Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4VQUaJmmxLxfncFx7Ln1ALpSZjBbhubxo5BNTzVjgMvU/0/3230302e3135322e34382e302f32302d3234203d3e203236363136.roa
File:                     3230302e3135322e34382e302f32302d3234203d3e203236363136.roa (raw, json)
Hash identifier:          Z0eXAFFExdaItl/MJwNM7AEYBAXCGsMGkcloh1WD2oU=
Subject key identifier:   8E:26:CD:0B:AE:AA:1F:19:E8:1E:AA:EF:35:3E:97:DB:FE:EA:5F:24
Certificate issuer:       /CN=E7700F13658CA0FAD21A568C7195309EAC2021BA
Certificate serial:       49F7CD44267E21A58EE3F83FE29B0692DFFA32E6
Authority key identifier: E7:70:0F:13:65:8C:A0:FA:D2:1A:56:8C:71:95:30:9E:AC:20:21:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7700F13658CA0FAD21A568C7195309EAC2021BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4VQUaJmmxLxfncFx7Ln1ALpSZjBbhubxo5BNTzVjgMvU/0/3230302e3135322e34382e302f32302d3234203d3e203236363136.roa
Signing time:             Wed 01 Oct 2025 02:05:48 +0000
ROA not before:           Wed 01 Oct 2025 02:00:48 +0000
ROA not after:            Wed 30 Sep 2026 02:05:48 +0000
asID:                     26616
IP address blocks:        200.152.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4VQUaJmmxLxfncFx7Ln1ALpSZjBbhubxo5BNTzVjgMvU/0/E7700F13658CA0FAD21A568C7195309EAC2021BA.crl
                          rsync://rpki-repo.registro.br/repo/4VQUaJmmxLxfncFx7Ln1ALpSZjBbhubxo5BNTzVjgMvU/0/E7700F13658CA0FAD21A568C7195309EAC2021BA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7700F13658CA0FAD21A568C7195309EAC2021BA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 15:37:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:f7:cd:44:26:7e:21:a5:8e:e3:f8:3f:e2:9b:06:92:df:fa:32:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7700F13658CA0FAD21A568C7195309EAC2021BA
        Validity
            Not Before: Oct  1 02:00:48 2025 GMT
            Not After : Sep 30 02:05:48 2026 GMT
        Subject: CN=8E26CD0BAEAA1F19E81EAAEF353E97DBFEEA5F24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:22:8d:c4:34:6d:59:0d:df:fd:4f:c3:59:69:
                    89:ad:e1:5d:fe:a1:e8:a5:c0:1d:c9:83:09:1d:c5:
                    31:6d:25:13:43:4f:4b:b5:c9:89:e8:45:f4:cf:67:
                    06:15:66:4d:2f:4c:5a:7a:2e:28:27:b7:37:cb:ae:
                    0e:67:d5:a3:1e:1a:cd:94:01:46:79:2e:82:64:31:
                    a9:17:59:1b:30:de:a4:89:f1:be:f6:6d:38:7d:b5:
                    e8:dc:09:d3:65:f4:52:93:e3:27:f6:b1:62:16:0f:
                    ff:66:34:69:7a:93:01:2d:eb:6c:ca:5b:9e:58:9d:
                    a9:ca:70:22:65:8b:c2:76:95:8f:cb:ad:85:d8:e2:
                    5a:90:6f:d5:c8:75:d4:76:e7:92:d6:46:98:43:26:
                    80:0e:22:5a:aa:69:37:9a:a7:c7:2b:40:e1:8d:9e:
                    03:f5:19:f0:60:bf:88:51:78:25:63:25:d4:bc:bf:
                    b8:17:02:e7:03:93:2f:43:c9:40:e9:5d:99:77:ff:
                    06:4f:4a:81:f0:10:15:33:fe:83:48:03:59:de:42:
                    af:48:16:be:58:a9:9f:0c:1c:58:e3:0a:0b:03:7a:
                    79:fe:22:97:74:bd:e2:81:9b:6a:f9:bd:9e:bf:23:
                    3d:02:3d:d1:ac:cd:c2:52:47:3a:62:e8:eb:94:4e:
                    e7:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:26:CD:0B:AE:AA:1F:19:E8:1E:AA:EF:35:3E:97:DB:FE:EA:5F:24
            X509v3 Authority Key Identifier:
                keyid:E7:70:0F:13:65:8C:A0:FA:D2:1A:56:8C:71:95:30:9E:AC:20:21:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4VQUaJmmxLxfncFx7Ln1ALpSZjBbhubxo5BNTzVjgMvU/0/E7700F13658CA0FAD21A568C7195309EAC2021BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7700F13658CA0FAD21A568C7195309EAC2021BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VQUaJmmxLxfncFx7Ln1ALpSZjBbhubxo5BNTzVjgMvU/0/3230302e3135322e34382e302f32302d3234203d3e203236363136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         00:d3:0c:61:d4:ec:a3:3e:57:df:d4:1a:09:29:36:26:58:2c:
         e5:ce:14:aa:95:ab:4a:26:89:eb:ed:2d:60:ca:d5:0b:63:78:
         40:2d:db:be:d9:1a:a4:ed:3f:fc:c6:be:67:68:18:43:7a:be:
         ec:5c:5a:95:ab:ed:a1:f1:f7:48:c2:81:d7:7c:19:18:d8:22:
         29:03:99:5f:19:a7:ff:8d:83:66:33:3a:c3:d7:d0:73:7a:77:
         be:7c:f9:e6:a2:73:6e:6f:cd:54:77:53:75:ad:51:4b:8c:32:
         04:e1:6e:45:f0:8d:b5:60:33:7c:3f:c7:b2:cd:a6:bb:26:aa:
         b9:f1:b3:74:35:1e:cc:53:77:6a:c1:9a:d8:96:d5:c8:64:07:
         c8:b1:c8:d0:3c:5d:93:1c:c1:66:72:ba:22:65:5a:1a:ca:a5:
         a1:0e:d8:17:1d:00:4a:91:c3:96:10:31:86:92:7f:fc:ae:e3:
         aa:d7:5b:b6:93:7f:e1:68:b5:9b:22:26:3d:c0:92:56:98:7d:
         6d:f5:d2:71:ab:1e:41:17:d2:16:5e:08:0b:f8:01:66:cf:13:
         e0:2d:ed:91:5e:24:bf:6f:e0:3a:14:28:2d:3b:c4:0b:87:78:
         29:e5:07:ce:45:83:34:a9:2e:1d:28:43:1f:38:65:29:10:f5:
         ff:07:47:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:43:29 2025 by rpki-client