Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3230302e37392e3138382e302f32332d3233203d3e20323632343434.roa
File:                     3230302e37392e3138382e302f32332d3233203d3e20323632343434.roa (raw, json)
Hash identifier:          BgsIysiSgmBBmkfeSORPTa5pX072PnW1XfJPGsSDm6o=
Subject key identifier:   96:5F:16:6B:00:71:F0:1F:CF:EE:F0:0A:7B:B3:27:14:1B:E8:CB:6A
Certificate issuer:       /CN=B883529218840F471E398CF8F585B71D007A2B35
Certificate serial:       7774CA8671063C1427C277C167179595DC6E6020
Authority key identifier: B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3230302e37392e3138382e302f32332d3233203d3e20323632343434.roa
Signing time:             Wed 09 Jul 2025 14:04:41 +0000
ROA not before:           Wed 09 Jul 2025 13:59:41 +0000
ROA not after:            Wed 08 Jul 2026 14:04:41 +0000
asID:                     262444
IP address blocks:        200.79.188.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl
                          rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 15:16:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:74:ca:86:71:06:3c:14:27:c2:77:c1:67:17:95:95:dc:6e:60:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B883529218840F471E398CF8F585B71D007A2B35
        Validity
            Not Before: Jul  9 13:59:41 2025 GMT
            Not After : Jul  8 14:04:41 2026 GMT
        Subject: CN=965F166B0071F01FCFEEF00A7BB327141BE8CB6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:c9:45:07:c1:94:5c:52:50:d3:63:e5:7e:a3:
                    84:d1:99:5f:9e:08:21:5d:77:08:1c:ee:34:a7:28:
                    9a:bc:33:e9:89:2f:9c:9d:2c:ef:99:6a:91:35:9c:
                    78:6a:cc:ae:9a:8e:8b:a5:9b:14:8d:aa:bd:47:62:
                    d4:96:7c:4c:1b:b9:f0:38:8a:fb:97:12:d1:a4:ae:
                    0e:de:38:b5:fa:2a:ae:95:44:62:3b:db:f1:86:6c:
                    c8:7d:ca:e3:bb:e2:bd:87:74:e8:bb:ed:a2:27:cb:
                    66:4b:a1:58:8a:b0:be:be:71:ec:c2:fb:5a:5d:7c:
                    e8:37:b0:ea:9f:93:d4:be:65:b0:25:c6:c5:93:73:
                    0c:cf:61:a4:0d:a6:63:61:a2:38:48:5d:1a:80:89:
                    e7:0b:82:76:7f:cf:90:9e:8c:bd:4e:0b:90:82:3e:
                    ff:8d:ed:d1:f9:4d:b6:e5:38:14:99:e5:e5:e7:75:
                    42:d1:67:10:76:49:1a:c7:05:3e:8d:b0:c0:5e:95:
                    14:e9:33:ee:0c:67:f7:6b:c4:7e:73:50:24:11:66:
                    c3:2f:ad:bb:8a:fc:9a:74:24:b5:33:96:0e:b3:63:
                    fa:92:d4:58:95:7c:63:73:86:c7:be:10:25:ed:42:
                    9e:f6:7a:a9:a8:12:c7:a7:47:44:ec:ad:52:82:cc:
                    9f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:5F:16:6B:00:71:F0:1F:CF:EE:F0:0A:7B:B3:27:14:1B:E8:CB:6A
            X509v3 Authority Key Identifier:
                keyid:B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3230302e37392e3138382e302f32332d3233203d3e20323632343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.79.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:0b:14:49:34:c0:24:f8:9f:bd:74:42:64:07:a5:c5:3b:53:
         c7:56:14:77:fc:dd:68:2e:5d:9d:c5:05:94:fb:42:90:37:cf:
         8b:cd:94:e9:15:c2:50:90:90:cd:ef:a7:01:20:2c:96:e1:e5:
         ed:47:25:0a:ef:ee:32:1c:19:ee:43:ca:8f:65:ef:5e:24:11:
         23:fb:04:df:b5:c5:cb:1c:73:d2:71:8c:a6:23:e4:e8:03:a1:
         18:a8:44:ab:10:90:75:41:58:5c:36:20:50:42:a7:f7:97:12:
         2f:b5:9c:cc:18:bb:1e:99:19:42:c1:7c:4a:f3:d2:1f:5e:ad:
         4f:2f:a3:ad:9b:c2:c0:88:70:cb:69:a5:b5:d7:11:7c:15:ff:
         78:30:4d:da:8c:62:26:ed:26:ba:93:71:7f:51:76:96:77:53:
         70:0f:81:ce:30:a4:d3:7e:c4:bc:1c:0a:83:20:2b:e5:19:fa:
         16:b3:82:20:50:c8:2b:9a:b5:20:f2:20:77:c6:49:23:82:de:
         46:76:51:df:e4:8d:52:cc:a3:16:9a:ee:d6:b4:0e:7e:9c:a0:
         db:9f:08:00:5e:4f:d4:6c:9f:99:3b:11:85:56:52:69:b9:2a:
         60:56:d0:55:13:d0:94:b2:45:64:63:af:5c:01:b6:06:82:ae:
         9f:e9:77:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:13:02 2025 by rpki-client