Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5HtXJVQF4SKYzuYoc3pVQNRyDz9VEtfaPCSRxYxyxomi/0/3230302e31342e3132302e302f32322d3234203d3e20323730353733.roa
File:                     3230302e31342e3132302e302f32322d3234203d3e20323730353733.roa (raw, json)
Hash identifier:          ODRdBDK+DZijXeMl7tkQvsESPA29zZnhtKHUkXFwz8s=
Subject key identifier:   A6:8D:6A:D2:D2:6A:3A:F4:D8:43:F0:BE:01:17:7A:AE:04:F0:67:F2
Certificate issuer:       /CN=0C798FE22F8627F84460ED2A0EB3901EF772D9E1
Certificate serial:       50E31E7C12468CE76A613054A2C54368DBD1D95B
Authority key identifier: 0C:79:8F:E2:2F:86:27:F8:44:60:ED:2A:0E:B3:90:1E:F7:72:D9:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C798FE22F8627F84460ED2A0EB3901EF772D9E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5HtXJVQF4SKYzuYoc3pVQNRyDz9VEtfaPCSRxYxyxomi/0/3230302e31342e3132302e302f32322d3234203d3e20323730353733.roa
Signing time:             Tue 16 Sep 2025 19:13:42 +0000
ROA not before:           Tue 16 Sep 2025 19:08:42 +0000
ROA not after:            Tue 15 Sep 2026 19:13:42 +0000
asID:                     270573
IP address blocks:        200.14.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5HtXJVQF4SKYzuYoc3pVQNRyDz9VEtfaPCSRxYxyxomi/0/0C798FE22F8627F84460ED2A0EB3901EF772D9E1.crl
                          rsync://rpki-repo.registro.br/repo/5HtXJVQF4SKYzuYoc3pVQNRyDz9VEtfaPCSRxYxyxomi/0/0C798FE22F8627F84460ED2A0EB3901EF772D9E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C798FE22F8627F84460ED2A0EB3901EF772D9E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 06:19:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:e3:1e:7c:12:46:8c:e7:6a:61:30:54:a2:c5:43:68:db:d1:d9:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C798FE22F8627F84460ED2A0EB3901EF772D9E1
        Validity
            Not Before: Sep 16 19:08:42 2025 GMT
            Not After : Sep 15 19:13:42 2026 GMT
        Subject: CN=A68D6AD2D26A3AF4D843F0BE01177AAE04F067F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f8:65:2b:39:0d:fa:1f:47:1b:c2:b9:9a:48:
                    86:0b:b0:b7:55:09:cf:b8:b9:b5:60:79:f2:6f:d1:
                    78:21:bd:f6:50:d3:23:7a:d3:5d:93:7b:50:6b:50:
                    ae:19:82:dc:03:a6:e3:c8:81:1f:c4:09:6e:50:9b:
                    c4:5a:be:60:bf:0a:f3:02:2d:80:5c:c0:43:22:a3:
                    10:d9:67:99:78:ff:06:e9:85:82:82:8f:05:d8:91:
                    c9:c2:f3:c9:2e:8b:d1:4a:ce:22:8a:6a:fe:3d:07:
                    97:da:4f:04:6a:71:45:05:1f:d4:f0:a5:09:bb:b8:
                    cf:c8:a4:60:8e:fd:69:48:82:fa:0b:c6:31:a7:07:
                    ad:8c:8a:df:89:cd:7e:b8:29:47:c4:1e:d4:06:b7:
                    e3:15:61:d0:c1:34:1c:b2:57:ec:7b:ab:00:b5:dc:
                    5f:93:49:b3:ce:04:40:7a:fa:a1:7a:6e:f3:db:88:
                    c8:93:5e:40:18:20:39:d1:fc:6f:d1:e8:9d:5c:48:
                    82:95:e5:3a:ad:10:99:b1:01:1c:88:7c:78:80:73:
                    f1:0b:65:2e:a5:21:7d:cb:85:bf:70:4b:4f:60:3d:
                    de:5f:24:07:1e:98:e2:cd:bd:62:7f:4d:60:4d:54:
                    be:65:2d:f9:c6:6e:ab:c5:28:40:7b:af:12:74:b3:
                    b9:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:8D:6A:D2:D2:6A:3A:F4:D8:43:F0:BE:01:17:7A:AE:04:F0:67:F2
            X509v3 Authority Key Identifier:
                keyid:0C:79:8F:E2:2F:86:27:F8:44:60:ED:2A:0E:B3:90:1E:F7:72:D9:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5HtXJVQF4SKYzuYoc3pVQNRyDz9VEtfaPCSRxYxyxomi/0/0C798FE22F8627F84460ED2A0EB3901EF772D9E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C798FE22F8627F84460ED2A0EB3901EF772D9E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5HtXJVQF4SKYzuYoc3pVQNRyDz9VEtfaPCSRxYxyxomi/0/3230302e31342e3132302e302f32322d3234203d3e20323730353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a3:ff:93:81:f0:51:76:35:99:49:45:14:16:0a:1c:58:37:0c:
         94:72:02:d1:4f:ca:94:ca:ba:e1:93:f0:22:8c:9c:a8:7d:3c:
         5a:59:5a:46:3f:52:ad:0f:13:32:d0:82:f5:77:40:e0:eb:cc:
         36:c5:dd:ad:c8:0e:a0:42:10:54:1f:e3:e6:63:70:eb:32:84:
         f5:53:e2:0d:5e:02:e3:11:15:20:c2:d1:8a:83:8a:3a:9e:07:
         9d:0c:d5:99:d4:65:de:c4:6d:b1:7f:41:19:08:0e:b2:9d:dd:
         6e:d3:e2:ae:fd:54:53:70:cd:65:4a:6c:ac:7b:8c:68:e9:2d:
         26:2a:98:77:1a:00:c7:ca:c6:7b:17:57:1f:d0:82:9b:0e:c8:
         e7:e1:99:6b:cd:43:e8:bf:d7:8f:bc:b3:56:23:ad:de:68:ee:
         6f:a9:4f:49:a1:b0:b9:3f:e8:45:f0:f7:78:21:06:2d:8a:6a:
         97:0f:b9:1c:04:05:ed:af:7e:a4:f1:66:c4:0a:d1:c7:c9:45:
         1b:ea:86:b0:e0:c7:4a:38:36:b5:54:e7:da:05:0e:ef:58:86:
         8e:f5:ea:96:61:3b:bd:4c:74:5c:97:a8:2e:d7:90:55:fd:15:
         87:4c:67:43:76:95:28:e3:30:53:36:4a:9d:ff:94:67:5b:56:
         36:88:2e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 15:32:18 2025 by rpki-client