Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CB7RZoa9CDV2sgTyt7cQ5zX5HN4EPpr5jjEqfaCiMdV7/0/3230302e342e3130342e302f32332d3332203d3e20323731323930.roa
File:                     3230302e342e3130342e302f32332d3332203d3e20323731323930.roa (raw, json)
Hash identifier:          lHJwlrQLsXGCpODiAbQuwwYv7RMZJa0swu4o17ImhK4=
Subject key identifier:   77:78:B1:A9:76:28:65:EB:F0:04:1F:2E:E3:C2:15:EE:3A:2C:AC:2D
Certificate issuer:       /CN=BCBFDF0556F23659A86291E0A538759214F7C717
Certificate serial:       67C459BA03F5A85593257B6D259EB88449FAA7A3
Authority key identifier: BC:BF:DF:05:56:F2:36:59:A8:62:91:E0:A5:38:75:92:14:F7:C7:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCBFDF0556F23659A86291E0A538759214F7C717.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CB7RZoa9CDV2sgTyt7cQ5zX5HN4EPpr5jjEqfaCiMdV7/0/3230302e342e3130342e302f32332d3332203d3e20323731323930.roa
Signing time:             Fri 02 Oct 2026 12:00:56 +0000
ROA not before:           Fri 02 Oct 2026 11:55:56 +0000
ROA not after:            Fri 01 Oct 2027 12:00:56 +0000
asID:                     271290
IP address blocks:        200.4.104.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CB7RZoa9CDV2sgTyt7cQ5zX5HN4EPpr5jjEqfaCiMdV7/0/BCBFDF0556F23659A86291E0A538759214F7C717.crl
                          rsync://rpki-repo.registro.br/repo/CB7RZoa9CDV2sgTyt7cQ5zX5HN4EPpr5jjEqfaCiMdV7/0/BCBFDF0556F23659A86291E0A538759214F7C717.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCBFDF0556F23659A86291E0A538759214F7C717.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 16:46:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:c4:59:ba:03:f5:a8:55:93:25:7b:6d:25:9e:b8:84:49:fa:a7:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCBFDF0556F23659A86291E0A538759214F7C717
        Validity
            Not Before: Oct  2 11:55:56 2026 GMT
            Not After : Oct  1 12:00:56 2027 GMT
        Subject: CN=7778B1A9762865EBF0041F2EE3C215EE3A2CAC2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:30:15:4b:1a:17:e6:24:e7:8f:c2:8c:24:e2:
                    88:f8:40:27:28:de:b7:32:43:72:75:5c:fc:aa:3c:
                    b4:69:1d:32:61:77:cf:53:a9:e1:26:11:9e:f7:c4:
                    90:f2:e5:10:bd:47:d2:ee:54:ea:11:81:29:e2:31:
                    ec:a5:38:cf:27:6e:af:18:68:ea:a6:58:5e:8b:1f:
                    92:8e:37:f6:7b:0f:46:dd:0f:a8:ab:66:b5:a7:aa:
                    bf:6e:70:a5:19:9b:c3:c6:a5:8b:12:7b:d4:81:91:
                    f0:76:eb:6a:bc:9e:f8:28:eb:70:d4:11:d0:a8:68:
                    aa:ce:71:9d:4f:b0:4d:4d:cd:b6:5f:d9:15:e8:07:
                    48:3f:3d:f8:df:fb:ce:e1:cb:49:22:ff:87:d0:c9:
                    3a:ea:b7:8d:76:e2:c0:f9:f3:bc:d3:b1:24:50:fb:
                    4c:8c:fa:67:4a:46:de:78:e8:c9:33:b8:d0:ec:d2:
                    8b:b7:11:0f:49:41:22:a3:95:23:b7:19:86:3b:e8:
                    25:26:12:7b:dc:bd:1f:55:04:2d:89:2d:30:8b:ab:
                    d6:dc:c1:4d:2b:90:2a:d0:54:00:30:47:61:18:86:
                    51:50:c9:e0:10:20:59:d4:b7:b3:c7:a1:eb:4c:eb:
                    c9:a2:f0:5b:41:f6:66:3c:09:c1:ce:0f:59:d9:27:
                    b8:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:78:B1:A9:76:28:65:EB:F0:04:1F:2E:E3:C2:15:EE:3A:2C:AC:2D
            X509v3 Authority Key Identifier:
                keyid:BC:BF:DF:05:56:F2:36:59:A8:62:91:E0:A5:38:75:92:14:F7:C7:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CB7RZoa9CDV2sgTyt7cQ5zX5HN4EPpr5jjEqfaCiMdV7/0/BCBFDF0556F23659A86291E0A538759214F7C717.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCBFDF0556F23659A86291E0A538759214F7C717.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CB7RZoa9CDV2sgTyt7cQ5zX5HN4EPpr5jjEqfaCiMdV7/0/3230302e342e3130342e302f32332d3332203d3e20323731323930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.4.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:27:f9:98:a1:60:d3:ff:15:d8:3c:9c:d7:29:c4:fb:64:6e:
         aa:62:e1:37:0c:47:02:6a:7a:4f:e1:b2:05:ff:77:da:ed:b6:
         7b:a8:ce:8d:8d:6d:9f:6b:35:4f:fa:c3:84:95:4f:48:27:3a:
         75:32:1c:3a:37:05:16:87:f8:de:4c:11:21:e5:ff:0e:63:77:
         44:e1:7e:94:c6:f1:44:0d:ac:3d:b8:f6:fe:35:9c:20:e7:06:
         34:07:7e:a3:4d:2a:68:c7:7f:31:b3:c4:73:78:09:7c:b4:df:
         8a:cf:ea:5b:56:6b:98:d2:a7:6c:43:4a:59:01:9a:26:3a:be:
         60:85:ea:66:6a:70:19:fc:5b:01:1c:55:8d:30:b4:2a:37:64:
         9b:ee:6e:26:61:ff:ce:1c:d7:cd:16:61:15:58:56:e2:8e:37:
         cf:2c:4a:fb:41:c8:fd:b1:cd:e6:a0:d2:b1:f8:fc:b8:2f:e9:
         ac:b3:0e:f7:d8:2a:83:7c:67:e9:93:b5:ba:af:14:5b:61:33:
         c7:33:53:5e:b1:65:9a:08:a2:92:f3:37:c6:40:ba:8e:e9:31:
         ea:f7:13:05:e1:97:9d:13:ce:74:a2:dd:2a:52:9e:dc:51:17:
         c0:91:02:a5:2c:01:bf:88:89:d2:24:e8:42:f5:97:d6:7d:89:
         49:8f:6c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:42:08 2026 by rpki-client