Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/3230302e3231392e36302e302f32332d3233203d3e20323730383034.roa
File:                     3230302e3231392e36302e302f32332d3233203d3e20323730383034.roa (raw, json)
Hash identifier:          izZvw/NmRyYJ+ftG/OTTg/fnQJxRPN1hDfw5Ezt8WFU=
Subject key identifier:   E1:E4:21:D0:F8:41:23:50:23:58:75:68:34:D3:ED:53:8F:2C:4A:DC
Certificate issuer:       /CN=4DFE35C1095DFCE94247D8596FF0F1EE53F735FF
Certificate serial:       1CF816BA90D914DCB35FAFB47BEA773815BA3FB4
Authority key identifier: 4D:FE:35:C1:09:5D:FC:E9:42:47:D8:59:6F:F0:F1:EE:53:F7:35:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DFE35C1095DFCE94247D8596FF0F1EE53F735FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/3230302e3231392e36302e302f32332d3233203d3e20323730383034.roa
Signing time:             Tue 26 Aug 2025 14:05:30 +0000
ROA not before:           Tue 26 Aug 2025 14:00:30 +0000
ROA not after:            Tue 25 Aug 2026 14:05:30 +0000
asID:                     270804
IP address blocks:        200.219.60.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/4DFE35C1095DFCE94247D8596FF0F1EE53F735FF.crl
                          rsync://rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/4DFE35C1095DFCE94247D8596FF0F1EE53F735FF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DFE35C1095DFCE94247D8596FF0F1EE53F735FF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 17:22:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:f8:16:ba:90:d9:14:dc:b3:5f:af:b4:7b:ea:77:38:15:ba:3f:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DFE35C1095DFCE94247D8596FF0F1EE53F735FF
        Validity
            Not Before: Aug 26 14:00:30 2025 GMT
            Not After : Aug 25 14:05:30 2026 GMT
        Subject: CN=E1E421D0F84123502358756834D3ED538F2C4ADC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0c:18:11:20:48:5e:20:d7:c3:ce:8a:32:31:
                    c2:99:fa:70:7a:e1:0d:b4:73:77:83:ea:79:85:87:
                    82:9b:b2:65:c9:a0:50:c2:9f:ee:2b:c4:15:68:24:
                    a6:7f:95:99:14:2d:0b:00:f9:68:6c:ff:9b:21:3d:
                    f3:c5:8b:a1:e6:70:db:7c:4b:07:49:95:08:90:4e:
                    6a:46:80:56:b7:2d:e7:58:72:37:d2:48:c9:74:21:
                    15:5e:a6:0b:0e:15:fd:c7:6e:01:a9:0e:62:83:16:
                    e3:0b:8f:32:0d:3b:d7:90:56:66:a5:da:67:00:41:
                    da:64:29:90:f4:e1:54:26:d2:7e:7a:cb:90:1b:b2:
                    b4:d2:0c:0a:41:16:12:03:d1:df:2b:63:9d:a0:7a:
                    a0:d7:6d:51:69:d8:52:50:a8:3b:5a:f7:7a:81:0c:
                    6e:83:67:83:69:0b:38:53:89:17:c0:71:50:84:a3:
                    44:9b:dc:5d:95:e1:3f:dd:40:48:85:51:a0:99:bb:
                    04:00:b1:d5:f8:f7:83:18:60:4e:ae:61:e9:f7:cd:
                    ef:d4:4c:81:f3:8b:c5:2f:04:c5:0e:a4:88:f2:93:
                    4e:32:4d:33:09:ce:84:2a:51:8b:62:e3:34:99:4a:
                    91:e5:99:3d:7f:51:c6:a3:e5:71:02:d7:67:12:15:
                    17:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:E4:21:D0:F8:41:23:50:23:58:75:68:34:D3:ED:53:8F:2C:4A:DC
            X509v3 Authority Key Identifier:
                keyid:4D:FE:35:C1:09:5D:FC:E9:42:47:D8:59:6F:F0:F1:EE:53:F7:35:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/4DFE35C1095DFCE94247D8596FF0F1EE53F735FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DFE35C1095DFCE94247D8596FF0F1EE53F735FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/3230302e3231392e36302e302f32332d3233203d3e20323730383034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:12:5f:5b:b0:0a:65:c6:e1:0b:5a:93:dc:1e:22:20:6e:d3:
         ec:82:b5:02:cd:f5:ef:53:59:ca:89:9d:9b:fc:98:ce:c3:7a:
         91:6d:8c:b8:9a:25:fa:83:94:f6:d8:df:23:8f:70:b5:42:58:
         87:59:4e:aa:0a:91:20:df:69:3b:30:16:1a:d6:f3:2e:a7:cc:
         ed:f5:95:d9:9d:ad:92:6b:47:0b:c5:37:6c:34:61:51:fe:71:
         95:1e:27:b1:8b:cc:b8:a4:3b:8f:1b:d5:6a:48:76:41:54:e3:
         cb:cc:b2:27:cb:09:15:53:93:3e:65:d2:f6:42:46:5b:9f:d9:
         dc:d5:27:80:4f:b9:bc:8d:47:50:6f:05:9c:21:79:43:f5:7a:
         bf:61:7d:fb:c3:ce:cd:ba:b9:d8:fd:55:4b:8c:28:85:4c:84:
         86:ff:09:b3:51:d4:9a:a5:17:b0:eb:db:cc:52:09:e7:b0:08:
         3b:51:e3:46:78:88:e4:95:7a:e5:9a:1e:c2:ff:82:6c:88:ff:
         72:a3:ba:1f:4f:d3:44:3b:a9:93:88:4e:7e:67:d8:ca:1f:dc:
         5d:3c:05:3b:07:78:34:8a:4a:7f:ad:37:6c:fb:df:fd:f0:75:
         6e:ff:88:ab:c0:8b:c6:ab:e0:8f:85:16:cf:48:d9:cf:66:39:
         4a:e1:9e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 06:53:17 2025 by rpki-client