Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4G4EXo6p57LCuaxgHKRsFEvnhP3eDUj7NiHHGC72VAgs/0/3230302e35332e37392e302f32342d3234203d3e20323731333136.roa
File:                     3230302e35332e37392e302f32342d3234203d3e20323731333136.roa (raw, json)
Hash identifier:          93zKVOrKHbSo5HEeLoH37RJ11jpFLfz+QyEJo6hXuuk=
Subject key identifier:   36:8C:D6:1B:9B:47:67:96:3B:BE:03:44:F1:7B:E7:E7:EC:AF:FA:88
Certificate issuer:       /CN=4CE80122D6DDFCAC903327698E75EF1407FA8195
Certificate serial:       5268605242BFE7C2F747EB52DFC5ABFBFF6EAA3D
Authority key identifier: 4C:E8:01:22:D6:DD:FC:AC:90:33:27:69:8E:75:EF:14:07:FA:81:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE80122D6DDFCAC903327698E75EF1407FA8195.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4G4EXo6p57LCuaxgHKRsFEvnhP3eDUj7NiHHGC72VAgs/0/3230302e35332e37392e302f32342d3234203d3e20323731333136.roa
Signing time:             Tue 09 Sep 2025 13:47:34 +0000
ROA not before:           Tue 09 Sep 2025 13:42:34 +0000
ROA not after:            Tue 08 Sep 2026 13:47:34 +0000
asID:                     271316
IP address blocks:        200.53.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4G4EXo6p57LCuaxgHKRsFEvnhP3eDUj7NiHHGC72VAgs/0/4CE80122D6DDFCAC903327698E75EF1407FA8195.crl
                          rsync://rpki-repo.registro.br/repo/4G4EXo6p57LCuaxgHKRsFEvnhP3eDUj7NiHHGC72VAgs/0/4CE80122D6DDFCAC903327698E75EF1407FA8195.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE80122D6DDFCAC903327698E75EF1407FA8195.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Oct 2025 22:32:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:68:60:52:42:bf:e7:c2:f7:47:eb:52:df:c5:ab:fb:ff:6e:aa:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CE80122D6DDFCAC903327698E75EF1407FA8195
        Validity
            Not Before: Sep  9 13:42:34 2025 GMT
            Not After : Sep  8 13:47:34 2026 GMT
        Subject: CN=368CD61B9B4767963BBE0344F17BE7E7ECAFFA88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8d:70:12:7d:5d:b9:61:c6:d4:84:16:07:86:
                    89:19:d6:4b:d1:f6:5d:a3:8a:ca:06:33:0a:53:f4:
                    23:dc:2b:0a:65:ae:dc:83:b3:a3:7e:fe:a0:eb:98:
                    61:9d:87:08:c4:be:55:33:c8:d3:14:f4:5b:e6:eb:
                    52:76:c5:b8:b1:ae:65:a1:38:22:56:75:83:aa:0c:
                    14:f4:ed:e3:53:21:c9:f5:83:19:50:c1:c5:b3:15:
                    72:a1:d3:49:37:bf:bb:ea:b5:b6:0e:e2:3d:b9:0b:
                    b2:a0:e0:f6:67:a4:df:e7:bf:9e:07:16:a6:8b:2f:
                    39:f0:34:d7:fa:dc:09:2e:bc:08:cf:eb:fa:ca:5d:
                    5d:54:d6:46:d6:f2:29:03:cc:5b:4e:ce:a1:57:af:
                    ba:9a:cc:1b:ba:b2:73:49:c6:22:71:c9:bb:39:df:
                    70:1a:75:e6:f9:ca:9b:04:18:30:0f:e5:07:6e:b7:
                    34:ec:51:20:7b:cf:58:61:99:f7:eb:00:7b:29:3c:
                    14:e2:ec:b1:0f:ea:92:a5:62:37:33:d3:bf:24:57:
                    5e:16:77:58:24:4d:03:e4:3c:02:20:7f:23:d7:47:
                    c1:7f:a1:e3:22:ab:36:4d:b6:38:51:67:17:81:0e:
                    fc:28:01:7f:f2:db:e3:bf:00:4d:dc:3b:d6:85:68:
                    90:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:8C:D6:1B:9B:47:67:96:3B:BE:03:44:F1:7B:E7:E7:EC:AF:FA:88
            X509v3 Authority Key Identifier:
                keyid:4C:E8:01:22:D6:DD:FC:AC:90:33:27:69:8E:75:EF:14:07:FA:81:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4G4EXo6p57LCuaxgHKRsFEvnhP3eDUj7NiHHGC72VAgs/0/4CE80122D6DDFCAC903327698E75EF1407FA8195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE80122D6DDFCAC903327698E75EF1407FA8195.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4G4EXo6p57LCuaxgHKRsFEvnhP3eDUj7NiHHGC72VAgs/0/3230302e35332e37392e302f32342d3234203d3e20323731333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:2f:d0:e0:87:d6:04:99:b7:51:9b:43:df:b1:1f:26:9b:8f:
         3d:ef:cb:1d:9a:89:86:da:2d:e6:0c:3f:8a:96:06:d8:a1:7e:
         0c:8f:28:8e:a2:bd:37:5a:cb:c6:de:c9:c8:1b:43:2c:ae:f7:
         6d:a1:8d:8a:f1:21:d0:7e:10:2f:ec:4a:3a:c6:a4:35:8c:e3:
         eb:57:55:6d:96:ad:9b:e0:b8:16:18:44:98:5a:49:74:ff:5f:
         df:cd:ec:63:c8:89:75:ae:49:04:44:8e:fc:25:90:32:db:1e:
         c1:b7:d9:2a:ba:90:a5:41:a0:fa:4a:75:7c:ae:2d:94:26:86:
         0e:af:96:db:f9:be:06:fb:ec:ae:83:7f:c8:d7:94:52:47:20:
         7d:f8:ed:f2:dd:1a:36:e9:03:1b:82:6f:9a:5a:a7:f9:c9:47:
         a7:24:2d:66:30:ce:69:4e:35:3b:14:fb:a2:a7:00:1a:95:34:
         e1:6d:46:70:f5:8a:be:18:fd:cf:87:9f:ed:2d:02:a7:67:2d:
         e4:02:80:64:b6:3d:50:89:dd:b7:a6:1e:79:41:c7:92:5d:b9:
         04:d2:8a:0d:ac:07:59:26:33:3c:6a:b5:11:e8:2d:9c:8c:0e:
         50:6d:9b:5a:f7:b1:b6:1e:e3:f0:bb:b9:0a:b1:f8:6d:8f:8f:
         f6:84:5f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:51:25 2025 by rpki-client