Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HyY9XAg9uTww8e6VfriAbwX7AVNzKXjN7DVAGfks6LYF/0/3230302e32342e3130332e302f32342d3234203d3e20323731363038.roa
File:                     3230302e32342e3130332e302f32342d3234203d3e20323731363038.roa (raw, json)
Hash identifier:          i4TqatkfypQsgMPEOovNdrlEDR4jYP3udwh6tHjNyXg=
Subject key identifier:   8E:24:44:9B:BF:F2:D0:58:E6:7B:D5:73:FB:1B:44:5A:D4:D0:9C:FC
Certificate issuer:       /CN=272D4C56DE64C83FE291166829B6E1D3581F58FF
Certificate serial:       7988AD398C6E7DD40B48AF26B6D0F7EE7BF4412E
Authority key identifier: 27:2D:4C:56:DE:64:C8:3F:E2:91:16:68:29:B6:E1:D3:58:1F:58:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/272D4C56DE64C83FE291166829B6E1D3581F58FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HyY9XAg9uTww8e6VfriAbwX7AVNzKXjN7DVAGfks6LYF/0/3230302e32342e3130332e302f32342d3234203d3e20323731363038.roa
Signing time:             Tue 30 Jun 2026 00:06:27 +0000
ROA not before:           Tue 30 Jun 2026 00:01:27 +0000
ROA not after:            Tue 29 Jun 2027 00:06:27 +0000
asID:                     271608
IP address blocks:        200.24.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HyY9XAg9uTww8e6VfriAbwX7AVNzKXjN7DVAGfks6LYF/0/272D4C56DE64C83FE291166829B6E1D3581F58FF.crl
                          rsync://rpki-repo.registro.br/repo/HyY9XAg9uTww8e6VfriAbwX7AVNzKXjN7DVAGfks6LYF/0/272D4C56DE64C83FE291166829B6E1D3581F58FF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/272D4C56DE64C83FE291166829B6E1D3581F58FF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 07:07:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:88:ad:39:8c:6e:7d:d4:0b:48:af:26:b6:d0:f7:ee:7b:f4:41:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=272D4C56DE64C83FE291166829B6E1D3581F58FF
        Validity
            Not Before: Jun 30 00:01:27 2026 GMT
            Not After : Jun 29 00:06:27 2027 GMT
        Subject: CN=8E24449BBFF2D058E67BD573FB1B445AD4D09CFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d1:4d:e6:5e:c7:9b:ca:2c:34:b1:f1:3f:f3:
                    3b:b1:99:b3:6d:78:af:1e:f8:f6:cc:3c:10:b1:b9:
                    6a:b5:a2:6c:9e:bb:a8:f4:d9:23:02:2c:09:e5:16:
                    14:45:27:0a:4a:87:2f:a3:d3:60:54:5d:9e:5d:10:
                    41:5d:5d:77:6b:8f:b2:25:71:b7:08:3f:46:19:13:
                    c6:42:ae:2e:c3:7a:3b:b9:e6:c7:a9:60:eb:f4:dd:
                    15:f1:f6:a7:5a:b1:59:22:d6:42:04:88:96:48:8e:
                    b9:73:ad:68:3a:a7:29:28:fa:55:2d:17:c2:48:20:
                    7d:38:b3:82:f7:d4:f0:10:12:f0:e5:a8:dc:d2:f2:
                    a9:b8:25:78:48:40:5e:63:f5:29:98:61:20:41:6e:
                    6d:18:8c:64:c9:bc:34:aa:86:d8:ad:ee:f3:41:cd:
                    17:5d:4f:06:55:95:52:94:1b:d9:18:93:05:dd:ed:
                    42:2b:e8:b9:5c:ba:61:df:1d:88:24:c3:4c:f7:8f:
                    f0:e4:88:fc:25:9f:27:d1:82:29:e8:3f:9e:e2:df:
                    f2:1e:26:65:3e:23:be:20:e6:07:5e:28:26:0b:95:
                    82:64:25:b8:47:d3:ed:e6:1b:e4:55:f8:8d:7d:33:
                    c2:83:22:97:1b:47:9f:19:97:b7:8b:86:0e:33:37:
                    d5:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:24:44:9B:BF:F2:D0:58:E6:7B:D5:73:FB:1B:44:5A:D4:D0:9C:FC
            X509v3 Authority Key Identifier:
