Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/3230302e3134342e3138322e302f32332d3233203d3e203238353731.roa
File:                     3230302e3134342e3138322e302f32332d3233203d3e203238353731.roa (raw, json)
Hash identifier:          ObL5nI3adSfrqy7lZx/Vi5q/VS517xlt8rkHCF073iw=
Subject key identifier:   15:C4:A1:E7:75:E8:3E:17:69:4A:6C:C3:01:9D:54:53:2D:47:26:7E
Certificate issuer:       /CN=2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44
Certificate serial:       038871373C8CB9FE6B8D85AD303579CCD07E128E
Authority key identifier: 2C:AF:D9:D8:A7:9A:EC:27:7E:AB:A7:07:4D:7B:B2:B9:9D:EF:9A:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/3230302e3134342e3138322e302f32332d3233203d3e203238353731.roa
Signing time:             Fri 15 May 2026 20:47:43 +0000
ROA not before:           Fri 15 May 2026 20:42:43 +0000
ROA not after:            Fri 14 May 2027 20:47:43 +0000
asID:                     28571
IP address blocks:        200.144.182.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.crl
                          rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 12:45:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:88:71:37:3c:8c:b9:fe:6b:8d:85:ad:30:35:79:cc:d0:7e:12:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44
        Validity
            Not Before: May 15 20:42:43 2026 GMT
            Not After : May 14 20:47:43 2027 GMT
        Subject: CN=15C4A1E775E83E17694A6CC3019D54532D47267E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:19:28:96:52:52:e7:73:b3:9a:37:7f:e9:0c:
                    11:96:35:6b:fc:11:7a:69:01:db:87:5d:0e:a4:bb:
                    ee:99:37:29:70:49:9b:7c:ed:2a:49:95:ce:f0:3c:
                    f2:5d:fa:fe:53:29:b6:eb:7e:b1:a3:a2:4f:84:50:
                    b5:70:89:8a:8e:bc:0b:79:dd:17:30:5f:d3:e2:fc:
                    19:68:98:08:03:b8:81:ff:59:31:2d:78:b4:15:3d:
                    13:10:68:79:6a:95:0d:d2:06:02:66:d6:74:59:16:
                    1c:5d:72:0f:bf:2b:03:c6:45:77:2a:ae:b0:f3:dc:
                    0a:1f:99:6a:4c:b3:cc:cd:c4:f2:af:78:d3:65:c4:
                    86:ea:fe:68:9c:1f:f0:b0:85:37:33:eb:b4:8c:03:
                    c8:ed:66:80:f5:e7:1c:58:14:33:0e:e8:fe:fe:49:
                    cc:ba:c2:98:2f:63:3f:79:00:80:3f:9c:fe:9f:29:
                    a5:f7:53:07:93:52:18:40:50:2c:09:a8:16:35:aa:
                    e7:3f:42:04:9d:58:41:5c:a4:12:3a:86:8d:8c:f8:
                    2e:11:2f:3c:af:c0:ae:e3:ec:3c:ea:51:00:e8:83:
                    bc:d1:bb:60:ba:80:76:63:be:61:fe:60:0e:e5:67:
                    d2:7a:c7:3b:60:d4:ae:b0:08:78:44:b5:c2:5f:99:
                    9f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:C4:A1:E7:75:E8:3E:17:69:4A:6C:C3:01:9D:54:53:2D:47:26:7E
            X509v3 Authority Key Identifier:
