Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8UoSkvSSNwoYNAd6PMzAUuUchW6YBaugzpHQLDSMVEsJ/0/3230302e3139362e3133322e302f32322d3332203d3e203631353833.roa
File:                     3230302e3139362e3133322e302f32322d3332203d3e203631353833.roa (raw, json)
Hash identifier:          uzmm5ylcizot7exAeSTtRzar+lRNmKPD7UUlSCP1Mvo=
Subject key identifier:   4E:77:4E:95:81:E6:90:CC:44:7B:C0:8D:9C:42:85:78:77:3F:EC:F5
Certificate issuer:       /CN=3CB1370100AB2291FE24983311386BE8544EB443
Certificate serial:       6AF7B0EF8DF40D7044E4427A9852DA0604324632
Authority key identifier: 3C:B1:37:01:00:AB:22:91:FE:24:98:33:11:38:6B:E8:54:4E:B4:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CB1370100AB2291FE24983311386BE8544EB443.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8UoSkvSSNwoYNAd6PMzAUuUchW6YBaugzpHQLDSMVEsJ/0/3230302e3139362e3133322e302f32322d3332203d3e203631353833.roa
Signing time:             Wed 28 May 2025 18:47:02 +0000
ROA not before:           Wed 28 May 2025 18:42:02 +0000
ROA not after:            Wed 27 May 2026 18:47:02 +0000
asID:                     61583
IP address blocks:        200.196.132.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8UoSkvSSNwoYNAd6PMzAUuUchW6YBaugzpHQLDSMVEsJ/0/3CB1370100AB2291FE24983311386BE8544EB443.crl
                          rsync://rpki-repo.registro.br/repo/8UoSkvSSNwoYNAd6PMzAUuUchW6YBaugzpHQLDSMVEsJ/0/3CB1370100AB2291FE24983311386BE8544EB443.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CB1370100AB2291FE24983311386BE8544EB443.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 02:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:f7:b0:ef:8d:f4:0d:70:44:e4:42:7a:98:52:da:06:04:32:46:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CB1370100AB2291FE24983311386BE8544EB443
        Validity
            Not Before: May 28 18:42:02 2025 GMT
            Not After : May 27 18:47:02 2026 GMT
        Subject: CN=4E774E9581E690CC447BC08D9C428578773FECF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3c:0b:d6:0e:40:2b:cc:06:05:89:02:c1:14:
                    25:68:43:2e:66:61:69:25:7a:88:cb:f8:d8:05:f8:
                    eb:a2:32:48:c1:43:3f:0e:98:1a:88:8a:a9:da:56:
                    7d:e1:63:a1:b0:a5:63:1b:c1:59:02:60:2e:a1:66:
                    eb:2b:1e:40:5c:2a:34:0c:d4:a5:eb:2d:bd:a3:8d:
                    8d:48:40:40:00:0e:be:1f:e0:a5:5e:35:ed:3c:ed:
                    20:1d:11:86:71:be:ea:61:db:a3:b9:6f:e3:3d:c4:
                    ac:01:7f:07:c2:94:08:5c:72:91:18:7d:17:2f:e0:
                    ef:25:de:a4:de:7d:81:17:f3:fb:5c:c9:7d:dc:8b:
                    8c:49:8a:9d:6a:e0:7f:69:1b:de:d7:a6:05:5c:4c:
                    c2:84:58:4d:24:1e:d9:19:58:b4:cb:7b:1b:b7:de:
                    8c:03:4f:f5:87:1c:9c:fa:6d:02:da:2d:30:f7:9f:
                    3f:3c:d0:2c:a3:b3:a3:23:93:5f:bd:1a:67:5c:0b:
                    9f:98:7a:f3:c2:81:16:8d:57:19:45:8c:9d:f7:98:
                    0f:24:e5:14:94:89:ee:cb:bc:ff:9b:84:23:0a:95:
                    d7:eb:58:c1:ed:1c:ba:63:6e:26:71:e1:78:43:7f:
                    c0:d2:e0:b9:88:63:41:fc:bc:61:7b:10:1d:61:5e:
                    0d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:77:4E:95:81:E6:90:CC:44:7B:C0:8D:9C:42:85:78:77:3F:EC:F5
            X509v3 Authority Key Identifier:
                keyid:3C:B1:37:01:00:AB:22:91:FE:24:98:33:11:38:6B:E8:54:4E:B4:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8UoSkvSSNwoYNAd6PMzAUuUchW6YBaugzpHQLDSMVEsJ/0/3CB1370100AB2291FE24983311386BE8544EB443.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CB1370100AB2291FE24983311386BE8544EB443.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UoSkvSSNwoYNAd6PMzAUuUchW6YBaugzpHQLDSMVEsJ/0/3230302e3139362e3133322e302f32322d3332203d3e203631353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.196.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:ab:72:a2:13:3b:7d:5c:41:46:eb:88:1d:09:ab:77:25:23:
         21:e9:15:4d:f4:f7:c4:b1:32:87:14:9b:e0:46:0b:1f:84:5d:
         32:44:de:51:f2:e5:1b:f3:71:d7:33:a9:75:47:1f:56:99:ae:
         aa:44:c6:87:55:47:20:dd:5d:dc:19:9a:e1:0f:81:8e:5a:48:
         91:32:1f:11:22:e1:6c:9f:cd:97:39:b5:27:65:da:da:82:61:
         e2:9a:c7:de:65:d3:1e:56:67:bf:3c:bb:8f:42:d4:dc:2e:c3:
         97:a4:2e:64:88:5b:ee:76:c4:f7:b3:3d:67:75:69:7a:0e:52:
         b4:3a:e1:0f:1a:31:6f:72:b2:00:46:10:e1:57:a4:d1:48:52:
         b5:6c:61:b9:7c:d3:0c:c7:c8:1a:eb:78:7e:f6:74:9d:3d:7f:
         c8:72:d6:dc:4b:bb:fb:e2:20:e8:14:f0:0d:18:f3:3f:99:44:
         93:93:cf:63:82:67:c7:b8:79:36:9a:37:b7:a5:df:ff:42:83:
         6b:57:97:d8:34:b2:b6:ff:7f:bd:e3:fb:c5:34:64:72:51:01:
         a4:3d:1b:42:80:98:a7:27:29:83:38:ca:1d:17:21:b4:8f:89:
         df:8f:07:95:3e:ec:66:f4:5f:c1:c5:77:26:a1:e0:11:14:c2:
         11:e6:db:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 19:37:35 2025 by rpki-client