Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/3230302e33392e3134342e302f32342d3234203d3e20323730373538.roa
File:                     3230302e33392e3134342e302f32342d3234203d3e20323730373538.roa (raw, json)
Hash identifier:          KIFTJjKKd6/PSI+6j7nOzWGYSCTtpxHe1qGG6vpOiNU=
Subject key identifier:   F9:C6:1C:52:59:6C:9E:B2:B2:E6:F8:86:DB:3C:22:F3:14:F4:8F:E5
Certificate issuer:       /CN=FDC3ABD576F0A132A9B041C7B6E6997785CBCD4A
Certificate serial:       4260ACC9D63E6A5A876A649A346A7B9308F1B2E5
Authority key identifier: FD:C3:AB:D5:76:F0:A1:32:A9:B0:41:C7:B6:E6:99:77:85:CB:CD:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDC3ABD576F0A132A9B041C7B6E6997785CBCD4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/3230302e33392e3134342e302f32342d3234203d3e20323730373538.roa
Signing time:             Fri 04 Jul 2025 14:08:00 +0000
ROA not before:           Fri 04 Jul 2025 14:03:00 +0000
ROA not after:            Fri 03 Jul 2026 14:08:00 +0000
asID:                     270758
IP address blocks:        200.39.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/FDC3ABD576F0A132A9B041C7B6E6997785CBCD4A.crl
                          rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/FDC3ABD576F0A132A9B041C7B6E6997785CBCD4A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDC3ABD576F0A132A9B041C7B6E6997785CBCD4A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 17:25:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:60:ac:c9:d6:3e:6a:5a:87:6a:64:9a:34:6a:7b:93:08:f1:b2:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDC3ABD576F0A132A9B041C7B6E6997785CBCD4A
        Validity
            Not Before: Jul  4 14:03:00 2025 GMT
            Not After : Jul  3 14:08:00 2026 GMT
        Subject: CN=F9C61C52596C9EB2B2E6F886DB3C22F314F48FE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:02:9e:30:88:49:4c:df:53:ee:98:07:8d:9c:
                    83:82:89:a3:74:e0:2e:df:93:29:f1:ff:0d:ad:02:
                    74:da:c3:7c:ff:0f:0d:ec:0b:7e:aa:04:f1:5c:18:
                    a6:b5:81:2d:51:9d:c4:27:38:e4:82:d8:d5:df:2a:
                    bf:e8:17:d5:dc:88:91:ab:88:2a:d4:e5:6e:5b:c1:
                    be:e1:b6:3e:f9:4c:31:be:cb:9c:e1:cf:92:c7:7e:
                    39:20:53:ad:28:e1:5e:04:25:de:39:06:0c:c0:7b:
                    ee:70:d4:e0:1d:5d:bd:4b:d7:44:95:99:72:4e:a4:
                    6c:a9:b9:91:f4:bc:8c:1a:56:24:7c:6e:e3:78:cd:
                    b6:35:36:27:63:76:0e:71:01:13:b4:36:e0:46:7c:
                    ad:5d:76:11:d4:ae:89:f1:d2:f6:5c:48:28:bf:2d:
                    a4:ca:d3:9e:53:87:42:ca:6e:22:11:7f:37:6d:69:
                    e8:26:08:86:13:b2:54:c2:80:1a:9d:9f:7c:34:45:
                    8f:e3:24:32:da:3d:80:4a:c3:a4:2c:27:f2:f9:f5:
                    ce:0d:3b:94:a3:f5:24:6c:89:26:82:ec:00:7e:76:
                    df:ea:ad:0f:73:a1:34:4c:2a:91:e9:48:5f:9f:12:
                    db:fa:ab:a8:6a:c1:59:cd:cf:fe:b6:07:5c:1b:4b:
                    e0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:C6:1C:52:59:6C:9E:B2:B2:E6:F8:86:DB:3C:22:F3:14:F4:8F:E5
            X509v3 Authority Key Identifier:
                keyid:FD:C3:AB:D5:76:F0:A1:32:A9:B0:41:C7:B6:E6:99:77:85:CB:CD:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/FDC3ABD576F0A132A9B041C7B6E6997785CBCD4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDC3ABD576F0A132A9B041C7B6E6997785CBCD4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/3230302e33392e3134342e302f32342d3234203d3e20323730373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:d3:84:28:72:6a:89:ce:17:0d:2e:e5:36:23:06:70:26:ec:
         fc:b6:c2:fa:47:f5:b4:70:43:01:a6:75:05:69:ab:70:5e:1c:
         40:40:62:79:a0:be:88:e1:e7:ac:ab:a7:1f:27:40:a6:0a:0a:
         f9:e2:be:55:a3:61:19:a3:14:76:b6:ba:c2:1a:00:aa:00:90:
         61:b9:1d:f7:1a:ad:9c:7b:51:53:49:72:5f:8e:e6:fb:ba:ae:
         07:34:f0:d2:7c:78:e8:06:f4:28:77:e6:d8:12:31:e0:01:c7:
         cb:5b:82:e9:58:34:c9:7f:ec:5f:f7:b8:a8:b8:c7:4f:a0:19:
         68:de:e4:83:2d:0a:5f:97:6b:79:46:39:39:62:01:c0:29:2e:
         cc:a7:c7:5c:c9:57:6b:f7:ee:ce:c7:cf:e6:73:fa:f2:27:db:
         2f:cc:4e:46:ad:42:34:7d:13:9d:5e:ff:f6:bc:c5:96:02:11:
         90:d0:b6:12:24:52:81:64:f6:0e:68:2a:a9:29:e6:d9:ec:9e:
         27:97:81:b3:ec:91:91:92:72:75:75:64:e9:0a:cf:ef:57:db:
         cc:4f:cc:4c:f6:6b:63:df:62:7e:19:30:42:14:9f:58:62:9a:
         38:1c:da:03:7d:f7:c9:4d:06:b2:4c:34:cf:99:84:f7:33:0b:
         1b:8c:52:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 03:07:20 2025 by rpki-client