Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/1/3230302e3231352e3136342e302f32322d3234203d3e20323633383830.roa
File:                     3230302e3231352e3136342e302f32322d3234203d3e20323633383830.roa (raw, json)
Hash identifier:          oa/3DtqTCA3q3plB52ivGCwWIOvZTszPk6yiUL9eSHQ=
Subject key identifier:   D3:4D:06:14:FE:C5:42:01:B4:F8:D2:43:61:DA:3B:7B:94:D1:99:59
Certificate issuer:       /CN=605F3702CE23BBC04859766117DBC4F04EC8F430
Certificate serial:       67F6BE03D42058449B79A912ECDED314C3C621BC
Authority key identifier: 60:5F:37:02:CE:23:BB:C0:48:59:76:61:17:DB:C4:F0:4E:C8:F4:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605F3702CE23BBC04859766117DBC4F04EC8F430.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/1/3230302e3231352e3136342e302f32322d3234203d3e20323633383830.roa
Signing time:             Mon 21 Sep 2026 19:48:51 +0000
ROA not before:           Mon 21 Sep 2026 19:43:51 +0000
ROA not after:            Mon 20 Sep 2027 19:48:51 +0000
asID:                     263880
IP address blocks:        200.215.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/1/605F3702CE23BBC04859766117DBC4F04EC8F430.crl
                          rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/1/605F3702CE23BBC04859766117DBC4F04EC8F430.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605F3702CE23BBC04859766117DBC4F04EC8F430.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 08:42:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:f6:be:03:d4:20:58:44:9b:79:a9:12:ec:de:d3:14:c3:c6:21:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605F3702CE23BBC04859766117DBC4F04EC8F430
        Validity
            Not Before: Sep 21 19:43:51 2026 GMT
            Not After : Sep 20 19:48:51 2027 GMT
        Subject: CN=D34D0614FEC54201B4F8D24361DA3B7B94D19959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5b:35:cc:8c:92:ff:12:ec:31:b4:b5:35:1d:
                    e9:34:b8:12:95:82:1c:50:2e:ab:00:f2:a9:07:ec:
                    c4:e1:8e:9f:98:96:13:4b:43:77:a8:45:d9:dc:5a:
                    66:e6:e5:17:4b:1c:ba:5f:b1:63:f0:33:66:80:76:
                    ef:2a:68:e9:6a:c2:f6:3c:7d:61:7d:29:b1:55:05:
                    30:ad:52:ac:76:90:f6:a9:f1:e7:86:fe:64:b1:75:
                    31:08:df:16:5d:a8:d1:2d:74:39:8b:fc:88:43:c8:
                    59:3f:2c:6c:a0:ad:19:87:a4:07:1c:c2:ba:e6:9b:
                    d8:39:d5:05:50:35:77:d7:01:eb:ac:71:7d:28:e9:
                    f2:3b:3f:a7:78:c1:d7:46:51:6c:fd:a0:20:c0:cb:
                    88:b2:40:1d:52:16:62:be:34:7c:0a:af:99:22:f2:
                    c6:5b:b3:b3:c1:14:c9:fc:b2:93:cc:4a:88:26:fe:
                    17:ff:3b:fe:d3:93:1d:5f:af:bc:89:e9:a5:46:f7:
                    75:ee:7e:3e:3f:85:b7:42:7b:6e:70:e1:36:12:35:
                    ff:f6:43:ce:6f:5f:98:c5:47:d5:b2:1f:c9:16:45:
                    a5:5d:21:56:18:f7:ff:1e:bd:45:2d:6a:d0:e7:c8:
                    82:b7:64:c7:c1:76:7a:4c:9e:0e:01:49:7e:c2:da:
                    a2:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:4D:06:14:FE:C5:42:01:B4:F8:D2:43:61:DA:3B:7B:94:D1:99:59
            X509v3 Authority Key Identifier:
                keyid:60:5F:37:02:CE:23:BB:C0:48:59:76:61:17:DB:C4:F0:4E:C8:F4:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/1/605F3702CE23BBC04859766117DBC4F04EC8F430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605F3702CE23BBC04859766117DBC4F04EC8F430.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/1/3230302e3231352e3136342e302f32322d3234203d3e20323633383830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.215.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:d0:fc:71:e5:88:ec:84:8f:54:db:98:94:3b:ef:ae:7a:98:
         85:50:2a:30:5f:df:de:51:19:ef:ee:f0:dd:1d:1a:bb:e7:07:
         78:12:5f:00:e8:57:54:5e:62:18:f9:c0:4c:82:08:1d:6e:3b:
         8b:1a:b5:7c:aa:80:a1:12:bc:89:e0:f3:b5:86:2c:dc:03:54:
         ff:d6:85:39:c9:1f:da:a6:fa:5f:09:2e:85:fc:21:47:e0:0e:
         95:b2:85:30:b1:35:06:f2:11:6f:6f:9e:e2:4b:70:75:bd:53:
         73:4a:12:7e:cb:9f:1a:82:df:74:6f:1a:ff:c4:70:91:e3:a0:
         33:a2:b7:81:7b:ac:ef:a7:00:09:ce:06:38:64:49:0b:00:34:
         0a:a6:fb:24:96:07:e7:60:2c:b2:53:d1:3e:0e:b2:20:93:f7:
         85:4e:ea:36:c8:eb:88:7c:79:60:2c:74:3c:f2:0b:9d:1a:dd:
         1e:d4:ac:32:84:69:d1:4b:78:fe:b8:64:68:ca:39:f7:f3:d2:
         25:17:bc:34:11:69:ba:4c:6d:86:1b:e0:9f:e5:67:0b:17:27:
         18:9b:2f:f6:2b:ac:4c:e5:92:a0:ac:79:99:0c:f9:9d:00:f3:
         b2:23:34:4f:05:e0:47:43:57:9c:5b:33:e9:e5:82:44:18:90:
         bb:e4:a9:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----