Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/0/3230302e3132342e3137332e302f32342d3234203d3e20323730323739.roa
File:                     3230302e3132342e3137332e302f32342d3234203d3e20323730323739.roa (raw, json)
Hash identifier:          vGbualtr4zg9mnS/29lLsPwmBCkbbiJyjPsUQlpoFYA=
Subject key identifier:   71:09:9A:A1:AC:71:44:8C:37:AA:E1:04:EC:B7:A3:1C:4A:93:27:7E
Certificate issuer:       /CN=65C5DECD45DA5A278A8447A49329E20A64919F2B
Certificate serial:       1BDB356C587169D0AEFB6E0236F51530CA5BB2DE
Authority key identifier: 65:C5:DE:CD:45:DA:5A:27:8A:84:47:A4:93:29:E2:0A:64:91:9F:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65C5DECD45DA5A278A8447A49329E20A64919F2B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/0/3230302e3132342e3137332e302f32342d3234203d3e20323730323739.roa
Signing time:             Fri 14 Aug 2026 15:03:21 +0000
ROA not before:           Fri 14 Aug 2026 14:58:21 +0000
ROA not after:            Fri 13 Aug 2027 15:03:21 +0000
asID:                     270279
IP address blocks:        200.124.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/0/65C5DECD45DA5A278A8447A49329E20A64919F2B.crl
                          rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/0/65C5DECD45DA5A278A8447A49329E20A64919F2B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65C5DECD45DA5A278A8447A49329E20A64919F2B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 20:16:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:db:35:6c:58:71:69:d0:ae:fb:6e:02:36:f5:15:30:ca:5b:b2:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65C5DECD45DA5A278A8447A49329E20A64919F2B
        Validity
            Not Before: Aug 14 14:58:21 2026 GMT
            Not After : Aug 13 15:03:21 2027 GMT
        Subject: CN=71099AA1AC71448C37AAE104ECB7A31C4A93277E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d2:9c:16:18:d0:3f:b4:72:62:e0:36:55:8f:
                    ad:8a:d6:8c:c1:f6:2a:85:2a:04:63:d7:4c:1f:2a:
                    fb:8c:d1:72:8a:f3:d1:3c:4d:3e:ba:ca:22:22:8b:
                    4e:8f:f3:f4:20:73:e7:de:54:28:4b:c7:b8:9e:2f:
                    5b:be:5f:2e:16:31:2b:c4:cc:66:d7:6d:9a:3f:2f:
                    12:a3:3c:cb:3a:63:48:86:38:de:e5:3e:7a:6b:fa:
                    35:da:34:6f:80:7d:f3:e7:d9:7f:a1:34:69:ec:83:
                    6f:d6:bb:22:9f:00:76:e3:4c:4e:ae:55:16:c2:7c:
                    ab:bb:e7:94:d7:6b:02:5c:c4:ed:6f:03:b1:50:4c:
                    ec:ec:85:d7:fd:76:70:9f:a4:90:75:76:a7:17:5e:
                    1b:1a:f4:7a:53:66:6e:50:52:82:33:03:29:b3:34:
                    c2:2e:49:9c:02:45:c2:b5:54:d0:4c:75:be:7d:d1:
                    61:63:c5:15:ff:ab:5a:01:fd:9c:ca:51:59:87:24:
                    f7:3a:e0:08:c8:2c:e1:0c:10:81:9b:b7:18:3f:d3:
                    e8:f8:3d:5b:94:13:7a:8a:ce:cf:54:b6:3f:c7:f5:
                    42:bd:d3:cc:8c:0c:d1:c5:21:06:e6:24:05:20:e6:
                    21:b5:a4:b2:2f:54:7b:d4:75:0f:ba:65:6c:8c:ca:
                    b3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:09:9A:A1:AC:71:44:8C:37:AA:E1:04:EC:B7:A3:1C:4A:93:27:7E
            X509v3 Authority Key Identifier:
                keyid:65:C5:DE:CD:45:DA:5A:27:8A:84:47:A4:93:29:E2:0A:64:91:9F:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/0/65C5DECD45DA5A278A8447A49329E20A64919F2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65C5DECD45DA5A278A8447A49329E20A64919F2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/0/3230302e3132342e3137332e302f32342d3234203d3e20323730323739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:08:c2:9f:8b:78:b0:18:d2:98:cc:6b:cb:d0:a3:4f:29:67:
         90:06:ae:0d:76:24:43:8a:1a:84:b6:a7:91:c2:98:99:b5:4d:
         a1:a2:b2:bc:dc:a8:67:01:df:93:11:02:28:45:de:e4:32:47:
         7d:09:fb:04:c9:f4:cb:e4:a6:8d:cd:ee:53:f7:fd:e9:34:87:
         b3:e1:cd:61:14:7e:55:75:61:63:e0:c4:81:78:3b:e5:2a:f2:
         2d:8b:ef:9d:06:2b:a2:a7:32:af:a3:5a:69:9e:45:4c:44:94:
         26:89:99:aa:19:bd:29:5f:a1:a6:a8:2f:c2:41:bd:09:58:ae:
         a8:0b:1f:a6:d1:86:16:7f:0e:2c:a3:a7:e5:1b:09:e4:bf:66:
         15:c9:35:2e:48:6d:97:e9:2c:6f:14:d8:a1:aa:62:b4:52:f1:
         1e:0c:ad:20:04:42:c2:5c:0f:6f:cc:6d:ed:18:1a:23:e0:04:
         52:cb:57:0c:36:fe:b5:d1:e7:17:2e:94:06:17:e5:73:70:a8:
         f3:fe:0a:29:f7:97:cd:04:ed:fa:ff:fd:02:c6:57:a3:04:c4:
         1c:84:f0:3b:78:e2:51:cd:28:61:67:e5:1e:52:b1:f6:bb:7a:
         36:75:2a:45:90:c9:8b:b2:c1:a5:24:42:cc:59:ad:70:85:0c:
         cc:a7:ad:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 11:15:43 2026 by rpki-client