Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/3230302e3232352e3133362e302f32342d3234203d3e203631373734.roa
File:                     3230302e3232352e3133362e302f32342d3234203d3e203631373734.roa (raw, json)
Hash identifier:          hHeMhr5MBWTbdXmu+el5yzi3s31FJ01but/eJ+A3mz8=
Subject key identifier:   58:CC:11:2B:05:00:88:E0:0A:51:E1:4E:D7:15:DC:49:67:CB:2E:E7
Certificate issuer:       /CN=E5EED0254DEC985F4548950B5BAF98E84B7063E5
Certificate serial:       5D6AC633398525CCD1AB3A29D94A139CE82766AA
Authority key identifier: E5:EE:D0:25:4D:EC:98:5F:45:48:95:0B:5B:AF:98:E8:4B:70:63:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5EED0254DEC985F4548950B5BAF98E84B7063E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/3230302e3232352e3133362e302f32342d3234203d3e203631373734.roa
Signing time:             Tue 15 Sep 2026 14:35:37 +0000
ROA not before:           Tue 15 Sep 2026 14:30:37 +0000
ROA not after:            Tue 14 Sep 2027 14:35:37 +0000
asID:                     61774
IP address blocks:        200.225.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/E5EED0254DEC985F4548950B5BAF98E84B7063E5.crl
                          rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/E5EED0254DEC985F4548950B5BAF98E84B7063E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5EED0254DEC985F4548950B5BAF98E84B7063E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 06:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:6a:c6:33:39:85:25:cc:d1:ab:3a:29:d9:4a:13:9c:e8:27:66:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5EED0254DEC985F4548950B5BAF98E84B7063E5
        Validity
            Not Before: Sep 15 14:30:37 2026 GMT
            Not After : Sep 14 14:35:37 2027 GMT
        Subject: CN=58CC112B050088E00A51E14ED715DC4967CB2EE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2b:d8:69:d9:75:e2:c2:aa:19:3b:d2:a2:c7:
                    bd:00:20:ba:1d:68:72:be:86:a8:4f:20:e2:89:30:
                    3b:00:5a:c3:d2:1b:c8:52:c5:3d:6b:9a:c2:e7:ca:
                    99:50:f3:f1:79:11:d5:fc:86:3a:94:18:e2:ba:1e:
                    25:f5:1a:4f:81:59:04:eb:0b:1c:af:42:a0:4c:83:
                    12:33:45:7a:ce:86:30:a1:8b:1e:75:da:80:27:05:
                    f0:d6:d5:5a:0f:3b:8b:51:1f:09:11:53:42:28:48:
                    ca:8a:12:4c:c7:d6:bb:fa:dc:c3:84:cd:a8:b7:da:
                    10:14:5f:07:a4:59:84:7d:74:fd:4f:1f:90:4e:d8:
                    6f:05:79:95:13:7e:5e:c1:43:e5:c9:cc:49:c5:de:
                    14:4d:06:2c:27:f8:2c:b6:ef:f9:5b:64:6d:ec:04:
                    95:8e:6f:97:b6:f3:cf:8a:bf:87:79:8c:06:74:11:
                    2e:fe:92:2e:b2:ad:a6:81:05:6a:89:47:a0:c8:03:
                    ad:0c:26:0e:81:d6:6b:ed:b2:b3:10:02:a3:f9:af:
                    f4:8b:58:c0:f6:7e:eb:d6:b1:2f:5e:c8:09:2d:58:
                    53:a5:1d:98:fc:9b:d8:34:c0:f1:c4:41:a3:06:96:
                    d6:01:7e:c8:c6:5b:cc:30:1f:0a:18:e4:ea:85:28:
                    51:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:CC:11:2B:05:00:88:E0:0A:51:E1:4E:D7:15:DC:49:67:CB:2E:E7
            X509v3 Authority Key Identifier:
