Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e31392e3235302e302f32342d3234203d3e2032373136.roa
File:                     3230302e31392e3235302e302f32342d3234203d3e2032373136.roa (raw, json)
Hash identifier:          yqzw2YL9VJI7+tG6EKeTVBTTYRaUUOe31YiDPYocBgo=
Subject key identifier:   F3:19:46:84:EB:2F:BF:A9:E3:39:68:E7:C6:FF:82:4D:BF:2D:EA:38
Certificate issuer:       /CN=D54C376960A26972A0B767BDA084048DFFE3673E
Certificate serial:       10902851F886AF28DC2A15DCD5A2634253DC69AC
Authority key identifier: D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e31392e3235302e302f32342d3234203d3e2032373136.roa
Signing time:             Tue 22 Jul 2025 15:09:05 +0000
ROA not before:           Tue 22 Jul 2025 15:04:05 +0000
ROA not after:            Tue 21 Jul 2026 15:09:05 +0000
asID:                     2716
IP address blocks:        200.19.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl
                          rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 15:45:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:90:28:51:f8:86:af:28:dc:2a:15:dc:d5:a2:63:42:53:dc:69:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D54C376960A26972A0B767BDA084048DFFE3673E
        Validity
            Not Before: Jul 22 15:04:05 2025 GMT
            Not After : Jul 21 15:09:05 2026 GMT
        Subject: CN=F3194684EB2FBFA9E33968E7C6FF824DBF2DEA38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e4:91:71:5e:a7:21:fb:18:a7:42:b0:d2:f7:
                    20:17:f6:0c:46:b9:bf:3f:a9:46:33:3c:de:0b:f9:
                    07:96:dd:88:7c:7e:46:ba:3c:5c:71:7a:9e:48:a3:
                    08:1f:02:19:49:00:8e:7a:f0:b1:26:c9:6d:68:6e:
                    53:1f:f0:ee:e3:77:60:ac:3d:66:f9:45:c3:69:a7:
                    f8:f6:44:3d:87:7a:b3:92:7e:fd:86:e4:25:ce:72:
                    9f:89:b7:08:38:f4:5c:68:c9:26:47:c9:0c:02:e3:
                    90:a5:fc:f5:87:a3:c6:96:8a:2a:1a:ec:fd:d2:20:
                    ad:e5:91:3f:2b:c0:2a:16:7d:c3:6e:91:41:03:d1:
                    0a:86:8e:e0:81:2f:e8:7a:41:07:f5:4b:92:f1:ca:
                    36:a5:c9:c4:57:35:15:4b:78:75:45:3d:25:4c:7d:
                    df:dd:b3:e4:9c:ad:02:83:39:e9:59:2a:9e:02:a8:
                    72:8c:67:e9:83:4e:3d:2d:a7:82:7d:44:3f:7e:0f:
                    e5:81:2d:62:50:1f:c8:fe:03:41:c8:a9:0b:ab:6b:
                    8d:93:3d:0f:e9:f9:ba:13:56:74:d0:eb:50:8a:4e:
                    f6:bf:4f:b0:9f:e6:01:45:8e:0e:1a:cf:d4:92:92:
                    c5:6d:5b:00:b8:79:e1:c3:9b:c9:63:ed:5d:ae:32:
                    2b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:19:46:84:EB:2F:BF:A9:E3:39:68:E7:C6:FF:82:4D:BF:2D:EA:38
            X509v3 Authority Key Identifier:
                keyid:D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e31392e3235302e302f32342d3234203d3e2032373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.19.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:8e:18:e5:49:e5:5e:03:a5:7b:fd:95:51:d6:fb:2a:f1:10:
         11:05:f6:20:90:c8:44:5d:ad:63:51:5c:68:e7:cd:a5:6e:4a:
         c5:fd:3b:e0:ee:64:22:ea:a1:50:02:5b:4a:fa:9a:ae:d5:2d:
         94:70:62:d5:9f:d3:03:80:e8:c5:6e:16:02:77:52:ed:1d:8c:
         39:b4:3e:d8:27:ae:92:99:8f:57:14:b7:4d:fb:e3:b8:a5:bf:
         ec:a1:0c:ab:b3:7a:28:0f:55:58:18:5d:c4:89:07:26:0f:53:
         b6:b9:cb:64:4e:3d:02:54:e6:e0:c7:f3:9a:49:4d:ff:6c:69:
         5a:d4:f8:8c:2a:fb:1c:29:99:63:a4:ae:49:ab:ce:03:80:35:
         62:07:47:88:1d:f6:60:bd:84:18:b9:84:07:91:f4:12:62:fb:
         1a:62:f4:4d:b8:e8:b0:88:0b:47:26:bc:be:a3:2a:f7:0b:9d:
         ec:bb:08:4b:b2:81:18:ad:90:41:77:1a:20:e9:e7:30:26:62:
         4e:99:c0:54:bc:76:a8:22:87:ed:18:95:af:e7:93:ac:b7:ba:
         fa:1f:7e:d3:19:f6:14:22:63:61:90:58:e3:2e:53:89:f7:e4:
         fa:f9:19:56:ef:8a:1a:47:d6:79:c5:9d:9e:96:77:ac:5a:f4:
         fc:ac:06:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:00:49 2025 by rpki-client