Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3230302e3136392e3131322e302f32302d3234203d3e203232303835.roa
File:                     3230302e3136392e3131322e302f32302d3234203d3e203232303835.roa (raw, json)
Hash identifier:          rAAj9F8Xuvpv6ycPKlGrW6Tv7tbbWSvWMo4ee+IUal0=
Subject key identifier:   A5:F3:63:79:B6:A0:C6:B2:FB:52:20:A5:E0:43:7C:0F:E5:D4:ED:89
Certificate issuer:       /CN=D5EBEEFD45A0D90B5E60CD8D4B4384098353E828
Certificate serial:       67EC114D3419806F34B547CE52D7A90F67F2CF0A
Authority key identifier: D5:EB:EE:FD:45:A0:D9:0B:5E:60:CD:8D:4B:43:84:09:83:53:E8:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3230302e3136392e3131322e302f32302d3234203d3e203232303835.roa
Signing time:             Tue 19 May 2026 15:00:01 +0000
ROA not before:           Tue 19 May 2026 14:55:01 +0000
ROA not after:            Tue 18 May 2027 15:00:01 +0000
asID:                     22085
IP address blocks:        200.169.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.crl
                          rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 08:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:ec:11:4d:34:19:80:6f:34:b5:47:ce:52:d7:a9:0f:67:f2:cf:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5EBEEFD45A0D90B5E60CD8D4B4384098353E828
        Validity
            Not Before: May 19 14:55:01 2026 GMT
            Not After : May 18 15:00:01 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5c:c8:62:cf:89:0a:df:38:01:08:8a:50:b6:
                    a6:6b:75:da:7f:46:ee:20:af:e4:c0:52:e7:ae:cb:
                    da:57:72:c6:3d:84:31:98:ca:23:35:84:5d:4e:27:
                    e4:17:0b:b1:a2:62:13:a1:0b:96:dc:2d:fc:b8:e1:
                    b4:b4:3d:73:11:63:6b:3c:27:c0:a7:69:ca:84:cd:
                    c1:b7:c1:b3:90:fc:0c:0b:52:a4:ae:b3:89:ac:42:
                    45:e0:f2:f7:ca:2d:69:5c:b1:63:17:55:d4:e5:fc:
                    e1:4a:af:92:23:97:4d:da:1b:0b:bc:63:89:4f:83:
                    11:69:3e:2e:c7:7e:66:d5:85:79:ba:e8:e7:83:f8:
                    0e:c8:22:39:ec:c7:fc:cd:b0:22:2b:68:41:2f:52:
                    b9:2e:af:51:c0:c8:97:18:42:ad:9c:2e:d8:a1:76:
                    2f:ab:4d:54:86:84:2e:ac:c8:ea:0f:ca:aa:de:8d:
                    83:69:29:25:d9:16:f0:97:f2:c2:6c:4a:86:aa:61:
                    35:ab:a5:26:81:81:bf:7a:19:20:e3:35:ed:4f:8f:
                    82:90:87:ac:e7:73:ce:9b:87:3f:34:fb:2f:dd:04:
                    4b:9a:0e:73:7a:5c:8c:a3:78:31:61:ab:69:8f:98:
                    e8:15:dd:ad:bf:0c:9b:7a:b3:f1:03:c4:9e:df:af:
                    4b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:F3:63:79:B6:A0:C6:B2:FB:52:20:A5:E0:43:7C:0F:E5:D4:ED:89
            X509v3 Authority Key Identifier:
                keyid:D5:EB:EE:FD:45:A0:D9:0B:5E:60:CD:8D:4B:43:84:09:83:53:E8:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3230302e3136392e3131322e302f32302d3234203d3e203232303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.169.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         11:a6:2b:b5:36:1c:e4:60:fa:81:21:2e:10:30:d7:45:c2:02:
         0f:c2:e6:aa:e3:8c:0b:81:f9:1c:44:07:3c:c2:03:5d:71:fe:
         e5:37:34:5e:41:c2:41:be:0b:e8:1e:5b:68:e2:81:18:10:d8:
