Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/3230302e3231352e3136302e302f32322d3234203d3e20323633363536.roa
File:                     3230302e3231352e3136302e302f32322d3234203d3e20323633363536.roa (raw, json)
Hash identifier:          DW/B5dATBRcxOk64vZZlom9Nt7hZJEF1qo3K9/Df50s=
Subject key identifier:   9E:76:E7:56:58:34:0C:97:ED:CD:37:9E:FA:3B:7A:68:C7:7F:09:BB
Certificate issuer:       /CN=4187E8F9FB3CC3D24854671C5A8C083063D7BC87
Certificate serial:       3EB42842322F7BFA58871F228ECFCB8387D9B938
Authority key identifier: 41:87:E8:F9:FB:3C:C3:D2:48:54:67:1C:5A:8C:08:30:63:D7:BC:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/3230302e3231352e3136302e302f32322d3234203d3e20323633363536.roa
Signing time:             Wed 04 Jun 2025 17:09:02 +0000
ROA not before:           Wed 04 Jun 2025 17:04:02 +0000
ROA not after:            Wed 03 Jun 2026 17:09:02 +0000
asID:                     263656
IP address blocks:        200.215.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.crl
                          rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 13:41:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:b4:28:42:32:2f:7b:fa:58:87:1f:22:8e:cf:cb:83:87:d9:b9:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4187E8F9FB3CC3D24854671C5A8C083063D7BC87
        Validity
            Not Before: Jun  4 17:04:02 2025 GMT
            Not After : Jun  3 17:09:02 2026 GMT
        Subject: CN=9E76E75658340C97EDCD379EFA3B7A68C77F09BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:44:3b:9b:28:60:26:37:b3:42:cb:d8:74:4f:
                    6f:23:9b:53:c3:8f:d9:61:a0:df:52:1a:ea:54:46:
                    a9:51:5e:c2:5f:f7:97:f0:b8:33:d0:fe:91:39:21:
                    f9:90:c6:17:a5:b4:aa:1b:ce:16:66:17:8f:c4:10:
                    b6:9f:57:80:31:c9:fa:ff:c0:8d:4f:d8:ea:64:d7:
                    bb:ef:bc:81:41:88:9f:90:be:88:75:10:ad:b9:c5:
                    89:75:41:c0:fd:c7:f7:98:e5:b8:6e:b5:61:95:54:
                    77:c5:e5:21:9a:c4:09:73:70:2e:84:cf:bd:6d:dc:
                    73:00:29:0a:39:85:7e:7c:ad:15:f9:be:21:4b:41:
                    95:57:a4:ec:bc:f3:37:76:17:c2:3c:89:71:05:46:
                    5e:55:ab:1e:53:0f:7b:f4:a4:47:87:36:2e:dd:f6:
                    ac:fe:65:9a:a6:84:42:8a:4d:9a:b7:ce:7f:71:14:
                    27:d5:fb:ba:e5:aa:74:0c:c5:55:83:49:2f:d3:ce:
                    42:b7:01:bc:f0:b3:a8:8f:87:6d:3f:1a:81:bd:e8:
                    06:b6:cf:f0:1c:c4:d7:6d:a1:00:7e:d3:2d:94:34:
                    71:8c:2b:fe:b7:4e:b8:b7:66:ce:02:5f:05:f0:9f:
                    41:a3:8b:82:28:43:93:ba:5d:d2:43:7b:8e:7e:ca:
                    72:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:76:E7:56:58:34:0C:97:ED:CD:37:9E:FA:3B:7A:68:C7:7F:09:BB
            X509v3 Authority Key Identifier:
                keyid:41:87:E8:F9:FB:3C:C3:D2:48:54:67:1C:5A:8C:08:30:63:D7:BC:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/3230302e3231352e3136302e302f32322d3234203d3e20323633363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.215.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:64:7d:bc:e3:13:b2:68:30:78:a8:36:51:ca:4e:00:c7:ec:
         c8:d6:ab:fe:d3:16:e6:26:08:ea:61:ea:9c:2f:b4:0c:15:f5:
         b6:74:fe:7e:5b:0f:67:2e:9c:fc:51:a8:47:36:ce:12:53:10:
         a9:1f:f9:8c:0c:ba:ba:ea:e7:57:08:27:cf:0c:81:3a:51:75:
         e5:33:5b:6d:b0:93:96:20:b7:ac:8b:84:c5:05:54:e9:92:44:
         51:e4:4d:f5:89:a1:04:7c:ff:1a:fb:62:67:3a:43:28:3b:92:
         7d:56:1d:22:1a:4a:ab:6e:dc:2c:03:ee:db:f9:f6:d5:3a:79:
         a3:dc:4d:bb:33:3c:6f:03:8b:b6:40:d0:38:ad:11:72:9f:39:
         70:c8:c9:9b:8e:ed:9e:7c:f8:84:e0:51:15:bd:6e:40:57:2f:
         d9:64:ad:05:bd:74:83:52:84:8a:b4:7f:20:5c:9f:8e:bd:bb:
         13:2d:eb:45:69:eb:7b:34:36:0c:2a:48:99:ef:e2:dc:48:03:
         91:44:07:9d:f9:6c:bd:0c:6a:3f:65:69:19:d4:a3:b2:f9:a0:
         17:04:6e:df:20:5c:d9:37:14:76:d0:33:91:58:dc:21:f3:c8:
         38:76:5a:55:2d:d4:e3:a0:b7:ce:be:46:79:43:56:91:ff:b2:
         67:ce:17:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 20:04:53 2025 by rpki-client