Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/2/3230302e31312e3130342e302f32322d3234203d3e20323730343337.roa
File:                     3230302e31312e3130342e302f32322d3234203d3e20323730343337.roa (raw, json)
Hash identifier:          jmu4c+ENrUrhlUcTwqIrzrfY7ij7mEjJKm77EEZ4VP4=
Subject key identifier:   6B:50:C9:AB:A0:0C:18:70:D3:CD:51:B1:F8:CD:44:1D:11:C9:F1:56
Certificate issuer:       /CN=2C560CEA37E6F47330059B729E295155CABC663F
Certificate serial:       1F44EE889B883FB16B7CD9F32898B4696BC55E9A
Authority key identifier: 2C:56:0C:EA:37:E6:F4:73:30:05:9B:72:9E:29:51:55:CA:BC:66:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C560CEA37E6F47330059B729E295155CABC663F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/2/3230302e31312e3130342e302f32322d3234203d3e20323730343337.roa
Signing time:             Thu 18 Jun 2026 11:46:40 +0000
ROA not before:           Thu 18 Jun 2026 11:41:40 +0000
ROA not after:            Thu 17 Jun 2027 11:46:40 +0000
asID:                     270437
IP address blocks:        200.11.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/2/2C560CEA37E6F47330059B729E295155CABC663F.crl
                          rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/2/2C560CEA37E6F47330059B729E295155CABC663F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C560CEA37E6F47330059B729E295155CABC663F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 03:27:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:44:ee:88:9b:88:3f:b1:6b:7c:d9:f3:28:98:b4:69:6b:c5:5e:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C560CEA37E6F47330059B729E295155CABC663F
        Validity
            Not Before: Jun 18 11:41:40 2026 GMT
            Not After : Jun 17 11:46:40 2027 GMT
        Subject: CN=6B50C9ABA00C1870D3CD51B1F8CD441D11C9F156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:45:7f:c8:39:86:4e:a4:d5:b9:5e:8a:a2:26:
                    c4:4e:14:36:d4:ac:8c:fe:6b:82:f9:e0:80:e0:51:
                    d1:e4:95:00:de:65:de:89:ca:06:2a:ca:aa:20:8b:
                    f5:51:93:47:3c:a7:b9:cb:16:9c:c6:fd:82:ad:53:
                    50:9d:1a:70:91:be:f1:4f:cc:c1:e2:57:c4:53:2e:
                    60:c3:e4:c7:29:06:28:01:bf:45:b5:f5:93:42:e3:
                    19:24:b5:b5:4e:44:8e:0a:a8:d6:c6:27:00:dc:77:
                    e5:97:5d:47:77:64:00:1e:e4:82:dc:11:05:12:40:
                    5f:3d:a9:8f:f5:9e:e2:01:bc:53:4a:3e:ac:b5:2a:
                    28:93:a2:00:cd:3e:20:d9:8a:40:23:26:46:7e:f0:
                    c4:d7:a4:fd:4a:0f:fa:4a:ad:5c:1e:8a:3e:29:21:
                    da:64:d3:0a:e6:a3:f3:83:25:06:21:76:fb:d4:39:
                    40:19:e8:a0:18:11:a1:b7:64:27:6f:47:e5:75:e4:
                    37:e1:b0:70:e0:1a:1a:0c:ea:27:40:18:0d:d6:0d:
                    5e:a4:f7:eb:36:03:59:ea:98:65:7d:ce:07:ad:c2:
                    d3:2b:66:b6:33:df:d3:51:83:c9:98:b1:92:b0:36:
                    30:f2:c6:70:3d:75:53:b4:4e:3d:4c:48:2b:95:28:
                    f6:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:50:C9:AB:A0:0C:18:70:D3:CD:51:B1:F8:CD:44:1D:11:C9:F1:56
            X509v3 Authority Key Identifier:
                keyid:2C:56:0C:EA:37:E6:F4:73:30:05:9B:72:9E:29:51:55:CA:BC:66:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/2/2C560CEA37E6F47330059B729E295155CABC663F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C560CEA37E6F47330059B729E295155CABC663F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/2/3230302e31312e3130342e302f32322d3234203d3e20323730343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.11.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:67:99:71:a2:f8:4c:f6:30:6a:54:62:8b:4e:5d:5e:05:f3:
         85:f2:1e:f5:cf:84:fa:9a:1d:c2:5d:d9:11:17:63:e9:38:00:
         fb:b1:78:d4:7b:f4:cc:9d:1a:87:05:ab:18:14:b6:57:46:01:
         26:bd:ac:c6:61:ab:d5:f1:45:26:7e:23:a9:80:ac:b8:86:89:
         54:15:34:14:62:e2:91:32:90:4f:91:d7:18:89:8a:df:2d:b5:
         8f:9f:8e:bb:3d:39:a6:d6:3f:43:ce:5a:d3:81:85:e9:d9:71:
         a0:48:c8:6c:92:9b:82:eb:3b:33:0b:31:7f:e9:5b:d4:cc:6e:
         19:c6:8e:f8:07:76:12:45:df:a5:02:29:6e:67:fd:e8:a5:6b:
         de:8d:27:5d:53:69:dc:cf:40:d8:3d:41:51:79:de:ba:91:eb:
         d6:6e:fb:c0:0e:81:e6:49:0b:2e:d4:c7:7c:cf:12:dd:10:2a:
         57:f7:29:6b:63:90:28:03:7a:80:a3:fb:8f:00:1c:c4:cf:e5:
         9b:13:f8:5b:bc:fe:8e:54:ae:2f:0b:8f:aa:ff:e2:f2:c6:db:
         42:88:97:73:59:69:44:50:59:02:97:87:a7:58:12:13:55:74:
         7e:fc:e4:b7:db:64:a9:6c:d4:99:ef:57:ef:0e:ad:bd:0c:f1:
         7c:3c:6b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 17:04:11 2026 by rpki-client