Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/3230302e3139362e34302e302f32322d3234203d3e20313938393439.roa
File:                     3230302e3139362e34302e302f32322d3234203d3e20313938393439.roa (raw, json)
Hash identifier:          q/jU6GVhzvq5oZ8YNmvqyhRTbVD28+2Ozm/3yDjsYsc=
Subject key identifier:   FF:0D:71:4E:DF:E2:9D:61:3B:3D:17:F6:19:8D:D5:05:2A:29:FF:1E
Certificate issuer:       /CN=88FFBC1DCE1883EA3D495F3FC58416D571724853
Certificate serial:       2FB022B33AA5F3F183E85C7D8CC1C1B0805C3575
Authority key identifier: 88:FF:BC:1D:CE:18:83:EA:3D:49:5F:3F:C5:84:16:D5:71:72:48:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88FFBC1DCE1883EA3D495F3FC58416D571724853.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/3230302e3139362e34302e302f32322d3234203d3e20313938393439.roa
Signing time:             Wed 27 May 2026 13:44:31 +0000
ROA not before:           Wed 27 May 2026 13:39:31 +0000
ROA not after:            Wed 26 May 2027 13:44:31 +0000
asID:                     198949
IP address blocks:        200.196.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/88FFBC1DCE1883EA3D495F3FC58416D571724853.crl
                          rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/88FFBC1DCE1883EA3D495F3FC58416D571724853.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88FFBC1DCE1883EA3D495F3FC58416D571724853.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Jun 2026 20:03:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:b0:22:b3:3a:a5:f3:f1:83:e8:5c:7d:8c:c1:c1:b0:80:5c:35:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88FFBC1DCE1883EA3D495F3FC58416D571724853
        Validity
            Not Before: May 27 13:39:31 2026 GMT
            Not After : May 26 13:44:31 2027 GMT
        Subject: CN=FF0D714EDFE29D613B3D17F6198DD5052A29FF1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:67:cc:e6:a8:4f:d7:ec:d9:9b:d1:ba:08:07:
                    ab:67:0e:ad:b5:6a:c8:84:32:71:49:33:29:37:8e:
                    8e:ae:a9:e4:e6:70:2c:14:b5:06:46:12:1c:16:84:
                    aa:06:f3:08:2d:68:33:37:fb:a2:1b:3c:dc:4f:e8:
                    8b:94:aa:77:8f:38:ed:57:88:26:26:e6:1e:a6:5b:
                    52:d1:7e:10:b3:96:36:f6:33:a4:8a:8f:26:1d:76:
                    ac:38:ef:b6:80:98:f1:43:ab:72:70:1b:b4:97:e8:
                    3b:11:eb:a8:e1:b3:d9:26:d2:5a:fa:de:6c:df:80:
                    de:20:d2:a0:53:d1:52:6e:be:eb:e2:83:e6:dd:b0:
                    61:1f:c2:c3:8a:a7:e4:9c:a9:56:a9:23:55:fc:da:
                    32:0b:26:5a:9c:ed:3f:f7:e4:8a:a7:2d:1b:0c:a5:
                    b8:8d:dc:98:8f:bc:70:79:33:d2:8d:37:36:d7:05:
                    fd:80:27:7d:a2:48:fd:ca:56:70:25:03:90:fc:b8:
                    2f:78:89:95:a1:5e:09:82:da:79:38:ff:07:4b:97:
                    11:e1:e4:2c:77:de:d7:87:89:7f:9b:70:6c:de:c7:
                    e0:0a:0b:e1:c4:93:22:45:69:e8:bd:c1:c7:df:ee:
                    75:77:ab:05:87:33:f9:92:e1:ac:24:a8:58:d8:62:
                    b3:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:0D:71:4E:DF:E2:9D:61:3B:3D:17:F6:19:8D:D5:05:2A:29:FF:1E
            X509v3 Authority Key Identifier:
