Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/54NKmLxabHU5BKeyF2o7dPNJZeX8GauKPPCEmnRKpygK/0/3230302e3130362e3232322e302f32332d3332203d3e20323731333337.roa
File:                     3230302e3130362e3232322e302f32332d3332203d3e20323731333337.roa (raw, json)
Hash identifier:          NPntOO2elGKDRNaLdt/ldA/TWyF7vuDHAexjiwgjuNY=
Subject key identifier:   63:39:0B:47:42:47:53:A2:97:62:2D:C9:E8:6C:AB:F6:B8:EA:BA:CF
Certificate issuer:       /CN=230621F0568B19CE05FE2306C094C84B666D6C54
Certificate serial:       29B706CE8D1D800E8DD231A1E1B1E87802447CD7
Authority key identifier: 23:06:21:F0:56:8B:19:CE:05:FE:23:06:C0:94:C8:4B:66:6D:6C:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/230621F0568B19CE05FE2306C094C84B666D6C54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/54NKmLxabHU5BKeyF2o7dPNJZeX8GauKPPCEmnRKpygK/0/3230302e3130362e3232322e302f32332d3332203d3e20323731333337.roa
Signing time:             Thu 04 Sep 2025 14:17:48 +0000
ROA not before:           Thu 04 Sep 2025 14:12:48 +0000
ROA not after:            Thu 03 Sep 2026 14:17:48 +0000
asID:                     271337
IP address blocks:        200.106.222.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/54NKmLxabHU5BKeyF2o7dPNJZeX8GauKPPCEmnRKpygK/0/230621F0568B19CE05FE2306C094C84B666D6C54.crl
                          rsync://rpki-repo.registro.br/repo/54NKmLxabHU5BKeyF2o7dPNJZeX8GauKPPCEmnRKpygK/0/230621F0568B19CE05FE2306C094C84B666D6C54.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/230621F0568B19CE05FE2306C094C84B666D6C54.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 09:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:b7:06:ce:8d:1d:80:0e:8d:d2:31:a1:e1:b1:e8:78:02:44:7c:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=230621F0568B19CE05FE2306C094C84B666D6C54
        Validity
            Not Before: Sep  4 14:12:48 2025 GMT
            Not After : Sep  3 14:17:48 2026 GMT
        Subject: CN=63390B47424753A297622DC9E86CABF6B8EABACF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:35:31:2c:e7:84:6f:50:8a:29:df:2d:71:69:
                    98:6d:5e:e7:81:08:33:15:7b:7a:cb:0c:c0:03:ae:
                    35:ec:0e:8d:fe:b8:30:68:76:d3:cb:b7:9b:c4:32:
                    88:ee:5a:c1:b2:50:6c:a1:0b:d8:dc:71:f8:92:fe:
                    fa:72:fd:7d:d5:0b:34:60:09:c0:8f:76:89:23:a0:
                    1c:f6:74:31:ba:87:8d:3d:02:ab:a2:ab:25:1a:e2:
                    59:28:b4:98:34:2a:ef:47:ee:6e:2e:7e:4c:21:e8:
                    af:bd:98:91:4b:8e:97:17:4b:6e:ad:79:45:51:ca:
                    6d:5a:43:4a:2b:2c:c7:eb:0a:e4:bd:fe:b2:0f:fd:
                    b4:2a:54:75:1e:98:73:f9:bc:8e:51:d7:e9:5a:35:
                    67:7f:04:84:5a:58:ff:d7:2c:32:a0:88:97:46:30:
                    38:cd:75:5c:59:a0:e8:51:21:c6:73:06:9f:4c:a8:
                    71:b0:b1:67:3d:ce:c6:1f:71:82:8e:97:37:58:01:
                    58:c3:a3:74:21:94:3d:14:ee:1f:f9:e9:64:3c:72:
                    f6:2d:1e:40:2a:6f:b3:89:58:93:bb:4b:a9:0b:ff:
                    86:db:df:e2:63:f2:34:ba:45:8b:b1:96:6c:69:3e:
                    09:02:a6:6f:96:bc:a9:79:aa:ba:2e:0a:f7:46:56:
                    c2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:39:0B:47:42:47:53:A2:97:62:2D:C9:E8:6C:AB:F6:B8:EA:BA:CF
            X509v3 Authority Key Identifier:
                keyid:23:06:21:F0:56:8B:19:CE:05:FE:23:06:C0:94:C8:4B:66:6D:6C:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/54NKmLxabHU5BKeyF2o7dPNJZeX8GauKPPCEmnRKpygK/0/230621F0568B19CE05FE2306C094C84B666D6C54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/230621F0568B19CE05FE2306C094C84B666D6C54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/54NKmLxabHU5BKeyF2o7dPNJZeX8GauKPPCEmnRKpygK/0/3230302e3130362e3232322e302f32332d3332203d3e20323731333337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.106.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:bb:cf:24:ea:bc:83:97:1c:75:ef:99:ce:30:87:18:ae:21:
         f3:ad:89:cd:90:09:87:dc:30:89:d4:7b:19:60:d9:a0:4f:00:
         87:73:8e:64:5f:90:3c:bf:03:57:d3:37:1c:1e:e7:a9:4f:3c:
         6f:ae:21:20:e0:46:d0:ae:6c:9f:fa:71:6c:3b:50:4f:fe:29:
         a7:76:4d:3c:14:a5:7c:79:b8:0d:c6:0f:28:97:6f:ff:da:03:
         78:69:00:47:89:69:60:25:c2:49:6f:fb:c5:cd:b7:ed:d7:72:
         3c:76:10:a4:cc:8f:64:4c:c0:02:e4:5a:c7:10:1b:c2:92:b5:
         84:d3:ee:32:e4:a6:f0:01:c9:8a:c6:2b:d7:48:78:c3:6f:c1:
         13:43:41:5f:6b:e8:f0:26:06:10:59:9e:a6:b6:eb:43:b7:2a:
         a1:75:dd:9f:96:47:52:0b:66:66:ed:dd:6c:00:40:7f:24:da:
         74:cc:e6:77:d1:99:e8:35:f3:8c:af:6c:60:5b:98:5e:4f:79:
         3a:75:ad:cb:56:47:2f:87:aa:0c:7a:de:75:53:ac:c3:5d:bb:
         9c:e0:25:cc:50:2d:1a:0e:fa:fe:bc:cd:27:7c:23:c3:65:d4:
         23:42:f9:69:fc:0d:7b:15:4b:e0:37:e2:ea:1c:cf:44:14:97:
         ae:27:31:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:04:02 2025 by rpki-client