Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234372e302f32342d3234203d3e20323730383135.roa
File:                     3230302e3232392e3234372e302f32342d3234203d3e20323730383135.roa (raw, json)
Hash identifier:          Iy98slDIlY8C5DVS+zLTvs+zwUfZ6ly+uoIZ6uf/cp4=
Subject key identifier:   B5:F2:A9:05:AE:AE:11:73:3C:CE:DB:D4:51:38:01:B0:C7:64:27:EC
Certificate issuer:       /CN=C67F80DA8A90E92C895CC422DE5A7C9558EC64EC
Certificate serial:       6FAEB4B85C668337B0DC5D6A56CD11819291C1A2
Authority key identifier: C6:7F:80:DA:8A:90:E9:2C:89:5C:C4:22:DE:5A:7C:95:58:EC:64:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234372e302f32342d3234203d3e20323730383135.roa
Signing time:             Sat 04 Apr 2026 17:01:26 +0000
ROA not before:           Sat 04 Apr 2026 16:56:26 +0000
ROA not after:            Sat 03 Apr 2027 17:01:26 +0000
asID:                     270815
IP address blocks:        200.229.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.crl
                          rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 11:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:ae:b4:b8:5c:66:83:37:b0:dc:5d:6a:56:cd:11:81:92:91:c1:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C67F80DA8A90E92C895CC422DE5A7C9558EC64EC
        Validity
            Not Before: Apr  4 16:56:26 2026 GMT
            Not After : Apr  3 17:01:26 2027 GMT
        Subject: CN=B5F2A905AEAE11733CCEDBD4513801B0C76427EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:36:b9:ee:1f:f1:0b:b1:e7:e6:6c:45:8a:9a:
                    5d:e8:25:9b:4b:71:98:b5:9e:f2:b4:53:0d:95:b8:
                    66:a9:84:40:fc:ee:05:1f:22:bb:04:cf:03:cf:0a:
                    46:de:94:72:7a:28:de:81:3a:1b:5d:27:09:a1:56:
                    94:86:ce:3a:b8:74:9e:0f:73:bc:0a:79:fa:48:ad:
                    84:2b:44:7b:35:f2:1e:7d:92:c3:05:f9:36:7b:27:
                    d0:de:9f:6b:90:50:1a:a0:8e:a3:55:f9:dc:cf:da:
                    f2:b7:19:b9:eb:2a:dd:5d:82:71:31:31:04:6d:a3:
                    5f:ba:93:1e:37:d1:b4:9d:e7:df:01:75:8c:a0:92:
                    f9:b7:28:e4:b0:79:a1:71:43:0d:6a:d4:d7:06:ac:
                    db:31:14:f0:b8:83:3c:ac:97:c7:8e:b6:bb:a8:da:
                    6e:45:cd:31:c7:54:ac:da:a5:77:6b:a7:93:e5:c4:
                    6f:55:47:a1:f3:79:ca:a6:ae:25:21:d2:2b:3d:4a:
                    b6:2a:e0:0e:11:11:08:da:d1:56:9d:7b:dc:43:06:
                    d6:2a:7d:a4:2b:8e:0b:7d:d3:d9:a1:f4:b4:4d:f2:
                    29:4a:8d:ee:a6:9c:15:43:4d:cb:c2:94:1b:46:58:
                    76:da:fb:0b:58:56:96:bd:6a:fb:e0:4b:3e:41:d9:
                    a3:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:F2:A9:05:AE:AE:11:73:3C:CE:DB:D4:51:38:01:B0:C7:64:27:EC
            X509v3 Authority Key Identifier:
                keyid:C6:7F:80:DA:8A:90:E9:2C:89:5C:C4:22:DE:5A:7C:95:58:EC:64:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234372e302f32342d3234203d3e20323730383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:69:e2:47:1a:00:19:6e:db:6b:3e:8a:df:1d:f8:d7:35:4e:
         7c:9d:b9:a8:a9:e2:5a:28:9e:a1:d4:c5:12:db:f7:5e:a3:e4:
         88:11:da:b1:4b:1a:58:24:3e:cf:80:f1:1c:89:53:59:19:df:
         f1:35:e6:7a:78:bb:13:e9:69:07:4a:a8:61:b7:b9:6b:ff:6b:
         4a:41:37:6e:f9:fb:90:ed:62:f6:b4:cb:ce:17:d4:4c:d1:2f:
         40:f0:1a:7b:a4:d7:5e:4e:8f:d3:c4:50:30:d2:fa:08:83:65:
         8e:c1:73:1b:71:d4:04:33:a3:4b:34:6a:11:29:e3:ba:59:9a:
         83:f7:74:bd:0e:50:2a:8a:9d:d5:c8:55:66:58:a5:10:8b:a6:
         35:02:3a:71:7e:f6:d1:91:3c:75:a1:26:2d:3f:be:2e:f5:ee:
         00:a5:d6:a5:40:4e:88:41:68:88:09:5a:f1:87:21:3f:74:28:
         fe:15:8a:6f:08:90:66:13:27:a4:52:29:54:56:3c:f5:c8:ae:
         48:ac:38:44:74:4e:a4:3d:3f:4e:8c:a3:86:36:4e:8d:c0:df:
         88:5e:3d:13:ba:bb:48:eb:c8:79:e6:e0:38:e2:ea:69:1e:a9:
         dd:77:63:1e:ba:7a:82:70:72:00:32:db:a1:e2:a3:2e:1d:a1:
         2b:95:34:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 14:18:59 2026 by rpki-client