Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/3230302e3134332e36342e302f31382d3332203d3e203134383430.roa
File:                     3230302e3134332e36342e302f31382d3332203d3e203134383430.roa (raw, json)
Hash identifier:          fIFgCyxGOKmp/2srRYvExO9oYUDF2tlIGssGQdzzfRY=
Subject key identifier:   89:D4:21:70:C2:40:4B:4A:C5:B8:EB:F3:61:9C:F8:72:BD:09:3C:A0
Certificate issuer:       /CN=4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7
Certificate serial:       7E625619E30EAF35B7010441DC93B671D9745B2E
Authority key identifier: 4E:87:B4:46:2F:90:42:B5:2A:A4:D6:5A:C7:D2:FD:92:C2:70:2D:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/3230302e3134332e36342e302f31382d3332203d3e203134383430.roa
Signing time:             Tue 13 May 2025 17:07:04 +0000
ROA not before:           Tue 13 May 2025 17:02:04 +0000
ROA not after:            Tue 12 May 2026 17:07:04 +0000
asID:                     14840
IP address blocks:        200.143.64.0/18 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.crl
                          rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 02:46:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:62:56:19:e3:0e:af:35:b7:01:04:41:dc:93:b6:71:d9:74:5b:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7
        Validity
            Not Before: May 13 17:02:04 2025 GMT
            Not After : May 12 17:07:04 2026 GMT
        Subject: CN=89D42170C2404B4AC5B8EBF3619CF872BD093CA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e3:35:57:ce:3e:1c:cb:20:3c:1c:de:11:42:
                    a3:f5:68:af:1f:7f:8f:34:92:22:39:ba:38:08:a3:
                    b6:ee:93:6e:b1:ee:64:9c:dc:51:3f:36:a4:3e:06:
                    f9:ba:4f:4c:58:d4:e5:85:4d:3c:f1:0a:3b:7d:cc:
                    89:72:25:35:95:b1:1d:78:0c:4b:29:e5:cd:4e:15:
                    76:4d:a7:86:f5:d1:a6:3e:97:53:e4:3f:9e:46:89:
                    64:07:7b:c0:cc:6b:c0:7c:04:8a:3d:60:92:b6:56:
                    4e:9f:51:eb:39:ba:16:03:48:18:2d:c1:b0:50:6c:
                    7d:fd:2a:d3:c8:73:1e:0b:16:ef:b9:7a:9b:70:b9:
                    c5:27:60:94:38:28:87:4e:de:e8:e5:1b:7c:7b:98:
                    7b:03:18:f2:87:0c:5a:af:8b:66:7b:9c:5e:63:a4:
                    0c:84:bd:87:84:0c:41:6e:9f:6c:15:c3:d8:18:11:
                    ad:12:49:1b:f0:03:73:14:bb:13:d5:98:ad:b0:43:
                    8b:e9:71:f2:2b:8f:ac:a3:62:c8:7e:d3:13:c3:e6:
                    8a:f8:26:a7:32:7b:48:27:d9:67:84:10:8e:9e:f5:
                    61:d0:b1:6d:ca:b2:be:66:60:5e:ed:16:24:55:d5:
                    61:4d:ae:ca:54:d6:02:eb:a3:44:95:a3:7e:6b:8f:
                    d6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:D4:21:70:C2:40:4B:4A:C5:B8:EB:F3:61:9C:F8:72:BD:09:3C:A0
            X509v3 Authority Key Identifier:
                keyid:4E:87:B4:46:2F:90:42:B5:2A:A4:D6:5A:C7:D2:FD:92:C2:70:2D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/3230302e3134332e36342e302f31382d3332203d3e203134383430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.143.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         57:44:09:ef:ae:ce:4d:90:e6:9f:26:da:42:7d:96:ec:e4:24:
         4c:34:50:a9:a1:ff:70:0e:08:9a:53:75:45:9c:e2:aa:bd:24:
         d2:f8:b9:e9:44:e2:df:50:d2:94:05:5f:aa:29:1e:da:95:1e:
         53:93:49:3f:57:a1:58:6d:75:72:67:cc:ea:db:53:b4:b2:5a:
         4a:d3:2f:03:40:f2:27:b8:cf:fe:d1:92:88:6b:f3:f3:ef:13:
         62:d0:5e:be:c6:71:51:e1:8a:c9:bb:a5:2a:81:21:9b:b7:f4:
         c3:e2:62:b6:12:c7:74:90:93:fd:4c:7b:a9:10:5e:74:eb:04:
         f3:70:48:61:85:c5:d4:97:d0:0f:54:fb:43:d8:bf:f8:cf:dd:
         f9:1a:ce:92:e9:ed:b8:35:8b:e3:5a:30:55:63:94:e0:26:64:
         43:f3:fa:f8:00:6a:98:5c:dd:f4:c1:56:a2:7c:58:1a:d6:75:
         ef:88:29:05:9d:fc:38:48:ee:d3:b5:62:1b:ae:dd:68:6d:8a:
         13:75:d3:61:2a:66:85:09:94:52:ae:83:6a:51:b9:ce:11:1f:
         01:c8:2c:94:30:00:bb:9d:2f:4b:48:e0:6b:d6:3a:25:6a:e0:
         38:4e:07:47:96:e1:c4:23:a3:ed:dc:64:5e:56:d5:ea:50:0b:
         79:32:64:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 14:08:56 2025 by rpki-client