                keyid:27:2D:4C:56:DE:64:C8:3F:E2:91:16:68:29:B6:E1:D3:58:1F:58:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HyY9XAg9uTww8e6VfriAbwX7AVNzKXjN7DVAGfks6LYF/0/272D4C56DE64C83FE291166829B6E1D3581F58FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/272D4C56DE64C83FE291166829B6E1D3581F58FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HyY9XAg9uTww8e6VfriAbwX7AVNzKXjN7DVAGfks6LYF/0/3230302e32342e3130332e302f32342d3234203d3e20323731363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.24.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:14:94:ff:4e:c1:15:0b:5b:7f:dc:08:cc:15:33:86:38:7f:
         ba:cd:bd:49:c6:73:cb:0a:ba:82:d9:e8:fd:f6:2a:e7:65:b8:
         cf:f3:85:0d:58:64:35:32:18:85:25:90:87:0c:6d:7d:c1:3d:
         9c:41:46:db:ae:b5:02:12:ba:b9:1d:09:41:6a:26:34:0f:b8:
         75:6f:74:7d:7f:e4:ac:6b:02:72:3d:12:f4:f3:83:3d:13:65:
         df:94:cc:55:b6:dd:f8:e2:df:01:a2:ad:7a:a4:7b:27:bd:18:
         ae:18:68:6c:95:30:e6:1b:99:d4:bf:da:ce:0f:57:ad:45:97:
         f7:37:80:10:90:0d:35:83:76:56:37:3e:79:22:2d:31:7f:b7:
         3d:5c:78:a5:cd:4a:71:7b:f7:9a:0c:50:05:8f:23:b6:f4:a9:
         be:a4:11:fa:54:47:fe:ee:ac:0f:a6:5a:ca:8c:3b:09:df:8b:
         a1:41:64:da:7a:28:9b:96:61:68:67:12:f6:44:f2:48:5b:ef:
         22:83:7b:c9:b4:b8:ed:bd:f5:bf:11:37:e2:8a:c8:5e:f6:43:
         4a:06:94:28:bf:f5:70:18:f6:c5:3c:b3:ed:68:18:8e:a2:af:
         18:66:dc:bd:65:ef:ff:80:17:f0:ea:16:22:2a:e5:39:34:bd:
         c2:ba:00:af
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUeYitOYxufdQLSK8mttD37nv0QS4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjcyRDRDNTZERTY0QzgzRkUyOTExNjY4MjlCNkUxRDM1
ODFGNThGRjAeFw0yNjA2MzAwMDAxMjdaFw0yNzA2MjkwMDA2MjdaMDMxMTAvBgNV
BAMTKDhFMjQ0NDlCQkZGMkQwNThFNjdCRDU3M0ZCMUI0NDVBRDREMDlDRkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCS0U3mXsebyiw0sfE/8zuxmbNt
eK8e+PbMPBCxuWq1omyeu6j02SMCLAnlFhRFJwpKhy+j02BUXZ5dEEFdXXdrj7Il
cbcIP0YZE8ZCri7Deju55sepYOv03RXx9qdasVki1kIEiJZIjrlzrWg6pyko+lUt
F8JIIH04s4L31PAQEvDlqNzS8qm4JXhIQF5j9SmYYSBBbm0YjGTJvDSqhtit7vNB
zRddTwZVlVKUG9kYkwXd7UIr6LlcumHfHYgkw0z3j/DkiPwlnyfRginoP57i3/Ie
JmU+I74g5gdeKCYLlYJkJbhH0+3mG+RV+I19M8KDIpcbR58Zl7eLhg4zN9UTAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUjiREm7/y0Fjme9Vz+xtEWtTQnPwwHwYDVR0j
BBgwFoAUJy1MVt5kyD/ikRZoKbbh01gfWP8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHlZOVhBZzl1VHd3OGU2VmZyaUFid1g3QVZOektYak43RFZBR2ZrczZM
WUYvMC8yNzJENEM1NkRFNjRDODNGRTI5MTE2NjgyOUI2RTFEMzU4MUY1OEZGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI3MkQ0QzU2REU2NEM4M0ZF
MjkxMTY2ODI5QjZFMUQzNTgxRjU4RkYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h5WTlYQWc5dVR3dzhlNlZmcmlBYndYN0FWTnpLWGpON0RWQUdma3M2TFlGLzAv
MzIzMDMwMmUzMjM0MmUzMTMwMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzEzNjMwMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADIGGcwDQYJKoZIhvcNAQELBQADggEBAKcUlP9O
wRULW3/cCMwVM4Y4f7rNvUnGc8sKuoLZ6P32KudluM/zhQ1YZDUyGIUlkIcMbX3B
PZxBRtuutQISurkdCUFqJjQPuHVvdH1/5KxrAnI9EvTzgz0TZd+UzFW23fji3wGi
rXqkeye9GK4YaGyVMOYbmdS/2s4PV61Fl/c3gBCQDTWDdlY3PnkiLTF/tz1ceKXN
SnF795oMUAWPI7b0qb6kEfpUR/7urA+mWsqMOwnfi6FBZNp6KJuWYWhnEvZE8khb
7yKDe8m0uO299b8RN+KKyF72Q0oGlCi/9XAY9sU8s+1oGI6irxhm3L1l7/+AF/Dq
FiIq5Tk0vcK6AK8=
-----END CERTIFICATE-----
Generated at Wed Jul 8 17:08:03 2026 by rpki-client