Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234362e302f32332d3233203d3e20323730383135.roa
File:                     3230302e3232392e3234362e302f32332d3233203d3e20323730383135.roa (raw, json)
Hash identifier:          j5DhrK+31ugWF1mQl2QZoQDsQkaD73GfWFdPabgDAfI=
Subject key identifier:   08:86:74:5D:0E:54:49:9B:22:59:57:CC:9D:AF:0D:63:24:22:A7:44
Certificate issuer:       /CN=C67F80DA8A90E92C895CC422DE5A7C9558EC64EC
Certificate serial:       7CC8FCF98F83A0A4B8723CFA879C4BF7D103E290
Authority key identifier: C6:7F:80:DA:8A:90:E9:2C:89:5C:C4:22:DE:5A:7C:95:58:EC:64:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234362e302f32332d3233203d3e20323730383135.roa
Signing time:             Sat 04 Apr 2026 17:01:24 +0000
ROA not before:           Sat 04 Apr 2026 16:56:24 +0000
ROA not after:            Sat 03 Apr 2027 17:01:24 +0000
asID:                     270815
IP address blocks:        200.229.246.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.crl
                          rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 11:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:c8:fc:f9:8f:83:a0:a4:b8:72:3c:fa:87:9c:4b:f7:d1:03:e2:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C67F80DA8A90E92C895CC422DE5A7C9558EC64EC
        Validity
            Not Before: Apr  4 16:56:24 2026 GMT
            Not After : Apr  3 17:01:24 2027 GMT
        Subject: CN=0886745D0E54499B225957CC9DAF0D632422A744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:80:b1:22:e9:af:b8:8a:b0:64:2d:e3:0c:b6:
                    1f:35:1c:54:ee:e2:9c:f8:1f:df:cc:46:c6:e6:e9:
                    66:09:d8:95:a4:d6:6a:08:a1:64:08:2e:c4:de:87:
                    81:17:e7:85:4e:1f:bf:0d:bc:81:3f:8c:7d:99:80:
                    05:de:99:e6:2c:66:63:bd:58:43:84:92:6d:a6:20:
                    43:79:ae:14:90:30:da:7a:c7:cc:3d:2a:1b:98:33:
                    83:78:44:9a:cc:2d:66:01:fb:b0:ce:92:1c:bb:67:
                    a0:49:91:f1:0f:b6:90:d6:c4:ac:4f:76:7b:e8:cc:
                    9d:bf:1a:86:30:04:6e:c6:af:8c:eb:5a:85:e8:fe:
                    0d:f8:02:70:dc:2f:96:3e:c6:94:fd:d1:b9:0c:c7:
                    d0:86:1f:63:16:e5:e8:16:43:d5:94:e6:56:81:0e:
                    f9:90:62:f9:aa:f2:b3:01:22:1b:cc:59:f2:fa:ea:
                    e8:25:78:f9:d2:a9:85:29:1e:e8:32:e0:ce:6e:d2:
                    97:39:70:9c:f5:14:c6:a0:1e:fb:53:0b:e7:e3:94:
                    bd:7b:66:8c:63:54:55:9d:8f:50:ce:82:a5:31:ec:
                    4d:aa:bc:4e:97:13:84:4a:c9:f7:ec:97:0e:b9:d6:
                    2d:b7:44:a2:ce:f9:74:fc:33:f8:5d:86:99:0f:c0:
                    80:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:86:74:5D:0E:54:49:9B:22:59:57:CC:9D:AF:0D:63:24:22:A7:44
            X509v3 Authority Key Identifier:
                keyid:C6:7F:80:DA:8A:90:E9:2C:89:5C:C4:22:DE:5A:7C:95:58:EC:64:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234362e302f32332d3233203d3e20323730383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d9:78:69:11:24:0b:08:20:a0:4a:ee:a1:76:6f:23:fa:d6:67:
         ee:0e:b1:5e:22:97:7c:ea:b1:be:bf:54:db:72:e6:2a:03:4d:
         60:bd:29:6c:67:e8:a8:ca:19:60:2a:95:6d:72:fd:8d:1c:1c:
         bf:00:25:4e:87:33:8d:5b:10:99:92:14:03:3d:78:05:0a:7b:
         63:07:4d:47:7e:3c:db:2a:a8:13:85:c2:55:79:e6:18:88:ed:
         c7:77:f5:62:00:f2:73:99:1d:ad:34:8a:c3:2c:87:06:d3:b4:
         e6:c1:e6:94:a3:89:03:65:9f:b7:1a:31:51:31:4d:93:15:19:
         d6:41:7b:71:cb:e7:c5:b8:da:a9:d3:d7:cf:e1:30:92:9b:85:
         23:58:b4:3e:77:e5:4e:f5:da:12:29:8c:94:4b:2f:7b:15:7c:
         d9:e5:da:87:1b:43:09:76:a7:e8:b9:0a:06:c5:5a:b2:c2:d0:
         db:f2:3f:e6:f6:ab:f9:94:f4:aa:57:a4:e6:79:c8:fe:8e:b9:
         17:f5:29:31:67:55:cd:ce:41:ba:59:1a:3b:93:1e:e5:80:80:
         56:45:4d:5f:cb:2d:2c:39:45:51:d4:84:ef:93:0a:14:c3:80:
         d7:f6:ba:c4:31:3c:fb:83:89:f1:11:1d:10:d3:ee:33:2e:8c:
         79:85:a1:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 14:19:06 2026 by rpki-client