Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/0/3230302e35302e3232322e302f32342d3234203d3e20323730343630.roa
File:                     3230302e35302e3232322e302f32342d3234203d3e20323730343630.roa (raw, json)
Hash identifier:          kaiRmg3cuVPiYECjXpAJrhkreok4VX9St4UOdFai7j8=
Subject key identifier:   CB:4E:6E:F9:69:97:B7:2D:3E:EA:11:64:FC:2E:32:E0:C8:D7:4B:90
Certificate issuer:       /CN=CA5C74EFBAF084A9DE4701FCA881B6A3EE995B1E
Certificate serial:       7C5C18001A8681600D922D8757632ECB23BA9C2C
Authority key identifier: CA:5C:74:EF:BA:F0:84:A9:DE:47:01:FC:A8:81:B6:A3:EE:99:5B:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA5C74EFBAF084A9DE4701FCA881B6A3EE995B1E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/0/3230302e35302e3232322e302f32342d3234203d3e20323730343630.roa
Signing time:             Thu 02 Jul 2026 16:52:01 +0000
ROA not before:           Thu 02 Jul 2026 16:47:01 +0000
ROA not after:            Thu 01 Jul 2027 16:52:01 +0000
asID:                     270460
IP address blocks:        200.50.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/0/CA5C74EFBAF084A9DE4701FCA881B6A3EE995B1E.crl
                          rsync://rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/0/CA5C74EFBAF084A9DE4701FCA881B6A3EE995B1E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA5C74EFBAF084A9DE4701FCA881B6A3EE995B1E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 02:39:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:5c:18:00:1a:86:81:60:0d:92:2d:87:57:63:2e:cb:23:ba:9c:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA5C74EFBAF084A9DE4701FCA881B6A3EE995B1E
        Validity
            Not Before: Jul  2 16:47:01 2026 GMT
            Not After : Jul  1 16:52:01 2027 GMT
        Subject: CN=CB4E6EF96997B72D3EEA1164FC2E32E0C8D74B90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:02:8f:bb:ce:8d:96:d3:5e:74:f2:59:9e:2b:
                    39:9e:88:37:86:61:0f:69:4a:ac:47:dc:99:9d:c6:
                    07:59:37:3e:7f:9b:30:e0:e8:9e:4f:48:c4:9f:22:
                    b9:e3:56:b3:1a:71:33:fa:cb:39:43:18:51:0a:6e:
                    45:1b:94:fc:ad:93:0e:9f:57:6f:5a:13:77:5e:bf:
                    1f:f6:65:90:ab:1c:35:ff:f4:22:1d:bc:05:17:f4:
                    5f:48:70:9a:ad:f3:37:c8:ed:1d:ed:b2:2c:96:e2:
                    ef:3e:26:9a:7b:85:c7:f9:2a:d0:28:d3:fd:c1:ab:
                    80:52:62:f8:66:89:e2:a6:14:32:35:dc:e3:80:4f:
                    43:7e:41:4b:af:0d:8a:b2:ab:b0:fb:c7:9f:99:15:
                    f9:ad:a7:b2:84:28:79:10:f3:d3:ef:48:d8:0e:ab:
                    ea:d2:63:06:a6:75:14:a7:f3:fd:77:fd:8e:87:e7:
                    bb:e2:95:dd:d1:34:8d:7f:9e:fb:d3:5f:fd:54:eb:
                    66:d3:c8:e5:ff:a8:72:0d:89:ab:fb:86:e6:01:f6:
                    d9:e7:7a:a1:1d:7d:6e:05:41:c3:19:c5:8e:10:48:
                    72:89:49:bc:86:3d:a3:84:b0:ae:3d:45:32:df:13:
                    a8:d9:51:89:f4:af:7e:5e:1c:5a:92:36:ca:ff:4e:
                    74:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:4E:6E:F9:69:97:B7:2D:3E:EA:11:64:FC:2E:32:E0:C8:D7:4B:90
            X509v3 Authority Key Identifier:
                keyid:CA:5C:74:EF:BA:F0:84:A9:DE:47:01:FC:A8:81:B6:A3:EE:99:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/0/CA5C74EFBAF084A9DE4701FCA881B6A3EE995B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA5C74EFBAF084A9DE4701FCA881B6A3EE995B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/0/3230302e35302e3232322e302f32342d3234203d3e20323730343630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:1f:5e:69:f5:ea:1c:d6:76:e9:56:72:89:a6:16:69:75:a3:
         ec:4f:c3:c2:10:3b:ff:90:5d:12:45:b1:e5:51:99:21:d2:1c:
         0d:a4:ad:4a:f8:65:bf:fb:65:96:68:95:0b:5d:e8:c2:ff:4d:
         80:7a:a6:44:b9:b1:50:77:45:76:32:35:e8:40:50:65:dd:2b:
         46:6c:d3:75:6b:de:3d:e5:e7:ce:bb:e5:11:0f:39:bc:b1:10:
         31:91:45:67:4e:8c:2f:1a:75:a8:a3:5a:20:51:64:45:42:dd:
         e1:58:4b:ad:bc:34:72:96:b9:55:27:28:2b:c3:2b:a5:6d:3e:
         43:18:0b:a6:41:96:78:12:af:98:1a:32:a6:55:99:09:97:d9:
         d7:30:80:03:49:ae:07:75:6d:28:af:0d:c5:63:76:54:8d:71:
         0f:04:18:a3:e2:18:fd:21:0b:a0:51:be:03:29:d8:39:0e:77:
         78:9b:17:fd:88:e4:dd:ce:d9:34:6d:25:ce:20:36:e1:37:ac:
         97:e6:cc:6e:bf:42:fe:d0:8d:7b:7b:17:8c:3e:68:2e:de:1f:
         10:07:f9:60:20:94:13:d3:66:c6:8d:aa:f7:21:69:2e:63:00:
         9a:d6:75:ee:82:4f:78:71:e0:f7:d6:70:25:c4:2e:56:53:53:
         b1:c6:c3:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:07:50 2026 by rpki-client