f:fd:af:cc:4c:63:c7:8b:6d:ac:90:70:00:64:03:
                    02:e5:51:03:20:19:1a:1d:2e:a2:8f:28:0a:72:a2:
                    14:ac:0c:46:ef:a4:30:8b:bf:20:66:25:c7:52:c3:
                    04:60:63:74:57:02:1f:28:c9:ea:27:ec:da:9f:c7:
                    b7:26:6d:36:79:95:f3:06:5b:de:29:fc:38:96:aa:
                    b1:5d:4a:6c:8f:13:25:4c:b9:7a:45:cd:f6:2c:34:
                    a8:97:1c:ab:26:e2:f2:02:d3:2c:07:30:72:fb:71:
                    35:a5:a9:35:33:e8:5c:44:38:0b:4b:25:ac:13:50:
                    a0:ef:78:b6:27:24:21:60:68:90:42:0f:0c:48:20:
                    dc:d6:11:8e:31:28:c7:5d:dc:61:33:25:3e:e2:a4:
                    26:96:71:98:a9:99:ab:45:d9:69:29:79:6c:7f:93:
                    00:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:7A:25:03:A3:F2:64:5D:6F:1B:D1:43:14:28:3C:32:10:8C:ED:90
            X509v3 Authority Key Identifier:
                keyid:FA:AF:4A:01:14:70:5E:79:30:40:DF:20:B3:E8:79:E5:97:4C:7C:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/FAAF4A0114705E793040DF20B3E879E5974C7C8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAAF4A0114705E793040DF20B3E879E5974C7C8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43Qtp5qb8frNXE4oG5XfcQsJRSNrYbUBaUT7RdksT8wa/0/3230302e38302e3131312e302f32342d3234203d3e20323636343436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.80.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:82:d0:55:c9:d5:3f:51:68:dc:ab:04:8f:42:82:5a:93:42:
         6f:83:21:0f:99:23:34:55:f4:d7:15:5a:d1:2e:13:3a:80:5f:
         bd:74:db:fe:6d:c2:c8:b8:3c:5f:78:08:45:43:94:77:47:d1:
         78:62:d4:ea:78:03:bc:79:09:9f:1b:53:b5:16:9f:db:78:e8:
         16:00:55:8c:4d:99:e5:71:62:e1:9e:5b:b4:da:cc:8b:78:eb:
         de:8e:77:98:05:bc:01:70:dc:2a:41:3c:66:6d:6b:ba:50:6c:
         ee:6f:8e:83:dc:51:2c:b3:0a:6f:57:fd:e5:d0:50:2a:04:fd:
         d2:ab:c6:58:a7:e6:cc:ac:a8:9f:3d:00:9b:51:d9:25:11:aa:
         6a:5a:82:88:49:3d:8b:a8:9f:3a:b2:1a:76:b6:c3:28:26:7c:
         22:85:eb:3a:d8:0b:85:87:e1:59:7c:e3:44:ee:90:b8:55:57:
         3c:84:eb:01:c1:53:8a:3b:0b:36:3e:8f:72:7b:10:bf:6c:4e:
         2b:43:df:d2:1e:8f:7b:13:9e:70:34:eb:c6:21:bf:a0:ae:80:
         5f:fa:e4:fb:b0:84:3e:6c:b3:65:64:7f:7e:cd:0b:34:11:76:
         0b:59:de:8f:f6:1e:62:7f:31:48:2e:e8:11:c1:cd:98:dc:a7:
         2c:74:d7:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:26:30 2026 by rpki-client