                keyid:2C:AF:D9:D8:A7:9A:EC:27:7E:AB:A7:07:4D:7B:B2:B9:9D:EF:9A:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/3230302e3134342e3138322e302f32332d3233203d3e203238353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.144.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:2a:59:64:31:ce:3b:7e:19:d1:95:3e:f6:52:5b:7d:9e:98:
         fb:4f:df:ac:7b:8a:5e:94:c7:30:5b:4c:7d:53:d5:06:16:4b:
         25:75:84:8d:89:78:a4:ab:b6:5c:d7:9b:33:89:80:58:cc:be:
         4b:ba:e7:43:72:e4:b7:48:ee:5b:e5:bc:14:c9:76:8e:d4:89:
         b3:b4:2e:cb:29:7f:41:e2:0d:4d:2a:c4:cd:73:0b:ae:67:25:
         fc:8e:a9:3c:ec:71:4f:dd:fb:fc:96:59:e1:60:43:55:08:62:
         82:04:7b:cf:0e:25:7c:c3:dd:68:2a:24:8e:51:42:11:63:c1:
         3b:73:50:9c:7c:ec:a1:65:c8:cf:de:80:f8:de:60:10:cf:54:
         ee:aa:7b:71:ce:e7:4e:76:84:3f:66:d4:98:af:21:9a:17:e2:
         c1:66:25:b1:c7:c2:f3:c9:5e:37:6d:47:61:67:b8:67:2f:ed:
         be:d0:eb:4e:a5:60:de:f3:ad:c4:75:6d:b4:de:28:78:46:80:
         a1:a7:e4:e5:7e:cc:2c:a3:b5:26:ff:75:34:27:e0:01:ca:bf:
         2b:97:a0:a1:f1:d4:02:09:41:f7:ea:17:3a:1b:1e:99:db:0b:
         80:e1:2c:ca:33:6b:bd:a4:58:a9:26:36:25:d0:cf:73:2a:80:
         b4:2f:22:30
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUA4hxNzyMuf5rjYWtMDV5zNB+Eo4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkNBRkQ5RDhBNzlBRUMyNzdFQUJBNzA3NEQ3QkIyQjk5
REVGOUE0NDAeFw0yNjA1MTUyMDQyNDNaFw0yNzA1MTQyMDQ3NDNaMDMxMTAvBgNV
BAMTKDE1QzRBMUU3NzVFODNFMTc2OTRBNkNDMzAxOUQ1NDUzMkQ0NzI2N0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMGSiWUlLnc7OaN3/pDBGWNWv8
EXppAduHXQ6ku+6ZNylwSZt87SpJlc7wPPJd+v5TKbbrfrGjok+EULVwiYqOvAt5
3RcwX9Pi/BlomAgDuIH/WTEteLQVPRMQaHlqlQ3SBgJm1nRZFhxdcg+/KwPGRXcq
rrDz3AofmWpMs8zNxPKveNNlxIbq/micH/CwhTcz67SMA8jtZoD15xxYFDMO6P7+
Scy6wpgvYz95AIA/nP6fKaX3UweTUhhAUCwJqBY1quc/QgSdWEFcpBI6ho2M+C4R
LzyvwK7j7DzqUQDog7zRu2C6gHZjvmH+YA7lZ9J6xztg1K6wCHhEtcJfmZ+5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUFcSh53XoPhdpSmzDAZ1UUy1HJn4wHwYDVR0j
BBgwFoAULK/Z2Kea7Cd+q6cHTXuyuZ3vmkQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNmNkZTk2WWdYUE5nNVVuYTdtdWZWVUg0cWtqb3FzdHZHaG94UnYzR1Ni
Z3ovMC8yQ0FGRDlEOEE3OUFFQzI3N0VBQkE3MDc0RDdCQjJCOTlERUY5QTQ0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJDQUZEOUQ4QTc5QUVDMjc3
RUFCQTcwNzREN0JCMkI5OURFRjlBNDQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZjZGU5NllnWFBOZzVVbmE3bXVmVlVINHFram9xc3R2R2hveFJ2M0dTYmd6LzAv
MzIzMDMwMmUzMTM0MzQyZTMxMzgzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzgzNTM3MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAHIkLYwDQYJKoZIhvcNAQELBQADggEBAAcqWWQx
zjt+GdGVPvZSW32emPtP36x7il6UxzBbTH1T1QYWSyV1hI2JeKSrtlzXmzOJgFjM
vku650Ny5LdI7lvlvBTJdo7UibO0Lsspf0HiDU0qxM1zC65nJfyOqTzscU/d+/yW
WeFgQ1UIYoIEe88OJXzD3WgqJI5RQhFjwTtzUJx87KFlyM/egPjeYBDPVO6qe3HO
5052hD9m1JivIZoX4sFmJbHHwvPJXjdtR2FnuGcv7b7Q606lYN7zrcR1bbTeKHhG
gKGn5OV+zCyjtSb/dTQn4AHKvyuXoKHx1AIJQffqFzobHpnbC4DhLMoza72kWKkm
NiXQz3MqgLQvIjA=
-----END CERTIFICATE-----
Generated at Sun May 24 15:27:42 2026 by rpki-client