Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/fXi5U94Hx8jnfcCT8H3MyQqaYtJYmrKx2GmC74boMtY/0/3230302e3130362e3137362e302f32322d3234203d3e20323731323632.roa
File:                     3230302e3130362e3137362e302f32322d3234203d3e20323731323632.roa (raw, json)
Hash identifier:          gNPjQzF6R/ZgcUnNLsGnexHSdZmUpalrD2CPKQbo9uo=
Subject key identifier:   7E:66:7D:E1:56:C6:B3:8C:1C:C4:EE:74:7A:1E:F2:ED:28:2D:2A:EE
Certificate issuer:       /CN=27F1C15838307FE48F718317A7D65996759AA543
Certificate serial:       339CFEC01A99C9465AE379C11C4FA766C13EFB60
Authority key identifier: 27:F1:C1:58:38:30:7F:E4:8F:71:83:17:A7:D6:59:96:75:9A:A5:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27F1C15838307FE48F718317A7D65996759AA543.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/fXi5U94Hx8jnfcCT8H3MyQqaYtJYmrKx2GmC74boMtY/0/3230302e3130362e3137362e302f32322d3234203d3e20323731323632.roa
Signing time:             Fri 22 May 2026 14:28:10 +0000
ROA not before:           Fri 22 May 2026 14:23:10 +0000
ROA not after:            Fri 21 May 2027 14:28:10 +0000
asID:                     271262
IP address blocks:        200.106.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/fXi5U94Hx8jnfcCT8H3MyQqaYtJYmrKx2GmC74boMtY/0/27F1C15838307FE48F718317A7D65996759AA543.crl
                          rsync://rpki-repo.registro.br/repo/fXi5U94Hx8jnfcCT8H3MyQqaYtJYmrKx2GmC74boMtY/0/27F1C15838307FE48F718317A7D65996759AA543.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27F1C15838307FE48F718317A7D65996759AA543.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 05:22:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:9c:fe:c0:1a:99:c9:46:5a:e3:79:c1:1c:4f:a7:66:c1:3e:fb:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27F1C15838307FE48F718317A7D65996759AA543
        Validity
            Not Before: May 22 14:23:10 2026 GMT
            Not After : May 21 14:28:10 2027 GMT
        Subject: CN=7E667DE156C6B38C1CC4EE747A1EF2ED282D2AEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:64:47:bd:92:fd:dc:16:9e:09:19:a9:a2:43:
                    07:55:46:d9:02:9b:e3:50:1b:1e:d2:a1:92:fa:21:
                    9a:d5:ef:6c:19:03:e9:25:ff:18:d3:ef:f7:88:14:
                    f7:4e:33:41:f7:a0:da:4b:75:95:dc:73:ec:ce:33:
                    39:90:31:85:f9:c1:a2:6d:d0:10:8f:37:22:f6:e5:
                    af:92:8a:70:61:00:79:f4:fb:b0:0d:15:ac:3c:cc:
                    b6:be:d3:41:ac:f2:68:ef:c6:af:21:d3:32:0d:fb:
                    67:7f:85:f8:9e:17:ca:36:15:9f:9e:9e:b9:13:ed:
                    c1:73:85:9f:5d:11:58:10:25:fb:c7:a7:9a:91:10:
                    fc:b6:b1:c5:0b:1a:d7:c8:5b:6b:80:11:e5:33:7f:
                    cd:8a:01:4b:68:b9:05:c1:03:8d:d4:25:90:ed:f2:
                    4d:62:92:eb:3a:d0:cf:fa:22:75:b0:cb:0c:11:bd:
                    53:29:65:e4:1e:cd:27:e7:33:4a:4d:0e:7f:b4:cd:
                    1c:de:3b:70:70:c3:88:29:5c:ce:fd:80:a7:c3:b9:
                    22:49:89:12:dd:66:e8:c7:20:58:ad:cb:07:ec:ca:
                    20:a4:21:3e:5a:44:21:de:f3:b3:3f:d6:58:77:08:
                    d9:5a:21:3b:83:32:0f:03:be:46:8a:c8:6d:ec:25:
                    3f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:66:7D:E1:56:C6:B3:8C:1C:C4:EE:74:7A:1E:F2:ED:28:2D:2A:EE
            X509v3 Authority Key Identifier:
                keyid:27:F1:C1:58:38:30:7F:E4:8F:71:83:17:A7:D6:59:96:75:9A:A5:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/fXi5U94Hx8jnfcCT8H3MyQqaYtJYmrKx2GmC74boMtY/0/27F1C15838307FE48F718317A7D65996759AA543.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27F1C15838307FE48F718317A7D65996759AA543.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/fXi5U94Hx8jnfcCT8H3MyQqaYtJYmrKx2GmC74boMtY/0/3230302e3130362e3137362e302f32322d3234203d3e20323731323632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.106.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:25:c0:26:ea:f2:6f:35:a6:05:b9:ed:e3:a5:fe:a5:83:34:
         ad:47:95:78:28:87:bf:91:57:32:c1:f1:0e:da:d0:cb:78:98:
         d3:d9:e2:50:c8:99:e4:dd:8f:8f:56:59:96:37:84:ac:cb:20:
         a9:50:be:18:91:83:5f:e9:d9:51:e3:69:ca:2d:08:be:7b:d3:
         23:f9:27:ab:7b:22:e1:d9:a8:2c:c3:7b:b1:94:bc:91:9a:32:
         86:d0:f2:17:59:4b:bb:db:b6:3b:68:34:03:2a:39:a4:35:67:
         fd:81:ca:af:c4:f0:8c:e2:00:60:8d:0f:78:bc:02:bd:ef:46:
         6c:a7:34:8d:c8:44:a4:c0:01:50:72:da:3e:b3:9d:17:ae:28:
         fb:b5:1e:54:1a:1c:6f:b5:d6:a2:5b:5f:17:3e:ad:89:88:58:
         c5:ee:51:5b:e6:df:20:1d:d7:02:92:b1:53:0c:9b:0c:a5:74:
         cd:b3:f4:f8:4b:ee:32:d3:f5:84:5a:08:7b:80:ea:c8:69:c8:
         58:60:6e:ec:7b:1f:e0:a3:80:a6:6e:ae:ad:80:e6:d8:a0:28:
         67:b8:d0:b5:d5:37:33:b8:9b:93:a1:f4:ae:8a:58:98:7d:e1:
         f2:ed:b1:47:87:91:d0:18:37:88:93:be:40:e3:06:7b:9c:bd:
         2e:07:ac:92
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUM5z+wBqZyUZa43nBHE+nZsE++2AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjdGMUMxNTgzODMwN0ZFNDhGNzE4MzE3QTdENjU5OTY3
NTlBQTU0MzAeFw0yNjA1MjIxNDIzMTBaFw0yNzA1MjExNDI4MTBaMDMxMTAvBgNV
BAMTKDdFNjY3REUxNTZDNkIzOEMxQ0M0RUU3NDdBMUVGMkVEMjgyRDJBRUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1ZEe9kv3cFp4JGamiQwdVRtkC
m+NQGx7SoZL6IZrV72wZA+kl/xjT7/eIFPdOM0H3oNpLdZXcc+zOMzmQMYX5waJt
0BCPNyL25a+SinBhAHn0+7ANFaw8zLa+00Gs8mjvxq8h0zIN+2d/hfieF8o2FZ+e
nrkT7cFzhZ9dEVgQJfvHp5qREPy2scULGtfIW2uAEeUzf82KAUtouQXBA43UJZDt
8k1ikus60M/6InWwywwRvVMpZeQezSfnM0pNDn+0zRzeO3Bww4gpXM79gKfDuSJJ
iRLdZujHIFitywfsyiCkIT5aRCHe87M/1lh3CNlaITuDMg8DvkaKyG3sJT/pAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUfmZ94VbGs4wcxO50eh7y7SgtKu4wHwYDVR0j
BBgwFoAUJ/HBWDgwf+SPcYMXp9ZZlnWapUMwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9mWGk1VTk0SHg4am5mY0NUOEgzTXlRcWFZdEpZbXJLeDJHbUM3NGJvTXRZ
LzAvMjdGMUMxNTgzODMwN0ZFNDhGNzE4MzE3QTdENjU5OTY3NTlBQTU0My5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yN0YxQzE1ODM4MzA3RkU0OEY3
MTgzMTdBN0Q2NTk5Njc1OUFBNTQzLmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9m
WGk1VTk0SHg4am5mY0NUOEgzTXlRcWFZdEpZbXJLeDJHbUM3NGJvTXRZLzAvMzIz
MDMwMmUzMTMwMzYyZTMxMzczNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzcz
MTMyMzYzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAshqsDANBgkqhkiG9w0BAQsFAAOCAQEAfiXAJury
bzWmBbnt46X+pYM0rUeVeCiHv5FXMsHxDtrQy3iY09niUMiZ5N2Pj1ZZljeErMsg
qVC+GJGDX+nZUeNpyi0IvnvTI/knq3si4dmoLMN7sZS8kZoyhtDyF1lLu9u2O2g0
Ayo5pDVn/YHKr8TwjOIAYI0PeLwCve9GbKc0jchEpMABUHLaPrOdF64o+7UeVBoc
b7XWoltfFz6tiYhYxe5RW+bfIB3XApKxUwybDKV0zbP0+EvuMtP1hFoIe4DqyGnI
WGBu7Hsf4KOApm6urYDm2KAoZ7jQtdU3M7ibk6H0ropYmH3h8u2xR4eR0Bg3iJO+
QOMGe5y9Lgeskg==
-----END CERTIFICATE-----
Generated at Sun May 24 14:18:14 2026 by rpki-client