Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e3132382e3234302e302f32302d3230203d3e2032373136.roa
File:                     3230302e3132382e3234302e302f32302d3230203d3e2032373136.roa (raw, json)
Hash identifier:          odvs49kDVNSbs1kbagfQAZF/4rNz0T9wL0XHu2z/OsE=
Subject key identifier:   63:F8:00:0C:C5:12:84:0A:70:7D:5C:88:78:50:D8:BB:3C:CD:50:97
Certificate issuer:       /CN=D54C376960A26972A0B767BDA084048DFFE3673E
Certificate serial:       05A78A2339209FEE27E5645451E0665363287323
Authority key identifier: D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e3132382e3234302e302f32302d3230203d3e2032373136.roa
Signing time:             Tue 22 Jul 2025 15:09:04 +0000
ROA not before:           Tue 22 Jul 2025 15:04:04 +0000
ROA not after:            Tue 21 Jul 2026 15:09:04 +0000
asID:                     2716
IP address blocks:        200.128.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl
                          rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 15:45:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:a7:8a:23:39:20:9f:ee:27:e5:64:54:51:e0:66:53:63:28:73:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D54C376960A26972A0B767BDA084048DFFE3673E
        Validity
            Not Before: Jul 22 15:04:04 2025 GMT
            Not After : Jul 21 15:09:04 2026 GMT
        Subject: CN=63F8000CC512840A707D5C887850D8BB3CCD5097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c6:ef:aa:6f:f9:10:a1:98:91:47:28:c7:e6:
                    2c:43:3e:ee:60:e1:cd:95:0d:4d:32:f8:76:47:57:
                    bb:ca:19:eb:6c:65:fc:46:05:14:15:be:99:d9:aa:
                    8a:2d:8f:eb:02:fd:fd:91:54:d7:ac:97:12:36:b1:
                    85:0e:d4:aa:04:cb:43:b5:ef:fe:c2:c2:e1:46:75:
                    03:ec:4a:47:bc:af:69:8a:72:7b:17:21:ac:76:3b:
                    60:a3:3f:e5:6c:9a:8b:ab:43:38:2b:3e:9f:f1:27:
                    7c:7a:ef:98:bb:db:68:d4:e1:a6:0b:68:21:dd:0c:
                    63:24:7d:b9:cb:14:46:04:de:a1:bb:e8:5f:d9:55:
                    df:97:9e:ae:92:ee:3a:b9:49:b3:a4:ae:e7:78:a0:
                    82:84:0d:ad:64:b5:45:82:80:65:f9:2f:be:c1:c9:
                    92:7b:94:c7:48:cc:43:b8:a3:d2:75:0d:26:f9:7f:
                    8d:2c:9c:cd:66:87:2b:b4:b1:3f:4a:b3:59:21:b8:
                    22:47:91:7d:bb:f9:46:30:ad:9f:e0:df:81:8e:47:
                    f5:18:da:fd:bb:16:c0:e1:b3:63:70:bd:55:3a:26:
                    f3:57:4f:25:b5:76:f8:a2:68:c7:38:3d:14:6e:8f:
                    8e:f3:a2:e0:07:82:d2:94:2d:84:c6:4e:b3:f1:c4:
                    c0:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:F8:00:0C:C5:12:84:0A:70:7D:5C:88:78:50:D8:BB:3C:CD:50:97
            X509v3 Authority Key Identifier:
                keyid:D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e3132382e3234302e302f32302d3230203d3e2032373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.128.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         54:0b:ba:14:03:26:dd:66:31:42:f4:01:3e:22:5c:67:7c:0c:
         16:4f:6f:3c:e9:e5:82:49:c6:32:3b:63:aa:75:4e:5a:eb:1e:
         96:bc:51:4e:1f:cf:b0:55:82:9d:cb:b2:56:bf:37:c3:f1:28:
         b4:4b:3b:30:fc:03:b7:a8:61:81:92:0d:3c:c5:c5:c4:6b:4d:
         8b:94:d1:6b:9f:e0:f9:77:04:26:b0:cc:af:0d:35:fc:39:ef:
         26:28:00:11:5b:2c:95:3a:06:a3:25:61:89:9e:f7:b6:20:bc:
         91:18:a8:31:cf:ee:eb:e3:3d:47:26:f0:5e:57:9a:15:b1:d8:
         51:4b:62:eb:1f:bb:aa:64:2b:2e:0d:0f:fc:36:47:1e:22:c5:
         05:05:fc:21:cd:f9:2b:ad:fc:0e:83:c5:a2:93:78:40:9e:e2:
         ee:a3:98:aa:f9:08:96:bb:35:4d:4e:b5:01:7d:b7:04:00:0d:
         5c:d2:e0:42:3c:91:69:3c:77:6d:f7:8f:8f:87:a5:a0:1c:fa:
         9f:61:97:f0:36:33:4d:2e:fd:b6:ed:bb:a9:08:fd:91:3a:21:
         3f:ad:21:6a:8b:13:e2:3c:a0:d5:b7:44:d8:b5:33:1d:a8:7e:
         5c:f8:18:c6:3a:06:10:fd:8a:a4:78:09:77:22:cb:6c:a6:8f:
         32:f8:b6:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:00:52 2025 by rpki-client