Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/3230302e3134342e3234392e302f32342d3234203d3e203238353731.roa
File:                     3230302e3134342e3234392e302f32342d3234203d3e203238353731.roa (raw, json)
Hash identifier:          oUqnpH1ZwjCep8nsf0cSlX3s+NoGDcOrVfJF72FLuCo=
Subject key identifier:   D2:B0:DE:9B:1E:3E:4D:C6:F4:86:BE:B4:72:A4:71:62:41:F0:02:2A
Certificate issuer:       /CN=2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44
Certificate serial:       5A79DBE8BE03D8BD5ED907D67D06A267125BCE3C
Authority key identifier: 2C:AF:D9:D8:A7:9A:EC:27:7E:AB:A7:07:4D:7B:B2:B9:9D:EF:9A:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/3230302e3134342e3234392e302f32342d3234203d3e203238353731.roa
Signing time:             Fri 15 May 2026 20:47:45 +0000
ROA not before:           Fri 15 May 2026 20:42:45 +0000
ROA not after:            Fri 14 May 2027 20:47:45 +0000
asID:                     28571
IP address blocks:        200.144.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.crl
                          rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 12:45:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:79:db:e8:be:03:d8:bd:5e:d9:07:d6:7d:06:a2:67:12:5b:ce:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44
        Validity
            Not Before: May 15 20:42:45 2026 GMT
            Not After : May 14 20:47:45 2027 GMT
        Subject: CN=D2B0DE9B1E3E4DC6F486BEB472A4716241F0022A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fd:22:65:25:7f:61:95:51:84:ab:bb:d8:24:
                    2c:87:7f:5e:18:79:45:6d:69:bf:29:0c:b6:6f:76:
                    24:46:1b:16:54:15:ac:d5:36:68:c4:ec:84:6f:a6:
                    7a:1c:b8:2c:43:98:c1:7e:06:d5:2c:5a:0d:c6:f4:
                    5d:b2:b5:50:95:4b:17:0f:2a:45:dc:99:52:0f:7e:
                    1d:80:59:3f:50:67:e4:a8:b4:64:4c:82:81:4f:e9:
                    5e:d6:e5:be:5c:52:80:4a:b9:2d:a0:84:65:ac:df:
                    61:0c:e6:4f:f0:28:2d:cc:49:3a:6d:0c:61:1e:40:
                    d7:1d:22:bf:b3:47:9f:c7:27:70:8c:fa:32:d6:57:
                    c1:d0:36:f9:5e:e8:52:2f:58:ea:d2:2f:c2:1b:a1:
                    fa:54:b8:98:00:33:ae:73:89:c6:1f:dc:fe:ee:e0:
                    6a:9e:64:83:56:04:df:5a:eb:79:9f:ca:cb:d3:29:
                    9b:74:6e:f5:f9:cc:3c:3b:20:8f:32:6d:85:eb:33:
                    ea:98:5a:46:e2:2c:ee:da:2e:1e:f9:89:55:3d:83:
                    9c:d5:3e:c5:0a:b5:15:6e:01:00:4d:3a:f7:e3:98:
                    6c:5a:77:89:b4:22:04:e2:19:3a:78:26:8d:45:1f:
                    66:ba:76:a6:46:d2:8a:61:7c:15:a8:3b:99:43:bf:
                    82:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:B0:DE:9B:1E:3E:4D:C6:F4:86:BE:B4:72:A4:71:62:41:F0:02:2A
            X509v3 Authority Key Identifier:
                keyid:2C:AF:D9:D8:A7:9A:EC:27:7E:AB:A7:07:4D:7B:B2:B9:9D:EF:9A:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/3230302e3134342e3234392e302f32342d3234203d3e203238353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.144.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:62:2b:9b:a8:6e:25:47:a4:01:b2:ce:7a:32:32:1a:00:f4:
         50:0c:f6:08:3d:d8:c6:c6:16:1b:a5:89:3e:d5:22:d9:77:93:
         ea:b9:52:31:19:4c:66:62:b0:45:ab:0c:db:76:7d:9a:66:c6:
         58:23:fd:92:fb:8f:02:49:6b:fa:0a:5f:98:85:c9:ae:04:8d:
         53:5f:62:3c:ab:87:2a:4f:32:e7:27:1b:d4:0d:15:61:82:de:
         a0:99:f5:d3:d6:46:a2:fa:01:d1:ce:49:71:be:dc:15:17:3c:
         31:d0:f5:fb:b9:d1:14:ca:6c:45:5a:48:6a:61:b8:6d:1f:1d:
         ce:ee:59:7f:a8:0f:9e:cd:d3:13:fb:63:a1:13:86:bc:37:14:
         56:48:5a:26:0f:b2:6f:a7:89:ff:fa:06:54:56:ed:44:5c:d0:
         3f:0a:81:97:94:b3:b7:df:39:72:71:a7:f1:47:cb:95:a9:11:
         49:e9:b1:79:59:a0:8e:e0:78:4f:ac:3a:37:22:c0:da:5e:ba:
         87:47:1e:1e:54:c8:86:d2:f9:77:19:5c:62:da:62:83:8a:67:
         60:e3:25:02:53:ea:f2:ae:95:db:29:50:d9:57:31:62:a0:00:
         40:23:33:7e:16:10:1d:45:08:99:df:79:cc:98:48:c2:63:d0:
         c0:28:eb:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 16:17:41 2026 by rpki-client