Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e31372e38302e302f32302d3230203d3e2032373136.roa
File:                     3230302e31372e38302e302f32302d3230203d3e2032373136.roa (raw, json)
Hash identifier:          G77YlSGruRRpgx9NThzRfQDB7uQ0Eu68bqTwD2Zg+70=
Subject key identifier:   BB:69:61:1E:F5:AC:16:5D:3D:B9:27:EE:47:53:9E:00:AE:B5:8F:CF
Certificate issuer:       /CN=D54C376960A26972A0B767BDA084048DFFE3673E
Certificate serial:       614ADBEFAF90E59CD0139636F3685C5124C62115
Authority key identifier: D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e31372e38302e302f32302d3230203d3e2032373136.roa
Signing time:             Tue 22 Jul 2025 15:09:02 +0000
ROA not before:           Tue 22 Jul 2025 15:04:02 +0000
ROA not after:            Tue 21 Jul 2026 15:09:02 +0000
asID:                     2716
IP address blocks:        200.17.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl
                          rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 10:35:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:4a:db:ef:af:90:e5:9c:d0:13:96:36:f3:68:5c:51:24:c6:21:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D54C376960A26972A0B767BDA084048DFFE3673E
        Validity
            Not Before: Jul 22 15:04:02 2025 GMT
            Not After : Jul 21 15:09:02 2026 GMT
        Subject: CN=BB69611EF5AC165D3DB927EE47539E00AEB58FCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:3c:47:27:e7:6d:a7:3e:cd:52:7d:a5:05:9d:
                    4a:b9:a5:5f:1b:d1:ce:b1:cb:96:57:f2:60:0e:2c:
                    d9:2a:4d:74:99:73:8c:18:0c:fe:c4:68:f8:45:1f:
                    9a:99:46:89:dd:c3:8b:0c:d8:d5:c7:ff:da:d5:97:
                    d3:c8:66:18:03:2a:b3:39:e0:31:3e:20:a1:8d:a4:
                    0d:f8:6a:5e:67:1f:40:28:56:fa:fd:c4:fa:ba:96:
                    e5:2e:bb:fc:6b:fb:34:90:79:c3:57:73:f4:82:63:
                    75:f6:c4:a6:25:8d:aa:f6:f2:83:74:3f:b1:27:3e:
                    03:b9:d2:03:1b:16:a4:2d:95:dd:ac:e9:03:38:d9:
                    06:52:4d:f2:0d:a0:c2:f2:b8:cb:1e:9c:94:dc:0e:
                    b0:b2:32:1e:f5:e6:58:60:f5:17:38:7b:d4:ec:20:
                    14:23:5b:c3:88:05:ae:78:90:32:64:2d:31:65:cf:
                    51:8d:94:d4:88:5a:ea:73:1d:e9:db:80:89:fa:8d:
                    c8:ed:55:50:4a:89:0e:5f:b9:ed:cf:20:22:86:30:
                    7f:68:01:a9:68:8b:c0:64:76:2c:63:99:be:6f:ca:
                    cb:48:8e:84:c0:ae:e1:e7:b4:84:22:9f:d1:f5:5c:
                    bd:82:9d:61:9b:2f:f5:12:91:43:15:5e:38:d0:3c:
                    bc:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:69:61:1E:F5:AC:16:5D:3D:B9:27:EE:47:53:9E:00:AE:B5:8F:CF
            X509v3 Authority Key Identifier:
                keyid:D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e31372e38302e302f32302d3230203d3e2032373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.17.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8f:39:61:33:3b:1b:4b:03:28:01:ba:bd:aa:89:35:47:2f:45:
         d1:b9:40:51:66:f4:01:e6:bd:0a:c3:8b:48:8e:39:15:27:ad:
         c3:d9:3f:97:e1:52:04:6f:c3:1c:7b:e5:a6:87:d1:2a:78:bb:
         c1:4c:46:55:e1:13:a6:f0:f2:5d:7a:3f:0f:db:43:12:b9:ce:
         2a:24:17:ed:2a:53:bc:d9:d0:30:e0:ec:e5:b6:1d:7d:cb:16:
         31:dd:12:4c:3e:96:90:32:41:99:77:81:bd:5a:cf:14:6b:51:
         28:a7:76:0d:ed:f9:2d:09:5a:13:97:2b:50:f1:7e:41:3d:48:
         d4:15:d4:10:92:34:13:4c:88:7a:c2:2a:ff:70:86:78:b1:90:
         1f:78:77:21:5a:92:b1:7d:70:e2:62:8d:95:fa:64:80:83:d2:
         c1:5a:7c:1e:3f:3a:a2:61:62:37:fe:2c:f0:50:71:d0:29:f4:
         04:75:d6:ad:02:55:73:a4:ca:f9:37:80:18:61:67:99:5c:be:
         11:a6:67:93:35:a3:87:cf:b0:00:ad:8a:ed:b0:6b:4e:b0:6a:
         95:cd:a5:96:21:f7:f8:07:12:17:da:72:75:2b:87:a3:55:55:
         58:27:aa:c9:ab:81:68:e0:e6:47:3c:86:b5:8d:5c:f5:3e:cd:
         7c:83:be:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:04:45 2025 by rpki-client