Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/3230302e3135352e3132382e302f31382d3234203d3e203131343332.roa
File:                     3230302e3135352e3132382e302f31382d3234203d3e203131343332.roa (raw, json)
Hash identifier:          4BGhk6x3pcGxjYmlcgfUHF4miSdg6zcDZm7n9fig8xI=
Subject key identifier:   C6:B7:B8:C1:34:95:5D:02:8D:76:91:F0:8D:6B:82:D7:A6:5F:52:BA
Certificate issuer:       /CN=EF1A3C5F9F8138A78E275347F4AF8805B5574F33
Certificate serial:       3FB2500AC1A2FF0D2591E425535314A7D20AB006
Authority key identifier: EF:1A:3C:5F:9F:81:38:A7:8E:27:53:47:F4:AF:88:05:B5:57:4F:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF1A3C5F9F8138A78E275347F4AF8805B5574F33.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/3230302e3135352e3132382e302f31382d3234203d3e203131343332.roa
Signing time:             Fri 11 Jul 2025 15:36:22 +0000
ROA not before:           Fri 11 Jul 2025 15:31:22 +0000
ROA not after:            Fri 10 Jul 2026 15:36:22 +0000
asID:                     11432
IP address blocks:        200.155.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/EF1A3C5F9F8138A78E275347F4AF8805B5574F33.crl
                          rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/EF1A3C5F9F8138A78E275347F4AF8805B5574F33.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF1A3C5F9F8138A78E275347F4AF8805B5574F33.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Jul 2025 01:09:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:b2:50:0a:c1:a2:ff:0d:25:91:e4:25:53:53:14:a7:d2:0a:b0:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF1A3C5F9F8138A78E275347F4AF8805B5574F33
        Validity
            Not Before: Jul 11 15:31:22 2025 GMT
            Not After : Jul 10 15:36:22 2026 GMT
        Subject: CN=C6B7B8C134955D028D7691F08D6B82D7A65F52BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:36:db:ff:45:1f:ae:b5:2e:76:23:b3:2b:c6:
                    55:fc:80:24:49:2a:24:2b:77:39:22:f1:e2:59:ec:
                    2f:17:6a:35:df:0f:b8:83:c7:d6:48:2e:0b:51:1c:
                    c9:72:f5:a1:88:e8:a2:a9:46:43:00:f3:06:5f:47:
                    da:8e:2a:a6:18:0b:0f:dd:f4:f2:5b:8c:00:af:8d:
                    75:9b:44:92:73:62:b0:72:f7:ad:34:d3:b4:b8:23:
                    d3:00:95:80:95:09:7e:78:b2:d7:fb:63:bb:3d:49:
                    70:b2:bf:45:20:68:44:ae:49:a4:fc:cc:42:4c:a4:
                    98:17:3a:7b:95:8d:73:ce:3f:85:d1:ad:fc:f4:d2:
                    90:9c:1b:0c:00:1f:14:f2:5b:0b:e4:74:d8:db:65:
                    72:61:b9:e3:eb:50:fe:12:e0:ec:02:91:f5:38:49:
                    b6:55:4f:bd:b4:17:10:7d:2d:39:17:6b:ce:e3:28:
                    8c:70:1c:ca:5c:3c:65:06:23:7a:41:eb:c7:80:dc:
                    92:c1:7d:38:97:74:ce:68:78:ad:35:53:05:38:6a:
                    57:7a:cf:d8:2f:a8:19:e8:73:5b:f2:23:93:83:cb:
                    09:5c:db:12:f7:72:ec:8b:80:86:33:8a:3f:f7:73:
                    6e:66:df:b8:ea:e4:14:4d:2b:ef:09:46:4c:3e:81:
                    6a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:B7:B8:C1:34:95:5D:02:8D:76:91:F0:8D:6B:82:D7:A6:5F:52:BA
            X509v3 Authority Key Identifier:
