Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HyY9XAg9uTww8e6VfriAbwX7AVNzKXjN7DVAGfks6LYF/0/3230302e32342e3130322e302f32342d3234203d3e20323731363038.roa
File:                     3230302e32342e3130322e302f32342d3234203d3e20323731363038.roa (raw, json)
Hash identifier:          sYbTytN1RMgVliws3uafMlT9aTID60y9Nwfm8Adfb8Y=
Subject key identifier:   FE:46:1F:9B:FB:E7:A3:30:A2:A1:2B:A4:16:AD:F1:B0:76:D5:D3:1C
Certificate issuer:       /CN=272D4C56DE64C83FE291166829B6E1D3581F58FF
Certificate serial:       0FC7CCA7EF486F23C0BDD77AC9D070B46A9BDBC8
Authority key identifier: 27:2D:4C:56:DE:64:C8:3F:E2:91:16:68:29:B6:E1:D3:58:1F:58:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/272D4C56DE64C83FE291166829B6E1D3581F58FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HyY9XAg9uTww8e6VfriAbwX7AVNzKXjN7DVAGfks6LYF/0/3230302e32342e3130322e302f32342d3234203d3e20323731363038.roa
Signing time:             Tue 30 Jun 2026 00:06:28 +0000
ROA not before:           Tue 30 Jun 2026 00:01:28 +0000
ROA not after:            Tue 29 Jun 2027 00:06:28 +0000
asID:                     271608
IP address blocks:        200.24.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HyY9XAg9uTww8e6VfriAbwX7AVNzKXjN7DVAGfks6LYF/0/272D4C56DE64C83FE291166829B6E1D3581F58FF.crl
                          rsync://rpki-repo.registro.br/repo/HyY9XAg9uTww8e6VfriAbwX7AVNzKXjN7DVAGfks6LYF/0/272D4C56DE64C83FE291166829B6E1D3581F58FF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/272D4C56DE64C83FE291166829B6E1D3581F58FF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 07:07:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:c7:cc:a7:ef:48:6f:23:c0:bd:d7:7a:c9:d0:70:b4:6a:9b:db:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=272D4C56DE64C83FE291166829B6E1D3581F58FF
        Validity
            Not Before: Jun 30 00:01:28 2026 GMT
            Not After : Jun 29 00:06:28 2027 GMT
        Subject: CN=FE461F9BFBE7A330A2A12BA416ADF1B076D5D31C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:48:82:5a:f3:d0:63:58:4f:b9:95:10:a1:37:
                    25:ef:54:f6:c0:24:56:6f:02:2f:d9:70:65:57:70:
                    21:79:16:ec:1c:84:6d:0c:e3:cf:11:d4:3a:6b:45:
                    da:a8:1e:66:6b:be:67:91:10:7c:73:4a:18:ae:b1:
                    df:c9:b6:f3:2c:78:87:72:f8:73:f6:a5:7f:bf:6b:
                    19:52:b5:ea:51:89:a7:29:bd:97:5e:22:95:55:2e:
                    87:62:39:18:7d:bf:96:72:d2:b3:e2:29:fe:e4:8a:
                    e8:05:b0:c4:d1:fe:e3:4a:04:09:02:8c:67:5f:65:
                    ec:e9:74:85:82:d9:c8:53:cc:0e:76:36:49:d3:0a:
                    c9:d6:90:6b:3b:16:89:1d:df:f1:38:e0:e1:84:6c:
                    c6:a0:a6:4b:2b:52:31:40:ae:31:3a:c3:25:eb:01:
                    58:48:85:cf:86:35:c1:4e:ba:3e:94:c2:fa:13:ee:
                    45:fb:24:20:12:3d:5d:fa:33:cd:0c:f7:ae:c1:e5:
                    62:55:35:21:30:1a:7f:2e:dd:20:82:b7:f9:11:af:
                    22:01:c2:76:c1:95:0a:ad:7d:78:6f:31:f4:7b:bf:
                    52:d9:13:fc:6e:c3:48:0e:c3:82:d2:22:9a:bb:3d:
                    2b:53:a5:b8:93:d7:0c:10:13:f8:bf:12:50:59:0a:
                    0d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:46:1F:9B:FB:E7:A3:30:A2:A1:2B:A4:16:AD:F1:B0:76:D5:D3:1C
            X509v3 Authority Key Identifier:
                keyid:27:2D:4C:56:DE:64:C8:3F:E2:91:16:68:29:B6:E1:D3:58:1F:58:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HyY9XAg9uTww8e6VfriAbwX7AVNzKXjN7DVAGfks6LYF/0/272D4C56DE64C83FE291166829B6E1D3581F58FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/272D4C56DE64C83FE291166829B6E1D3581F58FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HyY9XAg9uTww8e6VfriAbwX7AVNzKXjN7DVAGfks6LYF/0/3230302e32342e3130322e302f32342d3234203d3e20323731363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.24.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:a8:90:b5:9c:bd:3a:4c:0e:98:c8:ef:2d:40:a6:5d:15:0f:
         4a:3e:0f:01:94:08:87:f3:06:d6:7f:11:46:16:23:da:7c:fd:
         44:9d:3c:42:a2:13:d8:f7:96:81:cb:1c:07:9d:6f:3d:b2:c2:
         98:07:c4:50:28:bf:3e:ad:0f:d0:34:49:1a:b3:21:93:e9:77:
         5c:bf:e7:86:46:6e:61:7b:b5:f9:2f:dd:a6:16:e0:de:67:f0:
         97:f0:86:02:a4:00:a0:5c:81:d2:b2:87:45:ce:c5:47:77:ef:
         21:a9:28:49:0f:1b:77:2d:c8:c4:d4:22:69:81:76:b9:cb:76:
         ba:7c:6c:81:c1:23:c4:a0:7c:f1:1e:97:1c:1a:a5:7c:48:7e:
         0d:85:25:27:65:51:ae:99:af:57:5f:89:98:d6:98:69:0d:3f:
         2c:fe:6e:57:19:96:29:ee:00:87:d2:55:b5:78:da:f6:8f:3e:
         27:15:7a:1e:22:3d:46:6b:2b:fd:4a:20:9a:b8:6b:56:ca:b5:
         23:b7:6e:29:ee:fa:e4:5b:ad:61:b6:f4:ec:97:c9:ff:29:b3:
         74:8c:75:4e:82:a1:40:78:a1:53:4c:54:19:9e:c3:4e:95:4b:
         03:e5:52:13:53:a3:93:bb:12:62:94:22:6a:e3:82:44:b0:3e:
         54:bd:00:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:06:15 2026 by rpki-client