Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4G4EXo6p57LCuaxgHKRsFEvnhP3eDUj7NiHHGC72VAgs/0/3230302e35332e37362e302f32332d3233203d3e20323731333136.roa
File:                     3230302e35332e37362e302f32332d3233203d3e20323731333136.roa (raw, json)
Hash identifier:          JrtUeuMd7mlklugszg0TSGLi9BvMubCDLCd3d5HWus4=
Subject key identifier:   C5:BD:F8:37:A2:40:08:41:AA:EF:43:5D:21:65:3D:07:36:68:AA:5B
Certificate issuer:       /CN=4CE80122D6DDFCAC903327698E75EF1407FA8195
Certificate serial:       311B907A21FE28458FD64CB8530D74168C006D01
Authority key identifier: 4C:E8:01:22:D6:DD:FC:AC:90:33:27:69:8E:75:EF:14:07:FA:81:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE80122D6DDFCAC903327698E75EF1407FA8195.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4G4EXo6p57LCuaxgHKRsFEvnhP3eDUj7NiHHGC72VAgs/0/3230302e35332e37362e302f32332d3233203d3e20323731333136.roa
Signing time:             Tue 12 Aug 2025 18:34:32 +0000
ROA not before:           Tue 12 Aug 2025 18:29:32 +0000
ROA not after:            Tue 11 Aug 2026 18:34:32 +0000
asID:                     271316
IP address blocks:        200.53.76.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4G4EXo6p57LCuaxgHKRsFEvnhP3eDUj7NiHHGC72VAgs/0/4CE80122D6DDFCAC903327698E75EF1407FA8195.crl
                          rsync://rpki-repo.registro.br/repo/4G4EXo6p57LCuaxgHKRsFEvnhP3eDUj7NiHHGC72VAgs/0/4CE80122D6DDFCAC903327698E75EF1407FA8195.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE80122D6DDFCAC903327698E75EF1407FA8195.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 Aug 2025 04:33:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:1b:90:7a:21:fe:28:45:8f:d6:4c:b8:53:0d:74:16:8c:00:6d:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CE80122D6DDFCAC903327698E75EF1407FA8195
        Validity
            Not Before: Aug 12 18:29:32 2025 GMT
            Not After : Aug 11 18:34:32 2026 GMT
        Subject: CN=C5BDF837A2400841AAEF435D21653D073668AA5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:55:45:bd:9b:87:14:9f:99:64:91:c5:e8:84:
                    68:e3:d2:8e:24:bd:fb:59:1a:27:01:7a:19:59:5b:
                    f4:ad:e3:c0:52:8c:75:d5:18:2d:88:0e:be:35:8f:
                    5b:01:92:75:78:9f:e9:c4:1d:2e:72:e6:f0:7f:26:
                    63:63:b6:fe:50:f3:fd:71:88:87:5b:50:05:76:fb:
                    8a:ff:9b:cf:84:94:8e:79:02:77:12:11:91:2d:d6:
                    4f:72:93:36:b2:f8:44:c9:10:6e:b4:47:24:05:9a:
                    e1:44:ea:d1:6c:8d:b2:2f:8c:58:29:8b:ba:81:a7:
                    32:bd:fd:52:07:cd:9c:76:f0:22:03:61:01:fc:5f:
                    84:30:e2:e8:f1:43:2f:5a:69:80:bb:f5:e1:c1:24:
                    46:d2:46:45:7f:16:f3:41:ae:80:65:12:b2:13:f3:
                    d3:c0:f5:e5:bf:64:32:7a:cb:96:d4:0e:29:58:e2:
                    c2:be:41:14:f8:28:b3:7e:1f:b2:27:86:1a:81:69:
                    8b:be:33:1b:57:d2:ae:9b:1c:e7:34:d4:e6:84:21:
                    83:01:4e:3f:30:1a:f5:fa:d4:8b:39:d7:b8:fa:bd:
                    e4:c3:81:56:21:10:6a:04:8f:60:b4:7e:45:c0:64:
                    01:b2:83:15:4b:23:e6:76:b7:0a:67:93:fb:e9:3f:
                    94:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:BD:F8:37:A2:40:08:41:AA:EF:43:5D:21:65:3D:07:36:68:AA:5B
            X509v3 Authority Key Identifier:
                keyid:4C:E8:01:22:D6:DD:FC:AC:90:33:27:69:8E:75:EF:14:07:FA:81:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4G4EXo6p57LCuaxgHKRsFEvnhP3eDUj7NiHHGC72VAgs/0/4CE80122D6DDFCAC903327698E75EF1407FA8195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE80122D6DDFCAC903327698E75EF1407FA8195.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4G4EXo6p57LCuaxgHKRsFEvnhP3eDUj7NiHHGC72VAgs/0/3230302e35332e37362e302f32332d3233203d3e20323731333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:c1:da:81:79:fc:99:f9:a8:f7:bc:1c:46:ad:40:61:5e:d5:
         d7:2c:8b:ee:55:3a:14:30:70:6d:97:ee:c9:f1:dd:6b:a7:25:
         c2:42:b1:93:4a:4e:15:6c:05:7c:02:ac:39:73:63:f5:80:2d:
         01:23:b9:15:85:d5:96:f3:66:97:7b:4c:43:54:0d:33:f4:6c:
         02:df:c6:d2:91:f5:f9:18:4d:54:93:51:76:de:21:84:1e:33:
         81:cc:73:86:eb:89:e8:82:f1:1f:da:ae:7e:24:57:1a:32:75:
         45:42:43:01:80:3d:b2:a0:aa:31:0b:68:63:66:6b:a2:e7:25:
         19:16:2b:8f:66:8e:3f:f0:f3:08:14:13:fe:e4:4c:5f:1d:01:
         02:9b:ef:62:22:6d:1f:30:52:75:89:35:85:a3:f9:a7:1e:55:
         7f:c7:7b:0b:3b:74:21:29:69:85:17:73:af:fc:02:6a:74:cd:
         c4:25:52:58:8b:1a:c8:bc:c3:e2:16:78:19:fc:a2:56:61:21:
         7d:47:fa:2d:f5:da:e1:a3:b7:3c:2e:e3:fd:6d:f3:9b:ab:ac:
         4b:08:27:a5:71:df:67:a2:42:db:db:7a:68:ee:83:17:3c:72:
         56:1f:26:9d:e6:f1:9c:ca:f5:2b:93:09:a3:94:37:3d:94:f2:
         51:9c:4f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:02:24 2025 by rpki-client