Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/3230302e3232352e3133382e302f32332d3233203d3e203631373734.roa
File:                     3230302e3232352e3133382e302f32332d3233203d3e203631373734.roa (raw, json)
Hash identifier:          8B3PmDYO1AxiBo+YU2o8fc0cmVhzPfsl7o5YGQH5yz4=
Subject key identifier:   D6:63:B5:05:D9:08:55:10:CB:CE:4B:46:77:DA:4A:0F:C7:0C:9D:4B
Certificate issuer:       /CN=0C6BF8A3B154A3579DA022CCE42A0E7311F13328
Certificate serial:       3156B06C12C43B8A9D3440C8CBD68F2E80FB346A
Authority key identifier: 0C:6B:F8:A3:B1:54:A3:57:9D:A0:22:CC:E4:2A:0E:73:11:F1:33:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C6BF8A3B154A3579DA022CCE42A0E7311F13328.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/3230302e3232352e3133382e302f32332d3233203d3e203631373734.roa
Signing time:             Wed 21 May 2025 19:42:24 +0000
ROA not before:           Wed 21 May 2025 19:37:24 +0000
ROA not after:            Wed 20 May 2026 19:42:24 +0000
asID:                     61774
IP address blocks:        200.225.138.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/0C6BF8A3B154A3579DA022CCE42A0E7311F13328.crl
                          rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/0C6BF8A3B154A3579DA022CCE42A0E7311F13328.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C6BF8A3B154A3579DA022CCE42A0E7311F13328.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 12 Jun 2025 06:21:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:56:b0:6c:12:c4:3b:8a:9d:34:40:c8:cb:d6:8f:2e:80:fb:34:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C6BF8A3B154A3579DA022CCE42A0E7311F13328
        Validity
            Not Before: May 21 19:37:24 2025 GMT
            Not After : May 20 19:42:24 2026 GMT
        Subject: CN=D663B505D9085510CBCE4B4677DA4A0FC70C9D4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1a:7b:c7:7e:47:8b:5f:44:af:80:8c:74:f5:
                    1c:0c:94:3b:a7:c6:eb:56:1b:8f:ec:6c:99:fc:a9:
                    f7:fa:3a:f8:97:f5:9a:69:26:e2:9c:2f:2b:d9:e6:
                    1e:47:07:17:0f:04:05:ed:fb:5b:45:89:c8:9b:39:
                    16:4f:c5:9d:ec:be:8f:ed:1a:7e:97:0b:29:5f:89:
                    0b:f1:6b:56:1d:77:85:fa:01:b5:a9:41:1f:51:a9:
                    c6:be:05:6a:4d:7d:26:80:a2:e3:4e:df:bd:4d:21:
                    0a:40:c6:fb:a9:4d:69:5e:a1:0a:33:f4:84:f3:bd:
                    6c:fe:78:45:67:87:6f:2e:08:52:0f:7e:93:35:e1:
                    90:bc:9f:0a:62:a9:8a:75:af:75:24:ca:2c:9e:84:
                    9e:5a:dc:5a:a8:0f:82:2e:03:7c:59:29:e2:75:65:
                    fc:a4:41:fd:4b:c6:6a:6e:43:d3:1c:82:f9:64:86:
                    e6:0e:3c:46:0f:e2:a8:86:70:1e:e4:cf:62:d5:4f:
                    5b:85:16:d3:1b:f5:da:45:07:5a:d8:7b:36:d1:50:
                    43:11:db:23:2f:f2:fd:02:fd:ae:32:03:1b:14:ce:
                    4d:12:e0:9e:a2:ae:e2:44:b8:1d:44:ab:d6:fb:78:
                    1d:09:dc:9c:6f:75:95:7c:9a:ce:11:f9:8d:18:fb:
                    f8:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:63:B5:05:D9:08:55:10:CB:CE:4B:46:77:DA:4A:0F:C7:0C:9D:4B
            X509v3 Authority Key Identifier:
                keyid:0C:6B:F8:A3:B1:54:A3:57:9D:A0:22:CC:E4:2A:0E:73:11:F1:33:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/0C6BF8A3B154A3579DA022CCE42A0E7311F13328.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C6BF8A3B154A3579DA022CCE42A0E7311F13328.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/3230302e3232352e3133382e302f32332d3233203d3e203631373734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.225.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:3a:c9:80:59:a5:6e:93:94:34:4f:04:a8:95:16:f1:79:a8:
         f3:8f:83:09:39:6c:a9:56:71:dc:5c:ca:ba:0c:ee:55:c2:91:
         26:a8:56:55:2c:1b:32:33:02:de:60:01:4c:34:48:9a:35:9b:
         3c:b4:3d:cf:6f:67:a4:17:67:9c:c5:ed:1f:ab:27:b2:b4:6d:
         09:38:e2:07:6f:44:81:e8:9c:47:b0:0c:63:9f:4b:50:86:ae:
         fe:fb:b9:6e:48:e5:f6:34:21:27:1c:d4:75:1e:0e:15:af:b8:
         93:db:bf:e1:67:28:62:48:c4:d2:fb:67:29:02:75:54:c5:1a:
         8e:42:a2:dc:14:c2:01:b7:dd:3c:de:f0:65:55:92:07:95:29:
         4d:0a:fc:28:bb:8e:e1:48:b3:b4:4a:8c:e7:51:4b:65:36:28:
         c7:ca:8a:96:de:9d:1f:96:73:00:bf:be:b8:07:a9:ba:48:55:
         34:fe:c3:54:bd:e9:da:ec:25:79:8c:99:93:2c:a7:cf:01:7d:
         c5:59:d2:b7:89:e2:cd:99:91:b2:55:1a:67:16:3f:1e:fe:54:
         05:eb:45:39:4d:2d:b4:2c:47:52:33:83:53:7e:ac:5d:e0:dd:
         d5:f4:ab:7a:e5:12:51:37:b0:b9:3b:0f:b8:75:1d:b7:63:e6:
         68:43:63:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 07:55:09 2025 by rpki-client