Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/3230302e342e3130382e302f32322d3232203d3e20323731343739.roa
File:                     3230302e342e3130382e302f32322d3232203d3e20323731343739.roa (raw, json)
Hash identifier:          eAxqG7NTbvhzJnXQB4e/bZX1EHHwDBY0UnHaFpHeVw0=
Subject key identifier:   30:A2:0B:8F:DD:A1:97:D2:18:6F:92:37:36:51:E7:A8:43:B4:32:4F
Certificate issuer:       /CN=BB9E790EB12431740DF816FA9CE24E9F802D011E
Certificate serial:       22D684C04F51A26A20E76AE06154C2012951F404
Authority key identifier: BB:9E:79:0E:B1:24:31:74:0D:F8:16:FA:9C:E2:4E:9F:80:2D:01:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB9E790EB12431740DF816FA9CE24E9F802D011E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/3230302e342e3130382e302f32322d3232203d3e20323731343739.roa
Signing time:             Mon 24 Aug 2026 19:14:12 +0000
ROA not before:           Mon 24 Aug 2026 19:09:12 +0000
ROA not after:            Mon 23 Aug 2027 19:14:12 +0000
asID:                     271479
IP address blocks:        200.4.108.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/BB9E790EB12431740DF816FA9CE24E9F802D011E.crl
                          rsync://rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/BB9E790EB12431740DF816FA9CE24E9F802D011E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB9E790EB12431740DF816FA9CE24E9F802D011E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 01:14:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:d6:84:c0:4f:51:a2:6a:20:e7:6a:e0:61:54:c2:01:29:51:f4:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB9E790EB12431740DF816FA9CE24E9F802D011E
        Validity
            Not Before: Aug 24 19:09:12 2026 GMT
            Not After : Aug 23 19:14:12 2027 GMT
        Subject: CN=30A20B8FDDA197D2186F92373651E7A843B4324F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:35:1a:4a:1b:f4:99:e4:ed:e5:f5:e2:a8:7b:
                    49:03:86:3e:8b:55:9b:c1:3c:8d:03:e6:d2:57:95:
                    eb:95:af:5e:3d:5e:c5:ce:ad:c6:ac:48:ad:c8:a7:
                    05:3d:64:d5:21:65:27:09:19:3d:45:ea:71:f6:58:
                    0e:b7:40:02:3d:b8:27:31:cc:79:06:2d:df:a9:b4:
                    5f:9e:b9:c7:10:1a:54:ba:3c:fc:b8:16:24:22:92:
                    d7:51:07:3e:a6:b4:58:99:8f:e0:a5:de:1b:84:60:
                    45:96:5e:5c:9f:b9:c1:29:a0:df:8f:a2:2f:97:1b:
                    ac:bb:7c:64:60:92:0f:2f:20:4f:57:57:ef:68:c2:
                    60:ac:67:59:67:71:8d:81:bb:6d:8e:29:35:3b:e6:
                    de:e3:30:31:65:a3:ec:cf:c4:84:17:39:bd:d1:54:
                    b2:c4:6f:9d:48:c8:9a:67:e3:ab:ea:be:53:78:97:
                    ee:43:6d:d9:6b:8f:3f:ab:3d:ae:91:8f:10:23:f0:
                    bb:a7:9f:bd:aa:07:bd:b7:49:0c:bc:aa:0b:a1:17:
                    4a:6f:00:fe:c2:90:d6:45:30:23:cc:da:de:63:95:
                    a0:d5:3c:40:a3:bf:b4:22:09:8f:80:40:2f:a3:7c:
                    df:b1:09:45:b6:31:ab:5c:2a:b5:bf:0f:81:7c:5a:
                    61:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:A2:0B:8F:DD:A1:97:D2:18:6F:92:37:36:51:E7:A8:43:B4:32:4F
            X509v3 Authority Key Identifier:
