Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/948iD2h8XvwkiBNCCTMxW71LCSUEHmYP41H8qdB943ti/0/3230302e3138392e382e302f32312d3234203d3e203532363839.roa
File:                     3230302e3138392e382e302f32312d3234203d3e203532363839.roa (raw, json)
Hash identifier:          NQb+riPvCdo1Cxr7oD9EEAj/pi0uaNfUWjfqLS/SUZU=
Subject key identifier:   B6:96:CA:00:EA:6A:1E:6E:86:E5:75:79:FA:8A:75:7A:49:B5:D7:AA
Certificate issuer:       /CN=D4F7947FFA165065796964648407CC7868D8C807
Certificate serial:       5411037F5CE40663DC71FE71BDA0AD6BF7314719
Authority key identifier: D4:F7:94:7F:FA:16:50:65:79:69:64:64:84:07:CC:78:68:D8:C8:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4F7947FFA165065796964648407CC7868D8C807.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/948iD2h8XvwkiBNCCTMxW71LCSUEHmYP41H8qdB943ti/0/3230302e3138392e382e302f32312d3234203d3e203532363839.roa
Signing time:             Mon 15 Sep 2025 00:27:14 +0000
ROA not before:           Mon 15 Sep 2025 00:22:14 +0000
ROA not after:            Mon 14 Sep 2026 00:27:14 +0000
asID:                     52689
IP address blocks:        200.189.8.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/948iD2h8XvwkiBNCCTMxW71LCSUEHmYP41H8qdB943ti/0/D4F7947FFA165065796964648407CC7868D8C807.crl
                          rsync://rpki-repo.registro.br/repo/948iD2h8XvwkiBNCCTMxW71LCSUEHmYP41H8qdB943ti/0/D4F7947FFA165065796964648407CC7868D8C807.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4F7947FFA165065796964648407CC7868D8C807.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 00:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:11:03:7f:5c:e4:06:63:dc:71:fe:71:bd:a0:ad:6b:f7:31:47:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4F7947FFA165065796964648407CC7868D8C807
        Validity
            Not Before: Sep 15 00:22:14 2025 GMT
            Not After : Sep 14 00:27:14 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f4:01:36:8f:c4:99:ae:31:74:a7:bb:a4:e4:
                    0c:c2:ef:fe:15:7f:fd:83:4f:f7:3a:ca:36:c4:b7:
                    72:40:cb:f0:b7:b3:d7:b8:23:c9:2e:9a:73:a3:14:
                    c3:75:26:1c:62:a0:e0:25:d8:0d:b9:32:55:2b:5f:
                    f3:a6:ce:36:34:2d:9f:cc:02:58:58:d8:b8:05:bb:
                    14:f8:cc:5c:29:59:02:33:36:0c:b8:45:44:54:c0:
                    ed:ce:df:fb:40:3d:cf:da:3b:93:cf:8b:4f:c8:ae:
                    19:53:f9:24:33:ae:ee:01:48:54:e0:f9:b9:6d:f9:
                    f1:18:d9:c8:78:6c:ca:10:7c:47:6d:71:46:03:54:
                    58:cf:d1:8c:4b:fc:52:b0:10:99:86:bc:1e:6b:bc:
                    be:4a:78:55:e0:ea:75:88:f7:a4:c4:dc:19:32:70:
                    be:91:02:05:fd:b4:01:4d:6a:60:9b:56:a1:0e:f1:
                    28:cb:f1:90:31:a7:56:fd:cc:d7:7d:ec:fc:ae:77:
                    b8:bd:e5:3d:05:5d:ef:95:e1:79:6f:a1:cc:d4:1b:
                    75:ae:5a:06:02:6f:bc:a9:4e:05:33:ee:de:16:7b:
                    ff:23:d0:92:1a:74:44:64:3c:95:92:bc:3c:3d:1f:
                    d1:d9:57:7b:f0:a3:b0:92:b3:ab:26:d0:b6:e9:c6:
                    68:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:96:CA:00:EA:6A:1E:6E:86:E5:75:79:FA:8A:75:7A:49:B5:D7:AA
            X509v3 Authority Key Identifier:
                keyid:D4:F7:94:7F:FA:16:50:65:79:69:64:64:84:07:CC:78:68:D8:C8:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/948iD2h8XvwkiBNCCTMxW71LCSUEHmYP41H8qdB943ti/0/D4F7947FFA165065796964648407CC7868D8C807.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4F7947FFA165065796964648407CC7868D8C807.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/948iD2h8XvwkiBNCCTMxW71LCSUEHmYP41H8qdB943ti/0/3230302e3138392e382e302f32312d3234203d3e203532363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.189.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         53:46:9b:2a:f6:af:39:66:0a:b0:4c:d7:6d:cd:8d:58:83:fb:
         6a:4a:c8:2d:e8:65:0d:3a:99:e1:dc:42:3c:6a:ab:cf:51:e4:
         89:6a:23:de:41:2a:5a:c2:30:29:53:7d:6a:53:90:56:4d:cf:
         2e:6e:62:af:1d:fd:6d:d5:2b:7b:7a:f4:bd:c1:99:60:b1:fc:
         fa:d7:84:2b:0f:c4:79:3f:77:62:4f:c9:1e:a1:29:27:90:1a:
         93:ca:7d:11:cf:af:8b:f4:71:e8:0b:82:0f:9f:12:01:1d:90:
         f8:e2:21:22:c0:5f:47:52:88:69:e6:dc:2c:ee:d9:6e:35:17:
         fc:e2:b0:2f:d3:19:26:a5:14:60:74:4c:3e:50:02:d4:a6:3b:
         cc:25:96:f1:96:1a:22:ae:bd:4d:1c:f1:4a:16:43:c9:c0:4e:
         1f:ce:6e:a1:e1:d8:87:f7:10:fd:d7:c2:54:4e:3c:de:6c:63:
         3d:f1:6f:29:06:be:d4:e3:b8:a1:03:70:1b:54:17:68:0e:86:
         31:2b:75:12:8c:9d:3a:3a:46:98:b6:90:10:65:8d:02:49:9d:
         43:1e:02:f1:52:53:8c:fd:5e:91:36:c1:d7:cc:47:ea:7e:56:
         af:91:e1:f4:76:ba:33:60:cd:73:0d:55:a0:ab:a4:b9:ef:65:
         3c:da:eb:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 16:34:40 2025 by rpki-client