Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGRbPQREs7xGNG6W2GchxZ6CpWDQ37bjenESruCQKcD9/1/3230302e35302e3231322e302f32322d3234203d3e20323730343530.roa
File:                     3230302e35302e3231322e302f32322d3234203d3e20323730343530.roa (raw, json)
Hash identifier:          jA/HZYZjIAEJVhTL1D309EH2I9xs3xXhHBq5Y1tjhZ4=
Subject key identifier:   A6:87:F7:9E:F5:EB:BB:84:0A:16:2C:54:6C:1D:8B:09:50:E5:A5:87
Certificate issuer:       /CN=51957F338D0DF1C49A0FAB7BE086D4F2F6F01DAF
Certificate serial:       4FC59C71D6F7421F6AD3D0368AA3FDD2D9C48416
Authority key identifier: 51:95:7F:33:8D:0D:F1:C4:9A:0F:AB:7B:E0:86:D4:F2:F6:F0:1D:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51957F338D0DF1C49A0FAB7BE086D4F2F6F01DAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGRbPQREs7xGNG6W2GchxZ6CpWDQ37bjenESruCQKcD9/1/3230302e35302e3231322e302f32322d3234203d3e20323730343530.roa
Signing time:             Wed 17 Jun 2026 23:41:49 +0000
ROA not before:           Wed 17 Jun 2026 23:36:49 +0000
ROA not after:            Wed 16 Jun 2027 23:41:49 +0000
asID:                     270450
IP address blocks:        200.50.212.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GGRbPQREs7xGNG6W2GchxZ6CpWDQ37bjenESruCQKcD9/1/51957F338D0DF1C49A0FAB7BE086D4F2F6F01DAF.crl
                          rsync://rpki-repo.registro.br/repo/GGRbPQREs7xGNG6W2GchxZ6CpWDQ37bjenESruCQKcD9/1/51957F338D0DF1C49A0FAB7BE086D4F2F6F01DAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51957F338D0DF1C49A0FAB7BE086D4F2F6F01DAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Jun 2026 11:36:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:c5:9c:71:d6:f7:42:1f:6a:d3:d0:36:8a:a3:fd:d2:d9:c4:84:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51957F338D0DF1C49A0FAB7BE086D4F2F6F01DAF
        Validity
            Not Before: Jun 17 23:36:49 2026 GMT
            Not After : Jun 16 23:41:49 2027 GMT
        Subject: CN=A687F79EF5EBBB840A162C546C1D8B0950E5A587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c7:ea:b2:1e:13:ed:d8:84:f1:cc:67:b1:86:
                    66:82:e8:6b:99:64:fc:17:ef:45:91:c4:36:48:e3:
                    30:da:78:7f:64:4a:76:92:b7:5b:e5:d5:30:3a:63:
                    b3:09:cf:5f:d0:a8:3a:87:1c:5b:5c:11:9b:61:13:
                    9b:55:bf:cb:05:1c:03:4e:0d:54:c6:51:9f:d6:b9:
                    06:42:5b:08:03:fa:eb:bd:97:66:d8:e0:28:53:74:
                    9e:b7:12:d8:63:61:85:40:78:99:4b:13:56:a1:3c:
                    60:f3:c0:5f:56:21:f7:62:d8:22:ab:70:db:80:d3:
                    9f:d1:e1:22:f3:f5:b8:12:1e:25:11:a3:a2:fb:c8:
                    5a:f8:98:6b:53:ef:40:bc:5c:17:d8:8c:20:7d:b9:
                    74:2d:6d:dd:48:43:a3:af:62:a5:cd:f2:aa:11:cb:
                    05:1b:a5:55:55:38:68:ca:9c:31:40:59:eb:55:52:
                    b7:02:0a:d5:f6:a8:09:b5:ea:e4:5d:7d:16:c7:ec:
                    2b:40:b4:34:6a:21:75:aa:00:27:e1:85:d5:19:16:
                    a3:b4:fc:ef:67:7c:60:4c:6b:fa:5d:fb:e1:37:50:
                    95:83:06:f1:c3:32:fd:0e:60:df:5d:83:94:e4:c1:
                    1c:45:64:2f:91:4a:c2:2f:52:be:81:47:0e:b4:5a:
                    30:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:87:F7:9E:F5:EB:BB:84:0A:16:2C:54:6C:1D:8B:09:50:E5:A5:87
            X509v3 Authority Key Identifier:
                keyid:51:95:7F:33:8D:0D:F1:C4:9A:0F:AB:7B:E0:86:D4:F2:F6:F0:1D:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGRbPQREs7xGNG6W2GchxZ6CpWDQ37bjenESruCQKcD9/1/51957F338D0DF1C49A0FAB7BE086D4F2F6F01DAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51957F338D0DF1C49A0FAB7BE086D4F2F6F01DAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGRbPQREs7xGNG6W2GchxZ6CpWDQ37bjenESruCQKcD9/1/3230302e35302e3231322e302f32322d3234203d3e20323730343530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:a6:af:42:81:a9:e0:45:52:67:93:15:8f:11:8d:54:94:40:
         f9:85:67:cd:74:a7:4a:04:6e:91:99:a7:7f:31:8a:8f:f7:c8:
         4d:a1:6d:3e:ce:f0:1d:f3:0b:96:5d:57:d7:fe:b8:47:bb:c9:
         cc:17:1e:39:bf:8b:50:62:b3:54:8d:c6:8f:80:82:54:de:a2:
         78:5f:68:e4:d9:f2:40:37:1b:ee:73:b1:ef:75:57:9a:cb:af:
         df:bc:8c:54:7b:eb:ca:e5:0c:7b:ce:de:51:5b:5e:ce:c3:f5:
         89:f9:69:62:85:8c:ed:19:04:55:c3:29:36:f6:4c:21:ea:66:
         9a:4a:bb:a9:55:11:65:40:be:70:b9:5c:bc:91:03:e7:38:c0:
         65:84:be:48:f1:a8:20:b6:ca:88:3b:08:08:8d:2e:24:08:36:
         e5:25:71:19:1d:a1:9f:a9:a9:8c:68:b8:98:d4:04:7e:8d:b1:
         14:77:b7:77:0b:4a:4c:cb:57:e9:44:48:72:de:1d:12:ae:5e:
         8c:02:0a:0f:07:0a:5f:c0:11:da:43:f6:fd:01:69:92:3b:73:
         bc:e1:8b:1f:cd:bc:15:db:6a:9e:5d:54:53:7e:43:be:d7:91:
         53:e6:14:24:64:70:9e:74:5d:87:8a:f0:4e:af:6f:0d:9c:c5:
         5c:c5:0f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 13:13:14 2026 by rpki-client