Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/3230302e3134352e302e302f31362d3138203d3e203533313636.roa
File:                     3230302e3134352e302e302f31362d3138203d3e203533313636.roa (raw, json)
Hash identifier:          rZ6valaAytd1jbVpMv8ogtiujWYaB5gfbKp40u6Eghw=
Subject key identifier:   EB:6F:8E:E2:18:65:0C:E0:FB:DF:3D:F6:5F:EB:20:3E:FD:61:23:E5
Certificate issuer:       /CN=725BCF70C08F4B2744E301141EF06513A96F28D6
Certificate serial:       7DB67ADB7E939A69787D41EC8A5277C15DAA64D6
Authority key identifier: 72:5B:CF:70:C0:8F:4B:27:44:E3:01:14:1E:F0:65:13:A9:6F:28:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/725BCF70C08F4B2744E301141EF06513A96F28D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/3230302e3134352e302e302f31362d3138203d3e203533313636.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     53166
IP address blocks:        200.145.0.0/16 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/725BCF70C08F4B2744E301141EF06513A96F28D6.crl
                          rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/725BCF70C08F4B2744E301141EF06513A96F28D6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/725BCF70C08F4B2744E301141EF06513A96F28D6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 07:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:b6:7a:db:7e:93:9a:69:78:7d:41:ec:8a:52:77:c1:5d:aa:64:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=725BCF70C08F4B2744E301141EF06513A96F28D6
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=EB6F8EE218650CE0FBDF3DF65FEB203EFD6123E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ff:e7:c5:5d:f3:9f:c9:9c:0d:82:9b:86:0e:
                    d4:72:f3:a0:fa:7d:d9:0e:2f:63:93:c5:f2:85:84:
                    b0:01:65:9e:19:ac:b2:37:44:42:ed:64:a4:e7:83:
                    21:b2:d2:fb:37:69:39:bc:57:78:c4:9b:28:3a:b1:
                    69:99:09:8c:af:03:4f:b4:44:24:cc:c3:f9:8b:e1:
                    2d:d2:ef:ba:7c:43:fb:cd:e6:a2:51:81:c3:c3:ec:
                    17:6e:b0:54:bc:52:7b:7d:22:13:05:13:12:a1:76:
                    1e:12:c7:ba:e9:c2:da:90:78:54:19:19:3a:e6:cf:
                    4a:5b:61:f8:e0:ca:2e:3e:96:2f:ea:03:af:8f:ff:
                    b9:7b:0b:d4:bb:da:74:8d:8f:5c:95:0c:dd:76:f4:
                    d1:6e:9f:8e:14:cd:9b:e9:34:b1:11:1d:4a:24:ab:
                    76:6c:77:b5:a8:5e:f0:fc:48:a2:06:12:e2:75:c1:
                    be:b2:59:b6:c9:ea:2a:d9:22:55:9e:b9:9d:a2:d9:
                    50:30:95:5b:4d:83:c1:fd:31:c7:3e:27:90:22:ff:
                    c4:4d:23:26:95:51:7a:fc:11:b6:26:2f:78:d4:20:
                    dc:25:16:a7:ee:0c:2e:96:e1:be:a6:d7:42:a8:d1:
                    4b:f1:e2:b5:a0:21:0a:4f:09:14:e5:df:e4:fd:e8:
                    4d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:6F:8E:E2:18:65:0C:E0:FB:DF:3D:F6:5F:EB:20:3E:FD:61:23:E5
            X509v3 Authority Key Identifier:
                keyid:72:5B:CF:70:C0:8F:4B:27:44:E3:01:14:1E:F0:65:13:A9:6F:28:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/725BCF70C08F4B2744E301141EF06513A96F28D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/725BCF70C08F4B2744E301141EF06513A96F28D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/3230302e3134352e302e302f31362d3138203d3e203533313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.145.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         46:6e:f5:b7:2f:a6:17:fb:8b:da:fc:ff:fa:e9:fb:66:b8:27:
         45:4f:a1:d2:2b:eb:01:51:29:1b:cb:17:4a:c6:ef:c0:eb:83:
         10:98:c4:d9:be:18:0c:3b:ad:05:f6:c3:9f:1f:85:9b:18:3f:
         9a:ba:47:98:ed:12:20:c1:b1:9e:52:8a:cc:06:94:d5:82:54:
         8d:2e:cd:93:58:11:c4:42:18:56:51:70:7b:9a:49:92:22:9d:
         d5:6b:0f:fe:6d:99:11:e4:e6:c5:ec:ac:6b:b0:f4:71:ab:3a:
         71:26:3b:bb:be:ad:f5:fd:b4:e5:4e:83:4c:32:fe:df:4f:1e:
         63:5f:49:90:56:be:dc:ed:d1:4a:d9:94:32:52:e9:7c:4d:bc:
         35:b2:12:61:2c:8f:1e:c1:a6:4a:b1:80:75:c8:46:ef:3f:c9:
         2e:50:11:ee:55:3a:7f:71:0c:24:06:cb:61:60:12:8b:ec:df:
         4e:fe:ad:c2:2e:49:c3:7c:1a:fd:a9:f3:0a:1a:18:f5:c7:9d:
         0b:5e:6d:ae:84:dd:37:64:d3:db:63:b4:60:6a:28:c1:98:ac:
         15:a5:ac:6e:b6:8c:0b:10:9d:68:e3:88:42:b0:5a:72:fe:e4:
         35:85:74:a6:8f:eb:df:cb:26:4e:91:34:38:ff:f6:e0:07:e4:
         16:de:ef:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:33:33 2025 by rpki-client