Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/3230302e3232352e3133362e302f32332d3233203d3e203631373734.roa
File:                     3230302e3232352e3133362e302f32332d3233203d3e203631373734.roa (raw, json)
Hash identifier:          zG6D958R2GT1QsBO21f+GCD8L8eULRmP9c4NoKq2Y8c=
Subject key identifier:   24:36:B5:7F:30:EB:53:4A:25:EC:49:7C:98:8D:D1:F3:E3:A5:34:2D
Certificate issuer:       /CN=E5EED0254DEC985F4548950B5BAF98E84B7063E5
Certificate serial:       0CCC22FA2D4943FAE309854FB63EE588F917E101
Authority key identifier: E5:EE:D0:25:4D:EC:98:5F:45:48:95:0B:5B:AF:98:E8:4B:70:63:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5EED0254DEC985F4548950B5BAF98E84B7063E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/3230302e3232352e3133362e302f32332d3233203d3e203631373734.roa
Signing time:             Sun 31 Aug 2025 00:46:13 +0000
ROA not before:           Sun 31 Aug 2025 00:41:13 +0000
ROA not after:            Sun 30 Aug 2026 00:46:13 +0000
asID:                     61774
IP address blocks:        200.225.136.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/E5EED0254DEC985F4548950B5BAF98E84B7063E5.crl
                          rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/E5EED0254DEC985F4548950B5BAF98E84B7063E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5EED0254DEC985F4548950B5BAF98E84B7063E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 16 Sep 2025 21:21:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:cc:22:fa:2d:49:43:fa:e3:09:85:4f:b6:3e:e5:88:f9:17:e1:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5EED0254DEC985F4548950B5BAF98E84B7063E5
        Validity
            Not Before: Aug 31 00:41:13 2025 GMT
            Not After : Aug 30 00:46:13 2026 GMT
        Subject: CN=2436B57F30EB534A25EC497C988DD1F3E3A5342D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:0d:4a:f9:97:3a:14:d4:8a:53:39:63:f0:17:
                    7d:65:a1:1c:a3:0e:ac:2e:f1:ac:0d:dd:e0:77:be:
                    f7:b6:f7:6c:c5:02:c0:dd:d6:6a:2f:b4:9b:ef:c9:
                    58:d0:03:dc:d2:cd:fa:55:21:d9:f2:be:7f:8a:c8:
                    75:66:66:2d:64:ba:2e:cd:79:eb:0e:72:a0:dc:29:
                    c3:b7:80:a2:f4:ae:6a:ff:64:e4:2d:ff:9a:fa:1b:
                    3e:07:d3:6f:76:a3:d3:85:ca:3e:06:e8:66:28:c5:
                    bd:c3:a8:c0:49:fd:9e:c8:48:4a:57:a1:46:a5:64:
                    d5:b4:76:b5:48:d6:ff:d3:57:34:5c:63:5a:33:86:
                    ca:2b:b5:a3:9b:9e:fd:0b:3d:cd:17:cf:59:d8:7a:
                    7d:12:6e:fd:7c:99:63:42:2a:7d:33:15:a6:81:29:
                    dc:45:a3:fb:ac:88:3a:97:6e:4a:35:72:96:55:6b:
                    e5:7f:0d:c2:aa:58:96:3d:61:5a:e2:37:4b:4e:03:
                    c3:08:44:5e:d8:fa:ba:20:1e:ac:4b:99:43:13:8f:
                    f9:1b:d9:0b:96:47:1d:3d:a4:ce:19:d3:df:cc:b9:
                    cf:93:c5:7f:02:18:69:74:70:74:06:03:38:98:56:
                    2c:a2:ee:08:ba:85:33:ad:5a:0a:6e:25:a1:d7:82:
                    fd:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:36:B5:7F:30:EB:53:4A:25:EC:49:7C:98:8D:D1:F3:E3:A5:34:2D
            X509v3 Authority Key Identifier:
                keyid:E5:EE:D0:25:4D:EC:98:5F:45:48:95:0B:5B:AF:98:E8:4B:70:63:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/E5EED0254DEC985F4548950B5BAF98E84B7063E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5EED0254DEC985F4548950B5BAF98E84B7063E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/3230302e3232352e3133362e302f32332d3233203d3e203631373734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.225.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:50:f7:c2:d2:ab:0b:a1:ad:7e:51:0a:98:a3:dc:59:a4:bd:
         31:d3:f5:4b:eb:7c:c8:27:b7:31:ec:ae:5e:13:cd:7f:53:df:
         63:1f:95:9a:ec:1c:60:b3:cc:22:a7:2f:73:56:6a:26:f4:fc:
         3f:f2:19:1e:e8:32:d7:0c:62:ab:b0:0d:70:73:ff:fa:5c:6b:
         27:e7:8f:f3:16:51:ec:b6:19:52:f9:b6:e3:cc:bf:e4:b8:7b:
         dd:28:20:53:5f:8d:68:3f:74:38:2a:f1:fc:87:8c:bd:e7:da:
         ca:cd:63:0a:54:f0:88:00:3e:a9:cc:7b:ab:ce:b1:12:0c:39:
         4f:03:65:b8:40:30:06:41:9f:d0:78:9b:9d:7f:fb:d5:51:19:
         73:2e:90:06:b5:96:e0:9f:b9:bb:c5:10:98:cc:81:50:46:3e:
         1b:5d:68:7b:73:64:ac:cf:02:e2:c8:07:ab:4a:df:25:0a:5a:
         58:69:bd:65:e6:59:8e:6c:2f:d3:73:ed:e3:32:9b:93:d9:d9:
         a2:7a:d9:2c:46:9d:12:61:a2:78:2d:6e:65:48:08:e6:2a:e6:
         41:40:bc:95:27:1a:a6:dc:b0:0b:39:a7:ec:39:e8:4a:03:38:
         02:9a:ba:42:27:df:0c:79:f1:f4:b0:8a:b2:2d:9f:13:90:23:
         82:6d:5e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 21:29:08 2025 by rpki-client