Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/3230302e3232352e3133362e302f32322d3232203d3e203631373734.roa
File:                     3230302e3232352e3133362e302f32322d3232203d3e203631373734.roa (raw, json)
Hash identifier:          qxxXMIkyCjeDjzM/XAFIUvR+L63ubRREo+lq5Ej19dc=
Subject key identifier:   1D:27:DB:F2:AB:8E:B3:2B:39:F1:B6:54:31:28:96:4C:56:58:53:79
Certificate issuer:       /CN=0C6BF8A3B154A3579DA022CCE42A0E7311F13328
Certificate serial:       3AD49262CE49477267A219620C8252B131B2B786
Authority key identifier: 0C:6B:F8:A3:B1:54:A3:57:9D:A0:22:CC:E4:2A:0E:73:11:F1:33:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C6BF8A3B154A3579DA022CCE42A0E7311F13328.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/3230302e3232352e3133362e302f32322d3232203d3e203631373734.roa
Signing time:             Wed 21 May 2025 19:42:24 +0000
ROA not before:           Wed 21 May 2025 19:37:24 +0000
ROA not after:            Wed 20 May 2026 19:42:24 +0000
asID:                     61774
IP address blocks:        200.225.136.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/0C6BF8A3B154A3579DA022CCE42A0E7311F13328.crl
                          rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/0C6BF8A3B154A3579DA022CCE42A0E7311F13328.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C6BF8A3B154A3579DA022CCE42A0E7311F13328.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Jun 2025 19:19:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:d4:92:62:ce:49:47:72:67:a2:19:62:0c:82:52:b1:31:b2:b7:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C6BF8A3B154A3579DA022CCE42A0E7311F13328
        Validity
            Not Before: May 21 19:37:24 2025 GMT
            Not After : May 20 19:42:24 2026 GMT
        Subject: CN=1D27DBF2AB8EB32B39F1B6543128964C56585379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:92:6f:98:07:e9:bd:3d:7d:5e:fe:aa:b9:73:
                    ef:4c:30:e2:32:04:56:3a:e2:02:4d:e5:3a:28:a3:
                    6e:3e:07:39:8b:19:27:ea:35:0b:91:33:aa:86:73:
                    ae:0c:1c:05:ce:33:7f:2a:c3:12:fa:e6:e1:6a:d9:
                    dc:06:db:ca:58:19:5b:96:74:03:ea:b4:b2:36:00:
                    67:c8:8b:7f:a9:61:b5:ad:54:b7:fb:7f:43:e0:0e:
                    28:78:90:ae:46:ec:36:b5:c0:c6:8f:da:e4:57:c2:
                    88:1f:e2:0e:d1:99:44:b7:c1:82:6e:db:1b:75:87:
                    b0:89:20:30:73:2e:e5:18:7d:4e:aa:a8:08:fc:2c:
                    de:f5:33:6e:17:9c:8f:0e:e2:03:df:dc:c2:2b:30:
                    62:f0:5d:52:90:37:5a:a7:0c:ff:06:58:a2:ae:32:
                    f7:c3:da:e7:b3:4e:64:e9:76:06:aa:84:86:ec:5b:
                    ba:c7:a4:66:82:12:ab:20:e3:17:2e:8a:0c:74:ec:
                    e5:b7:6b:49:d9:e5:04:ad:53:b9:f5:29:cc:5c:e8:
                    0a:e4:c8:ad:35:0d:6f:6d:69:0b:c7:9f:78:fc:19:
                    fe:0c:0e:7f:e2:c9:e2:a1:83:53:4e:64:b9:16:eb:
                    3d:62:ed:0e:ee:61:3c:83:4a:2d:79:55:82:2b:a1:
                    9e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:27:DB:F2:AB:8E:B3:2B:39:F1:B6:54:31:28:96:4C:56:58:53:79
            X509v3 Authority Key Identifier:
                keyid:0C:6B:F8:A3:B1:54:A3:57:9D:A0:22:CC:E4:2A:0E:73:11:F1:33:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/0C6BF8A3B154A3579DA022CCE42A0E7311F13328.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C6BF8A3B154A3579DA022CCE42A0E7311F13328.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/3230302e3232352e3133362e302f32322d3232203d3e203631373734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.225.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:c2:16:ad:da:b2:ae:f0:36:19:ea:66:d4:63:84:58:08:0a:
         a9:01:dd:63:e0:80:21:cb:fd:c5:ac:2e:56:27:fc:80:23:56:
         43:e9:3f:02:72:e4:dc:85:69:05:f1:e4:18:aa:29:50:2a:66:
         e6:c9:6b:dd:6f:cf:e9:33:2e:03:1e:95:d0:d2:05:f5:5b:b7:
         9b:dc:78:94:e0:e3:b8:1c:6f:f0:a5:f0:df:15:6a:31:61:5b:
         52:6a:d4:77:42:65:7c:f6:fd:f4:ce:13:e9:13:5f:cc:38:8d:
         06:4d:59:56:3c:59:50:22:2d:38:26:c6:36:df:d5:97:e1:ae:
         ba:87:2b:08:c2:a3:61:54:8a:40:ec:61:18:6c:74:6d:7c:d7:
         4a:b7:9f:db:e4:f5:60:2b:d0:6c:e6:c2:aa:4e:e7:91:25:08:
         ec:83:96:f4:bb:73:96:62:e8:80:ce:f5:80:35:f3:5f:ce:0c:
         63:b5:b2:28:81:88:47:b0:5f:f4:89:25:f0:05:10:25:d3:c9:
         a8:79:33:87:d3:aa:23:0f:93:98:6f:55:24:af:48:8b:aa:d1:
         49:02:24:26:c0:b9:2f:94:34:ce:e1:49:7d:e9:a6:05:f9:dd:
         4c:4e:1b:c8:85:3d:31:67:cf:06:76:b4:ec:00:53:f9:10:4d:
         aa:60:12:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 04:37:30 2025 by rpki-client