Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/3230302e3134342e3234302e302f32322d3232203d3e203238353731.roa
File:                     3230302e3134342e3234302e302f32322d3232203d3e203238353731.roa (raw, json)
Hash identifier:          eAJWAtoshByscoaDRqZFm1bw4ki5prNpzIf20dkV1GI=
Subject key identifier:   D6:55:80:4D:D5:96:72:98:1D:E2:15:F7:85:1B:35:7C:9A:4A:30:A8
Certificate issuer:       /CN=2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44
Certificate serial:       27BAF5FD474BF0EC32BF4C51B186B34F07BAEBB6
Authority key identifier: 2C:AF:D9:D8:A7:9A:EC:27:7E:AB:A7:07:4D:7B:B2:B9:9D:EF:9A:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/3230302e3134342e3234302e302f32322d3232203d3e203238353731.roa
Signing time:             Fri 15 May 2026 20:47:47 +0000
ROA not before:           Fri 15 May 2026 20:42:47 +0000
ROA not after:            Fri 14 May 2027 20:47:47 +0000
asID:                     28571
IP address blocks:        200.144.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.crl
                          rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 12:45:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:ba:f5:fd:47:4b:f0:ec:32:bf:4c:51:b1:86:b3:4f:07:ba:eb:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44
        Validity
            Not Before: May 15 20:42:47 2026 GMT
            Not After : May 14 20:47:47 2027 GMT
        Subject: CN=D655804DD59672981DE215F7851B357C9A4A30A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e7:64:e6:e8:b2:ef:15:3f:87:0e:a7:64:c7:
                    7d:a8:d6:6c:05:ff:2c:b3:2e:c9:da:84:83:9f:2b:
                    f0:87:3c:cb:03:67:59:81:9e:b6:12:a1:73:b0:4f:
                    7d:0d:13:7b:f6:ab:b2:71:bb:41:ad:81:ab:0c:2e:
                    09:de:57:75:f6:d7:0c:f1:2f:49:c2:ea:3b:6c:94:
                    94:2d:45:86:49:cf:05:0b:24:73:d9:9c:c5:68:b7:
                    ae:58:49:aa:43:70:82:9d:0a:04:0e:ff:91:06:22:
                    c5:39:b4:dd:4c:68:c8:a1:60:58:2a:64:6d:68:41:
                    cb:04:33:5d:4d:a6:a4:9a:3e:3f:d0:6a:d5:61:56:
                    ef:e0:f6:25:f0:e6:47:0d:3f:cd:bb:d9:a7:25:9c:
                    54:5c:da:7d:56:1a:a3:a7:d2:1d:ff:57:5d:5c:6e:
                    a7:13:f5:62:6f:e9:91:85:24:b2:3f:49:3c:cf:93:
                    a9:32:72:40:85:c2:9f:fc:fa:30:96:52:b3:29:ae:
                    f1:44:91:94:0e:a9:0d:ea:dc:91:8d:72:e6:89:eb:
                    a2:a2:62:37:ac:9f:02:3c:a7:83:8b:6d:cf:0e:d1:
                    be:f3:dd:40:de:ab:0b:f4:78:32:4d:fc:91:ee:ec:
                    ef:a6:14:56:df:ef:33:12:49:59:c1:fe:cc:32:3d:
                    6e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:55:80:4D:D5:96:72:98:1D:E2:15:F7:85:1B:35:7C:9A:4A:30:A8
            X509v3 Authority Key Identifier:
                keyid:2C:AF:D9:D8:A7:9A:EC:27:7E:AB:A7:07:4D:7B:B2:B9:9D:EF:9A:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/3230302e3134342e3234302e302f32322d3232203d3e203238353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.144.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:ed:de:94:17:c3:b5:ee:fd:23:a8:af:8a:79:6d:00:d2:9c:
         e9:7e:22:c7:00:3d:77:41:28:dc:c3:cf:c4:fa:7a:2d:4e:43:
         ea:36:fb:3e:20:78:75:e8:e3:88:76:14:6d:82:ad:4f:ad:87:
         b2:cb:52:ed:a9:a1:cc:37:75:91:1c:49:e5:39:a9:8a:7c:ac:
         23:ef:5a:e5:75:44:aa:a0:df:fe:f8:a8:9f:fa:6e:c0:9e:0c:
         71:7e:88:b8:8e:85:f3:ed:1f:97:b7:11:af:26:9c:1c:ee:2f:
         9b:80:0d:25:47:a5:b2:af:fa:37:1a:73:7f:8b:d1:ef:54:a3:
         8c:46:f4:07:06:e7:0a:2b:10:66:6b:75:74:cb:d7:99:d5:b5:
         f9:cc:f4:db:74:7e:3f:c5:20:f2:11:51:27:13:35:2e:a6:ae:
         2b:ee:93:67:46:d6:90:a9:b1:9f:5a:f0:35:b0:2c:a0:28:1e:
         c9:c4:b1:2f:7b:0f:24:00:0d:4d:d0:e7:d3:76:df:bc:97:bf:
         05:26:e4:2e:2f:9b:5f:f7:f6:8a:24:66:87:af:89:60:f7:06:
         bd:bc:81:51:91:a0:24:9c:f2:f0:a6:9d:a2:db:e9:0d:1c:35:
         0e:79:67:f4:41:f5:ea:ed:b5:6d:4e:40:d9:78:3a:b1:e0:7a:
         4e:06:af:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 14:43:20 2026 by rpki-client