Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/3230302e33392e3134342e302f32322d3232203d3e20323730373538.roa
File:                     3230302e33392e3134342e302f32322d3232203d3e20323730373538.roa (raw, json)
Hash identifier:          tb1g3NCktqSrdcvWQ2gxaX+GDhsqkyxkZJ3C04Np+Yg=
Subject key identifier:   94:87:B1:1D:63:21:2F:00:CE:59:69:B7:C4:80:F5:63:3C:B8:AF:85
Certificate issuer:       /CN=FDC3ABD576F0A132A9B041C7B6E6997785CBCD4A
Certificate serial:       7078841DF316FA14766E7503AE66FF4562D97ECB
Authority key identifier: FD:C3:AB:D5:76:F0:A1:32:A9:B0:41:C7:B6:E6:99:77:85:CB:CD:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDC3ABD576F0A132A9B041C7B6E6997785CBCD4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/3230302e33392e3134342e302f32322d3232203d3e20323730373538.roa
Signing time:             Fri 04 Jul 2025 14:07:57 +0000
ROA not before:           Fri 04 Jul 2025 14:02:57 +0000
ROA not after:            Fri 03 Jul 2026 14:07:57 +0000
asID:                     270758
IP address blocks:        200.39.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/FDC3ABD576F0A132A9B041C7B6E6997785CBCD4A.crl
                          rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/FDC3ABD576F0A132A9B041C7B6E6997785CBCD4A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDC3ABD576F0A132A9B041C7B6E6997785CBCD4A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 17:25:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:78:84:1d:f3:16:fa:14:76:6e:75:03:ae:66:ff:45:62:d9:7e:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDC3ABD576F0A132A9B041C7B6E6997785CBCD4A
        Validity
            Not Before: Jul  4 14:02:57 2025 GMT
            Not After : Jul  3 14:07:57 2026 GMT
        Subject: CN=9487B11D63212F00CE5969B7C480F5633CB8AF85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:46:ab:2a:90:4c:81:e4:15:ce:ae:ac:f1:76:
                    95:db:53:0b:93:52:57:fc:4b:55:aa:c4:c6:c2:6c:
                    65:38:f6:f8:4b:16:d8:fa:b0:48:4e:41:79:7e:f5:
                    84:66:e9:8c:8b:2c:4b:71:ab:94:19:f7:6b:ec:56:
                    ac:72:96:29:67:de:56:47:61:13:7f:4b:41:be:e2:
                    52:27:5f:78:69:ed:0a:a7:68:b3:34:91:a1:8d:c7:
                    1c:48:05:31:36:bc:49:b5:b1:3e:c5:d7:22:b4:37:
                    f2:af:83:13:e7:29:4b:ed:fd:d5:8d:13:58:b4:e2:
                    87:ce:b7:ab:56:7b:3f:cd:31:df:f3:45:42:35:2b:
                    b4:f6:8b:e6:a5:4e:32:e9:0a:e9:fb:c4:27:c9:bf:
                    63:0b:fa:af:39:aa:77:c2:7f:2c:e7:a5:e7:42:8a:
                    0f:23:94:62:ce:c8:12:9e:ad:7a:cd:e2:8c:03:c2:
                    6c:61:68:52:29:48:26:01:88:4c:69:c1:ff:7e:3d:
                    f3:0c:3b:f2:c5:0c:bf:bd:94:71:3c:5f:a6:a1:33:
                    07:61:f7:32:5e:36:99:05:90:d6:bc:bb:6b:75:60:
                    33:4d:b4:fd:e7:98:d9:4c:c6:7c:52:76:9e:3b:a4:
                    5f:5e:1e:68:26:a8:09:fb:2a:ef:4f:6a:39:b5:34:
                    c6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:87:B1:1D:63:21:2F:00:CE:59:69:B7:C4:80:F5:63:3C:B8:AF:85
            X509v3 Authority Key Identifier:
                keyid:FD:C3:AB:D5:76:F0:A1:32:A9:B0:41:C7:B6:E6:99:77:85:CB:CD:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/FDC3ABD576F0A132A9B041C7B6E6997785CBCD4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDC3ABD576F0A132A9B041C7B6E6997785CBCD4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/3230302e33392e3134342e302f32322d3232203d3e20323730373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:15:51:75:16:82:24:6e:d9:44:74:11:0c:9e:28:2e:b4:ae:
         f4:56:8a:e5:b5:5a:0d:9d:e8:77:40:27:35:84:be:78:92:df:
         e4:24:9f:af:a3:35:cf:b1:45:6a:df:48:f5:b3:3c:3e:6a:19:
         40:e9:76:14:d4:2a:63:e9:11:2d:5f:20:ee:ef:6e:66:bf:06:
         81:c5:8b:2c:19:8f:81:17:16:21:c5:fc:77:d3:5a:ea:f8:8c:
         e7:e6:a2:0f:5b:96:ba:62:de:67:c3:0f:4f:ce:a7:12:33:d2:
         9e:62:ba:4a:33:30:92:17:6b:d5:a7:41:bf:a2:11:e6:5c:d6:
         68:9a:08:04:3f:40:c0:d1:2e:1d:3f:ad:5c:b4:f4:0a:cd:26:
         ef:da:cd:0a:a5:ea:51:40:69:03:9a:c5:91:5a:ba:9c:89:a5:
         60:4a:26:d3:e9:84:83:0d:81:df:a0:09:60:77:ad:04:c0:17:
         0a:c4:5b:07:cc:cc:1a:8c:6d:f7:b6:a1:81:96:57:fe:f1:45:
         bc:64:8c:d0:8e:84:83:d4:86:db:ab:c8:57:70:96:d7:d0:39:
         57:49:0a:45:2d:37:a0:56:9f:62:a8:31:fa:fd:55:26:10:6a:
         2f:38:c7:f2:05:2f:32:a9:3f:5c:b5:9f:ad:0f:f9:91:a5:da:
         a8:38:cd:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 02:50:49 2025 by rpki-client