Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/3230302e3232352e3133382e302f32332d3233203d3e203631373734.roa
File:                     3230302e3232352e3133382e302f32332d3233203d3e203631373734.roa (raw, json)
Hash identifier:          0APN5n3O6XROzZ4bvij/Pxp8IWuJ202xZVQnxUpcHW4=
Subject key identifier:   3C:73:7C:87:CD:65:4F:E9:98:9C:1D:31:9A:49:8F:15:B7:C9:C2:21
Certificate issuer:       /CN=E5EED0254DEC985F4548950B5BAF98E84B7063E5
Certificate serial:       2EF4231BF90537F182AADA65E275ED710980BA19
Authority key identifier: E5:EE:D0:25:4D:EC:98:5F:45:48:95:0B:5B:AF:98:E8:4B:70:63:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5EED0254DEC985F4548950B5BAF98E84B7063E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/3230302e3232352e3133382e302f32332d3233203d3e203631373734.roa
Signing time:             Sun 31 Aug 2025 00:46:12 +0000
ROA not before:           Sun 31 Aug 2025 00:41:12 +0000
ROA not after:            Sun 30 Aug 2026 00:46:12 +0000
asID:                     61774
IP address blocks:        200.225.138.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/E5EED0254DEC985F4548950B5BAF98E84B7063E5.crl
                          rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/E5EED0254DEC985F4548950B5BAF98E84B7063E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5EED0254DEC985F4548950B5BAF98E84B7063E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 16 Sep 2025 20:26:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:f4:23:1b:f9:05:37:f1:82:aa:da:65:e2:75:ed:71:09:80:ba:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5EED0254DEC985F4548950B5BAF98E84B7063E5
        Validity
            Not Before: Aug 31 00:41:12 2025 GMT
            Not After : Aug 30 00:46:12 2026 GMT
        Subject: CN=3C737C87CD654FE9989C1D319A498F15B7C9C221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:76:13:19:d0:94:dc:f9:3e:de:6c:9a:08:c5:
                    52:b3:5a:68:83:0a:44:a2:d3:8f:92:d8:01:20:3e:
                    bc:8d:23:19:5f:3a:ba:01:d9:c7:20:6d:be:1c:8e:
                    80:cf:83:46:c6:7e:63:ae:f3:d2:b8:d4:ec:ae:7a:
                    3a:07:d3:6a:77:77:84:cd:01:33:9c:c9:cc:6a:45:
                    3d:9c:12:ff:f1:4f:09:49:08:8b:6a:41:b2:18:ee:
                    f6:57:17:ff:a2:5d:bc:e4:3c:06:34:85:08:ab:dc:
                    4a:f2:94:aa:13:07:cb:d3:9a:72:b6:c8:fe:8d:4c:
                    2f:16:a5:ca:4c:b6:e8:64:6e:2e:10:d6:fb:2d:82:
                    05:d1:a7:31:5d:8c:4a:57:8e:50:6c:2b:e8:ac:59:
                    b0:87:97:3d:ec:72:e6:37:e4:a2:b1:b4:61:22:16:
                    7d:ed:e2:32:4b:65:ef:18:1c:5e:3e:65:87:c3:f7:
                    6a:b6:eb:eb:3c:23:27:7e:39:04:51:6f:f1:fe:8d:
                    b6:fb:4e:b1:3d:0f:79:b6:c1:29:80:92:76:78:a5:
                    54:eb:b2:b0:78:1a:af:cb:c2:a4:a7:1f:37:54:11:
                    5b:35:ab:4a:53:51:d6:f9:d1:7f:df:56:82:e4:d1:
                    ae:37:3f:d8:1c:87:d1:9c:8b:18:58:6e:56:fd:2d:
                    98:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:73:7C:87:CD:65:4F:E9:98:9C:1D:31:9A:49:8F:15:B7:C9:C2:21
            X509v3 Authority Key Identifier:
                keyid:E5:EE:D0:25:4D:EC:98:5F:45:48:95:0B:5B:AF:98:E8:4B:70:63:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/E5EED0254DEC985F4548950B5BAF98E84B7063E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5EED0254DEC985F4548950B5BAF98E84B7063E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/3230302e3232352e3133382e302f32332d3233203d3e203631373734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.225.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:1e:fd:97:b7:d7:eb:a8:91:5f:0e:ea:54:76:a7:7c:60:89:
         d8:50:59:09:5d:35:27:14:ef:8e:13:65:45:bd:fb:2f:77:bd:
         ed:c6:46:26:ec:8f:c0:f7:01:1f:92:43:bd:df:8d:f4:31:8f:
         a7:2c:d7:cc:56:21:19:d2:3e:16:32:c7:a1:29:af:97:3f:a4:
         b3:03:08:30:22:fd:09:9c:41:81:0f:63:7e:bf:4c:52:6b:87:
         52:eb:e2:86:7c:75:0f:fd:27:9f:56:cb:25:0d:10:3f:39:10:
         cb:63:34:c8:66:53:f1:2e:4f:49:88:ca:af:fc:fc:c0:ff:eb:
         63:1c:5d:27:19:ab:a5:bf:e0:34:b8:bb:22:7b:09:39:41:f2:
         89:a4:e6:1e:57:cb:b0:f2:4f:4f:48:be:18:39:0c:de:b8:40:
         ca:aa:06:9e:35:19:d2:07:ee:64:94:90:84:d3:9f:33:71:11:
         29:9d:3b:60:63:0e:c0:15:15:96:8b:d6:e3:97:0d:57:0f:f4:
         44:09:36:3c:b3:d5:6d:e3:42:0d:92:88:1d:fe:a0:f6:1c:e8:
         a7:44:b0:e6:3c:84:90:79:ba:62:72:2d:7e:ce:33:64:02:98:
         47:55:32:6f:1b:9e:7c:2b:2e:b3:a5:4c:07:8c:3d:d3:76:7e:
         23:8d:25:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 19:51:09 2025 by rpki-client