Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/93XGcrsRxGQgVVRvC4ghUZvdBYyvakGTHcUYc3c8YL4s/0/3230302e35322e3232342e302f32322d3332203d3e20313938393439.roa
File:                     3230302e35322e3232342e302f32322d3332203d3e20313938393439.roa (raw, json)
Hash identifier:          MXIQUH/zVGqSlMr0cmzmSgRN89GcYIj/wOZtqfbmfYw=
Subject key identifier:   16:B4:5B:97:ED:58:7A:8B:B0:8B:99:23:A8:68:05:1A:16:6F:B1:C9
Certificate issuer:       /CN=319FF5BA89FB9CFBBD7B60CBE191D270697568A8
Certificate serial:       3BFF6D874FC0C7664D62052615072F9C6FE938D2
Authority key identifier: 31:9F:F5:BA:89:FB:9C:FB:BD:7B:60:CB:E1:91:D2:70:69:75:68:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FF5BA89FB9CFBBD7B60CBE191D270697568A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/93XGcrsRxGQgVVRvC4ghUZvdBYyvakGTHcUYc3c8YL4s/0/3230302e35322e3232342e302f32322d3332203d3e20313938393439.roa
Signing time:             Fri 12 Sep 2025 18:51:50 +0000
ROA not before:           Fri 12 Sep 2025 18:46:50 +0000
ROA not after:            Fri 11 Sep 2026 18:51:50 +0000
asID:                     198949
IP address blocks:        200.52.224.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/93XGcrsRxGQgVVRvC4ghUZvdBYyvakGTHcUYc3c8YL4s/0/319FF5BA89FB9CFBBD7B60CBE191D270697568A8.crl
                          rsync://rpki-repo.registro.br/repo/93XGcrsRxGQgVVRvC4ghUZvdBYyvakGTHcUYc3c8YL4s/0/319FF5BA89FB9CFBBD7B60CBE191D270697568A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FF5BA89FB9CFBBD7B60CBE191D270697568A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 00:04:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:ff:6d:87:4f:c0:c7:66:4d:62:05:26:15:07:2f:9c:6f:e9:38:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319FF5BA89FB9CFBBD7B60CBE191D270697568A8
        Validity
            Not Before: Sep 12 18:46:50 2025 GMT
            Not After : Sep 11 18:51:50 2026 GMT
        Subject: CN=16B45B97ED587A8BB08B9923A868051A166FB1C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:68:24:0d:30:c3:c7:52:bb:16:26:8d:8b:c6:
                    69:85:9e:55:1e:a3:bb:3c:ec:aa:13:3f:a1:5e:87:
                    c7:ed:48:46:ca:b3:7b:41:09:cb:9d:0f:25:5c:18:
                    9e:c2:c7:30:ae:eb:bc:bc:92:7e:61:c5:cc:48:38:
                    bf:d1:e1:bc:6b:96:48:b3:48:c7:13:52:84:45:5c:
                    31:5a:2c:80:72:fe:0a:f8:23:93:25:0b:d5:71:36:
                    b0:bc:fb:b9:57:30:93:08:12:92:1f:7b:be:14:68:
                    14:ca:f4:bf:d0:f2:18:d8:92:96:80:e8:85:39:8a:
                    7e:8e:7f:60:6b:08:6b:4c:47:e6:94:22:ab:24:3f:
                    3a:b3:5c:70:a2:a2:5a:8d:27:03:9d:01:55:c1:a4:
                    2c:30:8d:e7:5b:b5:11:6f:8a:9b:4b:6c:8d:16:48:
                    53:d3:32:7e:0b:c5:e9:5b:bd:4e:98:99:ba:41:bf:
                    ab:09:a2:c3:cc:36:de:dd:2a:45:a1:bb:74:d1:8b:
                    a8:48:59:57:9f:d8:54:02:c6:07:da:8f:7e:43:b8:
                    83:08:c3:65:6d:97:d0:6e:d8:17:98:cf:61:5c:b0:
                    56:0b:3f:f5:2f:ba:a9:78:a3:68:29:c2:b3:2a:54:
                    c4:1f:3b:ab:ce:be:2f:51:f7:ad:a9:79:2f:65:8c:
                    7e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:B4:5B:97:ED:58:7A:8B:B0:8B:99:23:A8:68:05:1A:16:6F:B1:C9
            X509v3 Authority Key Identifier:
                keyid:31:9F:F5:BA:89:FB:9C:FB:BD:7B:60:CB:E1:91:D2:70:69:75:68:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/93XGcrsRxGQgVVRvC4ghUZvdBYyvakGTHcUYc3c8YL4s/0/319FF5BA89FB9CFBBD7B60CBE191D270697568A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FF5BA89FB9CFBBD7B60CBE191D270697568A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/93XGcrsRxGQgVVRvC4ghUZvdBYyvakGTHcUYc3c8YL4s/0/3230302e35322e3232342e302f32322d3332203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.52.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:73:31:7d:44:49:65:57:cd:45:62:1e:f0:b9:7d:36:9c:94:
         80:fe:15:f8:e0:b3:b1:10:ae:81:10:d4:fd:af:b0:2a:9e:61:
         62:6e:ef:6d:6f:67:50:e1:87:20:2a:86:e1:78:a7:ec:bf:5e:
         2d:95:e1:e1:0b:3e:48:7f:81:e0:78:c8:39:bf:4c:d0:34:b0:
         8d:6e:58:f5:ae:43:56:b4:f2:ba:7e:f8:fb:0d:57:bf:97:00:
         57:69:12:02:1a:78:53:51:e5:1c:6e:72:f1:c2:68:e6:24:39:
         4d:eb:62:e8:aa:b0:4d:56:90:7b:45:2a:ee:2f:ac:76:95:74:
         48:ab:dc:db:57:83:7e:1f:25:f9:dc:7c:c3:8d:9f:5a:37:af:
         59:d5:47:21:e7:7d:c9:8b:f1:2b:06:32:25:6d:7f:c7:9e:8f:
         8a:fb:4f:ae:26:0f:0d:1c:12:8c:bc:0b:5e:cd:ab:04:48:5f:
         8f:02:6a:58:51:e0:ad:95:af:52:96:76:5a:54:67:22:bc:a9:
         a4:b5:b5:cf:4d:35:bd:a1:93:3c:c7:9c:d9:0f:67:dd:61:5d:
         4f:46:b2:f8:73:63:d1:a6:d7:c5:d3:16:0e:75:6c:a4:f8:48:
         27:b3:50:98:56:54:f3:ad:6f:db:92:bf:a9:05:04:41:2f:8c:
         ce:02:e4:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 10:27:15 2025 by rpki-client