Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/0/3230302e3132342e3137352e302f32342d3234203d3e20323730323739.roa
File:                     3230302e3132342e3137352e302f32342d3234203d3e20323730323739.roa (raw, json)
Hash identifier:          XCgK3UqRDYLYtSQTalZi9WomAa+YRJ2OW8w+Y/FB+Q4=
Subject key identifier:   E0:12:33:36:4C:55:FC:48:8C:1C:B6:10:8C:FF:1F:91:0B:A1:53:D1
Certificate issuer:       /CN=65C5DECD45DA5A278A8447A49329E20A64919F2B
Certificate serial:       43E19EB31792E04C844635C481DD50ABCA93AC27
Authority key identifier: 65:C5:DE:CD:45:DA:5A:27:8A:84:47:A4:93:29:E2:0A:64:91:9F:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65C5DECD45DA5A278A8447A49329E20A64919F2B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/0/3230302e3132342e3137352e302f32342d3234203d3e20323730323739.roa
Signing time:             Fri 14 Aug 2026 15:03:20 +0000
ROA not before:           Fri 14 Aug 2026 14:58:20 +0000
ROA not after:            Fri 13 Aug 2027 15:03:20 +0000
asID:                     270279
IP address blocks:        200.124.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/0/65C5DECD45DA5A278A8447A49329E20A64919F2B.crl
                          rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/0/65C5DECD45DA5A278A8447A49329E20A64919F2B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65C5DECD45DA5A278A8447A49329E20A64919F2B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 20:16:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:e1:9e:b3:17:92:e0:4c:84:46:35:c4:81:dd:50:ab:ca:93:ac:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65C5DECD45DA5A278A8447A49329E20A64919F2B
        Validity
            Not Before: Aug 14 14:58:20 2026 GMT
            Not After : Aug 13 15:03:20 2027 GMT
        Subject: CN=E01233364C55FC488C1CB6108CFF1F910BA153D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e7:44:14:c9:ab:22:61:ec:3d:c3:49:dc:81:
                    44:e0:94:9e:42:0a:86:81:02:e5:8c:39:aa:a2:99:
                    f4:c1:d0:f9:39:08:d9:64:af:de:06:aa:58:a5:86:
                    96:86:44:58:5d:ba:e7:db:b9:a3:45:46:e9:26:8e:
                    7c:c9:73:b9:5b:06:2e:88:d6:c6:23:0c:de:4a:b2:
                    15:5d:6d:bb:59:cc:0d:9a:bb:a3:bc:a1:80:bc:9b:
                    c5:3a:a5:62:eb:a8:f5:21:f4:48:08:74:e4:d3:b7:
                    97:05:b7:c3:8c:7a:b4:01:f9:27:6a:43:a1:7d:34:
                    53:2c:7c:0c:88:62:85:40:f5:78:69:5d:a0:f1:43:
                    81:1b:48:b2:51:3a:b5:86:5d:a9:16:8b:4a:4e:d6:
                    0b:46:98:fe:83:a2:e4:bc:f0:00:11:49:b1:fc:61:
                    20:79:71:38:b8:a3:f4:a0:ce:93:36:25:7c:ad:7a:
                    f0:6a:fc:d8:f0:28:d7:14:44:b9:78:25:c6:cd:22:
                    01:ea:02:dc:bb:64:27:e0:38:1f:74:15:e1:0d:6a:
                    37:e5:cf:84:d9:ef:56:5f:5e:d3:d3:63:ba:0b:bc:
                    00:1e:aa:81:4b:31:60:d0:f6:99:b4:70:8b:81:0d:
                    f7:46:df:d0:ff:7d:51:00:4a:5a:0f:b6:e7:3e:02:
                    a6:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:12:33:36:4C:55:FC:48:8C:1C:B6:10:8C:FF:1F:91:0B:A1:53:D1
            X509v3 Authority Key Identifier:
                keyid:65:C5:DE:CD:45:DA:5A:27:8A:84:47:A4:93:29:E2:0A:64:91:9F:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/0/65C5DECD45DA5A278A8447A49329E20A64919F2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65C5DECD45DA5A278A8447A49329E20A64919F2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/0/3230302e3132342e3137352e302f32342d3234203d3e20323730323739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:d0:af:ca:70:75:03:fd:d8:0b:83:7c:ae:00:44:1f:3d:62:
         ab:00:08:8b:5a:18:ec:76:62:51:c2:9e:ab:5e:c3:9a:2e:3f:
         25:d3:72:ef:aa:2d:d6:4b:da:b0:9d:95:23:ff:b3:60:0a:ca:
         7f:67:71:ab:7b:7a:86:96:05:1e:af:da:9c:72:cd:ec:63:bf:
         eb:ae:a2:07:d4:bb:14:49:9f:e9:7a:d5:75:72:ac:41:98:b5:
         94:4f:34:1b:eb:4a:f2:12:8d:f1:2f:dd:93:d2:93:95:9a:04:
         1c:23:b1:fe:be:bb:5b:c8:51:12:69:2c:0e:56:3b:64:91:b3:
         48:76:e8:60:dd:4b:06:45:09:7d:a3:3a:52:07:7e:cd:30:06:
         f3:90:bf:f3:12:71:b2:8f:50:50:6a:0e:29:53:96:ec:d6:a6:
         c1:a8:3c:ca:2c:94:66:2b:ef:12:40:d4:1c:86:5c:e8:44:55:
         0b:e1:82:ae:32:de:76:5f:0d:c0:5e:90:43:f0:11:ce:21:ec:
         03:f0:38:10:19:c0:86:ed:10:f6:2e:40:e0:51:41:49:aa:b7:
         6b:ca:80:8c:dd:aa:51:c3:56:82:33:f0:13:82:be:5a:a5:1f:
         01:79:5e:54:19:a0:8c:16:01:f2:58:25:53:9e:71:07:41:47:
         31:91:a6:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 11:15:53 2026 by rpki-client