Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/2/3230312e32302e3136302e302f32302d3233203d3e203238363036.roa
File:                     3230312e32302e3136302e302f32302d3233203d3e203238363036.roa (raw, json)
Hash identifier:          BuyJFH/MuNwOEizW0kU7ku1DrNjm3pa8zaLGbB5CnOQ=
Subject key identifier:   BE:37:1B:11:D2:D5:08:A0:86:41:6C:78:13:26:57:D1:54:25:40:12
Certificate issuer:       /CN=E7BD7FB5338C0533B7C507F4CA3932E8D54C7040
Certificate serial:       4A79CD864ABAE879624C6CFCF55E4CAF7724B462
Authority key identifier: E7:BD:7F:B5:33:8C:05:33:B7:C5:07:F4:CA:39:32:E8:D5:4C:70:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7BD7FB5338C0533B7C507F4CA3932E8D54C7040.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/2/3230312e32302e3136302e302f32302d3233203d3e203238363036.roa
Signing time:             Thu 28 Aug 2025 21:41:32 +0000
ROA not before:           Thu 28 Aug 2025 21:36:32 +0000
ROA not after:            Thu 27 Aug 2026 21:41:32 +0000
asID:                     28606
IP address blocks:        201.20.160.0/20 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/2/E7BD7FB5338C0533B7C507F4CA3932E8D54C7040.crl
                          rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/2/E7BD7FB5338C0533B7C507F4CA3932E8D54C7040.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7BD7FB5338C0533B7C507F4CA3932E8D54C7040.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 02:34:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:79:cd:86:4a:ba:e8:79:62:4c:6c:fc:f5:5e:4c:af:77:24:b4:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7BD7FB5338C0533B7C507F4CA3932E8D54C7040
        Validity
            Not Before: Aug 28 21:36:32 2025 GMT
            Not After : Aug 27 21:41:32 2026 GMT
        Subject: CN=BE371B11D2D508A086416C78132657D154254012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9a:7b:e2:94:fc:a8:a5:3e:5b:44:c9:13:69:
                    ea:6c:f8:af:94:2d:22:a6:d3:a6:3f:47:20:cf:9d:
                    c3:a9:1a:39:e9:da:81:7d:ba:57:1e:24:8e:7a:72:
                    a3:c8:07:c6:db:d3:89:cd:54:d8:6c:a8:94:e2:76:
                    ef:17:ae:e4:75:19:2e:7e:36:1b:00:a7:ab:ab:24:
                    00:16:b5:6f:71:cc:59:c8:30:3a:62:95:a7:35:2e:
                    0d:0e:6b:57:50:09:99:53:7b:33:9f:66:d1:44:47:
                    18:33:81:46:6e:89:d6:e6:9d:a8:e6:de:e4:18:f0:
                    7b:77:df:e5:60:b0:23:eb:b2:9b:8a:fc:4e:dd:08:
                    92:51:fd:a2:1b:90:10:1d:ab:21:4e:f6:f5:34:58:
                    17:69:fd:38:4c:7a:2a:6c:33:14:2e:aa:e7:87:b7:
                    81:cc:f1:0c:1f:05:0e:2f:c7:cc:4c:ae:1f:c4:28:
                    8d:59:99:33:85:ea:42:2b:55:9f:49:9a:9a:bc:3d:
                    ed:47:61:ca:24:75:7e:7b:25:d8:68:b9:fe:69:3e:
                    a9:fd:05:2b:92:5a:20:03:4b:92:f7:ca:b7:8b:08:
                    0d:ee:bb:09:b4:65:33:de:21:13:bc:02:5a:b6:6c:
                    5a:26:f3:fe:40:e6:4f:c5:be:8f:2c:8b:93:4f:07:
                    b8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:37:1B:11:D2:D5:08:A0:86:41:6C:78:13:26:57:D1:54:25:40:12
            X509v3 Authority Key Identifier:
                keyid:E7:BD:7F:B5:33:8C:05:33:B7:C5:07:F4:CA:39:32:E8:D5:4C:70:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/2/E7BD7FB5338C0533B7C507F4CA3932E8D54C7040.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7BD7FB5338C0533B7C507F4CA3932E8D54C7040.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/2/3230312e32302e3136302e302f32302d3233203d3e203238363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.20.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4a:14:e9:33:2e:22:b4:d0:cd:a2:c1:78:bc:aa:48:96:cc:89:
         45:e7:1d:09:db:ea:7f:d0:76:69:43:17:39:3e:20:74:ab:8d:
         f1:3c:c8:91:ae:c2:fa:05:3b:2c:77:b6:db:38:70:b0:29:91:
         1d:b8:b4:71:e7:e1:c9:cb:16:26:a2:c2:3c:df:76:3d:ec:a2:
         71:f9:59:8b:67:26:49:f4:ea:67:d1:b0:7f:cd:89:8c:d7:f2:
         0b:91:3b:1b:04:af:61:d9:fa:15:a2:3e:cb:dc:83:43:18:d0:
         14:8a:50:df:25:7f:35:d9:cb:39:9d:2f:e1:ee:1e:01:c6:c3:
         5e:c4:b1:64:68:76:9e:e9:bf:4c:2f:0e:1f:9e:cd:93:40:2d:
         34:c9:4e:e5:e0:b8:ef:a6:82:13:ca:ec:8e:02:02:33:1d:3d:
         bf:7c:7e:77:a4:4c:be:23:16:b8:e7:dd:6f:14:ae:f3:4c:ca:
         67:ac:fa:f6:a9:ce:b4:26:f3:7c:6a:29:18:d0:57:ce:d6:8f:
         84:01:b2:ac:0a:cc:42:14:a1:f4:93:b5:e2:d7:aa:61:69:96:
         ad:ea:00:4d:15:f0:8e:2a:a2:5a:f4:48:93:c5:20:c2:a0:fb:
         2e:fe:94:20:3f:75:65:29:45:96:8b:f1:e8:98:5d:4c:b2:ef:
         bd:5b:ac:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 10:48:44 2025 by rpki-client