Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/3230302e3134342e3235302e302f32332d3233203d3e203238353731.roa
File:                     3230302e3134342e3235302e302f32332d3233203d3e203238353731.roa (raw, json)
Hash identifier:          PMeJItcI5VD6XfNmfcMxhxtcGpfEU3C8++t/lECx0JI=
Subject key identifier:   74:84:3D:C9:B8:37:07:6A:33:C9:B1:0F:8D:DF:EB:DA:9B:56:B7:F8
Certificate issuer:       /CN=2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44
Certificate serial:       22B8C9549DCD4C7770E87DB23A0286C5C420A372
Authority key identifier: 2C:AF:D9:D8:A7:9A:EC:27:7E:AB:A7:07:4D:7B:B2:B9:9D:EF:9A:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/3230302e3134342e3235302e302f32332d3233203d3e203238353731.roa
Signing time:             Fri 15 May 2026 20:47:48 +0000
ROA not before:           Fri 15 May 2026 20:42:48 +0000
ROA not after:            Fri 14 May 2027 20:47:48 +0000
asID:                     28571
IP address blocks:        200.144.250.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.crl
                          rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 12:45:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:b8:c9:54:9d:cd:4c:77:70:e8:7d:b2:3a:02:86:c5:c4:20:a3:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44
        Validity
            Not Before: May 15 20:42:48 2026 GMT
            Not After : May 14 20:47:48 2027 GMT
        Subject: CN=74843DC9B837076A33C9B10F8DDFEBDA9B56B7F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d5:e8:5a:96:c3:d6:2b:1a:06:af:87:51:88:
                    ba:92:ac:84:fc:5a:7c:f4:b9:a6:7b:11:ed:ca:29:
                    15:ba:12:d6:a5:7a:af:5a:dd:8a:8c:96:eb:ad:e4:
                    86:4a:0e:10:8b:44:8a:71:2c:12:f2:22:14:a4:4e:
                    45:93:fa:14:a1:b9:07:8f:98:55:63:97:09:a2:db:
                    7b:2a:fb:54:04:73:b8:6c:bc:02:16:fd:c2:75:b1:
                    22:3e:41:38:73:fc:ce:37:5c:e9:7d:a5:4a:db:28:
                    72:49:00:85:65:11:23:4d:95:d5:e3:f8:31:b9:b3:
                    b9:35:2f:20:1b:9b:cb:0a:53:6b:54:fd:2b:4e:f9:
                    5e:0a:08:1c:12:13:04:b3:a6:ac:97:56:c6:e4:04:
                    19:ff:aa:c0:a4:00:bf:f4:bb:43:da:19:53:74:d1:
                    49:62:c6:df:20:3c:cc:c3:a2:41:b8:8e:6b:1d:8a:
                    69:ca:86:65:c7:12:3a:cf:55:2e:1b:e1:05:f0:32:
                    1c:a7:91:37:63:53:e7:b2:f0:5d:ae:e3:85:25:d2:
                    92:20:48:4b:c6:1b:aa:88:26:25:10:8f:61:1f:65:
                    f7:52:05:c7:3d:a5:2e:89:e5:4a:d2:37:7a:be:85:
                    ce:2f:57:11:0d:73:56:c1:44:ea:1a:72:14:47:f8:
                    08:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:84:3D:C9:B8:37:07:6A:33:C9:B1:0F:8D:DF:EB:DA:9B:56:B7:F8
            X509v3 Authority Key Identifier:
                keyid:2C:AF:D9:D8:A7:9A:EC:27:7E:AB:A7:07:4D:7B:B2:B9:9D:EF:9A:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/3230302e3134342e3235302e302f32332d3233203d3e203238353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.144.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:6f:c9:f3:ca:f4:78:59:5e:e6:ff:e5:4a:e8:2a:e3:6c:2a:
         cb:63:b5:33:90:36:4b:04:14:de:60:66:80:18:5d:6b:f9:96:
         12:63:ba:1c:e3:56:40:9c:af:80:4c:b3:16:03:b3:95:42:42:
         7d:3d:64:0b:ba:98:e3:29:ad:2a:54:cc:c6:55:88:f1:20:2b:
         a3:9d:ce:8d:01:b3:3e:bf:93:db:28:84:2b:be:1b:b5:ca:37:
         a9:44:a8:96:2a:f6:70:f6:da:6e:d0:cf:e9:d4:43:d7:e3:69:
         ea:21:27:66:45:93:80:c1:4d:06:55:a0:86:31:60:9f:e4:4c:
         e0:52:28:e1:cf:67:31:81:02:c4:95:1b:ee:7f:f0:0c:0e:ee:
         ea:6c:37:51:94:61:99:1e:67:52:75:d9:39:23:37:4b:db:e8:
         a1:35:af:5a:30:a7:3c:1b:d0:15:c0:e6:71:7d:df:87:86:ca:
         cb:f0:72:02:fd:6d:d4:99:ad:70:c0:cd:a2:08:ef:b9:86:80:
         2b:4d:79:6c:6f:a5:f4:09:03:32:05:c7:8a:05:5d:35:bf:6c:
         02:c4:75:21:29:93:75:f1:9c:e0:5a:4e:23:d1:67:29:42:d6:
         39:68:51:fd:cf:7a:5d:02:aa:bb:f1:f6:de:66:96:6b:ae:9a:
         c6:46:b4:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 15:27:39 2026 by rpki-client