Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/3230302e3134342e3139322e302f31382d3138203d3e203238353731.roa
File:                     3230302e3134342e3139322e302f31382d3138203d3e203238353731.roa (raw, json)
Hash identifier:          k5lJrvlLeuHcfKicRKBNdfcPrh5jvT101gcdS4pJ5rA=
Subject key identifier:   9E:C5:99:AF:B4:A4:08:30:B8:A3:8A:A8:D7:14:66:8A:C0:86:96:07
Certificate issuer:       /CN=2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44
Certificate serial:       15E51C7DB9AA6C98404490451AA5E3321EDAA908
Authority key identifier: 2C:AF:D9:D8:A7:9A:EC:27:7E:AB:A7:07:4D:7B:B2:B9:9D:EF:9A:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/3230302e3134342e3139322e302f31382d3138203d3e203238353731.roa
Signing time:             Fri 15 May 2026 20:47:43 +0000
ROA not before:           Fri 15 May 2026 20:42:43 +0000
ROA not after:            Fri 14 May 2027 20:47:43 +0000
asID:                     28571
IP address blocks:        200.144.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.crl
                          rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 12:45:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:e5:1c:7d:b9:aa:6c:98:40:44:90:45:1a:a5:e3:32:1e:da:a9:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44
        Validity
            Not Before: May 15 20:42:43 2026 GMT
            Not After : May 14 20:47:43 2027 GMT
        Subject: CN=9EC599AFB4A40830B8A38AA8D714668AC0869607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ae:84:b2:78:60:38:de:00:9e:aa:e9:67:4f:
                    31:f9:24:e1:00:5b:5e:28:57:e3:a9:7c:95:e4:32:
                    77:eb:e9:d0:03:57:77:71:d9:15:87:0a:65:36:97:
                    17:bf:c0:f9:20:f0:52:b0:32:8d:a8:9a:ce:f9:9f:
                    56:de:c3:cb:c4:3f:43:cd:af:2f:50:e2:fc:d0:9a:
                    8f:dc:de:99:72:da:25:63:e7:a9:b3:00:35:8d:64:
                    84:0e:a9:53:76:bf:9a:36:5c:51:67:c1:61:17:55:
                    47:60:9c:f2:f6:48:0f:5b:cc:c6:3a:8d:38:81:ae:
                    97:b5:54:0e:15:63:13:c2:69:2e:f9:4f:3c:3c:c5:
                    56:9e:54:69:39:bf:16:a6:e9:f4:96:e4:04:3f:18:
                    30:9b:69:98:88:e0:39:cd:ca:bd:92:43:7f:f7:f2:
                    ea:70:97:0b:c0:56:0d:a2:1d:e9:46:3a:51:5f:00:
                    f0:fd:e2:aa:24:5b:0d:0b:ba:a4:6f:73:3a:dc:09:
                    fd:6a:84:b3:cb:b0:39:7c:96:5a:45:f1:78:ca:26:
                    3c:ed:52:58:52:0d:10:f9:55:6e:d9:95:9f:b6:f5:
                    e1:05:19:91:4b:9e:ee:d9:00:68:f8:49:be:8f:a5:
                    28:09:3d:3a:39:32:aa:12:b9:4a:77:05:e3:a0:46:
                    cf:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:C5:99:AF:B4:A4:08:30:B8:A3:8A:A8:D7:14:66:8A:C0:86:96:07
            X509v3 Authority Key Identifier:
                keyid:2C:AF:D9:D8:A7:9A:EC:27:7E:AB:A7:07:4D:7B:B2:B9:9D:EF:9A:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/3230302e3134342e3139322e302f31382d3138203d3e203238353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.144.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         75:f3:56:53:32:4e:7d:81:3e:30:7f:ce:d1:5a:a4:26:f2:f6:
         1b:0b:b2:a8:1c:6c:46:69:ee:42:7a:d5:d0:1e:8f:7c:c9:d3:
         6a:63:2b:39:c3:94:c9:32:66:e2:01:b6:6b:64:0e:54:5f:dc:
         7f:82:12:4f:34:95:fe:a0:6e:e4:37:7c:8e:2d:05:00:96:57:
         7a:d2:e8:84:e9:eb:04:13:90:76:1c:52:c6:ee:44:ff:17:58:
         e4:ab:c7:7d:48:d4:17:8f:89:d1:d7:77:da:75:db:a0:5c:d1:
         73:35:1b:10:03:dc:b6:f3:3c:37:7a:c9:f4:3f:f8:7d:15:b6:
         51:57:02:78:0a:25:f3:91:ed:45:d0:a0:bc:b7:4f:81:1d:af:
         b1:75:84:a0:18:24:f1:da:c8:34:5e:1f:2b:91:bf:eb:00:f3:
         a0:97:0e:3c:26:29:ab:3c:23:36:e4:62:59:06:f8:d3:9f:1c:
         c8:cb:a4:6f:91:31:30:ad:c7:b3:5f:dd:bd:78:6c:a1:1a:97:
         32:e2:ee:d9:e7:c8:b8:62:aa:3e:e9:ba:d5:a4:1f:76:a1:fc:
         83:57:9f:05:cc:3e:3b:90:75:8e:2e:be:2c:33:10:a4:72:69:
         d4:3c:9c:8e:87:7a:78:a8:3c:5a:9e:79:63:be:ce:29:d1:70:
         56:13:33:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 14:43:24 2026 by rpki-client