         df:f5:cc:44:10:bf:90:c7:42:4f:1b:86:26:91:8a:7c:7f:f7:
         19:85:74:16:f7:e6:92:18:01:4d:3d:d6:8f:0c:9e:34:4a:77:
         8c:16:47:4b:88:18:c4:93:8d:8f:aa:f4:06:bd:2e:f9:ec:29:
         04:09:96:ce:2f:65:3f:ad:57:f7:49:df:61:c1:67:61:0e:45:
         98:d2:4e:ae:45:91:2b:94:8a:c9:dd:c6:cc:77:8a:02:f0:47:
         26:66:a0:2a:ab:d5:6b:56:64:a5:0a:23:60:2f:18:3f:07:0a:
         50:b2:40:17:26:79:2d:e4:3d:6d:ee:fd:e6:99:63:0f:75:93:
         66:cd:93:19:8e:70:9c:96:e8:77:2c:6a:39:ab:84:0e:7b:90:
         49:9e:38:67:56:c5:1c:1d:18:a5:9d:e7:48:c1:ac:8e:b7:33:
         0c:0c:f5:52:e5:a1:5d:8a:66:15:fb:94:99:2c:3d:79:46:6a:
         4f:77:07:76:59:87:25:7e:5e:46:d3:4b:e6:6f:7c:9e:14:02:
         10:5e:e6:61
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUZ+wRTTQZgG80tUfOUtepD2fyzwowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDVFQkVFRkQ0NUEwRDkwQjVFNjBDRDhENEI0Mzg0MDk4
MzUzRTgyODAeFw0yNjA1MTkxNDU1MDFaFw0yNzA1MTgxNTAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjY1Q0M4NjJDRjg5MEFERjM4
MDEwODhBNTBCNkE2NkI3NURBN0Y0NkVFMjBBRkU0QzA1MkU3QUVDQkRBNTc3MkM2
M0Q4NDMxOThDQTIzMzU4NDVENEUyN0U0MTcwQkIxQTI2MjEzQTEwQjk2REMyREZD
QjhFMUI0QjQzRDczMTE2MzZCM0MyN0MwQTc2OUNBODRDREMxQjdDMUIzOTBGQzBD
MEI1MkE0QUVCMzg5QUM0MjQ1RTBGMkY3Q0EyRDY5NUNCMTYzMTc1NUQ0RTVGQ0Ux
NEFBRjkyMjM5NzREREExQjBCQkM2Mzg5NEY4MzExNjkzRTJFQzc3RTY2RDU4NTc5
QkFFOEU3ODNGODBFQzgyMjM5RUNDN0ZDQ0RCMDIyMkI2ODQxMkY1MkI5MkVBRjUx
QzBDODk3MTg0MkFEOUMyRUQ4QTE3NjJGQUI0RDU0ODY4NDJFQUNDOEVBMEZDQUFB
REU4RDgzNjkyOTI1RDkxNkYwOTdGMkMyNkM0QTg2QUE2MTM1QUJBNTI2ODE4MUJG
N0ExOTIwRTMzNUVENEY4RjgyOTA4N0FDRTc3M0NFOUI4NzNGMzRGQjJGREQwNDRC
OUEwRTczN0E1QzhDQTM3ODMxNjFBQjY5OEY5OEU4MTVEREFEQkYwQzlCN0FCM0Yx
MDNDNDlFREZBRjRCOEIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAtlzIYs+JCt84AQiKULama3Xaf0buIK/kwFLnrsvaV3LGPYQxmMoj
NYRdTifkFwuxomIToQuW3C38uOG0tD1zEWNrPCfAp2nKhM3Bt8GzkPwMC1KkrrOJ
rEJF4PL3yi1pXLFjF1XU5fzhSq+SI5dN2hsLvGOJT4MRaT4ux35m1YV5uujng/gO
yCI57Mf8zbAiK2hBL1K5Lq9RwMiXGEKtnC7YoXYvq01UhoQurMjqD8qq3o2DaSkl
2Rbwl/LCbEqGqmE1q6UmgYG/ehkg4zXtT4+CkIes53POm4c/NPsv3QRLmg5zelyM
o3gxYatpj5joFd2tvwyberPxA8Se369LiwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FKXzY3m2oMay+1IgpeBDfA/l1O2JMB8GA1UdIwQYMBaAFNXr7v1FoNkLXmDNjUtD
hAmDU+goMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hGWXFjckxWdjFKSld6
dlVGZ1I4cVp6cGlkTFFUdGtCa1haczZnZVFkdWllLzEvRDVFQkVFRkQ0NUEwRDkw
QjVFNjBDRDhENEI0Mzg0MDk4MzUzRTgyOC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9ENUVCRUVGRDQ1QTBEOTBCNUU2MENEOEQ0QjQzODQwOTgzNTNF
ODI4LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9IRllxY3JMVnYxSkpXenZVRmdS
OHFaenBpZExRVHRrQmtYWnM2Z2VRZHVpZS8xLzMyMzAzMDJlMzEzNjM5MmUzMTMx
MzIyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjMyMzAzODM1LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE
yKlwMA0GCSqGSIb3DQEBCwUAA4IBAQARpiu1NhzkYPqBIS4QMNdFwgIPwuaq44wL
gfkcRAc8wgNdcf7lNzReQcJBvgvoHlto4oEYENjf9cxEEL+Qx0JPG4YmkYp8f/cZ
hXQW9+aSGAFNPdaPDJ40SneMFkdLiBjEk42PqvQGvS757CkECZbOL2U/rVf3Sd9h
wWdhDkWY0k6uRZErlIrJ3cbMd4oC8EcmZqAqq9VrVmSlCiNgLxg/BwpQskAXJnkt
5D1t7v3mmWMPdZNmzZMZjnCcluh3LGo5q4QOe5BJnjhnVsUcHRilnedIwayOtzMM
DPVS5aFdimYV+5SZLD15RmpPdwd2WYclfl5G00vmb3yeFAIQXuZh
-----END CERTIFICATE-----
Generated at Sun May 24 13:35:22 2026 by rpki-client