Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BaCJ7joF74gUTmVwPLrK4jpGGtvaNyKgPTNVZy7GEui6/0/3230302e32362e3234382e302f32322d3332203d3e20323730343433.roa
File:                     3230302e32362e3234382e302f32322d3332203d3e20323730343433.roa (raw, json)
Hash identifier:          atjgJ0Uwv6q0v8gSYCjrURFINIJXARJ9tUe4tWBhsBM=
Subject key identifier:   22:67:38:D9:52:80:46:C4:C9:08:CD:07:EA:96:B0:54:42:15:1E:00
Certificate issuer:       /CN=C5E3D6C0A02A0EE3BD0702D413829BC1487A45AD
Certificate serial:       167384AB367C5689CB62C0218F79B9A4A15083C5
Authority key identifier: C5:E3:D6:C0:A0:2A:0E:E3:BD:07:02:D4:13:82:9B:C1:48:7A:45:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5E3D6C0A02A0EE3BD0702D413829BC1487A45AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BaCJ7joF74gUTmVwPLrK4jpGGtvaNyKgPTNVZy7GEui6/0/3230302e32362e3234382e302f32322d3332203d3e20323730343433.roa
Signing time:             Sat 25 Jul 2026 01:44:56 +0000
ROA not before:           Sat 25 Jul 2026 01:39:56 +0000
ROA not after:            Sat 24 Jul 2027 01:44:56 +0000
asID:                     270443
IP address blocks:        200.26.248.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BaCJ7joF74gUTmVwPLrK4jpGGtvaNyKgPTNVZy7GEui6/0/C5E3D6C0A02A0EE3BD0702D413829BC1487A45AD.crl
                          rsync://rpki-repo.registro.br/repo/BaCJ7joF74gUTmVwPLrK4jpGGtvaNyKgPTNVZy7GEui6/0/C5E3D6C0A02A0EE3BD0702D413829BC1487A45AD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5E3D6C0A02A0EE3BD0702D413829BC1487A45AD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 17:52:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:73:84:ab:36:7c:56:89:cb:62:c0:21:8f:79:b9:a4:a1:50:83:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5E3D6C0A02A0EE3BD0702D413829BC1487A45AD
        Validity
            Not Before: Jul 25 01:39:56 2026 GMT
            Not After : Jul 24 01:44:56 2027 GMT
        Subject: CN=226738D9528046C4C908CD07EA96B05442151E00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e1:40:27:72:08:a1:d0:bd:b5:bf:67:9d:8d:
                    81:a4:c9:e9:c9:31:71:1b:31:13:db:e7:99:e7:45:
                    4b:ef:bd:22:1a:99:83:bb:df:bc:fc:7c:e5:9b:4d:
                    97:95:c1:8d:d7:88:89:6d:a6:c2:21:c3:82:5e:3c:
                    43:08:4c:8e:59:26:fe:49:2f:d4:7a:e6:5f:fa:9f:
                    2c:73:37:32:34:6e:4d:a8:7c:dc:19:86:6d:f8:0f:
                    1f:3b:31:21:39:0a:a3:b5:13:12:c2:20:2d:29:8f:
                    44:f5:00:54:76:2a:be:34:eb:97:7a:3d:5b:e2:87:
                    37:93:b1:a5:32:a0:12:2e:2b:e4:81:c4:d7:56:e1:
                    c3:8d:c4:72:4c:d1:c0:a0:19:c0:9a:0c:09:27:59:
                    4c:a2:ef:9b:ed:89:04:a2:7c:c9:87:36:a3:71:c0:
                    6e:7f:2b:04:62:90:4e:46:d1:32:55:ab:9b:f9:6e:
                    e9:15:30:47:42:20:23:6a:90:df:e7:2e:e9:0b:5e:
                    0a:4d:27:09:38:5c:aa:27:9e:05:7b:c1:ba:1c:ea:
                    43:65:81:19:7c:8a:ca:6b:cc:df:34:db:15:d6:ef:
                    97:80:62:7d:18:1e:35:32:53:74:b2:43:2c:7c:c6:
                    aa:c0:c0:40:e4:c5:be:0e:44:e2:46:3f:6e:2d:0e:
                    a2:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:67:38:D9:52:80:46:C4:C9:08:CD:07:EA:96:B0:54:42:15:1E:00
            X509v3 Authority Key Identifier:
                keyid:C5:E3:D6:C0:A0:2A:0E:E3:BD:07:02:D4:13:82:9B:C1:48:7A:45:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BaCJ7joF74gUTmVwPLrK4jpGGtvaNyKgPTNVZy7GEui6/0/C5E3D6C0A02A0EE3BD0702D413829BC1487A45AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5E3D6C0A02A0EE3BD0702D413829BC1487A45AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BaCJ7joF74gUTmVwPLrK4jpGGtvaNyKgPTNVZy7GEui6/0/3230302e32362e3234382e302f32322d3332203d3e20323730343433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:d1:b8:1f:8d:91:95:16:40:34:73:89:0b:ec:4a:6c:e7:84:
         37:87:7d:3c:a2:b4:36:a8:98:d4:2d:c5:fd:4e:d7:cb:01:88:
         34:bb:94:42:2c:5c:f2:c7:f5:37:a2:03:ee:7f:cd:c9:fb:4e:
         25:0c:2b:01:39:d8:78:f7:4b:6e:30:ca:c9:a8:ac:c4:d8:93:
         f8:dd:8c:5f:02:44:39:a1:97:ee:3c:bb:87:43:c1:37:5b:5f:
         c9:f2:9f:64:af:b0:10:aa:09:91:81:00:bc:25:48:2c:84:c4:
         b0:8d:7f:48:77:c6:7a:ed:1a:89:74:c5:6c:ae:24:20:b0:f4:
         84:86:7b:5b:0d:01:4a:08:6f:92:79:51:5e:31:85:cb:6e:82:
         32:7c:dc:7a:04:f0:6f:ab:1a:48:d8:c0:97:85:6a:5f:ba:64:
         79:8c:9c:47:3d:75:3a:da:0c:81:a9:23:d1:83:74:13:4d:f0:
         26:28:f9:18:34:0a:62:6e:f9:bf:55:67:54:79:78:1d:21:eb:
         2f:47:0b:5c:e7:c6:55:2b:4f:d9:d0:00:f3:01:f6:33:e3:95:
         bd:39:f5:38:41:bf:8d:c6:b8:5a:bc:1f:ad:4a:ab:32:7e:2c:
         12:37:1f:d8:0b:3c:91:be:34:ff:d7:83:20:47:0e:4d:8b:f3:
         b8:13:66:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 10:22:11 2026 by rpki-client