Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DUGFHJZPq4WQjFhdddbDZmzLs39b6Qkkbz2ruT56VKtX/0/3230302e3133332e3233362e302f32332d3233203d3e203532383838.roa
File:                     3230302e3133332e3233362e302f32332d3233203d3e203532383838.roa (raw, json)
Hash identifier:          gdqn6qiWTwTpZaShYjalEXANI3rXc1ocf0BYpLZN+r8=
Subject key identifier:   35:47:9C:BF:47:6F:15:67:49:74:02:23:64:37:07:9A:7C:FE:54:8D
Certificate issuer:       /CN=55D70B4F48CAC50C41471718B18C78D87F0E9E2B
Certificate serial:       115C0D4CB11495F30A38DE4B04FEA68A66010C58
Authority key identifier: 55:D7:0B:4F:48:CA:C5:0C:41:47:17:18:B1:8C:78:D8:7F:0E:9E:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/55D70B4F48CAC50C41471718B18C78D87F0E9E2B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DUGFHJZPq4WQjFhdddbDZmzLs39b6Qkkbz2ruT56VKtX/0/3230302e3133332e3233362e302f32332d3233203d3e203532383838.roa
Signing time:             Wed 15 Jul 2026 19:57:38 +0000
ROA not before:           Wed 15 Jul 2026 19:52:38 +0000
ROA not after:            Wed 14 Jul 2027 19:57:38 +0000
asID:                     52888
IP address blocks:        200.133.236.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DUGFHJZPq4WQjFhdddbDZmzLs39b6Qkkbz2ruT56VKtX/0/55D70B4F48CAC50C41471718B18C78D87F0E9E2B.crl
                          rsync://rpki-repo.registro.br/repo/DUGFHJZPq4WQjFhdddbDZmzLs39b6Qkkbz2ruT56VKtX/0/55D70B4F48CAC50C41471718B18C78D87F0E9E2B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/55D70B4F48CAC50C41471718B18C78D87F0E9E2B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 19 Jul 2026 02:35:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:5c:0d:4c:b1:14:95:f3:0a:38:de:4b:04:fe:a6:8a:66:01:0c:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55D70B4F48CAC50C41471718B18C78D87F0E9E2B
        Validity
            Not Before: Jul 15 19:52:38 2026 GMT
            Not After : Jul 14 19:57:38 2027 GMT
        Subject: CN=35479CBF476F1567497402236437079A7CFE548D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:04:9b:ac:a7:77:96:72:6a:2a:c8:7c:34:a0:
                    1e:2d:11:b2:6a:56:0e:b9:22:b6:29:9c:68:cd:ae:
                    ac:c4:74:cb:ad:af:32:41:c7:5c:04:a3:6d:23:db:
                    98:c6:02:e1:ac:81:65:9e:12:9d:b1:45:e3:5f:34:
                    b5:d8:ff:eb:cd:21:0c:43:36:2a:9f:0e:09:1c:6d:
                    1b:e5:91:5a:f8:2e:7d:62:87:3b:9c:f8:ba:03:31:
                    96:5c:5a:97:b1:6e:f5:b9:23:1f:e6:9d:0c:e8:73:
                    71:34:83:2b:0e:e1:bb:59:84:4b:c9:4e:83:99:8f:
                    4e:14:06:e4:62:f3:aa:99:37:6d:f5:70:03:1e:57:
                    34:2a:d2:50:ed:ed:1b:8e:47:19:b1:fd:75:5b:83:
                    06:e4:07:55:ca:e6:1d:e7:01:a7:b5:42:f7:f9:de:
                    75:f4:68:9b:73:43:bb:c8:4d:c9:00:10:cd:66:44:
                    13:88:cc:7f:2e:b5:dd:46:87:1a:a7:82:93:3c:2c:
                    2e:1d:80:44:c8:59:51:78:06:a6:49:61:00:e0:7b:
                    4a:15:6a:48:2c:fe:33:30:66:0f:21:98:a8:00:0c:
                    d7:c0:ff:b0:96:e2:49:c8:cc:e8:88:59:d0:ff:b3:
                    73:76:95:6b:d0:05:0a:e5:bb:90:e5:7f:31:24:cb:
                    46:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:47:9C:BF:47:6F:15:67:49:74:02:23:64:37:07:9A:7C:FE:54:8D
            X509v3 Authority Key Identifier:
