Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/948iD2h8XvwkiBNCCTMxW71LCSUEHmYP41H8qdB943ti/0/3230302e332e31362e302f32302d3234203d3e203532363839.roa
File:                     3230302e332e31362e302f32302d3234203d3e203532363839.roa (raw, json)
Hash identifier:          kx9GvgSHREQhYCuJOxuhkPkGY+YqfYlpfutFW2U46Wg=
Subject key identifier:   13:0A:96:07:67:B5:C9:55:3E:6D:FD:84:92:6F:55:90:47:02:6E:3F
Certificate issuer:       /CN=8E596F31F6CFE57078B1303E68FEBDEEEAF96DDE
Certificate serial:       6E0FC61218E9DFAFC50C15C33F2D09490B4C8103
Authority key identifier: 8E:59:6F:31:F6:CF:E5:70:78:B1:30:3E:68:FE:BD:EE:EA:F9:6D:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E596F31F6CFE57078B1303E68FEBDEEEAF96DDE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/948iD2h8XvwkiBNCCTMxW71LCSUEHmYP41H8qdB943ti/0/3230302e332e31362e302f32302d3234203d3e203532363839.roa
Signing time:             Fri 30 Jan 2026 15:48:05 +0000
ROA not before:           Fri 30 Jan 2026 15:43:05 +0000
ROA not after:            Fri 29 Jan 2027 15:48:05 +0000
asID:                     52689
IP address blocks:        200.3.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/948iD2h8XvwkiBNCCTMxW71LCSUEHmYP41H8qdB943ti/0/8E596F31F6CFE57078B1303E68FEBDEEEAF96DDE.crl
                          rsync://rpki-repo.registro.br/repo/948iD2h8XvwkiBNCCTMxW71LCSUEHmYP41H8qdB943ti/0/8E596F31F6CFE57078B1303E68FEBDEEEAF96DDE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E596F31F6CFE57078B1303E68FEBDEEEAF96DDE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 20:48:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:0f:c6:12:18:e9:df:af:c5:0c:15:c3:3f:2d:09:49:0b:4c:81:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E596F31F6CFE57078B1303E68FEBDEEEAF96DDE
        Validity
            Not Before: Jan 30 15:43:05 2026 GMT
            Not After : Jan 29 15:48:05 2027 GMT
        Subject: CN=130A960767B5C9553E6DFD84926F559047026E3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:cc:67:40:55:c6:e6:27:e7:45:5b:fc:7e:4b:
                    83:3d:5b:cd:97:a5:71:6a:a7:46:d2:52:1f:44:25:
                    a6:3e:ab:3a:b9:47:0f:ef:0e:dd:a5:68:82:ef:d8:
                    8f:24:00:93:23:4c:88:59:73:60:3b:76:5e:f5:b4:
                    f5:eb:3f:60:72:fc:6d:fa:e2:0c:91:7d:ad:2f:06:
                    24:44:55:d6:90:81:d8:65:d3:ca:16:f5:29:dc:07:
                    22:86:88:a1:89:b3:81:02:7f:99:16:c5:7f:ab:a3:
                    9f:82:f4:b5:98:19:ec:29:de:18:de:27:9e:b5:de:
                    73:fe:d9:77:23:ab:77:4a:61:35:28:3a:e3:df:b3:
                    3e:a3:ad:3e:da:05:77:89:50:65:92:74:0a:95:52:
                    e5:69:9d:4c:b1:38:9c:9d:ea:26:66:88:b7:4f:5c:
                    2b:35:c1:2b:6b:b5:eb:3e:24:8d:8a:85:2e:dc:2e:
                    2e:60:58:8c:55:e5:9e:ae:a3:82:d9:d2:0b:d3:a3:
                    4f:35:1e:c9:0b:5f:b8:a4:21:1f:99:d2:ef:e5:7d:
                    48:df:47:e1:5e:17:86:4c:13:ba:2a:71:29:73:af:
                    b2:76:00:a4:3e:b0:50:53:47:10:be:d4:9c:24:6a:
                    d3:e2:26:b4:b7:1f:9b:f5:9e:08:29:8e:1a:dc:f1:
                    60:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:0A:96:07:67:B5:C9:55:3E:6D:FD:84:92:6F:55:90:47:02:6E:3F
            X509v3 Authority Key Identifier:
                keyid:8E:59:6F:31:F6:CF:E5:70:78:B1:30:3E:68:FE:BD:EE:EA:F9:6D:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/948iD2h8XvwkiBNCCTMxW71LCSUEHmYP41H8qdB943ti/0/8E596F31F6CFE57078B1303E68FEBDEEEAF96DDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E596F31F6CFE57078B1303E68FEBDEEEAF96DDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/948iD2h8XvwkiBNCCTMxW71LCSUEHmYP41H8qdB943ti/0/3230302e332e31362e302f32302d3234203d3e203532363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.3.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         17:44:2b:1a:32:f6:4c:54:5b:39:5f:10:01:1a:e1:43:fa:6f:
         32:2a:da:c0:84:44:9c:1e:2c:b4:9b:19:95:09:59:25:54:73:
         27:76:43:89:12:b1:13:56:a0:c7:70:e9:f9:56:6b:b2:b3:73:
         52:10:1b:34:0e:53:12:cb:7b:e4:9a:3b:71:bd:1a:dd:d7:f7:
         7e:e1:d4:f1:b2:9a:53:ae:2c:0b:5a:8a:cf:47:56:02:40:df:
         ce:51:39:c6:51:d7:51:ea:65:11:04:03:a2:62:90:1a:13:7c:
         ab:d4:13:a7:72:95:50:a8:04:ae:a8:2a:ec:52:97:a7:e2:9a:
         5b:7c:c5:3e:2f:b4:8b:04:33:fe:2d:7a:59:7a:00:fa:17:42:
         d5:f9:b7:c8:96:f1:7e:e7:6f:e9:ee:ed:a6:fc:67:97:c4:2d:
         4b:63:16:56:4f:9f:ff:34:34:07:31:a5:5c:1e:0b:58:8d:92:
         d6:be:73:de:80:40:a1:5b:1e:6c:56:d9:71:a4:1d:2d:fc:4b:
         d7:55:fa:f2:17:99:68:17:24:d1:76:41:52:c8:8e:f0:0d:bc:
         9b:4d:74:f5:38:23:6a:a2:2a:fb:06:5b:2d:26:26:97:f2:52:
         47:53:e3:ab:4a:ae:74:c6:ee:b4:13:4e:26:7a:6a:f9:e4:79:
         68:04:d2:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:58:57 2026 by rpki-client