                keyid:88:FF:BC:1D:CE:18:83:EA:3D:49:5F:3F:C5:84:16:D5:71:72:48:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/88FFBC1DCE1883EA3D495F3FC58416D571724853.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88FFBC1DCE1883EA3D495F3FC58416D571724853.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/3230302e3139362e34302e302f32322d3234203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.196.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:88:dc:f9:b7:c3:74:7b:68:40:39:0b:50:8e:bd:46:14:73:
         26:8c:a7:ff:c6:f1:a1:48:8c:39:3a:47:dc:97:e2:0d:80:ef:
         42:56:32:d0:7f:7c:fb:0a:60:92:8c:af:54:f4:13:7b:e5:3c:
         0d:46:46:b0:10:a2:4f:5a:25:a4:d6:d7:6d:2e:ff:e6:96:e0:
         00:f9:aa:3c:29:6f:95:fa:6f:0d:58:35:b7:69:ca:18:d7:a8:
         d2:93:9a:2a:da:8c:57:40:64:32:7b:33:7e:01:0b:ad:1b:b6:
         b5:0f:9c:6c:2f:1e:f7:47:ef:16:93:b0:d2:c5:17:7e:3e:b6:
         ef:40:db:4a:03:c2:ff:6a:11:89:2a:9b:6d:fd:cd:bb:00:f4:
         39:03:71:01:ea:60:7f:87:11:90:09:e6:13:d1:dc:32:e7:a9:
         a7:9a:4f:a5:88:d8:d4:f2:86:7e:a4:9a:17:70:41:56:57:3c:
         21:3b:7c:98:c5:8f:74:a6:72:68:77:1b:59:79:04:b9:bf:e9:
         09:be:6a:93:92:20:5f:8f:46:02:49:30:61:b2:ed:87:59:53:
         35:1f:60:f6:ff:2c:ce:7d:c5:4e:2a:ce:a0:7c:d0:8e:59:ca:
         96:c6:21:20:00:2f:93:47:37:0e:c3:49:e9:52:93:8e:a0:3f:
         e1:e3:c2:6c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUL7Aiszql8/GD6Fx9jMHBsIBcNXUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhGRkJDMURDRTE4ODNFQTNENDk1RjNGQzU4NDE2RDU3
MTcyNDg1MzAeFw0yNjA1MjcxMzM5MzFaFw0yNzA1MjYxMzQ0MzFaMDMxMTAvBgNV
BAMTKEZGMEQ3MTRFREZFMjlENjEzQjNEMTdGNjE5OERENTA1MkEyOUZGMUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAZ8zmqE/X7Nmb0boIB6tnDq21
asiEMnFJMyk3jo6uqeTmcCwUtQZGEhwWhKoG8wgtaDM3+6IbPNxP6IuUqnePOO1X
iCYm5h6mW1LRfhCzljb2M6SKjyYddqw477aAmPFDq3JwG7SX6DsR66jhs9km0lr6
3mzfgN4g0qBT0VJuvuvig+bdsGEfwsOKp+ScqVapI1X82jILJlqc7T/35IqnLRsM
pbiN3JiPvHB5M9KNNzbXBf2AJ32iSP3KVnAlA5D8uC94iZWhXgmC2nk4/wdLlxHh
5Cx33teHiX+bcGzex+AKC+HEkyJFaei9wcff7nV3qwWHM/mS4awkqFjYYrNNAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU/w1xTt/inWE7PRf2GY3VBSop/x4wHwYDVR0j
BBgwFoAUiP+8Hc4Yg+o9SV8/xYQW1XFySFMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNkI4Z0puZTd2NXcxQ3Y3dGdUZGhiak5kWUt0UjQ0YzVwcUhRM2NIQ1BW
djEvMC84OEZGQkMxRENFMTg4M0VBM0Q0OTVGM0ZDNTg0MTZENTcxNzI0ODUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg4RkZCQzFEQ0UxODgzRUEz
RDQ5NUYzRkM1ODQxNkQ1NzE3MjQ4NTMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZCOGdKbmU3djV3MUN2N3RnVGRoYmpOZFlLdFI0NGM1cHFIUTNjSENQVnYxLzAv
MzIzMDMwMmUzMTM5MzYyZTM0MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMTM5
MzgzOTM0Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALIxCgwDQYJKoZIhvcNAQELBQADggEBAEaI3Pm3
w3R7aEA5C1COvUYUcyaMp//G8aFIjDk6R9yX4g2A70JWMtB/fPsKYJKMr1T0E3vl
PA1GRrAQok9aJaTW120u/+aW4AD5qjwpb5X6bw1YNbdpyhjXqNKTmirajFdAZDJ7
M34BC60btrUPnGwvHvdH7xaTsNLFF34+tu9A20oDwv9qEYkqm239zbsA9DkDcQHq
YH+HEZAJ5hPR3DLnqaeaT6WI2NTyhn6kmhdwQVZXPCE7fJjFj3Smcmh3G1l5BLm/
6Qm+apOSIF+PRgJJMGGy7YdZUzUfYPb/LM59xU4qzqB80I5ZypbGISAAL5NHNw7D
SelSk46gP+Hjwmw=
-----END CERTIFICATE-----
Generated at Fri Jun 5 23:11:21 2026 by rpki-client