Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/0/3230302e3132342e3137322e302f32322d3232203d3e20323730323739.roa
File:                     3230302e3132342e3137322e302f32322d3232203d3e20323730323739.roa (raw, json)
Hash identifier:          A3h28bGdY3SA4qsYRZnKFnKVkmzyaTMMPtQVSEd/7AQ=
Subject key identifier:   BA:BB:29:6C:2B:15:70:E5:80:88:27:8E:49:F4:74:08:33:35:B3:E7
Certificate issuer:       /CN=65C5DECD45DA5A278A8447A49329E20A64919F2B
Certificate serial:       30C576396C2BA74D0C6BD7EBC9FD6BD53BF47FA2
Authority key identifier: 65:C5:DE:CD:45:DA:5A:27:8A:84:47:A4:93:29:E2:0A:64:91:9F:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65C5DECD45DA5A278A8447A49329E20A64919F2B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/0/3230302e3132342e3137322e302f32322d3232203d3e20323730323739.roa
Signing time:             Fri 14 Aug 2026 15:03:21 +0000
ROA not before:           Fri 14 Aug 2026 14:58:21 +0000
ROA not after:            Fri 13 Aug 2027 15:03:21 +0000
asID:                     270279
IP address blocks:        200.124.172.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/0/65C5DECD45DA5A278A8447A49329E20A64919F2B.crl
                          rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/0/65C5DECD45DA5A278A8447A49329E20A64919F2B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65C5DECD45DA5A278A8447A49329E20A64919F2B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 20:16:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:c5:76:39:6c:2b:a7:4d:0c:6b:d7:eb:c9:fd:6b:d5:3b:f4:7f:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65C5DECD45DA5A278A8447A49329E20A64919F2B
        Validity
            Not Before: Aug 14 14:58:21 2026 GMT
            Not After : Aug 13 15:03:21 2027 GMT
        Subject: CN=BABB296C2B1570E58088278E49F474083335B3E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b5:02:3b:2d:f5:2f:00:4a:ad:2f:2f:0f:47:
                    2c:73:e7:72:c8:7d:d3:00:d8:60:38:38:e3:6f:6d:
                    e6:5e:14:99:b4:ae:8c:46:c4:26:96:35:73:72:b2:
                    53:2f:fa:60:55:bd:88:ce:b4:04:80:d4:2b:f3:38:
                    57:6a:c1:0e:37:9e:81:d6:09:ea:67:16:42:52:92:
                    e7:c2:c1:b3:cd:c4:a9:f6:33:d8:7f:af:73:66:96:
                    26:a6:2a:cd:e3:91:61:cd:be:3d:c5:31:50:d8:ea:
                    6a:58:d3:32:ac:db:8c:87:e1:24:21:c1:94:08:e7:
                    d5:b6:25:13:9c:07:48:49:37:79:25:fb:d6:8c:8f:
                    1b:6c:87:42:43:df:26:97:ee:55:ae:bc:e5:d8:1b:
                    73:78:e6:8d:38:29:fe:d2:a4:e3:fb:92:bd:38:2e:
                    25:13:09:39:94:fe:6a:a8:85:84:83:b5:79:60:6b:
                    bb:34:cf:d4:84:dd:1b:8b:94:2c:99:72:de:56:da:
                    7b:02:1f:80:dc:2f:fd:84:e3:32:48:eb:ee:be:97:
                    e1:98:ca:96:b3:c1:f2:50:a6:9f:ba:a2:3f:92:de:
                    09:f2:92:ee:af:86:8e:22:24:6e:d4:b7:e8:1a:cc:
                    bf:2c:c4:ce:e5:95:42:b5:1e:e5:ff:b0:e3:4a:a8:
                    99:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:BB:29:6C:2B:15:70:E5:80:88:27:8E:49:F4:74:08:33:35:B3:E7
            X509v3 Authority Key Identifier:
                keyid:65:C5:DE:CD:45:DA:5A:27:8A:84:47:A4:93:29:E2:0A:64:91:9F:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/0/65C5DECD45DA5A278A8447A49329E20A64919F2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65C5DECD45DA5A278A8447A49329E20A64919F2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/0/3230302e3132342e3137322e302f32322d3232203d3e20323730323739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c5:f8:ce:5b:09:4a:49:15:e6:38:04:ef:27:68:07:10:4f:ab:
         18:97:3c:ef:cd:4b:02:72:a4:28:c5:97:79:b7:fb:df:6a:7e:
         98:5e:3e:38:98:1e:b3:ad:76:be:e3:05:a2:83:9b:5c:c4:cb:
         43:57:bc:e9:03:1d:56:97:41:1c:89:07:75:46:9f:2f:19:61:
         d0:c0:e7:d7:6f:46:70:5b:94:1e:64:5c:fb:66:b3:e9:70:4a:
         f6:0c:a9:61:3f:f3:5c:47:bf:b1:7e:18:b2:b4:19:02:6f:80:
         a4:fa:79:27:50:3b:3c:b0:67:29:4a:27:ef:ce:80:aa:15:88:
         4c:09:9c:f8:39:e4:d7:b4:a6:72:49:c1:42:d1:37:5b:18:70:
         4a:98:97:e8:66:98:69:d9:1b:ed:fe:9c:70:57:f7:fb:05:b8:
         d7:17:6c:22:45:e1:7e:b8:b5:ce:d9:e1:88:e4:a4:52:77:51:
         2a:4c:e7:ec:2a:a3:00:db:74:e8:a5:71:78:a1:83:3e:e1:43:
         fb:90:93:50:98:15:ed:42:62:70:86:b8:9c:82:d7:52:6b:c5:
         2e:f2:f1:59:5b:1c:9b:f2:7a:1f:da:4d:df:c6:ab:17:a3:fa:
         c9:77:ae:15:29:bd:13:3f:26:a1:0a:54:b9:ac:c0:bf:6a:cd:
         e0:2c:6d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 12:09:39 2026 by rpki-client