Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/3230302e3231352e3136302e302f32322d3234203d3e20323633363536.roa
File:                     3230302e3231352e3136302e302f32322d3234203d3e20323633363536.roa (raw, json)
Hash identifier:          u6jwJ4/mhO4NSjx8VeEQpZNecrd0ueZyBTaDye/OPbQ=
Subject key identifier:   F6:20:20:33:48:B2:58:ED:D3:44:BB:2B:A8:95:F6:10:DB:49:A7:74
Certificate issuer:       /CN=9314D53106A385E776432E46329AA22CC6980F59
Certificate serial:       19E03030D73B27CC5057C218D005E674DB5AA681
Authority key identifier: 93:14:D5:31:06:A3:85:E7:76:43:2E:46:32:9A:A2:2C:C6:98:0F:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9314D53106A385E776432E46329AA22CC6980F59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/3230302e3231352e3136302e302f32322d3234203d3e20323633363536.roa
Signing time:             Wed 20 May 2026 17:48:51 +0000
ROA not before:           Wed 20 May 2026 17:43:51 +0000
ROA not after:            Wed 19 May 2027 17:48:51 +0000
asID:                     263656
IP address blocks:        200.215.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/9314D53106A385E776432E46329AA22CC6980F59.crl
                          rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/9314D53106A385E776432E46329AA22CC6980F59.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9314D53106A385E776432E46329AA22CC6980F59.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 14:42:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:e0:30:30:d7:3b:27:cc:50:57:c2:18:d0:05:e6:74:db:5a:a6:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9314D53106A385E776432E46329AA22CC6980F59
        Validity
            Not Before: May 20 17:43:51 2026 GMT
            Not After : May 19 17:48:51 2027 GMT
        Subject: CN=F620203348B258EDD344BB2BA895F610DB49A774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fe:fd:4c:a2:1a:93:cc:a9:67:8a:b7:0c:82:
                    db:fc:f2:8d:cc:9d:f9:0f:05:cc:3c:17:33:70:ec:
                    8e:9b:a4:31:7c:08:12:22:ed:66:3a:ff:51:47:bb:
                    68:68:03:5b:39:d8:d2:f9:a7:50:c9:e1:02:33:cb:
                    2e:54:b1:79:c1:3d:19:76:bb:c5:31:79:49:fb:83:
                    b0:c4:79:b5:33:49:0b:de:0f:db:16:41:ea:58:04:
                    a6:d5:4a:f4:8c:37:81:85:0d:48:72:f5:33:eb:90:
                    17:66:27:e1:4a:24:31:1c:41:60:c9:22:43:ba:44:
                    0d:d8:06:36:1c:c2:39:a6:bf:4b:ee:9b:b9:ad:5f:
                    c9:8d:cb:19:17:02:8a:90:e0:65:82:99:85:93:03:
                    e3:9b:ee:8b:95:c1:88:03:94:7a:27:0c:27:56:d7:
                    4d:3b:d0:b0:cd:3a:8f:af:31:65:7e:1b:98:ed:cc:
                    5d:fd:de:1d:b2:9c:fb:be:1c:11:3f:4c:48:7a:f9:
                    de:48:65:5a:b9:a8:79:46:22:e1:58:be:81:8f:5e:
                    8b:a1:4f:d0:57:ce:36:f5:cc:d7:00:03:0b:a8:32:
                    24:48:49:df:d1:b5:34:ff:6d:c8:65:68:0f:60:32:
                    a2:0f:f1:80:e2:8a:52:1d:c6:f6:85:3e:cb:7d:e7:
                    f5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:20:20:33:48:B2:58:ED:D3:44:BB:2B:A8:95:F6:10:DB:49:A7:74
            X509v3 Authority Key Identifier:
                keyid:93:14:D5:31:06:A3:85:E7:76:43:2E:46:32:9A:A2:2C:C6:98:0F:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/9314D53106A385E776432E46329AA22CC6980F59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9314D53106A385E776432E46329AA22CC6980F59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/3230302e3231352e3136302e302f32322d3234203d3e20323633363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.215.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:79:4b:c1:c1:4f:2e:89:f6:8e:07:ba:0d:cd:11:45:ac:2a:
         ee:1e:de:d5:7c:8e:dd:3f:db:57:c7:3a:58:7d:ab:2b:9b:57:
         6d:04:66:66:3a:c2:03:cc:84:45:a1:29:6d:6b:42:ee:e4:8f:
         fe:09:a2:96:8c:ae:fc:94:11:f9:63:6c:f7:1e:7d:57:92:cc:
         de:c1:70:d3:10:d5:87:6d:f7:fb:65:37:44:8e:27:0b:b5:ae:
         c9:80:94:74:58:43:db:a5:d9:3a:e0:2d:bf:a5:9e:a9:89:94:
         5c:d3:3f:37:cd:78:c1:97:14:d9:00:db:12:6c:73:cb:8f:37:
         6f:7d:2b:e1:36:a7:ff:aa:d6:c5:13:52:7e:cc:d1:62:c4:db:
         79:2b:62:00:2b:a8:62:f3:24:6d:01:b2:3e:7b:86:8f:57:c5:
         57:27:41:97:88:b8:19:85:79:44:c8:4c:26:66:91:7c:64:9d:
         58:39:22:16:d9:41:b6:70:9a:34:04:2f:70:f7:60:44:0d:8d:
         b7:50:81:3e:ad:7f:0f:6d:3b:28:a7:5c:c6:07:c0:ce:89:72:
         35:75:60:ab:84:87:a3:a0:d0:20:f9:eb:8b:7c:40:06:d7:33:
         8d:57:e0:04:65:91:c9:38:5a:d1:c7:1d:f5:b2:74:6b:37:c6:
         fb:e5:9b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 17:11:54 2026 by rpki-client