Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/93XGcrsRxGQgVVRvC4ghUZvdBYyvakGTHcUYc3c8YL4s/0/3230302e35322e3232342e302f32322d3332203d3e20313938393439.roa
File:                     3230302e35322e3232342e302f32322d3332203d3e20313938393439.roa (raw, json)
Hash identifier:          KWxRyQr7SQrDRTIq4VsWzjT2MukoES4caEdJjfySqj0=
Subject key identifier:   35:B8:EC:67:2F:45:59:54:D7:9F:C5:1D:DB:39:C6:D4:D7:A0:68:1A
Certificate issuer:       /CN=26EDCCC8D79ED0AAEE2080871889486C013185D6
Certificate serial:       78BE84614A9C03E50B1BD8C895013B63EB245149
Authority key identifier: 26:ED:CC:C8:D7:9E:D0:AA:EE:20:80:87:18:89:48:6C:01:31:85:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26EDCCC8D79ED0AAEE2080871889486C013185D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/93XGcrsRxGQgVVRvC4ghUZvdBYyvakGTHcUYc3c8YL4s/0/3230302e35322e3232342e302f32322d3332203d3e20313938393439.roa
Signing time:             Tue 19 May 2026 14:23:39 +0000
ROA not before:           Tue 19 May 2026 14:18:39 +0000
ROA not after:            Tue 18 May 2027 14:23:39 +0000
asID:                     198949
IP address blocks:        200.52.224.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/93XGcrsRxGQgVVRvC4ghUZvdBYyvakGTHcUYc3c8YL4s/0/26EDCCC8D79ED0AAEE2080871889486C013185D6.crl
                          rsync://rpki-repo.registro.br/repo/93XGcrsRxGQgVVRvC4ghUZvdBYyvakGTHcUYc3c8YL4s/0/26EDCCC8D79ED0AAEE2080871889486C013185D6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26EDCCC8D79ED0AAEE2080871889486C013185D6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 07:21:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:be:84:61:4a:9c:03:e5:0b:1b:d8:c8:95:01:3b:63:eb:24:51:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26EDCCC8D79ED0AAEE2080871889486C013185D6
        Validity
            Not Before: May 19 14:18:39 2026 GMT
            Not After : May 18 14:23:39 2027 GMT
        Subject: CN=35B8EC672F455954D79FC51DDB39C6D4D7A0681A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a3:5c:d4:19:2c:ab:e5:61:9b:ff:f4:43:39:
                    06:e3:bf:0c:69:ba:ef:00:5d:94:d8:a5:22:71:4d:
                    d8:7d:f6:c7:1c:3a:32:08:39:03:65:5c:7c:8f:ac:
                    ea:b9:26:fe:ef:b8:34:01:d9:e1:5b:50:01:b5:5d:
                    c3:b4:23:5a:98:49:8d:47:e4:6f:6e:7a:54:fa:b4:
                    48:32:3c:9c:1e:d6:51:d7:e8:40:d5:3d:86:91:a1:
                    52:7c:75:7e:e1:82:87:dd:0e:98:4f:04:35:62:59:
                    f9:28:c9:03:d2:a2:ae:88:d5:37:c3:1b:29:d1:74:
                    3d:f1:1b:5b:bc:b7:6f:c8:5d:99:a4:9f:33:08:f4:
                    bf:37:29:a7:66:0b:ca:f4:b8:cc:dc:ac:c2:28:80:
                    ad:e0:35:91:be:5b:c9:b3:19:8d:95:43:76:33:6c:
                    bb:e0:a2:20:72:4d:a3:31:66:ea:47:ef:85:4f:b0:
                    7f:4b:b0:48:c6:0d:fa:6f:b0:76:03:39:26:38:3f:
                    54:99:e6:e6:0c:6d:ca:0e:e6:05:40:d9:0a:2d:c2:
                    e3:7b:cf:aa:66:9b:e9:22:59:31:80:f8:fd:ad:ca:
                    8e:c4:9c:b6:57:31:4c:ee:a2:2f:ce:88:35:fa:c3:
                    9d:ab:d2:1e:d4:09:81:32:31:9d:4b:e3:a1:cf:d7:
                    0c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:B8:EC:67:2F:45:59:54:D7:9F:C5:1D:DB:39:C6:D4:D7:A0:68:1A
            X509v3 Authority Key Identifier:
                keyid:26:ED:CC:C8:D7:9E:D0:AA:EE:20:80:87:18:89:48:6C:01:31:85:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/93XGcrsRxGQgVVRvC4ghUZvdBYyvakGTHcUYc3c8YL4s/0/26EDCCC8D79ED0AAEE2080871889486C013185D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26EDCCC8D79ED0AAEE2080871889486C013185D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/93XGcrsRxGQgVVRvC4ghUZvdBYyvakGTHcUYc3c8YL4s/0/3230302e35322e3232342e302f32322d3332203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.52.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:5c:83:02:92:e5:d4:83:66:ae:0d:6f:67:26:77:5b:0b:2c:
         68:da:32:13:f8:c7:a9:76:bf:1d:ac:61:28:04:c7:8f:a2:94:
         90:08:a0:22:6c:8f:bb:32:57:99:85:f2:97:f5:a6:2c:ed:65:
         50:38:ac:ce:ba:3a:a3:88:72:13:3b:0b:6d:2c:db:bb:ac:71:
         9b:5d:10:41:14:43:3b:1f:fa:09:8f:93:ed:0a:82:f8:67:85:
         df:59:01:b1:6e:d6:65:d6:30:94:90:eb:ac:2b:fa:64:69:fe:
         56:b6:a8:62:1c:e4:0e:a7:5f:ca:5f:13:eb:fa:e3:e0:53:c0:
         2b:68:10:0f:26:3c:c1:d7:4e:82:b3:8e:ef:9b:f9:dc:68:cb:
         38:5a:42:0d:79:b6:cf:93:c5:3c:9a:f0:d8:6b:e7:fb:ef:7e:
         ae:15:b7:cf:98:44:7c:d9:6d:da:03:bf:2d:75:1a:9c:a1:cd:
         88:0c:79:d1:8d:0c:bc:8e:26:22:75:00:bb:d2:a6:df:b7:28:
         1e:b9:96:ab:75:f5:55:20:b9:6f:41:e0:d1:89:fe:60:81:99:
         ed:bb:27:d1:ad:9e:f2:b2:04:4b:b3:10:00:b0:cc:f7:7c:38:
         25:ff:d2:df:fc:91:1d:48:d2:cd:57:16:e4:81:c3:f4:6c:d1:
         b4:a4:40:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 19:30:33 2026 by rpki-client