Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4G4EXo6p57LCuaxgHKRsFEvnhP3eDUj7NiHHGC72VAgs/0/3230302e35332e37362e302f32342d3234203d3e20323731333136.roa
File:                     3230302e35332e37362e302f32342d3234203d3e20323731333136.roa (raw, json)
Hash identifier:          nIV6ZpOOJoFXarVbTgdRMvC2g1BanYy7ldked+11w1Y=
Subject key identifier:   E2:F5:60:DD:92:0A:F3:EB:E1:97:6C:0C:DA:29:36:76:B4:B0:BD:F2
Certificate issuer:       /CN=4CE80122D6DDFCAC903327698E75EF1407FA8195
Certificate serial:       4F5F6615B5A49D77691B28D413AC5D5DBF60680D
Authority key identifier: 4C:E8:01:22:D6:DD:FC:AC:90:33:27:69:8E:75:EF:14:07:FA:81:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE80122D6DDFCAC903327698E75EF1407FA8195.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4G4EXo6p57LCuaxgHKRsFEvnhP3eDUj7NiHHGC72VAgs/0/3230302e35332e37362e302f32342d3234203d3e20323731333136.roa
Signing time:             Tue 12 Aug 2025 18:34:41 +0000
ROA not before:           Tue 12 Aug 2025 18:29:41 +0000
ROA not after:            Tue 11 Aug 2026 18:34:41 +0000
asID:                     271316
IP address blocks:        200.53.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4G4EXo6p57LCuaxgHKRsFEvnhP3eDUj7NiHHGC72VAgs/0/4CE80122D6DDFCAC903327698E75EF1407FA8195.crl
                          rsync://rpki-repo.registro.br/repo/4G4EXo6p57LCuaxgHKRsFEvnhP3eDUj7NiHHGC72VAgs/0/4CE80122D6DDFCAC903327698E75EF1407FA8195.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE80122D6DDFCAC903327698E75EF1407FA8195.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 12:22:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:5f:66:15:b5:a4:9d:77:69:1b:28:d4:13:ac:5d:5d:bf:60:68:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CE80122D6DDFCAC903327698E75EF1407FA8195
        Validity
            Not Before: Aug 12 18:29:41 2025 GMT
            Not After : Aug 11 18:34:41 2026 GMT
        Subject: CN=E2F560DD920AF3EBE1976C0CDA293676B4B0BDF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:53:4a:df:0a:c6:12:94:f8:23:ac:34:1f:09:
                    e2:21:a6:f7:a4:84:b1:f0:35:2e:c1:1f:38:ff:23:
                    91:32:08:a9:45:eb:0c:81:31:88:eb:a3:cc:bf:b6:
                    1f:d2:6a:65:e6:71:6e:b1:26:6c:cf:0d:60:90:f2:
                    c9:08:4c:85:7a:95:ff:f6:3f:01:be:4c:d6:c9:0b:
                    71:50:97:11:e4:4a:28:c8:38:4d:ed:c5:c4:bd:10:
                    fc:2e:05:60:79:2f:3a:62:3b:1c:1b:d2:2d:1b:43:
                    77:45:c7:bb:5e:fc:e8:9e:c4:32:98:9e:85:ca:cf:
                    77:91:25:b2:ed:cd:e5:cc:95:0b:c7:b9:cf:ca:2b:
                    c5:c0:0d:a9:2b:60:dd:61:e5:f9:95:43:ed:3b:d5:
                    28:d1:9c:97:d5:c7:aa:7b:b2:51:73:e9:b8:da:02:
                    d0:01:a7:80:61:1a:88:3e:95:c1:3d:f2:54:18:96:
                    b0:51:5e:9e:9f:41:60:66:41:d6:e3:67:46:35:61:
                    59:08:c4:7a:40:7a:3d:40:9c:82:d2:94:e4:82:d2:
                    49:c3:e5:cf:ff:d9:f8:c8:cf:4d:0e:f6:a6:ed:4a:
                    c4:d6:de:02:9d:79:5d:49:36:7c:80:92:49:27:af:
                    53:56:b4:b5:f7:ac:1d:96:48:c0:7e:b1:c1:3d:65:
                    bb:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:F5:60:DD:92:0A:F3:EB:E1:97:6C:0C:DA:29:36:76:B4:B0:BD:F2
            X509v3 Authority Key Identifier:
                keyid:4C:E8:01:22:D6:DD:FC:AC:90:33:27:69:8E:75:EF:14:07:FA:81:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4G4EXo6p57LCuaxgHKRsFEvnhP3eDUj7NiHHGC72VAgs/0/4CE80122D6DDFCAC903327698E75EF1407FA8195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE80122D6DDFCAC903327698E75EF1407FA8195.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4G4EXo6p57LCuaxgHKRsFEvnhP3eDUj7NiHHGC72VAgs/0/3230302e35332e37362e302f32342d3234203d3e20323731333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:84:ec:42:93:af:14:eb:75:97:45:e1:5e:18:6b:15:8c:2d:
         18:5d:cd:38:4f:bc:fe:12:ac:f6:81:d2:89:9a:c1:9d:31:e3:
         be:43:68:cb:ff:53:08:d1:20:6c:20:69:a5:df:52:54:ef:dd:
         38:03:1c:a7:e3:10:f3:b8:c5:4b:23:0d:62:06:23:89:52:77:
         c0:99:e5:aa:7b:29:07:61:eb:25:e5:93:c0:17:6e:a8:f0:61:
         8a:88:2f:93:31:81:a7:da:2f:22:33:56:3f:7d:7f:be:0f:64:
         61:62:54:03:37:38:44:08:40:ca:5b:2a:0f:1d:39:ec:df:2f:
         a1:34:4d:e8:b6:88:b7:6c:38:7e:f9:84:1e:b0:73:a3:90:10:
         c6:19:ef:c6:8f:b6:63:f4:f8:c7:1c:d7:3b:94:8e:3b:c8:5a:
         22:af:bc:83:4e:9b:74:20:1f:e8:5b:4a:19:49:5e:61:a6:f8:
         5f:e0:dc:60:d7:19:e3:98:96:ad:b4:63:67:28:76:08:1e:1f:
         fd:20:7f:64:98:45:49:ba:d9:21:05:15:8b:aa:8f:5f:4c:84:
         40:92:b6:38:71:90:d5:25:e1:cf:d6:f0:8c:54:03:af:ea:50:
         54:df:f6:a4:7d:a6:dd:a4:dc:bf:77:81:33:2d:fa:9a:28:1f:
         60:b0:78:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:48:31 2025 by rpki-client