Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/3230302e3232352e3133382e302f32332d3233203d3e203631373734.roa
File:                     3230302e3232352e3133382e302f32332d3233203d3e203631373734.roa (raw, json)
Hash identifier:          n2Cj/AM2C0v4IBzkn2vlKIaCakVpqMj+GaSX0wkilvg=
Subject key identifier:   04:03:9C:43:87:8F:87:07:0D:FE:81:4D:E0:1D:36:99:55:98:7D:11
Certificate issuer:       /CN=E5EED0254DEC985F4548950B5BAF98E84B7063E5
Certificate serial:       39CA5F14C121CA5AD9FADFCA766EB801BE214B30
Authority key identifier: E5:EE:D0:25:4D:EC:98:5F:45:48:95:0B:5B:AF:98:E8:4B:70:63:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5EED0254DEC985F4548950B5BAF98E84B7063E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/3230302e3232352e3133382e302f32332d3233203d3e203631373734.roa
Signing time:             Sun 02 Aug 2026 01:43:32 +0000
ROA not before:           Sun 02 Aug 2026 01:38:32 +0000
ROA not after:            Sun 01 Aug 2027 01:43:32 +0000
asID:                     61774
IP address blocks:        200.225.138.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/E5EED0254DEC985F4548950B5BAF98E84B7063E5.crl
                          rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/E5EED0254DEC985F4548950B5BAF98E84B7063E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5EED0254DEC985F4548950B5BAF98E84B7063E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 13 Aug 2026 22:38:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:ca:5f:14:c1:21:ca:5a:d9:fa:df:ca:76:6e:b8:01:be:21:4b:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5EED0254DEC985F4548950B5BAF98E84B7063E5
        Validity
            Not Before: Aug  2 01:38:32 2026 GMT
            Not After : Aug  1 01:43:32 2027 GMT
        Subject: CN=04039C43878F87070DFE814DE01D369955987D11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d0:cd:b5:01:4a:62:21:b2:28:fe:31:18:c3:
                    70:24:38:62:42:c4:2d:d6:e3:82:3a:e9:d6:63:0a:
                    f6:0c:46:0e:f7:d9:e0:4c:c2:a5:01:42:e9:d3:31:
                    8b:c0:ad:b7:ea:71:70:2a:df:b1:72:49:4c:ef:37:
                    70:f5:f1:73:4d:54:88:4b:81:be:95:02:cb:fd:29:
                    14:ea:63:d5:3d:79:f3:64:5b:56:c8:48:66:eb:28:
                    3d:75:6b:05:27:81:92:a5:b1:12:c4:0e:3a:d4:b8:
                    90:64:89:f7:df:58:11:af:98:4d:af:86:a5:59:30:
                    bb:85:ef:a4:76:ad:0f:76:a2:8d:1b:62:72:52:11:
                    78:a4:75:6e:82:1d:db:cf:11:05:0d:3c:7d:c8:da:
                    cc:c7:fa:21:4a:72:52:d4:68:54:2e:29:26:1e:16:
                    b1:b8:63:30:40:bd:18:7c:cb:63:70:ed:ef:02:b4:
                    c7:a0:de:30:8b:3c:a9:6b:53:9a:3c:58:a2:dd:12:
                    10:2f:40:42:59:e7:67:e9:73:56:30:54:8a:11:cd:
                    61:bd:88:9a:d1:7d:2f:9c:20:89:8e:c1:2a:dc:da:
                    08:c9:c1:41:cf:f6:62:9e:d8:2e:69:34:36:52:6b:
                    d4:96:cc:1d:47:38:2d:84:bf:c8:a2:67:50:4e:a0:
                    a9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:03:9C:43:87:8F:87:07:0D:FE:81:4D:E0:1D:36:99:55:98:7D:11
            X509v3 Authority Key Identifier:
