Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GAQrAB2XjaTUSqiFjx2yZpuxEsePpdR7KUhyxdsTSA8p/0/3230312e35352e3137362e302f32302d3332203d3e203238363230.roa
File:                     3230312e35352e3137362e302f32302d3332203d3e203238363230.roa (raw, json)
Hash identifier:          guJ0HovixVZsT11OY5dR4Thql/lqVIEunspIHEkEld4=
Subject key identifier:   F4:18:C1:A7:3A:9F:6A:BE:75:CE:05:84:75:5F:61:47:E8:03:4D:D9
Certificate issuer:       /CN=18ECB5AEB50F51D6D93C7BF49229D69FDCAE216B
Certificate serial:       1B53404DF61017259D9A4221C929D62729C273BB
Authority key identifier: 18:EC:B5:AE:B5:0F:51:D6:D9:3C:7B:F4:92:29:D6:9F:DC:AE:21:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18ECB5AEB50F51D6D93C7BF49229D69FDCAE216B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GAQrAB2XjaTUSqiFjx2yZpuxEsePpdR7KUhyxdsTSA8p/0/3230312e35352e3137362e302f32302d3332203d3e203238363230.roa
Signing time:             Thu 11 Sep 2025 14:25:25 +0000
ROA not before:           Thu 11 Sep 2025 14:20:25 +0000
ROA not after:            Thu 10 Sep 2026 14:25:25 +0000
asID:                     28620
IP address blocks:        201.55.176.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GAQrAB2XjaTUSqiFjx2yZpuxEsePpdR7KUhyxdsTSA8p/0/18ECB5AEB50F51D6D93C7BF49229D69FDCAE216B.crl
                          rsync://rpki-repo.registro.br/repo/GAQrAB2XjaTUSqiFjx2yZpuxEsePpdR7KUhyxdsTSA8p/0/18ECB5AEB50F51D6D93C7BF49229D69FDCAE216B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18ECB5AEB50F51D6D93C7BF49229D69FDCAE216B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 02:25:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:53:40:4d:f6:10:17:25:9d:9a:42:21:c9:29:d6:27:29:c2:73:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18ECB5AEB50F51D6D93C7BF49229D69FDCAE216B
        Validity
            Not Before: Sep 11 14:20:25 2025 GMT
            Not After : Sep 10 14:25:25 2026 GMT
        Subject: CN=F418C1A73A9F6ABE75CE0584755F6147E8034DD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:df:f4:eb:8c:d0:99:de:11:b8:e5:ca:7e:75:
                    d9:ba:e6:92:58:41:25:4a:74:a7:bc:2f:5c:07:59:
                    3c:e1:8c:cf:f6:8a:cc:38:2d:95:28:9d:86:72:5a:
                    33:af:d2:e0:85:6c:5b:0c:df:3a:27:2c:62:dc:74:
                    ea:04:3c:8f:bc:07:42:e2:52:58:ba:55:ed:00:b4:
                    66:1a:31:1f:e4:d5:00:e8:32:c5:1d:e3:67:e2:a2:
                    3f:2b:4c:bb:62:b7:bd:a2:c9:f1:4d:0f:96:36:f3:
                    01:6d:2b:d8:c2:e3:d0:3e:f6:b1:09:6c:4b:46:61:
                    16:97:6a:58:0b:d5:62:22:d1:3c:7b:a8:9a:02:6e:
                    0e:c2:25:89:e2:cb:ed:23:82:33:35:ee:b1:e7:1a:
                    5a:6c:ca:87:bf:cf:2c:6c:37:21:91:3f:08:6a:d4:
                    c2:f0:fd:48:42:a7:ba:70:d3:18:b7:0f:17:f6:2d:
                    43:c6:67:d7:9c:1e:f3:99:76:37:25:70:57:ea:df:
                    65:68:68:05:f5:2f:45:9c:19:8d:a8:d6:e3:49:08:
                    24:7e:46:9d:75:1d:5e:9a:05:ce:1b:a8:36:da:bc:
                    58:a4:e4:d9:45:f0:47:29:30:42:b5:b9:e8:c6:30:
                    9a:56:44:42:a3:b0:4b:78:75:11:56:8f:63:28:53:
                    f7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:18:C1:A7:3A:9F:6A:BE:75:CE:05:84:75:5F:61:47:E8:03:4D:D9
            X509v3 Authority Key Identifier:
                keyid:18:EC:B5:AE:B5:0F:51:D6:D9:3C:7B:F4:92:29:D6:9F:DC:AE:21:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GAQrAB2XjaTUSqiFjx2yZpuxEsePpdR7KUhyxdsTSA8p/0/18ECB5AEB50F51D6D93C7BF49229D69FDCAE216B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18ECB5AEB50F51D6D93C7BF49229D69FDCAE216B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GAQrAB2XjaTUSqiFjx2yZpuxEsePpdR7KUhyxdsTSA8p/0/3230312e35352e3137362e302f32302d3332203d3e203238363230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.55.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5a:b3:48:b0:6f:12:ef:ee:f7:b3:db:6e:51:e1:3d:3f:b6:fb:
         1e:cb:bd:c7:c9:62:c0:05:95:bd:0e:bb:7d:00:18:71:bd:1f:
         d2:79:d9:11:54:1a:1d:da:a0:e6:5e:69:ca:bd:ea:5d:f8:cc:
         7f:78:20:86:05:e9:3d:ad:a6:3a:87:6e:49:26:8f:e7:fb:09:
         ee:11:4a:e4:3d:50:ce:9e:a7:68:96:9b:50:82:ab:15:9c:d8:
         c2:00:88:7f:fa:6d:d5:4f:4f:14:93:78:04:9c:cf:3f:1e:ba:
         5b:36:9f:13:65:ff:0c:5f:14:ed:42:a7:38:9e:bc:54:d8:99:
         b9:be:50:7c:66:8c:dc:07:0f:00:16:2b:c6:d0:a8:b7:fb:d3:
         0b:6d:42:76:17:d3:d6:5f:e6:02:60:56:cf:6c:24:91:5b:35:
         af:63:68:1b:46:40:c8:36:f3:1a:ab:c5:3b:95:b5:09:72:33:
         48:26:9b:a3:9f:7e:cc:01:3e:f5:22:45:fb:21:e0:8c:99:ed:
         d8:d5:56:ec:93:22:18:0a:80:69:c7:04:b7:3b:9f:73:d6:ef:
         05:1c:58:55:27:e7:1b:57:59:d3:9f:07:a2:a7:1f:f0:3a:b9:
         89:b5:cb:88:10:8a:28:fc:84:27:70:40:5e:20:28:3f:b6:a6:
         af:78:c8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 09:50:29 2025 by rpki-client