                keyid:55:D7:0B:4F:48:CA:C5:0C:41:47:17:18:B1:8C:78:D8:7F:0E:9E:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DUGFHJZPq4WQjFhdddbDZmzLs39b6Qkkbz2ruT56VKtX/0/55D70B4F48CAC50C41471718B18C78D87F0E9E2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/55D70B4F48CAC50C41471718B18C78D87F0E9E2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DUGFHJZPq4WQjFhdddbDZmzLs39b6Qkkbz2ruT56VKtX/0/3230302e3133332e3233362e302f32332d3233203d3e203532383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.133.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:74:fa:70:07:63:95:cb:88:b4:d9:e8:d9:6e:cd:fa:d9:74:
         dc:eb:cc:b6:03:a3:4d:65:1f:41:cb:20:ee:2c:6e:b5:de:ab:
         1e:32:b2:ca:3f:88:a4:bb:02:2d:cd:25:18:a3:7e:9a:79:5e:
         7d:bd:e3:e7:7f:e7:7e:34:e6:02:b1:01:c3:34:0b:a1:b1:1e:
         87:76:a8:e7:86:f9:52:3c:e0:16:ef:a5:40:7b:f1:b8:c1:97:
         c3:6d:fe:8f:68:c7:8b:07:18:1e:51:2a:a1:d2:91:d3:8e:d4:
         43:16:3b:82:29:da:0e:c8:53:39:85:1b:68:7a:11:a1:a0:f3:
         6d:87:68:70:d9:75:61:d1:0b:b4:30:67:ce:31:ad:1d:d8:10:
         cb:ed:eb:bf:c2:88:d0:87:39:2f:2a:fb:d7:4f:2a:35:67:85:
         5c:3f:85:3b:cf:17:d9:8f:27:c0:0f:ea:ac:4e:d0:00:18:04:
         ee:cb:2d:f3:26:68:8a:08:2f:e9:08:a1:d3:59:0b:c5:c0:56:
         95:a1:ee:f1:79:2c:da:27:37:df:8f:c0:49:03:8b:db:0b:89:
         dd:65:97:b4:34:bf:1d:93:dc:86:55:47:d2:13:9b:e3:c3:13:
         ec:e8:d6:f6:4e:17:6b:b4:2a:69:56:49:2c:c4:87:fe:ef:8a:
         82:0b:23:e7
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUEVwNTLEUlfMKON5LBP6mimYBDFgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTVENzBCNEY0OENBQzUwQzQxNDcxNzE4QjE4Qzc4RDg3
RjBFOUUyQjAeFw0yNjA3MTUxOTUyMzhaFw0yNzA3MTQxOTU3MzhaMDMxMTAvBgNV
BAMTKDM1NDc5Q0JGNDc2RjE1Njc0OTc0MDIyMzY0MzcwNzlBN0NGRTU0OEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQBJusp3eWcmoqyHw0oB4tEbJq
Vg65IrYpnGjNrqzEdMutrzJBx1wEo20j25jGAuGsgWWeEp2xReNfNLXY/+vNIQxD
NiqfDgkcbRvlkVr4Ln1ihzuc+LoDMZZcWpexbvW5Ix/mnQzoc3E0gysO4btZhEvJ
ToOZj04UBuRi86qZN231cAMeVzQq0lDt7RuORxmx/XVbgwbkB1XK5h3nAae1Qvf5
3nX0aJtzQ7vITckAEM1mRBOIzH8utd1GhxqngpM8LC4dgETIWVF4BqZJYQDge0oV
akgs/jMwZg8hmKgADNfA/7CW4knIzOiIWdD/s3N2lWvQBQrlu5DlfzEky0aVAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUNUecv0dvFWdJdAIjZDcHmnz+VI0wHwYDVR0j
BBgwFoAUVdcLT0jKxQxBRxcYsYx42H8OniswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFVHRkhKWlBxNFdRakZoZGRkYkRabXpMczM5YjZRa2tiejJydVQ1NlZL
dFgvMC81NUQ3MEI0RjQ4Q0FDNTBDNDE0NzE3MThCMThDNzhEODdGMEU5RTJCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU1RDcwQjRGNDhDQUM1MEM0
MTQ3MTcxOEIxOEM3OEQ4N0YwRTlFMkIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RVR0ZISlpQcTRXUWpGaGRkZGJEWm16THMzOWI2UWtrYnoycnVUNTZWS3RYLzAv
MzIzMDMwMmUzMTMzMzMyZTMyMzMzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM1
MzIzODM4Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAHIhewwDQYJKoZIhvcNAQELBQADggEBAJN0+nAH
Y5XLiLTZ6NluzfrZdNzrzLYDo01lH0HLIO4sbrXeqx4ysso/iKS7Ai3NJRijfpp5
Xn294+d/53405gKxAcM0C6GxHod2qOeG+VI84BbvpUB78bjBl8Nt/o9ox4sHGB5R
KqHSkdOO1EMWO4Ip2g7IUzmFG2h6EaGg822HaHDZdWHRC7QwZ84xrR3YEMvt67/C
iNCHOS8q+9dPKjVnhVw/hTvPF9mPJ8AP6qxO0AAYBO7LLfMmaIoIL+kIodNZC8XA
VpWh7vF5LNonN9+PwEkDi9sLid1ll7Q0vx2T3IZVR9ITm+PDE+zo1vZOF2u0KmlW
SSzEh/7vioILI+c=
-----END CERTIFICATE-----
Generated at Sat Jul 18 05:43:36 2026 by rpki-client