Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9uzv1WoFQnFL43k3yRbGNNSb4cg9J2WEGqqwfMt6XGJj/0/3230302e38302e3132302e302f32322d3232203d3e20323731333133.roa
File:                     3230302e38302e3132302e302f32322d3232203d3e20323731333133.roa (raw, json)
Hash identifier:          DsgsqJE8awRDU1LoUoBb2ZnzCQCJbzr+wH1G7FdYoCU=
Subject key identifier:   BC:FA:9A:B9:9C:FF:31:38:5E:21:44:C8:9B:17:85:6B:E6:DF:66:4B
Certificate issuer:       /CN=1A773314D63EE3CD98B4701E88C716C7D3C92204
Certificate serial:       5D5516B1024058A4C65B37A6EB0993F1F6517EA1
Authority key identifier: 1A:77:33:14:D6:3E:E3:CD:98:B4:70:1E:88:C7:16:C7:D3:C9:22:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A773314D63EE3CD98B4701E88C716C7D3C92204.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9uzv1WoFQnFL43k3yRbGNNSb4cg9J2WEGqqwfMt6XGJj/0/3230302e38302e3132302e302f32322d3232203d3e20323731333133.roa
Signing time:             Wed 09 Sep 2026 17:06:42 +0000
ROA not before:           Wed 09 Sep 2026 17:01:42 +0000
ROA not after:            Wed 08 Sep 2027 17:06:42 +0000
asID:                     271313
IP address blocks:        200.80.120.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9uzv1WoFQnFL43k3yRbGNNSb4cg9J2WEGqqwfMt6XGJj/0/1A773314D63EE3CD98B4701E88C716C7D3C92204.crl
                          rsync://rpki-repo.registro.br/repo/9uzv1WoFQnFL43k3yRbGNNSb4cg9J2WEGqqwfMt6XGJj/0/1A773314D63EE3CD98B4701E88C716C7D3C92204.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A773314D63EE3CD98B4701E88C716C7D3C92204.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 08:14:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:55:16:b1:02:40:58:a4:c6:5b:37:a6:eb:09:93:f1:f6:51:7e:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A773314D63EE3CD98B4701E88C716C7D3C92204
        Validity
            Not Before: Sep  9 17:01:42 2026 GMT
            Not After : Sep  8 17:06:42 2027 GMT
        Subject: CN=BCFA9AB99CFF31385E2144C89B17856BE6DF664B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:62:18:30:89:f0:94:32:03:59:ac:fc:42:72:
                    9d:cd:1b:05:12:84:f7:d3:a7:ca:96:80:73:89:dd:
                    b4:90:42:6f:7c:86:25:dc:b2:40:9a:13:9f:6f:34:
                    c1:92:2c:ea:4b:03:c2:39:39:81:0a:4c:c3:ee:a2:
                    27:66:52:31:c4:e9:3e:6b:16:6b:da:c5:b3:4e:ba:
                    a3:49:24:be:30:5d:03:79:67:0b:8d:5a:9e:1e:c1:
                    b5:d6:04:f2:87:ce:17:e5:fa:1e:e3:08:71:a4:98:
                    d9:fc:be:81:42:cf:65:12:68:0e:26:a9:8d:cd:80:
                    67:c0:c3:4b:18:9f:bd:ea:ea:72:d4:4d:06:8f:51:
                    7d:43:eb:70:89:ef:0c:b7:62:02:9d:55:f3:0f:63:
                    04:76:d0:d8:03:a3:38:e5:45:80:6f:26:a6:e0:f1:
                    95:ff:09:17:68:e3:95:19:f2:f0:26:08:2d:cd:0f:
                    97:75:35:66:4e:98:c4:93:07:74:7a:79:e1:68:2b:
                    f7:6d:0c:ae:bd:31:89:4f:53:71:28:35:c4:45:14:
                    0b:81:3c:31:e9:f2:17:ee:d3:cf:34:78:9e:b9:9a:
                    0f:4d:2f:8b:be:13:d4:97:dd:55:df:04:66:59:bd:
                    0f:be:02:17:d4:e1:16:bc:66:c5:52:61:1c:6e:81:
                    19:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:FA:9A:B9:9C:FF:31:38:5E:21:44:C8:9B:17:85:6B:E6:DF:66:4B
            X509v3 Authority Key Identifier:
                keyid:1A:77:33:14:D6:3E:E3:CD:98:B4:70:1E:88:C7:16:C7:D3:C9:22:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9uzv1WoFQnFL43k3yRbGNNSb4cg9J2WEGqqwfMt6XGJj/0/1A773314D63EE3CD98B4701E88C716C7D3C92204.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A773314D63EE3CD98B4701E88C716C7D3C92204.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9uzv1WoFQnFL43k3yRbGNNSb4cg9J2WEGqqwfMt6XGJj/0/3230302e38302e3132302e302f32322d3232203d3e20323731333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.80.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:c1:44:e7:c6:09:4f:d3:9f:9b:33:cb:2a:58:45:43:ef:35:
         9a:1a:35:98:d4:7d:fe:ab:f5:2c:f6:97:8b:d3:e4:23:82:18:
         ed:de:41:a0:bd:db:3d:15:92:63:37:bb:fc:26:03:09:50:3b:
         81:ad:89:9c:cf:70:04:6c:6b:5b:e7:93:5f:66:bc:24:52:4c:
         a3:2e:67:a2:de:b8:93:31:bb:c7:99:a5:a7:39:fe:b1:e9:82:
         1f:7b:9e:b8:4a:a3:a3:4b:98:21:ff:72:47:2a:2c:5e:07:85:
         76:04:54:2a:78:92:e4:9b:69:08:e9:84:1b:0c:60:a5:c6:2c:
         f1:0f:1b:bc:ca:1e:f4:18:2a:24:3c:f4:ef:83:da:b6:ed:7f:
         30:f0:4e:13:d0:d6:e3:39:dc:cb:5b:8d:bb:ae:91:98:66:54:
         d6:6e:b4:cf:bb:a0:65:81:16:96:f5:66:57:08:70:96:26:49:
         c2:1d:b8:51:45:9b:28:91:ea:af:3b:37:5b:ac:0d:d6:97:77:
         2d:92:4b:94:98:4f:a9:27:a0:de:60:82:d1:7c:54:54:8c:36:
         0e:05:00:76:d4:ae:30:08:6c:00:5b:bc:4b:0e:a9:cf:7a:03:
         5f:cc:a8:35:c7:92:5b:20:36:c5:4c:a6:79:91:d0:d7:f0:c5:
         02:93:3d:e7
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUXVUWsQJAWKTGWzem6wmT8fZRfqEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUE3NzMzMTRENjNFRTNDRDk4QjQ3MDFFODhDNzE2QzdE
M0M5MjIwNDAeFw0yNjA5MDkxNzAxNDJaFw0yNzA5MDgxNzA2NDJaMDMxMTAvBgNV
BAMTKEJDRkE5QUI5OUNGRjMxMzg1RTIxNDRDODlCMTc4NTZCRTZERjY2NEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKYhgwifCUMgNZrPxCcp3NGwUS
hPfTp8qWgHOJ3bSQQm98hiXcskCaE59vNMGSLOpLA8I5OYEKTMPuoidmUjHE6T5r
FmvaxbNOuqNJJL4wXQN5ZwuNWp4ewbXWBPKHzhfl+h7jCHGkmNn8voFCz2USaA4m
qY3NgGfAw0sYn73q6nLUTQaPUX1D63CJ7wy3YgKdVfMPYwR20NgDozjlRYBvJqbg
8ZX/CRdo45UZ8vAmCC3ND5d1NWZOmMSTB3R6eeFoK/dtDK69MYlPU3EoNcRFFAuB
PDHp8hfu0880eJ65mg9NL4u+E9SX3VXfBGZZvQ++AhfU4Ra8ZsVSYRxugRm3AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUvPqauZz/MTheIUTImxeFa+bfZkswHwYDVR0j
BBgwFoAUGnczFNY+482YtHAeiMcWx9PJIgQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXV6djFXb0ZRbkZMNDNrM3lSYkdOTlNiNGNnOUoyV0VHcXF3Zk10NlhH
SmovMC8xQTc3MzMxNEQ2M0VFM0NEOThCNDcwMUU4OEM3MTZDN0QzQzkyMjA0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFBNzczMzE0RDYzRUUzQ0Q5
OEI0NzAxRTg4QzcxNkM3RDNDOTIyMDQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzl1enYxV29GUW5GTDQzazN5UmJHTk5TYjRjZzlKMldFR3Fxd2ZNdDZYR0pqLzAv
MzIzMDMwMmUzODMwMmUzMTMyMzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM3
MzEzMzMxMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALIUHgwDQYJKoZIhvcNAQELBQADggEBACPBROfG
CU/Tn5szyypYRUPvNZoaNZjUff6r9Sz2l4vT5COCGO3eQaC92z0VkmM3u/wmAwlQ
O4GtiZzPcARsa1vnk19mvCRSTKMuZ6LeuJMxu8eZpac5/rHpgh97nrhKo6NLmCH/
ckcqLF4HhXYEVCp4kuSbaQjphBsMYKXGLPEPG7zKHvQYKiQ89O+D2rbtfzDwThPQ
1uM53MtbjbuukZhmVNZutM+7oGWBFpb1ZlcIcJYmScIduFFFmyiR6q87N1usDdaX
dy2SS5SYT6knoN5ggtF8VFSMNg4FAHbUrjAIbABbvEsOqc96A1/MqDXHklsgNsVM
pnmR0NfwxQKTPec=
-----END CERTIFICATE-----
Generated at Mon Oct 12 00:29:19 2026 by rpki-client