Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3230302e3132352e3137362e302f32332d3233203d3e20323635333030.roa
File:                     3230302e3132352e3137362e302f32332d3233203d3e20323635333030.roa (raw, json)
Hash identifier:          xra3TAWPcDw8U5oIauf170l7Vn/Q9xXsN6HyxX8z1vw=
Subject key identifier:   D7:5C:78:6D:42:C4:48:0F:41:42:B7:CB:CE:B4:61:0E:9A:1B:36:79
Certificate issuer:       /CN=98FB017963B86A925F721F20ED568534305BBBBF
Certificate serial:       2AEF200EAE1B468CBE9E1EAFB0685E90394F9538
Authority key identifier: 98:FB:01:79:63:B8:6A:92:5F:72:1F:20:ED:56:85:34:30:5B:BB:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98FB017963B86A925F721F20ED568534305BBBBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3230302e3132352e3137362e302f32332d3233203d3e20323635333030.roa
Signing time:             Thu 06 Aug 2026 20:46:49 +0000
ROA not before:           Thu 06 Aug 2026 20:41:49 +0000
ROA not after:            Thu 05 Aug 2027 20:46:49 +0000
asID:                     265300
IP address blocks:        200.125.176.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/98FB017963B86A925F721F20ED568534305BBBBF.crl
                          rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/98FB017963B86A925F721F20ED568534305BBBBF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98FB017963B86A925F721F20ED568534305BBBBF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 10:24:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:ef:20:0e:ae:1b:46:8c:be:9e:1e:af:b0:68:5e:90:39:4f:95:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98FB017963B86A925F721F20ED568534305BBBBF
        Validity
            Not Before: Aug  6 20:41:49 2026 GMT
            Not After : Aug  5 20:46:49 2027 GMT
        Subject: CN=D75C786D42C4480F4142B7CBCEB4610E9A1B3679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ac:55:2e:ae:5e:05:c3:4d:21:44:da:8a:77:
                    b3:3e:85:d8:a3:84:4c:aa:9c:04:1e:be:e4:49:a8:
                    8f:f8:e3:9f:37:9a:ff:10:b2:ee:61:95:cb:35:e7:
                    64:c0:f6:0b:45:9a:ea:45:06:73:dc:f6:f2:8d:c9:
                    a9:a6:b8:cb:b3:57:bb:66:53:cb:1f:1f:f4:10:d7:
                    16:f8:1f:a7:56:22:22:9b:b7:0d:9c:40:e9:4a:b8:
                    d2:0c:51:75:d6:0d:ad:1f:8c:83:df:56:9d:a4:76:
                    94:af:b8:c0:3b:7b:e1:b8:9b:0b:af:fe:18:10:12:
                    02:40:aa:e7:b6:93:56:9f:72:41:5b:05:1c:bb:f2:
                    dc:ab:f7:d7:99:9f:16:46:09:db:cf:43:fe:c4:5f:
                    e4:c1:4d:e9:64:a2:ab:10:31:c0:83:7f:be:7d:97:
                    b6:18:c0:e6:ba:f9:a8:08:94:1a:c6:14:08:ae:fd:
                    d9:86:42:2f:ee:3c:33:bd:50:26:53:e2:1f:91:1f:
                    d4:7b:21:44:d5:df:ae:49:3d:df:0a:0a:a0:85:ec:
                    08:a2:20:52:ec:fc:0e:f1:40:6c:e9:a1:a7:65:4e:
                    ca:ee:f2:55:b5:77:7f:98:6f:94:8c:64:55:c3:13:
                    ea:e3:b5:8a:ff:c3:7a:ae:c0:8a:47:4a:91:59:87:
                    b5:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:5C:78:6D:42:C4:48:0F:41:42:B7:CB:CE:B4:61:0E:9A:1B:36:79
            X509v3 Authority Key Identifier:
                keyid:98:FB:01:79:63:B8:6A:92:5F:72:1F:20:ED:56:85:34:30:5B:BB:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/98FB017963B86A925F721F20ED568534305BBBBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98FB017963B86A925F721F20ED568534305BBBBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3230302e3132352e3137362e302f32332d3233203d3e20323635333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.125.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:e8:de:19:cb:5c:c5:a7:16:b4:b4:d5:c4:0b:3a:74:ac:70:
         84:20:d7:07:a0:cb:cb:6b:9d:37:6c:f5:42:7b:f4:6e:42:84:
         70:58:9c:e9:9a:76:e4:03:a0:c6:f0:d7:10:44:16:34:a3:bf:
         78:4f:fb:27:27:d9:40:28:91:1f:20:d2:ab:07:e4:f6:38:bd:
         9c:6b:7c:c1:cd:95:fa:4d:28:cf:6c:67:76:3f:3d:0e:e0:88:
         26:de:8b:88:53:15:fc:fa:8b:ec:90:85:43:23:8b:45:c2:94:
         75:c9:8d:07:7a:fb:26:f1:0c:b1:fd:1c:13:2f:0e:76:30:61:
         8d:7a:9f:bc:61:12:5b:69:d1:bf:8b:4d:2c:8d:a4:af:a6:2d:
         d7:83:d3:fa:15:2e:be:c0:a1:60:e1:49:29:5f:ae:84:4f:a5:
         e7:19:99:bb:e2:20:88:dc:e8:61:24:13:46:91:e3:08:3c:6a:
         45:a0:07:71:a6:a1:c5:14:b9:1a:5b:37:5c:b8:f1:25:dc:c6:
         4d:b8:b2:7e:bf:13:9a:07:02:8d:2b:d0:2e:63:c4:cd:79:d7:
         d5:60:e2:f0:a9:e9:43:77:c0:f3:99:12:0a:63:fe:25:bb:e3:
         57:7c:49:e9:03:74:a7:ee:ec:52:80:0e:7f:2a:1e:4f:4e:80:
         1b:68:45:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 15:55:18 2026 by rpki-client