Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e3133322e35392e302f32342d3234203d3e2032373136.roa
File:                     3230302e3133322e35392e302f32342d3234203d3e2032373136.roa (raw, json)
Hash identifier:          9md9xSLj+ySGc5UZbq4v/8h6udxfUzDagn0lSrUrdx4=
Subject key identifier:   B9:FC:BD:D5:45:00:5E:59:50:6C:06:E2:96:B2:08:3E:93:C2:54:13
Certificate issuer:       /CN=D54C376960A26972A0B767BDA084048DFFE3673E
Certificate serial:       2DD9F6CC57212CAE2722AF13992F64E57CB61951
Authority key identifier: D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e3133322e35392e302f32342d3234203d3e2032373136.roa
Signing time:             Tue 22 Jul 2025 15:09:04 +0000
ROA not before:           Tue 22 Jul 2025 15:04:04 +0000
ROA not after:            Tue 21 Jul 2026 15:09:04 +0000
asID:                     2716
IP address blocks:        200.132.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl
                          rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 15:45:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:d9:f6:cc:57:21:2c:ae:27:22:af:13:99:2f:64:e5:7c:b6:19:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D54C376960A26972A0B767BDA084048DFFE3673E
        Validity
            Not Before: Jul 22 15:04:04 2025 GMT
            Not After : Jul 21 15:09:04 2026 GMT
        Subject: CN=B9FCBDD545005E59506C06E296B2083E93C25413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:ac:12:f8:48:89:9f:09:03:cc:7a:fb:c4:f2:
                    ac:a7:99:d1:2a:22:05:a9:28:c4:cf:96:93:bd:70:
                    b2:f3:61:30:f9:c5:2c:95:c1:f7:d8:e9:0f:6a:09:
                    25:85:f3:6f:10:3d:95:30:ca:75:00:00:f5:07:a9:
                    f0:be:f9:02:74:ab:4c:91:f3:1e:83:07:ee:2e:ca:
                    e3:de:11:75:74:bc:26:33:55:83:53:df:d2:9f:41:
                    22:a7:c5:63:31:d6:c3:d5:87:d4:8d:5d:e6:a1:44:
                    20:0f:bb:04:81:8f:d7:90:86:d9:8e:87:00:a8:48:
                    61:d2:3f:96:23:7d:fa:34:65:5d:e7:68:21:eb:59:
                    eb:a0:ab:b6:12:4f:08:84:cf:23:3c:85:c0:2f:37:
                    c1:ea:f7:0f:6e:22:16:94:10:16:66:15:94:83:df:
                    37:04:25:49:41:72:fa:25:0c:75:63:7d:ae:78:72:
                    fd:d3:87:64:8d:27:c6:4d:9a:df:fd:03:25:45:d6:
                    e5:26:11:b6:ac:ae:5c:37:a3:c4:01:6a:53:c9:cb:
                    41:b6:d9:45:cc:b5:26:96:81:65:91:d4:9d:90:cb:
                    47:8c:b0:24:95:67:09:d8:0e:20:cb:ec:6a:6d:61:
                    6d:85:de:31:55:4d:ed:a4:21:51:aa:5a:8c:ed:12:
                    dc:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:FC:BD:D5:45:00:5E:59:50:6C:06:E2:96:B2:08:3E:93:C2:54:13
            X509v3 Authority Key Identifier:
                keyid:D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e3133322e35392e302f32342d3234203d3e2032373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.132.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:37:75:2f:b9:3c:26:d4:ad:73:e9:35:58:6d:bc:24:97:15:
         04:73:9f:06:5d:18:55:2c:22:34:30:97:78:18:da:fd:98:0b:
         3e:94:5c:5a:9c:58:59:7e:e3:2a:48:14:02:97:76:bb:ac:75:
         3d:80:bf:56:b7:70:1c:d6:d3:29:30:ee:71:c6:ee:3a:b6:45:
         06:c5:57:fe:cb:c6:25:43:2f:fa:d8:4d:7d:a0:a5:60:bd:ec:
         f7:fb:ae:a7:e7:0e:0c:c0:5e:37:da:52:64:f9:de:c8:f0:2f:
         31:d8:6f:71:ae:1a:93:8b:ad:57:30:8b:3b:f6:da:e1:ca:1d:
         10:cd:47:f3:7a:2c:f6:42:73:c2:56:bc:95:68:7b:52:f2:ad:
         d3:07:d9:b4:03:51:f6:91:51:58:58:22:94:64:f8:a3:bb:c9:
         b2:d0:ca:fe:4c:47:0c:fa:50:a8:07:13:e1:fd:b2:83:ca:0d:
         b7:f2:a0:71:4d:62:67:b3:3c:b3:ac:dc:bc:22:d9:6f:04:82:
         e1:80:65:80:30:dc:21:ca:e2:d7:18:6c:3a:b7:03:93:6c:63:
         6b:d3:11:4f:92:8b:25:8d:ca:39:7f:db:cf:10:29:ae:29:2a:
         da:df:ba:1e:50:13:92:52:4f:13:43:fe:48:ed:2b:a5:42:14:
         17:cd:5e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:00:54 2025 by rpki-client