                keyid:BB:9E:79:0E:B1:24:31:74:0D:F8:16:FA:9C:E2:4E:9F:80:2D:01:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/BB9E790EB12431740DF816FA9CE24E9F802D011E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB9E790EB12431740DF816FA9CE24E9F802D011E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/3230302e342e3130382e302f32322d3232203d3e20323731343739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.4.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:22:2a:d6:05:4e:79:e3:4e:31:7a:b8:37:33:35:94:75:b1:
         87:eb:e5:75:94:8b:36:3c:1a:5e:d9:93:97:fe:6d:9c:c9:62:
         80:cb:6e:38:12:92:54:d5:f4:d3:88:68:4b:07:0b:72:ab:f8:
         3d:e3:06:37:c6:ef:2b:b8:71:21:5b:a3:4f:c4:12:bc:2f:ab:
         90:05:09:df:4e:b9:86:4b:3a:d0:f2:67:6a:df:c9:89:1e:0c:
         ba:17:a6:21:2e:70:32:e0:e1:9f:af:52:99:ad:2b:33:fc:2d:
         ff:70:32:73:d7:9d:2d:a8:3f:93:3e:f9:61:1c:33:08:b0:cb:
         f3:19:26:db:7d:2f:33:08:c3:b5:89:a4:be:f4:e8:b9:9e:85:
         5f:e5:ad:e7:14:c2:e5:09:1a:06:eb:cf:4e:11:3e:e0:c4:9c:
         b7:d8:11:94:e7:3f:d3:c7:2d:0e:15:13:e7:56:90:bf:56:87:
         55:d2:7d:54:06:42:63:8f:b6:e9:17:2f:61:c0:5c:7f:cb:17:
         49:8e:3a:94:02:49:53:8c:1a:1a:81:e3:ea:53:90:ae:a4:b9:
         ff:15:1d:c0:25:38:4f:0d:6e:63:a1:43:90:37:e5:76:33:2e:
         38:fc:08:10:78:14:52:27:f4:66:36:00:8b:e0:0a:82:36:36:
         7f:24:8f:fd
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUItaEwE9Romog52rgYVTCASlR9AQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkI5RTc5MEVCMTI0MzE3NDBERjgxNkZBOUNFMjRFOUY4
MDJEMDExRTAeFw0yNjA4MjQxOTA5MTJaFw0yNzA4MjMxOTE0MTJaMDMxMTAvBgNV
BAMTKDMwQTIwQjhGRERBMTk3RDIxODZGOTIzNzM2NTFFN0E4NDNCNDMyNEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQNRpKG/SZ5O3l9eKoe0kDhj6L
VZvBPI0D5tJXleuVr149XsXOrcasSK3IpwU9ZNUhZScJGT1F6nH2WA63QAI9uCcx
zHkGLd+ptF+euccQGlS6PPy4FiQiktdRBz6mtFiZj+Cl3huEYEWWXlyfucEpoN+P
oi+XG6y7fGRgkg8vIE9XV+9owmCsZ1lncY2Bu22OKTU75t7jMDFlo+zPxIQXOb3R
VLLEb51IyJpn46vqvlN4l+5Dbdlrjz+rPa6RjxAj8Lunn72qB723SQy8qguhF0pv
AP7CkNZFMCPM2t5jlaDVPECjv7QiCY+AQC+jfN+xCUW2MatcKrW/D4F8WmErAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUMKILj92hl9IYb5I3NlHnqEO0Mk8wHwYDVR0j
BBgwFoAUu555DrEkMXQN+Bb6nOJOn4AtAR4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3AxVWRxQVRhcTNGbzlVVEpiNEdzMkNrSDVzem9wWU00THhhaHpvN2RZ
bW8vMC9CQjlFNzkwRUIxMjQzMTc0MERGODE2RkE5Q0UyNEU5RjgwMkQwMTFFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JCOUU3OTBFQjEyNDMxNzQw
REY4MTZGQTlDRTI0RTlGODAyRDAxMUUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dwMVVkcUFUYXEzRm85VVRKYjRHczJDa0g1c3pvcFlNNEx4YWh6bzdkWW1vLzAv
MzIzMDMwMmUzNDJlMzEzMDM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNzMx
MzQzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCyARsMA0GCSqGSIb3DQEBCwUAA4IBAQBWIirWBU55
404xerg3MzWUdbGH6+V1lIs2PBpe2ZOX/m2cyWKAy244EpJU1fTTiGhLBwtyq/g9
4wY3xu8ruHEhW6NPxBK8L6uQBQnfTrmGSzrQ8mdq38mJHgy6F6YhLnAy4OGfr1KZ
rSsz/C3/cDJz150tqD+TPvlhHDMIsMvzGSbbfS8zCMO1iaS+9Oi5noVf5a3nFMLl
CRoG689OET7gxJy32BGU5z/Txy0OFRPnVpC/VodV0n1UBkJjj7bpFy9hwFx/yxdJ
jjqUAklTjBoagePqU5CupLn/FR3AJThPDW5joUOQN+V2My44/AgQeBRSJ/RmNgCL
4AqCNjZ/JI/9
-----END CERTIFICATE-----
Generated at Thu Oct 15 18:48:33 2026 by rpki-client