Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/3230302e3135322e3137382e302f32342d3234203d3e203238353839.roa
File:                     3230302e3135322e3137382e302f32342d3234203d3e203238353839.roa (raw, json)
Hash identifier:          KuIePrPjhs157oWXvz6l1Pzy4DjJyaujvxRvff65Z7g=
Subject key identifier:   98:97:34:2B:FF:CC:0F:1D:9D:0C:E9:93:42:65:66:DA:1F:96:FC:90
Certificate issuer:       /CN=ABEDCE5CA2A73752E848B305E7DCB48075860E71
Certificate serial:       6B271845375CDBB121AED51C9615740B97FD3EE0
Authority key identifier: AB:ED:CE:5C:A2:A7:37:52:E8:48:B3:05:E7:DC:B4:80:75:86:0E:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABEDCE5CA2A73752E848B305E7DCB48075860E71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/3230302e3135322e3137382e302f32342d3234203d3e203238353839.roa
Signing time:             Wed 01 Oct 2025 17:58:43 +0000
ROA not before:           Wed 01 Oct 2025 17:53:43 +0000
ROA not after:            Wed 30 Sep 2026 17:58:43 +0000
asID:                     28589
IP address blocks:        200.152.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/ABEDCE5CA2A73752E848B305E7DCB48075860E71.crl
                          rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/ABEDCE5CA2A73752E848B305E7DCB48075860E71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABEDCE5CA2A73752E848B305E7DCB48075860E71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 21:42:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:27:18:45:37:5c:db:b1:21:ae:d5:1c:96:15:74:0b:97:fd:3e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABEDCE5CA2A73752E848B305E7DCB48075860E71
        Validity
            Not Before: Oct  1 17:53:43 2025 GMT
            Not After : Sep 30 17:58:43 2026 GMT
        Subject: CN=9897342BFFCC0F1D9D0CE993426566DA1F96FC90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:4a:06:b2:e6:3d:da:85:56:01:40:b6:e2:a7:
                    eb:28:d3:a2:07:fd:f5:26:8d:ba:f7:be:12:15:5d:
                    01:d2:90:86:0a:26:1d:81:a9:a1:4e:e8:89:f9:ad:
                    5d:0b:4d:1e:36:4c:89:66:14:c6:e2:d6:e1:0e:2c:
                    9a:e6:b0:cd:98:a9:ae:6e:33:62:0c:30:10:ac:7b:
                    5d:dc:a1:47:23:d7:54:47:85:79:38:32:b4:09:d0:
                    ea:19:98:5a:62:10:51:84:4a:36:fe:28:f8:68:86:
                    26:09:87:f2:12:87:75:5d:37:35:3d:3b:69:38:ba:
                    75:92:9b:e2:8b:f3:1f:43:26:29:93:6d:03:96:52:
                    43:39:0c:87:30:f3:4f:19:57:1e:1e:4d:a8:46:0e:
                    55:6e:3c:c0:b1:a5:32:93:7e:51:ac:8d:41:67:da:
                    b5:6c:60:db:1d:f9:62:01:36:6d:f2:a4:6d:d4:88:
                    0d:39:bd:f0:ca:1e:c0:4b:7c:86:93:4d:7e:1c:80:
                    12:0c:37:79:94:bf:17:b4:ba:1c:ed:35:1c:fb:42:
                    f0:07:b9:e9:0b:9b:62:92:dc:92:71:81:4b:e6:08:
                    f3:7c:ca:43:b9:a8:27:9c:41:82:d0:31:da:b6:1e:
                    e1:47:1e:60:80:25:59:75:8d:ac:9f:c6:52:5a:31:
                    99:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:97:34:2B:FF:CC:0F:1D:9D:0C:E9:93:42:65:66:DA:1F:96:FC:90
            X509v3 Authority Key Identifier:
                keyid:AB:ED:CE:5C:A2:A7:37:52:E8:48:B3:05:E7:DC:B4:80:75:86:0E:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/ABEDCE5CA2A73752E848B305E7DCB48075860E71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABEDCE5CA2A73752E848B305E7DCB48075860E71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/3230302e3135322e3137382e302f32342d3234203d3e203238353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:96:72:17:57:c4:a9:51:10:b0:82:e1:2e:16:39:80:74:0a:
         05:2a:b9:eb:dc:46:65:7e:86:6e:21:ce:ac:0e:4f:c1:8a:89:
         f3:e5:f0:b6:46:07:81:ff:8b:9c:a0:a5:13:a3:15:d0:14:73:
         79:e8:84:db:19:75:4e:1f:eb:26:34:3a:1c:17:4d:a6:02:5d:
         ac:02:ad:30:98:75:51:59:3d:b8:b9:7b:c5:ee:17:1b:17:87:
         da:ff:fb:9b:78:fc:65:24:3a:e0:5c:ad:ef:36:04:d9:1a:8d:
         8c:51:4a:ee:7b:96:88:7e:60:2f:50:94:44:76:d4:44:ca:18:
         d3:f1:ea:2c:81:38:d7:62:f3:1e:03:ab:24:d6:a1:44:f5:24:
         df:5a:a6:a6:16:a1:e1:89:65:9d:a5:c2:fc:12:b8:ad:98:41:
         a0:4d:20:91:90:d4:d1:34:d2:1b:76:bc:1c:86:80:da:d9:fb:
         4e:3d:95:7e:e1:2f:d8:74:d5:0f:83:1e:82:c8:cb:e5:83:9c:
         b0:63:28:c8:21:1d:76:8f:85:b2:8c:0e:0a:07:2e:bd:3e:47:
         e6:f3:92:f2:22:bf:1e:df:aa:47:66:cd:56:30:6e:29:e4:de:
         7c:69:8d:bd:a9:6f:aa:12:95:05:0b:46:ac:62:5e:b2:9a:66:
         ff:14:70:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:11:59 2025 by rpki-client