Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8Fix7TPsBTC5gfUz7vQq4PL6y9grdrABfuMKFYmH9gr/0/3230302e3231392e32342e302f32322d3234203d3e20323730383132.roa
File:                     3230302e3231392e32342e302f32322d3234203d3e20323730383132.roa (raw, json)
Hash identifier:          TnlQk8WaxCecVP2pUxnk/Bf/wstzUdc5ZvYlos+fEjA=
Subject key identifier:   1D:3C:D6:75:41:10:F0:A3:EB:3F:C3:2B:4B:BB:E7:54:C8:4E:4F:B0
Certificate issuer:       /CN=95BE6A85025F4EC9D200085FA17527EA91B4855D
Certificate serial:       2E73C0E0449B6A4E968C65430D3CF2B73BC35846
Authority key identifier: 95:BE:6A:85:02:5F:4E:C9:D2:00:08:5F:A1:75:27:EA:91:B4:85:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95BE6A85025F4EC9D200085FA17527EA91B4855D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Fix7TPsBTC5gfUz7vQq4PL6y9grdrABfuMKFYmH9gr/0/3230302e3231392e32342e302f32322d3234203d3e20323730383132.roa
Signing time:             Tue 04 Aug 2026 17:30:51 +0000
ROA not before:           Tue 04 Aug 2026 17:25:51 +0000
ROA not after:            Tue 03 Aug 2027 17:30:51 +0000
asID:                     270812
IP address blocks:        200.219.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Fix7TPsBTC5gfUz7vQq4PL6y9grdrABfuMKFYmH9gr/0/95BE6A85025F4EC9D200085FA17527EA91B4855D.crl
                          rsync://rpki-repo.registro.br/repo/8Fix7TPsBTC5gfUz7vQq4PL6y9grdrABfuMKFYmH9gr/0/95BE6A85025F4EC9D200085FA17527EA91B4855D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95BE6A85025F4EC9D200085FA17527EA91B4855D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 13:50:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:73:c0:e0:44:9b:6a:4e:96:8c:65:43:0d:3c:f2:b7:3b:c3:58:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95BE6A85025F4EC9D200085FA17527EA91B4855D
        Validity
            Not Before: Aug  4 17:25:51 2026 GMT
            Not After : Aug  3 17:30:51 2027 GMT
        Subject: CN=1D3CD6754110F0A3EB3FC32B4BBBE754C84E4FB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ba:1d:36:d0:db:24:8f:65:28:1b:a5:dd:f8:
                    c8:ef:7d:32:ca:0a:cd:a8:6f:8d:36:b7:25:39:f0:
                    35:a9:aa:fc:bd:12:08:5b:17:32:5e:84:7b:e9:00:
                    7e:65:dd:c6:fe:bc:4d:68:09:42:8b:90:12:00:b5:
                    40:eb:14:6d:5d:1a:dd:df:23:5e:5a:3c:94:34:da:
                    b5:4f:13:3e:1e:85:e2:30:3a:83:39:b0:75:fe:07:
                    27:f4:63:ce:31:2c:ce:2a:ec:97:43:b4:cd:64:64:
                    6f:c3:45:64:71:47:b4:f9:29:ac:26:51:4f:9e:4a:
                    5f:2c:2f:9f:b3:31:02:34:80:b0:63:72:ea:a7:5c:
                    a9:1b:6a:92:f6:48:3f:7d:b7:d8:81:ab:6f:2a:84:
                    b4:75:dd:83:1f:a3:5b:da:76:26:24:7b:33:d8:54:
                    65:a8:41:e9:8d:75:a5:b7:fe:e0:ed:99:2f:4e:c3:
                    a5:eb:5a:be:5c:07:f1:6b:c7:1f:53:43:c5:8c:52:
                    0f:27:82:2e:48:ec:28:3e:8b:24:bf:91:12:8a:58:
                    00:50:67:c8:cd:5a:8d:98:65:e8:69:3b:86:89:95:
                    91:9a:67:3b:f1:59:70:c3:de:4e:73:2c:e7:83:5e:
                    f4:c3:f8:f6:cf:9d:69:94:44:6e:eb:4d:8c:b6:34:
                    60:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:3C:D6:75:41:10:F0:A3:EB:3F:C3:2B:4B:BB:E7:54:C8:4E:4F:B0
            X509v3 Authority Key Identifier:
                keyid:95:BE:6A:85:02:5F:4E:C9:D2:00:08:5F:A1:75:27:EA:91:B4:85:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Fix7TPsBTC5gfUz7vQq4PL6y9grdrABfuMKFYmH9gr/0/95BE6A85025F4EC9D200085FA17527EA91B4855D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95BE6A85025F4EC9D200085FA17527EA91B4855D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Fix7TPsBTC5gfUz7vQq4PL6y9grdrABfuMKFYmH9gr/0/3230302e3231392e32342e302f32322d3234203d3e20323730383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:93:f9:33:52:ac:71:dd:a7:df:53:3b:3b:93:54:cb:4f:73:
         e4:85:ab:a8:90:18:7e:c5:14:0a:33:da:d4:c1:ca:56:d1:e8:
         ab:40:d3:d6:20:a2:49:63:26:56:59:c7:0e:79:1a:f5:74:d8:
         3c:b2:8c:79:2a:3b:14:11:30:ea:dd:6a:8a:51:60:df:88:49:
         e9:2e:05:55:b1:a0:82:7f:c8:aa:92:77:28:cd:90:f5:d7:c4:
         31:ca:9b:e2:46:95:55:f6:2d:d6:58:de:ac:5e:22:44:f4:bf:
         30:9b:fc:66:3c:c8:69:f4:89:85:11:be:6b:47:6c:98:e6:93:
         ee:47:dc:05:ba:f8:2d:9e:91:ef:18:ba:e0:90:41:66:c1:1e:
         f8:32:f2:e9:25:7f:2d:b1:3a:67:f4:6a:dc:2e:d8:54:b8:3b:
         27:38:52:4f:bd:fd:73:46:17:c5:02:3f:c4:70:95:10:7e:80:
         25:7f:b5:91:fd:9e:e3:e3:43:43:d0:3c:7f:1a:ae:15:8e:29:
         da:80:a6:c1:72:cf:fa:0e:37:c3:e6:d2:03:b1:42:46:99:d4:
         3e:9f:69:56:60:72:e6:1b:0c:6f:b1:d4:c1:40:91:44:ae:30:
         c0:7a:bd:e0:35:a6:9a:56:e4:54:6e:8e:3e:c6:9b:74:2b:9f:
         aa:36:76:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 13:22:08 2026 by rpki-client