Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e3133322e3234302e302f32312d3231203d3e2032373136.roa
File:                     3230302e3133322e3234302e302f32312d3231203d3e2032373136.roa (raw, json)
Hash identifier:          fpFGZQUAQYlrFG0HBiRPO0+8GcmeS/BqKPBFFd2j8F8=
Subject key identifier:   A4:98:B9:8C:F2:17:96:BE:3F:07:11:72:4A:09:73:57:4D:F9:68:82
Certificate issuer:       /CN=D54C376960A26972A0B767BDA084048DFFE3673E
Certificate serial:       06F0B78D23686B1DD60FB72556BA4FC745BBE588
Authority key identifier: D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e3133322e3234302e302f32312d3231203d3e2032373136.roa
Signing time:             Tue 22 Jul 2025 15:09:02 +0000
ROA not before:           Tue 22 Jul 2025 15:04:02 +0000
ROA not after:            Tue 21 Jul 2026 15:09:02 +0000
asID:                     2716
IP address blocks:        200.132.240.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl
                          rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 15:45:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:f0:b7:8d:23:68:6b:1d:d6:0f:b7:25:56:ba:4f:c7:45:bb:e5:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D54C376960A26972A0B767BDA084048DFFE3673E
        Validity
            Not Before: Jul 22 15:04:02 2025 GMT
            Not After : Jul 21 15:09:02 2026 GMT
        Subject: CN=A498B98CF21796BE3F0711724A0973574DF96882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:aa:e4:23:4d:a8:01:ab:30:ba:80:96:17:4e:
                    be:66:82:fd:1d:29:69:8b:a2:5d:d7:91:d9:72:26:
                    c2:b1:d8:8b:fe:07:89:c3:78:68:91:1c:18:9d:76:
                    00:0e:a8:31:20:10:f3:26:a9:87:f3:4d:5d:65:1c:
                    c8:41:fa:7b:13:f3:73:0f:d9:8a:99:ab:22:e3:ff:
                    e9:6e:44:c0:85:cb:4d:e2:6d:2d:0c:85:09:0e:c4:
                    e6:c7:e8:6e:e7:61:a6:1e:f9:65:4b:34:7e:fd:65:
                    64:a9:28:03:08:76:15:a0:bd:9a:6c:74:43:c5:4a:
                    6f:e4:d0:71:5f:f0:18:8d:3f:15:48:aa:82:6c:f0:
                    2d:d3:02:e4:fa:d2:00:ec:28:33:a1:7b:12:0b:f9:
                    e5:a7:ab:04:c7:7d:83:2b:75:59:d3:94:fc:74:15:
                    55:44:71:8b:42:03:14:ea:4c:3b:4f:c7:9f:47:0e:
                    27:7a:8e:31:9d:48:f2:c4:90:38:2a:bd:40:4a:08:
                    2f:73:4e:59:6c:5a:27:b3:32:2b:83:7a:8e:5a:e7:
                    a5:3a:65:fb:50:80:c5:a8:45:23:f3:1b:d5:ee:a4:
                    9f:d3:55:23:68:69:52:98:ca:81:13:52:39:68:45:
                    04:15:40:bb:92:c9:2e:f6:3e:3e:f2:fe:70:67:40:
                    e2:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:98:B9:8C:F2:17:96:BE:3F:07:11:72:4A:09:73:57:4D:F9:68:82
            X509v3 Authority Key Identifier:
                keyid:D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e3133322e3234302e302f32312d3231203d3e2032373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.132.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c3:48:13:f1:dd:9a:c5:e0:2c:c3:06:b5:9d:51:3a:92:60:c6:
         cd:d8:36:8b:a2:1f:8a:60:7e:dd:ce:97:e1:e2:51:43:8f:fe:
         1d:e4:41:ba:10:3b:35:1c:e9:45:6e:9b:d7:67:b7:b5:d9:5c:
         24:c3:48:88:60:21:8e:ba:09:9f:05:71:a0:bc:3d:52:3c:ce:
         50:57:25:74:23:f5:df:69:f7:89:e0:88:72:6b:1d:ea:c9:70:
         52:49:92:1c:5a:45:b0:85:97:3e:98:95:58:bf:e0:eb:04:1f:
         16:0b:99:a6:45:df:3b:2a:02:18:cd:ca:c0:c9:c1:16:92:99:
         a6:41:ec:40:73:68:03:aa:8d:ca:0d:22:88:17:2c:fa:ad:c8:
         76:4c:49:df:7c:a3:76:6d:2e:e3:32:03:9a:04:8f:f1:51:a1:
         3b:28:19:eb:a9:0e:4e:cd:36:04:61:8e:41:be:98:68:9d:56:
         1a:b7:f0:f1:21:96:27:8a:c0:9b:77:33:71:31:c3:22:9b:4e:
         0b:69:e9:7d:76:47:33:e2:b6:0a:92:0c:bd:b4:b6:0a:39:1f:
         a2:f2:3c:76:51:09:31:92:34:eb:d7:f7:f3:a8:16:80:40:3e:
         26:86:0d:f6:eb:b3:83:af:72:c1:00:b9:b2:42:7f:02:fa:7a:
         d8:b9:9f:43
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUBvC3jSNoax3WD7clVrpPx0W75YgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDU0QzM3Njk2MEEyNjk3MkEwQjc2N0JEQTA4NDA0OERG
RkUzNjczRTAeFw0yNTA3MjIxNTA0MDJaFw0yNjA3MjExNTA5MDJaMDMxMTAvBgNV
BAMTKEE0OThCOThDRjIxNzk2QkUzRjA3MTE3MjRBMDk3MzU3NERGOTY4ODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWquQjTagBqzC6gJYXTr5mgv0d
KWmLol3XkdlyJsKx2Iv+B4nDeGiRHBiddgAOqDEgEPMmqYfzTV1lHMhB+nsT83MP
2YqZqyLj/+luRMCFy03ibS0MhQkOxObH6G7nYaYe+WVLNH79ZWSpKAMIdhWgvZps
dEPFSm/k0HFf8BiNPxVIqoJs8C3TAuT60gDsKDOhexIL+eWnqwTHfYMrdVnTlPx0
FVVEcYtCAxTqTDtPx59HDid6jjGdSPLEkDgqvUBKCC9zTllsWiezMiuDeo5a56U6
ZftQgMWoRSPzG9XupJ/TVSNoaVKYyoETUjloRQQVQLuSyS72Pj7y/nBnQOLNAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUpJi5jPIXlr4/BxFySglzV035aIIwHwYDVR0j
BBgwFoAU1Uw3aWCiaXKgt2e9oIQEjf/jZz4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEViNEFHamZOWTl6ZDd0Qm13aFRYTFRKeUZGQUZ6VUZxUGdlSFVDTjFT
d2EvMS9ENTRDMzc2OTYwQTI2OTcyQTBCNzY3QkRBMDg0MDQ4REZGRTM2NzNFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q1NEMzNzY5NjBBMjY5NzJB
MEI3NjdCREEwODQwNDhERkZFMzY3M0UuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhFYjRBR2pmTlk5emQ3dEJtd2hUWExUSnlGRkFGelVGcVBnZUhVQ04xU3dhLzEv
MzIzMDMwMmUzMTMzMzIyZTMyMzQzMDJlMzAyZjMyMzEyZDMyMzEyMDNkM2UyMDMy
MzczMTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDyITwMA0GCSqGSIb3DQEBCwUAA4IBAQDDSBPx3ZrF
4CzDBrWdUTqSYMbN2DaLoh+KYH7dzpfh4lFDj/4d5EG6EDs1HOlFbpvXZ7e12Vwk
w0iIYCGOugmfBXGgvD1SPM5QVyV0I/XfafeJ4Ihyax3qyXBSSZIcWkWwhZc+mJVY
v+DrBB8WC5mmRd87KgIYzcrAycEWkpmmQexAc2gDqo3KDSKIFyz6rch2TEnffKN2
bS7jMgOaBI/xUaE7KBnrqQ5OzTYEYY5BvphonVYat/DxIZYnisCbdzNxMcMim04L
ael9dkcz4rYKkgy9tLYKOR+i8jx2UQkxkjTr1/fzqBaAQD4mhg3267ODr3LBALmy
Qn8C+nrYuZ9D
-----END CERTIFICATE-----
Generated at Sat Jul 26 06:00:53 2025 by rpki-client