Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3230302e3132352e3137362e302f32322d3232203d3e20323635333030.roa
File:                     3230302e3132352e3137362e302f32322d3232203d3e20323635333030.roa (raw, json)
Hash identifier:          DJkPlPjd85BVr/fOO3/qyRDIlRRGrvVlWviy0oRWpQw=
Subject key identifier:   C1:EF:36:3C:9E:E5:00:79:7F:0B:43:9A:83:3B:81:6A:61:AB:22:E9
Certificate issuer:       /CN=98FB017963B86A925F721F20ED568534305BBBBF
Certificate serial:       5217FAEFC82B6CC9345D0E1FF02B284C36A6D2A0
Authority key identifier: 98:FB:01:79:63:B8:6A:92:5F:72:1F:20:ED:56:85:34:30:5B:BB:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98FB017963B86A925F721F20ED568534305BBBBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3230302e3132352e3137362e302f32322d3232203d3e20323635333030.roa
Signing time:             Mon 10 Aug 2026 22:08:56 +0000
ROA not before:           Mon 10 Aug 2026 22:03:56 +0000
ROA not after:            Mon 09 Aug 2027 22:08:56 +0000
asID:                     265300
IP address blocks:        200.125.176.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/98FB017963B86A925F721F20ED568534305BBBBF.crl
                          rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/98FB017963B86A925F721F20ED568534305BBBBF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98FB017963B86A925F721F20ED568534305BBBBF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 10:24:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:17:fa:ef:c8:2b:6c:c9:34:5d:0e:1f:f0:2b:28:4c:36:a6:d2:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98FB017963B86A925F721F20ED568534305BBBBF
        Validity
            Not Before: Aug 10 22:03:56 2026 GMT
            Not After : Aug  9 22:08:56 2027 GMT
        Subject: CN=C1EF363C9EE500797F0B439A833B816A61AB22E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:83:2f:c4:60:74:2a:12:17:dd:a8:22:3e:4f:
                    ad:b8:06:66:67:fe:97:b8:ff:97:9c:7f:93:b7:1a:
                    32:71:a1:02:7d:14:7c:76:3a:1b:ed:6b:a9:1f:32:
                    6b:bd:88:27:ab:5a:46:39:a9:41:29:66:53:cb:60:
                    2e:4d:c9:fa:45:d3:75:00:79:97:f4:b7:26:20:af:
                    8b:24:bf:23:fd:2b:36:92:c7:9b:0d:83:b6:4e:9e:
                    c0:de:a6:26:da:c2:9e:f2:99:ba:a9:ff:17:5b:1a:
                    04:a7:0b:d7:71:5f:28:88:e3:bd:15:92:93:64:b3:
                    43:c2:e4:97:32:11:36:4b:7a:e9:f1:da:45:b5:dc:
                    6c:63:f8:c2:ea:cd:69:d3:ba:61:b4:a1:6a:ea:82:
                    59:27:1c:8e:a4:01:49:0b:ce:fc:64:89:83:c1:47:
                    5a:0d:00:f5:7f:18:35:22:d6:96:09:54:76:b2:ff:
                    6c:18:cd:39:1f:69:d3:2c:a5:b3:26:f6:4e:f7:ba:
                    f2:4b:54:a5:e2:b4:73:5d:41:54:3f:40:18:3f:5e:
                    1b:2f:28:f5:49:78:ef:69:af:6a:b2:c2:46:9d:dc:
                    9e:21:a2:eb:f4:a8:54:8e:74:fc:fa:17:87:8e:85:
                    54:cf:4f:aa:a2:c3:a4:94:6a:8d:28:c8:ee:07:d7:
                    5a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:EF:36:3C:9E:E5:00:79:7F:0B:43:9A:83:3B:81:6A:61:AB:22:E9
            X509v3 Authority Key Identifier:
                keyid:98:FB:01:79:63:B8:6A:92:5F:72:1F:20:ED:56:85:34:30:5B:BB:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/98FB017963B86A925F721F20ED568534305BBBBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98FB017963B86A925F721F20ED568534305BBBBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3230302e3132352e3137362e302f32322d3232203d3e20323635333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.125.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b8:13:ed:da:a9:ae:09:bb:20:8f:ee:08:1d:58:29:7e:b6:0f:
         f5:fc:bf:d3:7b:25:17:b7:84:f8:4b:63:02:4a:be:24:17:80:
         ee:38:eb:47:38:60:07:3a:d1:ac:a0:7f:95:f5:42:4e:b5:0c:
         d7:58:f5:2b:19:78:6c:ca:db:60:a9:61:3b:88:25:53:4a:f7:
         8f:b1:bc:d6:13:35:2e:31:8c:c3:cb:66:6b:43:d7:f0:dd:56:
         f7:e9:47:d2:db:c3:23:5b:ce:6f:35:ea:9f:cc:43:8d:a9:14:
         de:46:50:9f:22:82:8b:ff:91:26:93:a0:4e:41:b6:45:73:24:
         02:f2:a9:13:1e:8e:e8:6d:0e:b3:85:40:75:d3:81:ce:db:72:
         73:2b:7f:bc:1d:74:bc:6e:b0:4a:e6:39:44:cb:18:dd:0a:f9:
         7e:b6:e1:b3:80:22:ed:3c:31:bd:ec:a9:42:c3:f3:b1:4a:3c:
         6a:86:d7:38:ab:6d:a0:0a:43:b0:1e:af:32:4a:b6:cd:e9:1d:
         c5:ec:0c:a7:01:60:f4:57:54:3e:f8:2c:c4:84:3f:fb:81:12:
         e1:b4:e4:22:03:b3:c4:e6:d6:2b:c6:64:9c:59:5c:01:04:bb:
         a1:63:08:9b:7b:83:a2:a0:7b:2e:48:0d:66:5e:83:62:e6:86:
         24:42:9b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 15:58:14 2026 by rpki-client