                keyid:E5:EE:D0:25:4D:EC:98:5F:45:48:95:0B:5B:AF:98:E8:4B:70:63:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/E5EED0254DEC985F4548950B5BAF98E84B7063E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5EED0254DEC985F4548950B5BAF98E84B7063E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/3230302e3232352e3133382e302f32332d3233203d3e203631373734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.225.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ab:57:34:f4:79:99:dc:39:a3:ba:8b:de:24:1d:3c:d6:0a:fb:
         6e:1b:01:ec:c0:7e:d9:44:14:b3:55:e1:68:99:0d:75:18:66:
         da:15:03:56:68:60:62:2b:79:9f:fb:e1:3f:3d:86:42:d7:10:
         2a:02:fe:b3:ea:c7:13:30:27:0c:99:d2:24:2f:e9:f0:a9:3b:
         23:12:bb:1c:5d:c3:2c:3c:fd:cb:41:22:42:97:6e:dd:b6:cc:
         6e:74:9e:5a:18:fb:b3:9b:e7:04:81:bf:e6:de:e6:00:c6:a3:
         75:19:14:f3:17:e8:c4:94:cb:8e:fe:e6:ed:2a:b0:dc:77:8a:
         18:79:98:90:ed:9b:0c:db:16:16:52:21:c3:5e:57:fa:a7:b5:
         ff:c4:4c:dc:eb:94:09:42:9a:0e:d5:ae:5d:c2:05:16:33:e8:
         05:1e:1d:6f:b4:df:00:c1:0b:27:9a:b2:b0:d1:b0:9c:d8:ac:
         d9:9e:e9:22:21:10:94:38:e9:5c:6a:3d:ca:7f:f0:6e:cc:9a:
         cc:c4:35:4a:5c:14:29:97:99:23:36:65:2c:9c:c5:27:8e:ba:
         d8:4f:2f:df:3e:3f:b5:af:e6:aa:9c:9e:02:9a:23:d2:3c:12:
         38:65:a8:dd:51:17:1c:fd:e4:08:3f:23:c2:d8:48:1f:7b:0c:
         c7:e3:90:d7
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUOcpfFMEhylrZ+t/Kdm64Ab4hSzAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTVFRUQwMjU0REVDOTg1RjQ1NDg5NTBCNUJBRjk4RTg0
QjcwNjNFNTAeFw0yNjA4MDIwMTM4MzJaFw0yNzA4MDEwMTQzMzJaMDMxMTAvBgNV
BAMTKDA0MDM5QzQzODc4Rjg3MDcwREZFODE0REUwMUQzNjk5NTU5ODdEMTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL0M21AUpiIbIo/jEYw3AkOGJC
xC3W44I66dZjCvYMRg732eBMwqUBQunTMYvArbfqcXAq37FySUzvN3D18XNNVIhL
gb6VAsv9KRTqY9U9efNkW1bISGbrKD11awUngZKlsRLEDjrUuJBkifffWBGvmE2v
hqVZMLuF76R2rQ92oo0bYnJSEXikdW6CHdvPEQUNPH3I2szH+iFKclLUaFQuKSYe
FrG4YzBAvRh8y2Nw7e8CtMeg3jCLPKlrU5o8WKLdEhAvQEJZ52fpc1YwVIoRzWG9
iJrRfS+cIImOwSrc2gjJwUHP9mKe2C5pNDZSa9SWzB1HOC2Ev8iiZ1BOoKn3AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUBAOcQ4ePhwcN/oFN4B02mVWYfREwHwYDVR0j
BBgwFoAU5e7QJU3smF9FSJULW6+Y6EtwY+UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWZvcExqVHZacmlYYVI2cEZFUVV3cmNYUHJoblV3Q0VCNmVUSjlxV2c5
SGovMC9FNUVFRDAyNTRERUM5ODVGNDU0ODk1MEI1QkFGOThFODRCNzA2M0U1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U1RUVEMDI1NERFQzk4NUY0
NTQ4OTUwQjVCQUY5OEU4NEI3MDYzRTUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzlmb3BMalR2WnJpWGFSNnBGRVFVd3JjWFByaG5Vd0NFQjZlVEo5cVdnOUhqLzAv
MzIzMDMwMmUzMjMyMzUyZTMxMzMzODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM2
MzEzNzM3MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAHI4YowDQYJKoZIhvcNAQELBQADggEBAKtXNPR5
mdw5o7qL3iQdPNYK+24bAezAftlEFLNV4WiZDXUYZtoVA1ZoYGIreZ/74T89hkLX
ECoC/rPqxxMwJwyZ0iQv6fCpOyMSuxxdwyw8/ctBIkKXbt22zG50nloY+7Ob5wSB
v+be5gDGo3UZFPMX6MSUy47+5u0qsNx3ihh5mJDtmwzbFhZSIcNeV/qntf/ETNzr
lAlCmg7Vrl3CBRYz6AUeHW+03wDBCyeasrDRsJzYrNme6SIhEJQ46VxqPcp/8G7M
mszENUpcFCmXmSM2ZSycxSeOuthPL98+P7Wv5qqcngKaI9I8EjhlqN1RFxz95Ag/
I8LYSB97DMfjkNc=
-----END CERTIFICATE-----
Generated at Thu Aug 13 07:51:08 2026 by rpki-client