Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2DtNkprMmGZFdeUzMYJnxukqUrfVmKBBRzR5tHqPVBBz/0/3230302e3131302e39362e302f32322d3232203d3e20323730323531.roa
File:                     3230302e3131302e39362e302f32322d3232203d3e20323730323531.roa (raw, json)
Hash identifier:          8oak3I8vw3JqPoxfLBYgyb/mCQQ1/iajqLORZAuzPaA=
Subject key identifier:   00:4B:9D:43:DA:CA:CA:AF:A4:0D:3C:74:4D:69:28:52:8A:7D:E9:14
Certificate issuer:       /CN=07A51E68F48AD6E824F4583BFEBBC55E69D4DCCB
Certificate serial:       3C74A6C315302F05C555829F0684BDD30DDCB52B
Authority key identifier: 07:A5:1E:68:F4:8A:D6:E8:24:F4:58:3B:FE:BB:C5:5E:69:D4:DC:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07A51E68F48AD6E824F4583BFEBBC55E69D4DCCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2DtNkprMmGZFdeUzMYJnxukqUrfVmKBBRzR5tHqPVBBz/0/3230302e3131302e39362e302f32322d3232203d3e20323730323531.roa
Signing time:             Mon 18 Aug 2025 22:53:37 +0000
ROA not before:           Mon 18 Aug 2025 22:48:37 +0000
ROA not after:            Mon 17 Aug 2026 22:53:37 +0000
asID:                     270251
IP address blocks:        200.110.96.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2DtNkprMmGZFdeUzMYJnxukqUrfVmKBBRzR5tHqPVBBz/0/07A51E68F48AD6E824F4583BFEBBC55E69D4DCCB.crl
                          rsync://rpki-repo.registro.br/repo/2DtNkprMmGZFdeUzMYJnxukqUrfVmKBBRzR5tHqPVBBz/0/07A51E68F48AD6E824F4583BFEBBC55E69D4DCCB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07A51E68F48AD6E824F4583BFEBBC55E69D4DCCB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 10:37:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:74:a6:c3:15:30:2f:05:c5:55:82:9f:06:84:bd:d3:0d:dc:b5:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07A51E68F48AD6E824F4583BFEBBC55E69D4DCCB
        Validity
            Not Before: Aug 18 22:48:37 2025 GMT
            Not After : Aug 17 22:53:37 2026 GMT
        Subject: CN=004B9D43DACACAAFA40D3C744D6928528A7DE914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:71:d0:60:5e:36:cf:b2:81:af:68:1b:fc:c9:
                    cc:ed:ab:9d:03:b4:0f:e1:fd:fc:3a:4c:a4:b2:44:
                    cc:e0:60:47:06:4e:84:44:83:95:df:13:6b:6f:19:
                    5f:e1:10:00:42:01:25:d6:76:be:dd:ca:47:44:bd:
                    b0:7d:be:b8:0d:e3:59:b5:84:db:4c:d8:25:32:b2:
                    06:d0:10:e1:16:b9:53:93:27:db:d2:64:f8:bf:a7:
                    3c:cb:be:a9:42:6b:3c:78:b4:a8:f4:ba:74:28:0b:
                    a2:13:c7:10:be:84:a0:61:b5:fd:a3:ea:4f:0f:b0:
                    25:05:7c:e2:c4:ff:3a:75:c6:8e:f8:0f:47:63:d8:
                    68:56:f2:e7:a9:71:79:79:95:36:eb:c3:b0:1b:83:
                    4c:4f:14:09:66:9c:93:7c:69:f7:34:21:f5:e4:20:
                    e2:83:c8:a0:2e:9b:2a:0e:30:35:79:e6:6d:40:39:
                    54:a6:b8:70:08:91:be:82:70:e6:82:1c:63:47:f7:
                    9d:e3:18:23:c2:2a:98:61:97:a3:40:56:f1:d7:a5:
                    40:e6:22:da:b5:92:b7:70:c0:25:7e:03:5a:88:3b:
                    e2:dc:5c:9a:15:ed:1c:6f:a2:55:2a:35:9b:9c:1b:
                    77:27:9d:5a:41:14:a9:6e:ea:a9:95:bc:86:d4:ad:
                    98:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:4B:9D:43:DA:CA:CA:AF:A4:0D:3C:74:4D:69:28:52:8A:7D:E9:14
            X509v3 Authority Key Identifier:
                keyid:07:A5:1E:68:F4:8A:D6:E8:24:F4:58:3B:FE:BB:C5:5E:69:D4:DC:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2DtNkprMmGZFdeUzMYJnxukqUrfVmKBBRzR5tHqPVBBz/0/07A51E68F48AD6E824F4583BFEBBC55E69D4DCCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07A51E68F48AD6E824F4583BFEBBC55E69D4DCCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2DtNkprMmGZFdeUzMYJnxukqUrfVmKBBRzR5tHqPVBBz/0/3230302e3131302e39362e302f32322d3232203d3e20323730323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.110.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:05:48:e3:02:3a:ee:c1:1f:a3:ba:4d:91:d9:62:fc:0b:0d:
         ed:ce:0d:43:ea:8e:fe:b6:da:e0:17:27:cb:e9:46:16:3b:90:
         77:89:09:c1:1c:0f:44:1d:0e:53:0e:0f:9e:c0:5d:4a:b4:dc:
         5c:f1:e4:7e:90:b3:c6:2d:9a:34:c0:4a:d6:22:0c:00:c4:83:
         d1:4e:b0:db:02:f1:11:16:96:31:b2:50:fa:c4:49:aa:68:fc:
         43:50:e9:a6:09:f3:1d:20:b4:31:77:ef:d9:9d:a2:f5:20:77:
         2f:1e:36:89:8a:5b:9d:6b:b6:b5:20:b5:21:ef:bc:be:e4:4e:
         cc:5c:40:b1:06:c4:c7:bf:fe:f8:51:e6:15:b7:1e:2f:30:7b:
         97:00:68:7c:a7:c0:90:d0:6b:60:1a:82:4b:de:11:dd:ae:3d:
         45:18:8c:ae:8d:a6:29:41:4f:3b:dd:32:3e:12:89:0c:aa:92:
         75:4f:ee:b1:ae:3c:7a:d9:5d:3e:11:5d:20:e4:54:c3:26:62:
         af:ad:59:ab:9f:fe:a3:b7:20:9d:80:ce:8b:4d:64:16:c4:8b:
         bc:fc:d2:cb:59:e9:ae:6a:43:b8:5e:00:d2:a1:97:61:38:60:
         f7:43:a8:bd:4d:d2:d1:ab:0e:ba:66:f4:26:c3:18:69:4a:90:
         62:13:cd:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:59:51 2025 by rpki-client