Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234362e302f32342d3234203d3e20323730383135.roa
File:                     3230302e3232392e3234362e302f32342d3234203d3e20323730383135.roa (raw, json)
Hash identifier:          SiGg7gLHmdZrIFDct4U8CU+XQXKyBfr5HlNfigMjQ80=
Subject key identifier:   1C:98:87:F8:70:8E:B0:CD:3E:C7:92:4E:57:33:6E:88:29:27:38:DC
Certificate issuer:       /CN=C67F80DA8A90E92C895CC422DE5A7C9558EC64EC
Certificate serial:       6BA14DD731FC07E7A7427ABDD47316B7AD1DC655
Authority key identifier: C6:7F:80:DA:8A:90:E9:2C:89:5C:C4:22:DE:5A:7C:95:58:EC:64:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234362e302f32342d3234203d3e20323730383135.roa
Signing time:             Sat 04 Apr 2026 17:01:21 +0000
ROA not before:           Sat 04 Apr 2026 16:56:21 +0000
ROA not after:            Sat 03 Apr 2027 17:01:21 +0000
asID:                     270815
IP address blocks:        200.229.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.crl
                          rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 11:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:a1:4d:d7:31:fc:07:e7:a7:42:7a:bd:d4:73:16:b7:ad:1d:c6:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C67F80DA8A90E92C895CC422DE5A7C9558EC64EC
        Validity
            Not Before: Apr  4 16:56:21 2026 GMT
            Not After : Apr  3 17:01:21 2027 GMT
        Subject: CN=1C9887F8708EB0CD3EC7924E57336E88292738DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:62:f9:49:ad:fa:c8:30:58:ec:e4:68:0a:6f:
                    9e:2d:e4:18:b2:8b:c2:c6:f8:5f:c7:4e:14:1d:76:
                    a1:8a:f1:fd:bf:2d:c3:46:3e:9f:12:dc:61:13:36:
                    c3:99:6b:72:e2:d8:d1:4c:80:9c:3b:bb:48:e9:62:
                    26:97:e7:8f:17:bc:aa:76:eb:15:80:8f:aa:f0:66:
                    1d:c5:bd:1a:e1:24:af:52:2c:4b:33:2b:78:c5:e6:
                    6d:be:cb:b7:13:e8:78:93:61:3c:d0:9a:ae:82:30:
                    7c:8e:e0:65:8d:33:c1:cf:69:12:1e:7e:f7:2a:03:
                    e8:de:dd:eb:2f:b3:b8:4d:a8:0b:35:12:46:22:34:
                    1d:a1:cd:a1:a5:27:01:9f:05:97:7f:96:0c:37:27:
                    35:94:72:c9:56:e7:f8:a9:e2:d5:eb:1e:eb:08:41:
                    16:02:21:2d:c9:f3:8e:39:c9:44:9c:4a:e3:ca:79:
                    33:56:1f:a0:e8:a8:c6:41:a9:fb:6d:85:ac:98:2a:
                    76:30:e0:3e:37:0f:8a:3b:b3:fb:f6:e0:3f:ee:b8:
                    90:cd:ac:c5:d1:98:27:2c:78:00:88:a6:6f:f6:4a:
                    3d:1d:5f:ec:4b:5e:8d:c8:6d:aa:5f:2e:1f:3d:fc:
                    31:ed:fc:dc:cf:ed:5b:33:be:be:5a:ec:72:dc:3f:
                    61:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:98:87:F8:70:8E:B0:CD:3E:C7:92:4E:57:33:6E:88:29:27:38:DC
            X509v3 Authority Key Identifier:
                keyid:C6:7F:80:DA:8A:90:E9:2C:89:5C:C4:22:DE:5A:7C:95:58:EC:64:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234362e302f32342d3234203d3e20323730383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:62:26:b6:b5:78:24:ad:8e:aa:4e:ea:ce:3f:63:55:80:80:
         62:fb:36:9c:56:ab:96:90:82:dc:ae:78:2c:20:95:85:06:38:
         f6:4a:d7:2a:ee:38:bd:8a:67:99:e4:c2:02:ac:fe:d9:d7:f8:
         8f:85:1a:0c:3c:02:a2:33:ad:cd:38:b0:ae:cc:8f:a7:b5:28:
         0c:e6:2c:e8:ab:d3:16:8a:fa:71:5c:ff:06:7f:9f:c2:1f:3c:
         a2:5e:6e:af:09:63:fe:04:16:ae:e7:69:ae:ee:cd:bf:6a:cd:
         1b:8d:e4:bf:9c:2d:a6:bc:46:a3:62:2d:ab:08:50:3d:94:42:
         d9:76:06:b1:de:44:52:e6:21:6b:b6:df:22:37:49:b2:40:08:
         fa:85:b4:29:b3:67:f4:a0:a3:4a:f0:5f:65:7a:b6:c4:73:b1:
         d4:51:4c:52:15:e3:a5:1f:9f:c6:e1:3e:1c:e7:17:e5:ec:f5:
         6c:95:01:dc:07:34:03:ed:c8:0d:be:47:e6:91:a4:c8:1f:54:
         ca:02:49:e4:4e:62:49:ec:bf:8e:b4:64:d1:ed:e0:3b:e2:40:
         f0:2f:2a:ca:4b:2c:f8:6d:58:bf:f4:6c:93:b0:e9:41:37:ef:
         4d:62:a0:f8:93:21:65:85:e5:6b:f9:db:8b:cc:b8:d2:90:5f:
         93:48:bc:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 14:18:57 2026 by rpki-client