Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/3230302e33392e34382e302f32322d3232203d3e20323731353234.roa
File:                     3230302e33392e34382e302f32322d3232203d3e20323731353234.roa (raw, json)
Hash identifier:          DKbye84QCkTImvUP7CJY0CDZq5FNbhjZ/IuRa4Ti5/Y=
Subject key identifier:   47:21:58:5A:8C:BC:A4:37:DF:D7:D0:0E:79:0E:84:BF:87:5E:B9:4D
Certificate issuer:       /CN=2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647
Certificate serial:       55E7433A42055CB1EDF5D21C63D0A09B8A0D155A
Authority key identifier: 2D:D9:7F:5E:85:D5:A9:57:8E:78:94:0C:FD:5B:AE:DF:B8:2E:06:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/3230302e33392e34382e302f32322d3232203d3e20323731353234.roa
Signing time:             Wed 08 Apr 2026 03:52:43 +0000
ROA not before:           Wed 08 Apr 2026 03:47:43 +0000
ROA not after:            Wed 07 Apr 2027 03:52:43 +0000
asID:                     271524
IP address blocks:        200.39.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.crl
                          rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 23:37:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:e7:43:3a:42:05:5c:b1:ed:f5:d2:1c:63:d0:a0:9b:8a:0d:15:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647
        Validity
            Not Before: Apr  8 03:47:43 2026 GMT
            Not After : Apr  7 03:52:43 2027 GMT
        Subject: CN=4721585A8CBCA437DFD7D00E790E84BF875EB94D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:28:92:a4:2e:53:d1:09:9d:3e:4c:44:86:74:
                    47:c7:d6:71:a5:df:89:6c:ff:e9:ca:09:22:cd:0c:
                    ef:57:93:e5:db:47:3e:17:62:ac:76:82:78:5b:b5:
                    52:6f:12:0c:ad:74:2d:a5:3a:09:c0:c6:f5:2a:15:
                    90:7b:e9:8b:13:b0:64:48:68:a7:5d:a4:b3:1b:69:
                    6e:60:be:09:cf:69:28:87:69:91:ba:57:6b:92:83:
                    f0:bb:e1:26:78:8e:77:07:51:dc:4d:ad:be:67:72:
                    c4:ac:cc:41:26:a0:e1:4f:7b:1e:8b:6c:34:9e:45:
                    fc:bf:d5:ef:5f:4a:bb:5e:9a:32:20:7c:57:c8:dc:
                    40:36:42:fc:79:68:3c:5c:96:1e:46:84:74:3b:f9:
                    01:4d:9d:a0:99:78:77:0e:8a:97:c3:5a:7e:2b:b3:
                    5f:fa:53:05:34:4f:f1:a3:31:ed:b4:7e:6a:4b:46:
                    41:c1:b7:9f:31:42:10:86:6b:09:16:31:22:26:29:
                    85:aa:76:aa:7a:33:ae:cd:de:6e:32:20:7a:20:fe:
                    b4:0d:b4:15:70:94:e9:21:2d:0b:fc:14:fb:3b:46:
                    34:06:f7:d1:eb:c4:46:b3:c7:7f:76:64:4a:05:f7:
                    6c:7b:ed:51:64:09:c8:ab:58:0c:22:50:a2:40:a4:
                    9e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:21:58:5A:8C:BC:A4:37:DF:D7:D0:0E:79:0E:84:BF:87:5E:B9:4D
            X509v3 Authority Key Identifier:
                keyid:2D:D9:7F:5E:85:D5:A9:57:8E:78:94:0C:FD:5B:AE:DF:B8:2E:06:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/3230302e33392e34382e302f32322d3232203d3e20323731353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:e9:b3:92:b4:bc:72:d7:aa:15:6e:ca:de:5a:b7:ee:33:43:
         34:c4:0e:c2:d3:f5:cc:68:00:33:64:16:20:f1:5d:e9:48:27:
         6f:34:22:c4:37:c1:0a:9f:da:73:80:a2:d2:68:58:f8:4c:4c:
         56:d9:35:e5:6b:19:3e:36:df:29:91:a5:b9:e1:34:37:5a:f3:
         db:ba:55:e8:37:57:e8:0d:46:c6:a5:c1:ae:a2:25:8c:e6:91:
         ce:15:55:df:96:9a:0c:ed:45:86:1b:ec:be:3d:9d:e6:2a:80:
         1b:6f:3b:bc:e0:60:0e:a3:b8:58:56:d0:d7:b6:ad:a3:03:9c:
         6c:35:49:45:79:72:00:ff:e5:4c:e8:fc:f6:23:50:a3:40:38:
         69:42:6a:1e:c8:9e:ba:51:b2:7b:85:be:65:6a:52:df:c9:cf:
         6d:18:a6:46:96:bf:3f:7a:1f:72:4a:93:dd:9f:96:b3:fd:e8:
         11:78:be:72:aa:ba:db:18:60:c0:22:cf:26:6f:00:d1:d1:c1:
         66:5a:8f:93:96:1e:a2:96:b5:7a:25:8b:e0:1c:41:3d:27:f9:
         de:71:ff:3d:f2:18:17:2e:fa:6d:53:1a:9c:4f:35:38:74:24:
         a6:0e:66:81:a9:78:a7:fc:2d:47:f0:77:4d:29:9d:ea:0d:c9:
         63:34:73:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 15:54:57 2026 by rpki-client