Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cj9ExJxP49CJ7mW8QTCAWFGQ48PxSWbwMzw9dnKNaMXe/0/3230302e33392e3134302e302f32322d3234203d3e20323730373736.roa
File:                     3230302e33392e3134302e302f32322d3234203d3e20323730373736.roa (raw, json)
Hash identifier:          V6Hqmmgzn1KSfEUz+FQ375CkauYFLG3PUGofBZ6lryY=
Subject key identifier:   33:48:DB:34:00:EB:39:3D:90:CF:21:54:AB:CC:55:B8:5A:46:88:21
Certificate issuer:       /CN=74D7F5F1399FDCFE62A54C39418AF9C1527A5306
Certificate serial:       1BA33FDC1ACC1415DC04F7C1266F1AC5844481CA
Authority key identifier: 74:D7:F5:F1:39:9F:DC:FE:62:A5:4C:39:41:8A:F9:C1:52:7A:53:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74D7F5F1399FDCFE62A54C39418AF9C1527A5306.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cj9ExJxP49CJ7mW8QTCAWFGQ48PxSWbwMzw9dnKNaMXe/0/3230302e33392e3134302e302f32322d3234203d3e20323730373736.roa
Signing time:             Thu 21 May 2026 11:31:09 +0000
ROA not before:           Thu 21 May 2026 11:26:09 +0000
ROA not after:            Thu 20 May 2027 11:31:09 +0000
asID:                     270776
IP address blocks:        200.39.140.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cj9ExJxP49CJ7mW8QTCAWFGQ48PxSWbwMzw9dnKNaMXe/0/74D7F5F1399FDCFE62A54C39418AF9C1527A5306.crl
                          rsync://rpki-repo.registro.br/repo/Cj9ExJxP49CJ7mW8QTCAWFGQ48PxSWbwMzw9dnKNaMXe/0/74D7F5F1399FDCFE62A54C39418AF9C1527A5306.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74D7F5F1399FDCFE62A54C39418AF9C1527A5306.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 11:37:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:a3:3f:dc:1a:cc:14:15:dc:04:f7:c1:26:6f:1a:c5:84:44:81:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74D7F5F1399FDCFE62A54C39418AF9C1527A5306
        Validity
            Not Before: May 21 11:26:09 2026 GMT
            Not After : May 20 11:31:09 2027 GMT
        Subject: CN=3348DB3400EB393D90CF2154ABCC55B85A468821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:01:34:38:8e:3c:ee:0e:7a:5e:b7:61:15:51:
                    0f:aa:53:ed:2d:12:20:e1:b2:9e:d6:e5:a5:f1:1b:
                    95:be:ce:4f:40:34:f1:ea:9b:8a:10:8f:45:db:41:
                    02:f5:38:fb:5b:de:82:59:e3:d3:8b:2c:fe:5c:d7:
                    64:2a:f2:d3:29:89:fc:ce:8d:fc:49:37:33:d3:25:
                    ec:c3:35:55:7e:88:66:c0:01:2b:d5:c7:67:af:d1:
                    b9:b7:9d:78:a5:a9:f4:90:e0:bc:40:01:17:38:ef:
                    24:cc:44:c2:b1:cc:c6:b4:35:4b:2a:03:fc:2e:7f:
                    ed:2f:8d:35:db:1e:9c:c3:49:ba:ab:db:b9:81:4a:
                    50:ee:a8:72:68:76:12:8b:f5:f8:cf:a2:11:81:e6:
                    ab:0c:93:41:fa:da:e9:5c:a6:f7:76:0c:c5:f0:4a:
                    84:df:b9:88:fd:21:3c:a5:53:ce:a1:e9:37:07:04:
                    5a:f2:20:32:b4:f0:ce:64:e4:53:00:11:de:a5:2a:
                    4c:c1:5b:26:f8:63:a6:51:04:77:95:d1:3f:45:0f:
                    09:8d:9b:42:55:61:bb:e8:97:05:05:18:be:92:97:
                    87:7e:c6:96:b0:10:b4:7b:4a:d1:44:b1:f5:5c:fa:
                    8d:21:7a:82:88:e4:e6:d9:e4:ac:66:e1:70:f3:62:
                    26:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:48:DB:34:00:EB:39:3D:90:CF:21:54:AB:CC:55:B8:5A:46:88:21
            X509v3 Authority Key Identifier:
                keyid:74:D7:F5:F1:39:9F:DC:FE:62:A5:4C:39:41:8A:F9:C1:52:7A:53:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cj9ExJxP49CJ7mW8QTCAWFGQ48PxSWbwMzw9dnKNaMXe/0/74D7F5F1399FDCFE62A54C39418AF9C1527A5306.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74D7F5F1399FDCFE62A54C39418AF9C1527A5306.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cj9ExJxP49CJ7mW8QTCAWFGQ48PxSWbwMzw9dnKNaMXe/0/3230302e33392e3134302e302f32322d3234203d3e20323730373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:38:3e:e5:ef:16:25:2e:27:a2:d9:22:0b:cb:65:5f:8d:a4:
         ec:6a:f7:88:a0:49:7d:5c:d1:2e:2a:ee:61:ab:21:4b:c9:61:
         ac:a2:03:3d:ce:f2:f8:e9:f9:ed:b4:b7:01:61:db:84:72:82:
         99:16:d6:3c:02:8a:df:43:11:a6:64:93:35:d5:85:24:62:43:
         a0:a1:6c:01:41:c9:5f:72:10:f7:cd:c5:cb:d5:10:b3:68:1c:
         df:4f:21:f1:ff:51:2e:a2:c1:61:23:dd:09:9b:fa:00:43:fc:
         df:71:02:e8:02:83:5f:b8:16:30:f9:d7:5a:d3:23:e3:e9:e4:
         51:08:df:e4:88:ec:e7:bb:28:07:73:1a:04:fd:fb:a7:14:90:
         63:6c:f3:fd:8f:ed:ef:6d:61:c6:7a:81:15:6f:94:d3:b9:2d:
         17:9c:9d:7d:0d:09:28:bc:9f:f8:4f:34:e5:50:3b:8b:1d:39:
         df:b7:0e:1d:ca:f9:66:ae:67:36:2d:10:a5:62:5f:36:a3:05:
         e9:aa:58:02:1f:0e:82:98:cc:28:ac:65:e8:1c:a0:a1:07:07:
         cd:ba:4c:12:85:ac:a8:bd:39:1f:14:8d:71:7d:69:f6:19:7f:
         c7:d1:5b:d1:a6:06:37:ae:69:3b:ba:b4:a2:de:da:a3:ba:aa:
         dc:5f:e1:26
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUG6M/3BrMFBXcBPfBJm8axYREgcowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzREN0Y1RjEzOTlGRENGRTYyQTU0QzM5NDE4QUY5QzE1
MjdBNTMwNjAeFw0yNjA1MjExMTI2MDlaFw0yNzA1MjAxMTMxMDlaMDMxMTAvBgNV
BAMTKDMzNDhEQjM0MDBFQjM5M0Q5MENGMjE1NEFCQ0M1NUI4NUE0Njg4MjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNATQ4jjzuDnpet2EVUQ+qU+0t
EiDhsp7W5aXxG5W+zk9ANPHqm4oQj0XbQQL1OPtb3oJZ49OLLP5c12Qq8tMpifzO
jfxJNzPTJezDNVV+iGbAASvVx2ev0bm3nXilqfSQ4LxAARc47yTMRMKxzMa0NUsq
A/wuf+0vjTXbHpzDSbqr27mBSlDuqHJodhKL9fjPohGB5qsMk0H62ulcpvd2DMXw
SoTfuYj9ITylU86h6TcHBFryIDK08M5k5FMAEd6lKkzBWyb4Y6ZRBHeV0T9FDwmN
m0JVYbvolwUFGL6Sl4d+xpawELR7StFEsfVc+o0heoKI5ObZ5Kxm4XDzYiYbAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUM0jbNADrOT2QzyFUq8xVuFpGiCEwHwYDVR0j
BBgwFoAUdNf18Tmf3P5ipUw5QYr5wVJ6UwYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ2o5RXhKeFA0OUNKN21XOFFUQ0FXRkdRNDhQeFNXYndNenc5ZG5LTmFN
WGUvMC83NEQ3RjVGMTM5OUZEQ0ZFNjJBNTRDMzk0MThBRjlDMTUyN0E1MzA2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc0RDdGNUYxMzk5RkRDRkU2
MkE1NEMzOTQxOEFGOUMxNTI3QTUzMDYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NqOUV4SnhQNDlDSjdtVzhRVENBV0ZHUTQ4UHhTV2J3TXp3OWRuS05hTVhlLzAv
MzIzMDMwMmUzMzM5MmUzMTM0MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3
MzAzNzM3MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALIJ4wwDQYJKoZIhvcNAQELBQADggEBAEA4PuXv
FiUuJ6LZIgvLZV+NpOxq94igSX1c0S4q7mGrIUvJYayiAz3O8vjp+e20twFh24Ry
gpkW1jwCit9DEaZkkzXVhSRiQ6ChbAFByV9yEPfNxcvVELNoHN9PIfH/US6iwWEj
3Qmb+gBD/N9xAugCg1+4FjD511rTI+Pp5FEI3+SI7Oe7KAdzGgT9+6cUkGNs8/2P
7e9tYcZ6gRVvlNO5LRecnX0NCSi8n/hPNOVQO4sdOd+3Dh3K+WauZzYtEKViXzaj
BemqWAIfDoKYzCisZegcoKEHB826TBKFrKi9OR8UjXF9afYZf8fRW9GmBjeuaTu6
tKLe2qO6qtxf4SY=
-----END CERTIFICATE-----
Generated at Sun May 24 14:12:04 2026 by rpki-client