Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234342e302f32342d3234203d3e20323730383135.roa
File:                     3230302e3232392e3234342e302f32342d3234203d3e20323730383135.roa (raw, json)
Hash identifier:          uQY8lodYodufy1ZhTnd15XUE+XGCDyQdRcKZPteT9vE=
Subject key identifier:   F7:84:7C:D0:6F:2A:0E:9E:3E:7C:FD:D5:E6:E3:D6:12:68:19:A2:DF
Certificate issuer:       /CN=C67F80DA8A90E92C895CC422DE5A7C9558EC64EC
Certificate serial:       1FFCAC199FAF4378E3D9F08379558D8597424B88
Authority key identifier: C6:7F:80:DA:8A:90:E9:2C:89:5C:C4:22:DE:5A:7C:95:58:EC:64:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234342e302f32342d3234203d3e20323730383135.roa
Signing time:             Sat 04 Apr 2026 17:01:27 +0000
ROA not before:           Sat 04 Apr 2026 16:56:27 +0000
ROA not after:            Sat 03 Apr 2027 17:01:27 +0000
asID:                     270815
IP address blocks:        200.229.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.crl
                          rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 11:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:fc:ac:19:9f:af:43:78:e3:d9:f0:83:79:55:8d:85:97:42:4b:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C67F80DA8A90E92C895CC422DE5A7C9558EC64EC
        Validity
            Not Before: Apr  4 16:56:27 2026 GMT
            Not After : Apr  3 17:01:27 2027 GMT
        Subject: CN=F7847CD06F2A0E9E3E7CFDD5E6E3D6126819A2DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:01:bb:53:bd:30:78:03:f8:49:fc:b2:0d:de:
                    60:48:b6:87:8b:d5:4b:2e:3b:af:12:1e:6b:0d:c3:
                    00:a2:79:7b:6f:61:ec:67:74:8c:a7:4f:83:f0:43:
                    c2:bd:48:bc:3f:a8:39:44:cb:71:f8:fb:cc:18:b7:
                    e3:ba:69:fe:cf:4f:d1:b0:1f:7c:ba:a0:3a:75:ae:
                    b6:9f:44:58:0b:0c:2e:1d:b6:93:2f:b2:7e:c8:84:
                    16:94:86:16:79:23:33:7c:99:26:86:d3:6f:9b:b6:
                    cb:fa:e4:d0:e6:2b:92:28:e6:bf:2b:f8:b0:2b:60:
                    00:b2:51:17:86:d2:ad:d0:27:ce:e9:4e:71:47:a6:
                    21:50:11:9d:4a:6d:f6:a4:4e:ae:af:da:47:32:8e:
                    ee:32:f7:72:37:42:89:20:3f:47:4a:9d:64:8e:0a:
                    05:c1:98:3c:5b:e0:8a:05:d0:79:57:bc:02:88:35:
                    a3:4c:c9:15:3d:d8:03:62:e0:d1:49:8e:f6:93:cb:
                    a7:63:a2:0c:9d:47:ad:4d:91:bf:ad:e4:80:95:e2:
                    14:e3:63:7c:7e:e6:8f:96:01:50:d7:58:7f:b5:e0:
                    a9:31:d9:ba:28:f5:d3:f7:91:a0:de:92:f8:1f:ba:
                    3c:8b:34:1c:55:2f:7e:ef:d1:c6:75:33:10:43:9b:
                    c5:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:84:7C:D0:6F:2A:0E:9E:3E:7C:FD:D5:E6:E3:D6:12:68:19:A2:DF
            X509v3 Authority Key Identifier:
                keyid:C6:7F:80:DA:8A:90:E9:2C:89:5C:C4:22:DE:5A:7C:95:58:EC:64:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234342e302f32342d3234203d3e20323730383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:97:33:2a:39:9e:42:31:95:b3:ec:38:72:50:e9:f3:a1:c4:
         cc:ac:f2:db:4e:5d:74:2c:67:fc:91:18:54:73:6b:b5:f4:33:
         02:78:97:f9:c9:99:97:f7:de:c5:e4:f7:9f:a2:9e:13:40:6f:
         2f:ec:67:06:4b:1f:2a:bb:20:04:e2:9b:46:5e:2f:0e:9d:af:
         dd:b2:0f:73:46:89:44:69:60:06:46:bc:e9:e5:da:09:6d:20:
         fe:ff:d4:14:a3:55:fd:ab:eb:eb:d5:6c:7e:84:7b:a7:9f:ca:
         09:ca:e9:03:5c:dc:c9:bc:e3:06:70:69:70:86:c7:60:d6:7d:
         72:8f:aa:1a:f7:75:74:bc:68:32:73:b6:dd:43:c3:b2:3d:e4:
         20:88:a9:d5:7c:98:e4:cf:56:aa:54:4f:bb:97:69:a6:42:82:
         73:67:00:0b:21:7a:df:20:fa:c6:66:69:7e:9e:24:91:b3:fe:
         1d:12:ef:60:c2:eb:15:9e:6c:2b:01:75:8e:85:82:13:ab:f2:
         9f:66:3f:e4:92:82:60:82:94:a9:5a:c6:fb:bc:0d:fb:c9:50:
         60:14:02:f4:04:10:23:4b:ca:65:4b:0e:de:a1:4c:f1:a8:f7:
         f6:ac:06:8e:df:e3:ec:4b:52:e4:8c:4d:4b:21:8a:6e:bd:8f:
         69:9a:89:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 14:18:57 2026 by rpki-client