Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Fu1oSuxFbpWNebutrwk1rJ5stcyt4ZRfdSKttek7yEb/0/3230302e31312e3132302e302f32322d3332203d3e20323730343339.roa
File:                     3230302e31312e3132302e302f32322d3332203d3e20323730343339.roa (raw, json)
Hash identifier:          rM9eUGf9BTjCqkmO6eAy0UD6HqZkp22/QEdv3sTyW+E=
Subject key identifier:   A5:50:C9:5D:E3:66:AD:FF:6B:D5:16:C2:A8:62:B4:4D:7B:23:7B:AD
Certificate issuer:       /CN=152696C719E46D5202EEA288828D038B7D3FD514
Certificate serial:       0A892F36EAB478F695B36D1DBB7A5DC8A77858F7
Authority key identifier: 15:26:96:C7:19:E4:6D:52:02:EE:A2:88:82:8D:03:8B:7D:3F:D5:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/152696C719E46D5202EEA288828D038B7D3FD514.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Fu1oSuxFbpWNebutrwk1rJ5stcyt4ZRfdSKttek7yEb/0/3230302e31312e3132302e302f32322d3332203d3e20323730343339.roa
Signing time:             Tue 15 Jul 2025 21:05:03 +0000
ROA not before:           Tue 15 Jul 2025 21:00:03 +0000
ROA not after:            Tue 14 Jul 2026 21:05:03 +0000
asID:                     270439
IP address blocks:        200.11.120.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6Fu1oSuxFbpWNebutrwk1rJ5stcyt4ZRfdSKttek7yEb/0/152696C719E46D5202EEA288828D038B7D3FD514.crl
                          rsync://rpki-repo.registro.br/repo/6Fu1oSuxFbpWNebutrwk1rJ5stcyt4ZRfdSKttek7yEb/0/152696C719E46D5202EEA288828D038B7D3FD514.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/152696C719E46D5202EEA288828D038B7D3FD514.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Jul 2025 04:24:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:89:2f:36:ea:b4:78:f6:95:b3:6d:1d:bb:7a:5d:c8:a7:78:58:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=152696C719E46D5202EEA288828D038B7D3FD514
        Validity
            Not Before: Jul 15 21:00:03 2025 GMT
            Not After : Jul 14 21:05:03 2026 GMT
        Subject: CN=A550C95DE366ADFF6BD516C2A862B44D7B237BAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:73:31:54:02:94:10:1b:60:52:1b:81:ec:73:
                    ef:7a:5e:3f:2d:6d:31:82:de:98:eb:eb:ef:26:d6:
                    69:78:61:5f:56:0b:bb:a7:cd:f5:25:5c:e4:c8:8e:
                    8f:12:46:ba:b9:94:43:a5:2a:6b:18:32:5b:34:4b:
                    af:eb:f2:97:e4:7a:bb:4a:2a:61:20:70:27:a8:c1:
                    bc:36:36:b0:7f:7b:bc:3a:19:57:42:47:e6:09:d0:
                    e3:bc:a7:5c:49:0a:e2:93:b5:6d:ea:0f:28:e9:a0:
                    27:1e:d5:2c:8a:07:ce:63:d7:a5:32:5e:2c:fb:1d:
                    5d:27:42:30:47:8e:fb:87:5c:55:35:08:a3:62:99:
                    1a:9d:71:fb:b6:a4:04:e3:89:2b:39:7c:80:8f:5c:
                    a8:96:30:af:01:1d:f2:90:c4:96:40:0a:18:a5:78:
                    62:c4:a0:d0:9c:68:3d:11:19:b8:e1:fc:07:f5:cb:
                    78:98:5b:18:0f:3a:e6:73:6d:30:0f:f9:02:8a:72:
                    da:ba:f4:c4:23:f0:b3:4d:d6:b2:ca:83:81:bf:5d:
                    0e:54:71:9d:9f:a2:ce:56:93:3a:9e:7a:8f:82:e2:
                    e1:5d:68:98:43:59:27:b8:8d:ef:c7:e7:46:b9:1d:
                    22:6b:8e:dc:79:62:74:a1:60:a2:82:e8:71:10:3b:
                    48:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:50:C9:5D:E3:66:AD:FF:6B:D5:16:C2:A8:62:B4:4D:7B:23:7B:AD
            X509v3 Authority Key Identifier:
                keyid:15:26:96:C7:19:E4:6D:52:02:EE:A2:88:82:8D:03:8B:7D:3F:D5:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Fu1oSuxFbpWNebutrwk1rJ5stcyt4ZRfdSKttek7yEb/0/152696C719E46D5202EEA288828D038B7D3FD514.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/152696C719E46D5202EEA288828D038B7D3FD514.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Fu1oSuxFbpWNebutrwk1rJ5stcyt4ZRfdSKttek7yEb/0/3230302e31312e3132302e302f32322d3332203d3e20323730343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.11.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:1d:a7:87:47:b5:ab:68:d5:82:54:fb:f7:0a:b2:f6:55:9f:
         70:25:db:57:52:da:a7:f1:16:56:ea:15:a1:0d:36:0a:f3:91:
         63:bb:c9:12:fe:db:63:a4:8d:0d:02:72:ee:f4:b7:f6:1a:6c:
         1a:c5:6e:98:92:74:c3:46:7f:b4:ae:31:09:93:ed:7f:c8:2d:
         9a:50:c8:79:72:97:74:b1:44:63:00:be:48:d2:59:ca:d5:f0:
         a3:94:68:29:14:ff:a8:33:b5:4f:e1:85:37:79:04:45:69:f3:
         bb:90:8e:09:36:50:81:d6:a3:54:e1:5a:90:3d:3a:24:d9:2d:
         1e:7a:5f:d6:f3:39:08:c1:d6:6c:5e:5e:1d:db:1e:10:b3:63:
         0f:8d:ba:f4:39:99:89:3c:82:30:99:ff:a1:3b:6a:6b:26:8a:
         bc:eb:35:24:71:c1:96:18:dd:fd:15:f5:29:cf:4b:64:52:0a:
         05:4d:ba:41:3b:8e:1e:e4:44:97:60:dc:7b:92:1d:39:9e:fa:
         04:e5:44:b0:40:9a:50:ef:44:96:d1:34:6b:7d:0a:ca:9c:33:
         ca:fd:19:87:a4:d3:6b:e2:2f:cd:5a:7f:f2:2e:67:86:a3:80:
         5a:6e:c6:55:35:7c:0f:e9:5a:1b:7d:c6:2e:cf:f4:24:5b:8b:
         76:c6:51:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:29:47 2025 by rpki-client