                keyid:EF:1A:3C:5F:9F:81:38:A7:8E:27:53:47:F4:AF:88:05:B5:57:4F:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/EF1A3C5F9F8138A78E275347F4AF8805B5574F33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF1A3C5F9F8138A78E275347F4AF8805B5574F33.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/3230302e3135352e3132382e302f31382d3234203d3e203131343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.155.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         7d:ae:d9:f0:fe:de:82:4d:d8:e8:c5:24:09:6c:84:bc:11:f0:
         e1:c5:08:a3:5a:9c:48:37:8b:89:41:86:56:80:08:f3:de:b4:
         03:21:ef:89:05:53:90:85:85:aa:f5:0e:09:23:52:7d:8f:7a:
         2d:52:ec:5a:61:a2:81:5e:94:eb:19:81:a9:84:58:a7:50:f5:
         fa:e4:4a:06:31:fd:77:0b:b7:a9:d5:6d:9f:e6:ac:e2:d2:75:
         8e:61:05:f3:32:9e:97:33:37:6d:07:66:52:a0:9f:5d:85:2a:
         3f:5c:d5:07:45:61:ca:ba:6d:3c:e6:08:58:c9:61:93:0b:9e:
         a4:5a:c2:d3:bb:ec:90:ad:a7:a7:3a:1b:cb:62:03:77:dd:94:
         75:1a:11:79:0f:92:a9:c7:a0:d0:d9:a1:3f:c1:2f:ec:cd:af:
         f5:b4:2e:60:ac:21:ae:9a:06:25:e6:2f:6a:24:91:2e:8a:d7:
         bc:ea:67:c0:9d:39:3f:29:a3:fc:64:75:d8:93:76:1f:68:a0:
         1b:d4:41:85:3c:3a:9b:31:98:bf:69:b4:fa:01:70:9d:ad:da:
         11:96:f0:ae:38:eb:81:4b:d3:f3:71:0c:23:41:dc:1d:68:c9:
         ae:79:ad:ad:46:ad:f6:70:65:09:e0:5d:51:a6:a1:97:d0:a9:
         09:0e:9a:90
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUP7JQCsGi/w0lkeQlU1MUp9IKsAYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUYxQTNDNUY5RjgxMzhBNzhFMjc1MzQ3RjRBRjg4MDVC
NTU3NEYzMzAeFw0yNTA3MTExNTMxMjJaFw0yNjA3MTAxNTM2MjJaMDMxMTAvBgNV
BAMTKEM2QjdCOEMxMzQ5NTVEMDI4RDc2OTFGMDhENkI4MkQ3QTY1RjUyQkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbNtv/RR+utS52I7MrxlX8gCRJ
KiQrdzki8eJZ7C8XajXfD7iDx9ZILgtRHMly9aGI6KKpRkMA8wZfR9qOKqYYCw/d
9PJbjACvjXWbRJJzYrBy960007S4I9MAlYCVCX54stf7Y7s9SXCyv0UgaESuSaT8
zEJMpJgXOnuVjXPOP4XRrfz00pCcGwwAHxTyWwvkdNjbZXJhuePrUP4S4OwCkfU4
SbZVT720FxB9LTkXa87jKIxwHMpcPGUGI3pB68eA3JLBfTiXdM5oeK01UwU4ald6
z9gvqBnoc1vyI5ODywlc2xL3cuyLgIYzij/3c25m37jq5BRNK+8JRkw+gWqfAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUxre4wTSVXQKNdpHwjWuC16ZfUrowHwYDVR0j
BBgwFoAU7xo8X5+BOKeOJ1NH9K+IBbVXTzMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnhHaHNRUHhpYlR6NFpKVk1CUGpETXdSdE1BOExmdmJQdms1enFaTWRQ
alMvMC9FRjFBM0M1RjlGODEzOEE3OEUyNzUzNDdGNEFGODgwNUI1NTc0RjMzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VGMUEzQzVGOUY4MTM4QTc4
RTI3NTM0N0Y0QUY4ODA1QjU1NzRGMzMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ4R2hzUVB4aWJUejRaSlZNQlBqRE13UnRNQThMZnZiUHZrNXpxWk1kUGpTLzAv
MzIzMDMwMmUzMTM1MzUyZTMxMzIzODJlMzAyZjMxMzgyZDMyMzQyMDNkM2UyMDMx
MzEzNDMzMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAbIm4AwDQYJKoZIhvcNAQELBQADggEBAH2u2fD+
3oJN2OjFJAlshLwR8OHFCKNanEg3i4lBhlaACPPetAMh74kFU5CFhar1DgkjUn2P
ei1S7FphooFelOsZgamEWKdQ9frkSgYx/XcLt6nVbZ/mrOLSdY5hBfMynpczN20H
ZlKgn12FKj9c1QdFYcq6bTzmCFjJYZMLnqRawtO77JCtp6c6G8tiA3fdlHUaEXkP
kqnHoNDZoT/BL+zNr/W0LmCsIa6aBiXmL2okkS6K17zqZ8CdOT8po/xkddiTdh9o
oBvUQYU8OpsxmL9ptPoBcJ2t2hGW8K4464FL0/NxDCNB3B1oya55ra1GrfZwZQng
XVGmoZfQqQkOmpA=
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:06:50 2025 by rpki-client