Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/3230302e36362e3131322e302f32332d3233203d3e20323632383132.roa
File:                     3230302e36362e3131322e302f32332d3233203d3e20323632383132.roa (raw, json)
Hash identifier:          rvz5O5fpWqfdouBjZ3CQ7wOTjaaUlaCZFIzDBmffoKc=
Subject key identifier:   80:D7:68:F9:BC:74:D2:CB:88:C2:C2:67:2E:F6:AF:43:B6:E9:F9:92
Certificate issuer:       /CN=A8C40D851EE06F7454DE9587BD8710CA3EAB8536
Certificate serial:       586B87079AD8506343ADF737603226CE0E381EA1
Authority key identifier: A8:C4:0D:85:1E:E0:6F:74:54:DE:95:87:BD:87:10:CA:3E:AB:85:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/3230302e36362e3131322e302f32332d3233203d3e20323632383132.roa
Signing time:             Mon 15 Jun 2026 16:26:47 +0000
ROA not before:           Mon 15 Jun 2026 16:21:47 +0000
ROA not after:            Mon 14 Jun 2027 16:26:47 +0000
asID:                     262812
IP address blocks:        200.66.112.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.crl
                          rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 17:37:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:6b:87:07:9a:d8:50:63:43:ad:f7:37:60:32:26:ce:0e:38:1e:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8C40D851EE06F7454DE9587BD8710CA3EAB8536
        Validity
            Not Before: Jun 15 16:21:47 2026 GMT
            Not After : Jun 14 16:26:47 2027 GMT
        Subject: CN=80D768F9BC74D2CB88C2C2672EF6AF43B6E9F992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:17:34:a8:6a:d5:0b:a3:b8:af:87:41:f7:7a:
                    41:3d:ad:d5:10:e3:16:d9:94:f5:9f:08:a2:4d:d5:
                    fd:2a:bc:58:38:fa:8c:2c:80:14:22:bc:f5:df:2c:
                    be:d1:0f:87:e1:8f:f6:5e:25:3b:e6:b2:26:bc:67:
                    d0:4c:53:56:98:78:bd:05:dd:1f:30:d3:3c:04:cb:
                    6d:2e:86:bd:f5:32:8e:56:a7:c1:2b:6f:d8:dc:96:
                    12:1e:6e:d8:12:92:04:4d:59:ad:00:20:d6:39:40:
                    56:45:ab:57:08:f2:d6:3b:e6:8e:f5:36:da:83:1a:
                    8d:9f:5a:c4:e2:2d:ec:36:b5:c6:e4:37:18:8c:28:
                    fb:10:44:c1:42:3a:aa:36:2e:d4:4c:4f:ed:bf:f9:
                    8b:41:a6:01:85:0b:28:2a:4b:fa:15:24:30:d9:f9:
                    64:af:e3:fc:ea:b7:ee:40:4f:da:fe:16:b3:aa:4f:
                    b5:eb:3d:e4:3f:41:17:d0:be:07:0f:cb:41:d0:a3:
                    d9:9d:f4:53:83:b8:71:22:33:1f:97:52:15:18:12:
                    12:a1:90:b5:ec:8c:80:61:4c:41:39:ab:48:ba:f7:
                    d4:b9:50:56:0d:a1:b2:86:4b:a6:cb:83:47:fb:bd:
                    51:a9:1b:a8:65:4b:2a:b1:cf:ad:57:a5:4f:da:50:
                    21:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:D7:68:F9:BC:74:D2:CB:88:C2:C2:67:2E:F6:AF:43:B6:E9:F9:92
            X509v3 Authority Key Identifier:
                keyid:A8:C4:0D:85:1E:E0:6F:74:54:DE:95:87:BD:87:10:CA:3E:AB:85:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/3230302e36362e3131322e302f32332d3233203d3e20323632383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.66.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a6:af:69:0a:1e:fa:98:51:2e:08:96:06:06:55:a7:cd:23:35:
         d0:46:fa:cb:8e:85:86:4d:68:12:94:3d:ae:b4:88:55:55:9e:
         a9:0c:c3:72:67:ac:b9:6e:04:a9:17:71:a1:45:56:e1:d3:f1:
         34:74:f6:96:be:fb:fe:63:c1:c7:52:46:e2:92:46:f2:a0:5b:
         15:4b:e3:32:b8:1e:d1:2f:68:1b:b8:79:55:4f:41:53:c8:71:
         12:45:a5:90:1e:ed:50:d5:09:a6:ad:cb:f5:f5:45:d4:e5:da:
         e8:b6:9c:95:15:5a:15:50:3c:b2:15:bc:7f:a2:06:90:2c:bd:
         f1:d6:75:49:19:fe:c8:d4:bb:08:fb:dc:8f:6b:2c:9b:b7:03:
         d3:12:40:fd:d6:dc:35:fe:2d:8f:b6:4b:f4:10:92:52:fc:d8:
         94:6d:dc:1a:f3:ca:b5:9c:39:97:b1:c7:2b:6d:8f:86:0a:a4:
         d2:76:ad:66:db:f3:0e:c5:70:7a:a9:ff:a0:43:4c:1c:77:f2:
         cf:8c:b0:32:ba:74:60:11:29:59:c5:08:29:59:ee:17:65:97:
         5d:db:0f:65:45:bd:05:06:b4:84:a0:7f:ab:42:a0:c4:12:11:
         57:49:fd:95:7a:ea:7d:6a:7a:dd:e4:39:00:e1:c2:95:d0:6b:
         4f:8b:d7:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:16:25 2026 by rpki-client