Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GNn4pqWxmT17yMqPHFtJ8BrRuEE1VybuPyxB8cir9a1f/0/3230302e372e382e302f32322d3234203d3e203631393232.roa
File:                     3230302e372e382e302f32322d3234203d3e203631393232.roa (raw, json)
Hash identifier:          Rv3HjPhw2rsRyEwzDS3ezF2QeE3Emvwkx1+jETasAKI=
Subject key identifier:   AA:15:1D:7E:83:33:46:BA:AD:E6:92:AE:92:BD:7C:1E:EB:02:02:F5
Certificate issuer:       /CN=751B2E86DFEE001CFA6872E185B113374FEF9041
Certificate serial:       61E68A534AAEFDDF6D720C68AD8B19BE0AFF1BDB
Authority key identifier: 75:1B:2E:86:DF:EE:00:1C:FA:68:72:E1:85:B1:13:37:4F:EF:90:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/751B2E86DFEE001CFA6872E185B113374FEF9041.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GNn4pqWxmT17yMqPHFtJ8BrRuEE1VybuPyxB8cir9a1f/0/3230302e372e382e302f32322d3234203d3e203631393232.roa
Signing time:             Wed 23 Jul 2025 13:08:08 +0000
ROA not before:           Wed 23 Jul 2025 13:03:08 +0000
ROA not after:            Wed 22 Jul 2026 13:08:08 +0000
asID:                     61922
IP address blocks:        200.7.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GNn4pqWxmT17yMqPHFtJ8BrRuEE1VybuPyxB8cir9a1f/0/751B2E86DFEE001CFA6872E185B113374FEF9041.crl
                          rsync://rpki-repo.registro.br/repo/GNn4pqWxmT17yMqPHFtJ8BrRuEE1VybuPyxB8cir9a1f/0/751B2E86DFEE001CFA6872E185B113374FEF9041.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/751B2E86DFEE001CFA6872E185B113374FEF9041.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 15:48:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:e6:8a:53:4a:ae:fd:df:6d:72:0c:68:ad:8b:19:be:0a:ff:1b:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=751B2E86DFEE001CFA6872E185B113374FEF9041
        Validity
            Not Before: Jul 23 13:03:08 2025 GMT
            Not After : Jul 22 13:08:08 2026 GMT
        Subject: CN=AA151D7E833346BAADE692AE92BD7C1EEB0202F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:98:1a:ad:e6:45:ed:37:f8:7b:68:47:d9:43:
                    dc:95:fe:f7:59:de:2e:fe:62:e1:c3:ac:ec:75:6e:
                    ce:6e:21:20:d8:a9:d1:9f:d1:43:2d:79:95:0d:cd:
                    64:d0:67:ae:88:15:43:7d:3d:a5:ed:8e:89:e9:94:
                    24:9f:69:0b:17:63:ab:eb:55:d4:ca:4c:08:b4:20:
                    b3:88:f7:9e:08:f1:d6:60:e9:b7:f5:62:58:be:8e:
                    0f:64:83:7e:b4:67:02:75:c3:b7:fb:40:ca:14:9e:
                    3d:9d:bd:87:d8:6a:c0:51:5b:79:d2:2c:91:75:9a:
                    00:b3:2d:68:62:35:2a:a5:16:3d:59:bd:d5:44:b3:
                    b2:0a:ce:70:ff:87:db:8f:21:c7:55:e7:88:1c:ab:
                    46:02:52:0b:75:06:85:74:9b:7f:19:d2:fd:3c:d1:
                    45:ed:45:43:ea:f8:52:46:94:e8:56:4b:65:ac:56:
                    71:7b:1e:7a:f9:60:8e:49:c8:5d:35:74:4b:81:34:
                    3e:dc:a3:ac:1d:4d:e9:c0:96:c2:19:b2:64:c7:44:
                    05:80:c2:da:5f:a2:8d:82:0a:f4:82:98:0b:e0:8b:
                    eb:98:f7:2d:61:a6:de:d7:5b:7c:78:64:04:6d:2d:
                    5f:49:6d:b8:e4:39:be:a3:3a:8f:ba:e5:84:41:7b:
                    7f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:15:1D:7E:83:33:46:BA:AD:E6:92:AE:92:BD:7C:1E:EB:02:02:F5
            X509v3 Authority Key Identifier:
                keyid:75:1B:2E:86:DF:EE:00:1C:FA:68:72:E1:85:B1:13:37:4F:EF:90:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GNn4pqWxmT17yMqPHFtJ8BrRuEE1VybuPyxB8cir9a1f/0/751B2E86DFEE001CFA6872E185B113374FEF9041.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/751B2E86DFEE001CFA6872E185B113374FEF9041.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GNn4pqWxmT17yMqPHFtJ8BrRuEE1VybuPyxB8cir9a1f/0/3230302e372e382e302f32322d3234203d3e203631393232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:62:f5:09:a9:26:da:3d:a7:78:60:56:5c:cc:a5:02:17:c5:
         31:e9:10:ff:d3:00:5b:14:3d:53:d3:ad:ff:09:cd:55:1f:e3:
         db:9a:1b:7c:60:ff:2b:99:eb:53:e4:3c:4a:b4:86:37:98:85:
         71:ef:ae:9d:9c:c4:2b:aa:2b:dc:66:0f:3a:48:c0:40:df:f2:
         a3:62:69:49:0d:b1:60:31:d6:79:ae:0e:19:3b:0d:14:a7:72:
         09:d3:26:3f:3f:c3:21:d7:21:32:8b:30:f0:73:10:4a:41:ae:
         49:0e:ad:a3:37:b1:88:a9:e8:23:1b:d7:99:ac:d6:e1:c0:73:
         58:39:9e:40:dd:36:8e:28:e8:21:bc:37:b5:e0:3d:17:96:c8:
         27:b4:9d:54:15:0b:b6:0d:d0:e8:2f:61:62:b3:af:07:d2:8a:
         4d:45:62:cd:d6:e8:15:5e:f5:bf:ca:47:47:49:aa:a8:99:44:
         d6:02:63:0b:a9:e1:f2:9d:a5:1c:87:d1:0b:5d:d3:d3:5e:eb:
         ba:47:1a:97:08:0c:64:bc:ef:96:93:ce:1c:3d:d1:2f:3f:4d:
         f8:b5:76:65:b5:fa:4f:65:aa:3f:9e:be:3c:ab:2b:7f:21:ba:
         37:23:a7:cd:58:f1:9a:e9:9a:8c:5b:cf:5b:a4:6e:82:b4:98:
         fb:08:05:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:51:51 2025 by rpki-client