Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230312e32332e3232342e302f31392d3234203d3e203231353731.roa
File:                     3230312e32332e3232342e302f31392d3234203d3e203231353731.roa (raw, json)
Hash identifier:          8b7bJS8ZKRTDMuntGv4ZPZFXf06pzyG3GkKBBH8djdA=
Subject key identifier:   FE:C8:BA:C4:17:D3:BB:0C:DD:55:07:A9:65:69:B1:B0:97:AE:0F:05
Certificate issuer:       /CN=652EEAAF6B93DC9257EEB9C8CB88D39720882250
Certificate serial:       303C14BFA5D0CA0EC94959BCB255E0169EADCB18
Authority key identifier: 65:2E:EA:AF:6B:93:DC:92:57:EE:B9:C8:CB:88:D3:97:20:88:22:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/652EEAAF6B93DC9257EEB9C8CB88D39720882250.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230312e32332e3232342e302f31392d3234203d3e203231353731.roa
Signing time:             Fri 15 May 2026 14:15:50 +0000
ROA not before:           Fri 15 May 2026 14:10:50 +0000
ROA not after:            Fri 14 May 2027 14:15:50 +0000
asID:                     21571
IP address blocks:        201.23.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/652EEAAF6B93DC9257EEB9C8CB88D39720882250.crl
                          rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/652EEAAF6B93DC9257EEB9C8CB88D39720882250.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/652EEAAF6B93DC9257EEB9C8CB88D39720882250.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 04:48:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:3c:14:bf:a5:d0:ca:0e:c9:49:59:bc:b2:55:e0:16:9e:ad:cb:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=652EEAAF6B93DC9257EEB9C8CB88D39720882250
        Validity
            Not Before: May 15 14:10:50 2026 GMT
            Not After : May 14 14:15:50 2027 GMT
        Subject: CN=FEC8BAC417D3BB0CDD5507A96569B1B097AE0F05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:03:4d:40:33:89:1a:e1:43:75:31:06:8a:d0:
                    ef:f4:e6:0f:62:e9:81:0a:5e:6a:23:d9:f6:09:92:
                    18:cd:a7:dc:e5:3e:5d:bf:ba:13:a6:11:62:f9:13:
                    ee:df:ac:10:60:2d:63:2c:5b:dc:b5:f2:b5:c6:11:
                    4e:4d:3e:05:e2:6a:a5:42:1b:4c:26:69:2e:67:78:
                    44:16:c8:a0:bc:b6:ed:a0:10:d0:e9:cf:68:1a:1f:
                    07:e0:9f:1f:e3:cc:9a:c9:6f:d3:58:67:a0:0e:6a:
                    64:12:bb:c7:80:94:a5:82:09:a0:f9:f1:c0:af:91:
                    4f:16:fb:00:e8:17:95:fe:45:7c:00:d8:38:ad:9b:
                    ee:4f:35:5e:7b:ec:d3:e6:26:a7:b0:58:6c:9b:84:
                    a4:f8:da:36:7c:9c:46:0c:5c:b6:7a:b6:75:22:6e:
                    63:eb:27:5f:30:b1:57:61:45:0d:fb:ba:4c:a3:90:
                    6d:5f:e5:6e:ee:68:bc:13:3a:d6:2e:0b:45:4f:81:
                    39:af:b3:08:82:f1:5d:a4:26:1d:3e:2f:96:07:1f:
                    ab:87:0b:f4:39:c9:eb:6d:a8:31:b6:1f:d3:a5:84:
                    10:ef:81:fc:db:81:16:ea:a0:a2:d4:17:b4:fd:de:
                    23:6c:eb:38:9d:2c:a9:4d:9a:b2:4a:8a:38:39:20:
                    da:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:C8:BA:C4:17:D3:BB:0C:DD:55:07:A9:65:69:B1:B0:97:AE:0F:05
            X509v3 Authority Key Identifier:
                keyid:65:2E:EA:AF:6B:93:DC:92:57:EE:B9:C8:CB:88:D3:97:20:88:22:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/652EEAAF6B93DC9257EEB9C8CB88D39720882250.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/652EEAAF6B93DC9257EEB9C8CB88D39720882250.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmjTdKryZDkpVChcGwRodJJyjiosfjQXKcr26CwHqSjE/0/3230312e32332e3232342e302f31392d3234203d3e203231353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.23.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         09:85:2d:25:9a:a6:8a:6d:3c:f5:10:52:0a:ae:30:37:d3:7f:
         3c:9b:3e:98:e2:62:ff:d3:ee:c8:1e:da:c6:02:44:dc:71:0f:
         68:90:91:5f:5c:24:d0:91:b8:cd:6e:46:f6:8a:b3:6f:5f:76:
         8b:84:2f:2b:34:3b:2d:68:c9:1b:f0:e2:e4:1a:75:6e:1f:c9:
         09:15:92:00:62:e8:5d:02:f7:11:ad:7d:33:64:d7:ed:df:e1:
         15:99:2c:ef:6c:c5:1f:7a:d4:52:27:1a:1b:01:6c:22:41:0b:
         43:a3:5c:a9:ab:40:85:a6:76:7f:4e:56:0c:2b:55:9f:c2:50:
         df:9b:74:98:38:c8:0c:bf:e7:0d:62:0c:60:bb:43:a7:7b:7d:
         86:cd:3c:cf:f4:10:4f:b9:54:cb:e5:13:ba:ea:c1:2c:99:12:
         3d:48:3f:e5:80:61:b3:73:eb:1a:ad:22:8a:86:5e:48:89:57:
         cd:b6:fc:37:72:89:65:71:b9:ab:ca:0e:0d:80:47:cb:a0:f5:
         41:73:bd:64:6c:54:b8:f5:e1:e3:ec:1e:07:c9:90:05:57:67:
         53:2b:3b:c4:9e:22:bd:d6:d1:a0:07:67:b8:a6:29:7f:55:a4:
         4e:f1:54:58:23:02:78:7c:da:d8:8e:39:9b:dc:e5:3e:cf:c5:
         79:70:52:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 14:44:34 2026 by rpki-client