                keyid:E5:EE:D0:25:4D:EC:98:5F:45:48:95:0B:5B:AF:98:E8:4B:70:63:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/E5EED0254DEC985F4548950B5BAF98E84B7063E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5EED0254DEC985F4548950B5BAF98E84B7063E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/3230302e3232352e3133362e302f32342d3234203d3e203631373734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.225.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:5e:87:dc:7f:5e:86:3f:ea:9e:3b:02:95:40:c5:d0:60:5c:
         c1:4e:fe:6c:fc:56:0f:9a:48:cf:26:31:80:47:d8:c5:16:f7:
         f9:72:de:52:d3:c2:1a:f4:dc:6d:47:ca:ae:e6:e6:83:8d:79:
         bf:3e:64:dd:da:9b:18:be:dc:fb:4a:64:21:d9:e8:ed:da:cd:
         24:66:02:f3:6b:dd:15:45:e7:34:1d:41:76:80:db:28:57:0b:
         2d:ee:79:a4:3c:79:50:59:c6:b2:45:5e:55:04:b9:2f:e1:7b:
         ae:34:c0:8a:17:4c:4d:91:3c:b5:57:5d:7c:b2:c1:96:83:95:
         62:ec:3c:18:71:1a:d5:fc:a2:68:9b:15:61:27:0e:46:ab:9d:
         59:e7:60:37:91:11:b6:5a:c6:68:ce:0e:4d:00:e0:b5:f5:f9:
         8f:50:21:1d:7d:9c:59:a3:55:d9:38:27:93:99:75:ce:df:37:
         62:c8:91:13:1e:d1:10:c4:c5:6e:9c:8a:c6:d5:49:b5:74:23:
         04:2e:b0:e0:86:2e:be:00:a2:03:5f:41:31:b4:3e:b3:bd:18:
         a4:a8:17:51:af:24:70:1b:4c:0e:65:20:6e:97:2c:04:65:83:
         62:2b:8a:c7:6a:39:e3:ef:34:94:1c:1f:86:8c:1b:69:ca:fe:
         2c:98:46:62
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUXWrGMzmFJczRqzop2UoTnOgnZqowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTVFRUQwMjU0REVDOTg1RjQ1NDg5NTBCNUJBRjk4RTg0
QjcwNjNFNTAeFw0yNjA5MTUxNDMwMzdaFw0yNzA5MTQxNDM1MzdaMDMxMTAvBgNV
BAMTKDU4Q0MxMTJCMDUwMDg4RTAwQTUxRTE0RUQ3MTVEQzQ5NjdDQjJFRTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNK9hp2XXiwqoZO9Kix70AILod
aHK+hqhPIOKJMDsAWsPSG8hSxT1rmsLnyplQ8/F5EdX8hjqUGOK6HiX1Gk+BWQTr
CxyvQqBMgxIzRXrOhjChix512oAnBfDW1VoPO4tRHwkRU0IoSMqKEkzH1rv63MOE
zai32hAUXwekWYR9dP1PH5BO2G8FeZUTfl7BQ+XJzEnF3hRNBiwn+Cy27/lbZG3s
BJWOb5e288+Kv4d5jAZ0ES7+ki6yraaBBWqJR6DIA60MJg6B1mvtsrMQAqP5r/SL
WMD2fuvWsS9eyAktWFOlHZj8m9g0wPHEQaMGltYBfsjGW8wwHwoY5OqFKFHtAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUWMwRKwUAiOAKUeFO1xXcSWfLLucwHwYDVR0j
BBgwFoAU5e7QJU3smF9FSJULW6+Y6EtwY+UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWZvcExqVHZacmlYYVI2cEZFUVV3cmNYUHJoblV3Q0VCNmVUSjlxV2c5
SGovMC9FNUVFRDAyNTRERUM5ODVGNDU0ODk1MEI1QkFGOThFODRCNzA2M0U1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U1RUVEMDI1NERFQzk4NUY0
NTQ4OTUwQjVCQUY5OEU4NEI3MDYzRTUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzlmb3BMalR2WnJpWGFSNnBGRVFVd3JjWFByaG5Vd0NFQjZlVEo5cVdnOUhqLzAv
MzIzMDMwMmUzMjMyMzUyZTMxMzMzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2
MzEzNzM3MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADI4YgwDQYJKoZIhvcNAQELBQADggEBAJ9eh9x/
XoY/6p47ApVAxdBgXMFO/mz8Vg+aSM8mMYBH2MUW9/ly3lLTwhr03G1Hyq7m5oON
eb8+ZN3amxi+3PtKZCHZ6O3azSRmAvNr3RVF5zQdQXaA2yhXCy3ueaQ8eVBZxrJF
XlUEuS/he640wIoXTE2RPLVXXXyywZaDlWLsPBhxGtX8omibFWEnDkarnVnnYDeR
EbZaxmjODk0A4LX1+Y9QIR19nFmjVdk4J5OZdc7fN2LIkRMe0RDExW6cisbVSbV0
IwQusOCGLr4AogNfQTG0PrO9GKSoF1GvJHAbTA5lIG6XLARlg2IrisdqOePvNJQc
H4aMG2nK/iyYRmI=
-----END CERTIFICATE-----
Generated at Sun Oct 11 18:26:08 2026 by rpki-client