Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e3133322e3234302e302f32312d3231203d3e20323638373434.roa
File:                     3230302e3133322e3234302e302f32312d3231203d3e20323638373434.roa (raw, json)
Hash identifier:          qRXFq4VFj/ZLp9odruJhBrKSHmQzfbGjZ57LqG8gTPU=
Subject key identifier:   0C:C2:A8:9B:D5:90:9C:1F:44:C5:09:89:1D:A6:F5:20:27:F6:68:58
Certificate issuer:       /CN=D54C376960A26972A0B767BDA084048DFFE3673E
Certificate serial:       4C66C6A6F03768D18001A3710BAD64799203BFA4
Authority key identifier: D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e3133322e3234302e302f32312d3231203d3e20323638373434.roa
Signing time:             Tue 22 Jul 2025 15:09:02 +0000
ROA not before:           Tue 22 Jul 2025 15:04:02 +0000
ROA not after:            Tue 21 Jul 2026 15:09:02 +0000
asID:                     268744
IP address blocks:        200.132.240.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl
                          rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 15:45:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:66:c6:a6:f0:37:68:d1:80:01:a3:71:0b:ad:64:79:92:03:bf:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D54C376960A26972A0B767BDA084048DFFE3673E
        Validity
            Not Before: Jul 22 15:04:02 2025 GMT
            Not After : Jul 21 15:09:02 2026 GMT
        Subject: CN=0CC2A89BD5909C1F44C509891DA6F52027F66858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:54:e6:cc:4e:dd:b7:20:3d:10:81:67:1c:b8:
                    ca:5d:d8:08:1d:3e:46:15:fd:8d:d1:74:ac:90:2d:
                    d0:ef:26:00:39:9c:84:10:17:81:27:16:27:82:7f:
                    7e:da:3b:32:ce:31:9e:6b:7f:9f:6a:30:e9:64:5a:
                    7f:61:94:15:a9:af:3a:83:49:50:a2:db:d1:62:bb:
                    5b:4a:15:79:90:be:c4:9f:8d:9a:56:c6:e3:f9:3a:
                    82:22:e5:03:77:73:3c:3e:f0:f2:68:d8:93:a1:52:
                    f3:5e:c9:8d:10:d6:cb:3c:ce:c3:e7:e6:e3:4d:5a:
                    16:2e:df:a6:0f:d6:a4:9c:39:f9:80:e3:16:2a:f0:
                    c7:2d:6d:71:1f:e0:00:db:73:59:df:07:ba:15:36:
                    fd:72:fb:85:ea:cb:c7:ff:1f:33:ea:06:a4:61:c4:
                    b5:ab:3c:ca:7d:61:a0:58:13:a4:30:d9:f4:cc:ed:
                    6c:af:9e:ed:ba:87:b7:d4:3f:06:e2:49:6d:55:e2:
                    16:99:08:05:e7:12:33:6f:51:7d:66:62:d7:5f:f9:
                    c9:3c:50:91:99:bb:69:e0:6d:b5:61:04:17:7c:c8:
                    76:4b:b0:70:02:96:3a:b3:d6:f0:f6:89:fc:88:1b:
                    16:8d:3b:07:a2:9f:7c:94:fd:98:07:1f:b3:84:ca:
                    3e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:C2:A8:9B:D5:90:9C:1F:44:C5:09:89:1D:A6:F5:20:27:F6:68:58
            X509v3 Authority Key Identifier:
                keyid:D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e3133322e3234302e302f32312d3231203d3e20323638373434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.132.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         43:88:01:4c:16:a3:6e:3d:3c:4b:3f:a6:6c:f2:36:da:18:7c:
         ef:45:ce:f6:d5:a0:07:82:55:6c:5d:93:6e:5e:2b:31:93:b6:
         30:d2:ca:b9:99:f3:cd:6a:87:96:66:7d:b6:64:57:32:48:cd:
         93:78:3b:f8:4d:66:c5:7d:a5:1e:17:96:92:f0:da:2f:dd:7f:
         d7:71:51:c5:47:ad:58:c5:32:47:83:26:9a:5b:ef:df:84:9c:
         61:14:db:8f:aa:70:0a:01:c4:d4:f2:de:44:50:d1:13:a6:71:
         1c:d3:40:c1:e7:8f:92:e9:f3:2c:df:07:68:9a:68:7c:4a:f3:
         48:9f:56:dc:d9:f4:ee:bf:bc:27:ea:d5:a4:6d:55:3a:c1:d0:
         ff:d5:70:ea:3f:2f:de:70:4d:cc:dc:eb:d4:ef:80:16:70:79:
         f3:ea:39:dc:1d:44:8c:70:bf:2d:e3:90:49:61:d0:8e:fc:c6:
         cf:eb:31:e6:df:ee:06:5e:78:fc:74:1c:fe:b5:d2:bc:97:66:
         e8:6c:6d:1b:d2:62:e0:89:14:10:be:10:89:7e:01:8a:bc:d2:
         14:28:89:3e:6f:7d:9a:ff:d6:17:b3:7f:36:00:98:ee:10:7c:
         b4:9f:3c:37:80:ac:ee:e3:ab:29:68:4c:2a:3f:c6:5f:2a:14:
         da:f1:97:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:00:52 2025 by rpki-client