Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3230302e37312e36382e302f32322d3234203d3e20323636323036.roa
File:                     3230302e37312e36382e302f32322d3234203d3e20323636323036.roa (raw, json)
Hash identifier:          7PNI6rCvr0tARcVnck3Ks7AAwa+utqLjJraeFHaqKKE=
Subject key identifier:   9D:0A:36:C3:4D:D1:1B:C2:27:FD:14:36:AA:76:90:5B:68:4C:FC:1F
Certificate issuer:       /CN=0A2F450FC8F6BFEB270C333AA761639181680DAF
Certificate serial:       45B04B1B4222C4BC97C1BEB901CD860D83248ECD
Authority key identifier: 0A:2F:45:0F:C8:F6:BF:EB:27:0C:33:3A:A7:61:63:91:81:68:0D:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2F450FC8F6BFEB270C333AA761639181680DAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3230302e37312e36382e302f32322d3234203d3e20323636323036.roa
Signing time:             Mon 26 Oct 2026 02:38:24 +0000
ROA not before:           Mon 26 Oct 2026 02:33:24 +0000
ROA not after:            Mon 25 Oct 2027 02:38:24 +0000
asID:                     266206
IP address blocks:        200.71.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/0A2F450FC8F6BFEB270C333AA761639181680DAF.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/0A2F450FC8F6BFEB270C333AA761639181680DAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2F450FC8F6BFEB270C333AA761639181680DAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Oct 2026 22:39:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:b0:4b:1b:42:22:c4:bc:97:c1:be:b9:01:cd:86:0d:83:24:8e:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A2F450FC8F6BFEB270C333AA761639181680DAF
        Validity
            Not Before: Oct 26 02:33:24 2026 GMT
            Not After : Oct 25 02:38:24 2027 GMT
        Subject: CN=9D0A36C34DD11BC227FD1436AA76905B684CFC1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c4:90:2c:dc:67:44:63:72:53:fa:31:c3:cf:
                    5e:4f:da:7d:d3:98:b4:a3:fd:2d:99:ef:10:c8:1d:
                    40:d2:22:35:95:d5:63:eb:6c:b7:d6:22:1c:26:24:
                    6a:f5:1b:22:3d:d8:06:98:4f:82:f3:44:97:05:12:
                    aa:de:4b:32:87:63:04:7f:17:a1:a3:89:20:89:43:
                    38:c4:ac:f1:4e:5e:83:a2:86:18:fd:1c:e7:b4:e3:
                    85:c3:87:16:8d:4e:87:e7:6b:09:2f:e8:b9:7d:3d:
                    21:6e:1a:28:f9:21:ec:79:04:72:c0:20:fe:b7:02:
                    47:28:26:c2:04:40:10:30:cb:97:8c:83:c8:2d:07:
                    77:ae:24:27:43:e9:0f:16:a3:f9:95:bb:3b:c4:4a:
                    0d:ca:9e:c8:a2:97:82:4c:27:9d:d9:3c:a9:45:33:
                    fd:10:31:3d:aa:17:a1:c1:98:ef:e2:95:d7:4b:b3:
                    28:fc:37:65:25:9c:02:94:9d:5b:79:77:73:f6:34:
                    b5:1e:99:eb:d8:db:ee:b5:e9:3c:19:77:8f:47:3f:
                    49:5e:15:bb:c9:d6:0e:13:c9:3a:b1:a4:40:b7:e2:
                    65:54:66:dd:91:c4:e7:d3:53:cf:4b:29:32:82:94:
                    96:c5:82:af:a7:40:8d:ac:ab:7d:25:b7:8a:79:db:
                    1f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:0A:36:C3:4D:D1:1B:C2:27:FD:14:36:AA:76:90:5B:68:4C:FC:1F
            X509v3 Authority Key Identifier:
                keyid:0A:2F:45:0F:C8:F6:BF:EB:27:0C:33:3A:A7:61:63:91:81:68:0D:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/0A2F450FC8F6BFEB270C333AA761639181680DAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2F450FC8F6BFEB270C333AA761639181680DAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3230302e37312e36382e302f32322d3234203d3e20323636323036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:8b:58:4f:c5:c0:67:d3:a1:3c:48:a6:36:91:32:92:57:27:
         c8:ae:a7:f8:15:58:a8:3d:e5:2f:d7:fa:a9:1c:93:3c:e8:c9:
         45:f8:6e:9c:a0:c1:ef:3a:a4:a4:b4:64:95:c3:ae:b4:6d:d4:
         e7:ce:73:3d:22:2b:6f:bb:89:24:bc:bc:bf:fa:2c:a1:ae:c7:
         e6:27:f6:be:78:bb:f6:5b:a5:45:3a:7a:33:0f:ec:72:80:bc:
         09:bd:d3:0a:7e:92:2a:e4:ea:81:54:5b:2f:36:f8:8e:88:86:
         83:66:cf:e2:e3:c3:8c:be:b3:e4:5f:cd:3d:de:74:c6:43:ec:
         3e:58:56:e1:36:39:44:1a:56:e3:ce:91:e6:a8:1f:24:5c:da:
         d9:b5:0a:86:41:10:c3:f8:5e:e2:fc:c3:39:ee:a7:d5:0e:54:
         8b:2a:72:f1:aa:12:ab:a3:90:71:6f:ec:54:c7:8f:98:45:a5:
         2a:d6:28:1f:f0:5e:da:c1:2b:c6:93:bc:c0:ff:f6:85:18:80:
         3c:66:74:4a:f4:f2:de:6a:60:6a:26:72:b8:e2:92:f2:d0:8f:
         91:65:d0:b1:32:10:b5:bb:75:ae:6e:ba:bb:d8:22:ad:2d:80:
         cf:2a:84:6a:76:cc:da:38:6a:fa:a7:e7:b7:a2:ab:94:f8:fb:
         e5:16:40:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 07:04:52 2026 by rpki-client