Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/3230302e3139362e34302e302f32322d3332203d3e20323733343132.roa
File:                     3230302e3139362e34302e302f32322d3332203d3e20323733343132.roa (raw, json)
Hash identifier:          f1JcpWzz0zOrE1o4kMafSUnQNDcfaOZsP8Y83P4K+lo=
Subject key identifier:   77:6B:5B:B9:EA:3B:9A:BF:68:27:9B:63:D1:7D:97:49:1C:E6:B7:89
Certificate issuer:       /CN=88FFBC1DCE1883EA3D495F3FC58416D571724853
Certificate serial:       1CE5F11BA4CD7EA5EB03FB9CCF3350EA9E172C0B
Authority key identifier: 88:FF:BC:1D:CE:18:83:EA:3D:49:5F:3F:C5:84:16:D5:71:72:48:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88FFBC1DCE1883EA3D495F3FC58416D571724853.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/3230302e3139362e34302e302f32322d3332203d3e20323733343132.roa
Signing time:             Mon 22 Sep 2025 16:53:27 +0000
ROA not before:           Mon 22 Sep 2025 16:48:27 +0000
ROA not after:            Mon 21 Sep 2026 16:53:27 +0000
asID:                     273412
IP address blocks:        200.196.40.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/88FFBC1DCE1883EA3D495F3FC58416D571724853.crl
                          rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/88FFBC1DCE1883EA3D495F3FC58416D571724853.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88FFBC1DCE1883EA3D495F3FC58416D571724853.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Oct 2025 22:58:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:e5:f1:1b:a4:cd:7e:a5:eb:03:fb:9c:cf:33:50:ea:9e:17:2c:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88FFBC1DCE1883EA3D495F3FC58416D571724853
        Validity
            Not Before: Sep 22 16:48:27 2025 GMT
            Not After : Sep 21 16:53:27 2026 GMT
        Subject: CN=776B5BB9EA3B9ABF68279B63D17D97491CE6B789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:02:52:a5:88:e3:34:d5:01:6e:45:27:02:8f:
                    d2:93:2a:26:0c:48:68:09:5a:61:ae:17:b9:5d:5f:
                    7f:02:c7:25:b1:f8:49:30:50:e5:74:85:00:18:5d:
                    b1:5b:5f:11:b1:d3:a1:18:d2:77:b1:07:4b:c8:e9:
                    a9:78:ce:cd:87:7c:89:c9:9a:4d:d8:12:bf:db:7a:
                    e8:91:47:10:ec:02:aa:ee:d4:8f:4b:48:24:bd:59:
                    bd:34:c0:c5:cf:48:ad:7f:ef:b7:46:7e:da:21:8f:
                    c1:1b:b6:8d:96:8f:92:89:07:6b:d2:26:3d:56:a5:
                    51:19:d7:37:e5:36:64:9b:67:b7:21:ff:f6:0f:8c:
                    cf:87:4b:ac:ab:b6:e8:a0:76:f0:0d:e6:b6:01:80:
                    fc:a5:9c:cc:a5:fe:55:23:aa:9d:71:7e:7a:15:0d:
                    59:42:05:98:c3:2c:d4:d3:36:9c:44:50:b0:e1:a7:
                    55:81:54:4a:71:1f:fc:f5:12:18:9e:78:d6:c3:e8:
                    3e:24:fc:f4:bf:e5:11:18:40:1a:76:5a:29:2f:35:
                    76:2d:7f:1e:b8:8b:6f:f6:e0:77:a5:b7:1a:a4:66:
                    7e:52:d7:dd:a3:d6:b8:76:b1:ee:a0:10:d9:ca:fd:
                    45:a6:3d:26:a8:ea:82:c9:9a:ed:0e:e6:2f:02:92:
                    35:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:6B:5B:B9:EA:3B:9A:BF:68:27:9B:63:D1:7D:97:49:1C:E6:B7:89
            X509v3 Authority Key Identifier:
                keyid:88:FF:BC:1D:CE:18:83:EA:3D:49:5F:3F:C5:84:16:D5:71:72:48:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/88FFBC1DCE1883EA3D495F3FC58416D571724853.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88FFBC1DCE1883EA3D495F3FC58416D571724853.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/3230302e3139362e34302e302f32322d3332203d3e20323733343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.196.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:85:5a:cc:15:c5:2e:52:84:49:4e:ed:6b:14:6f:bd:75:a4:
         29:03:1b:9c:de:54:1a:db:05:99:db:bc:f0:7a:de:5c:40:59:
         4d:8f:4e:fd:26:ed:41:ae:4c:e9:fd:97:d5:49:be:00:81:fa:
         91:42:20:76:ae:08:e1:3f:49:5c:74:70:74:4c:97:05:41:25:
         3f:2d:ad:4f:ff:be:68:d6:c0:b2:cb:70:8d:ec:3a:dc:04:3b:
         01:ad:1f:a5:19:51:5d:a1:7c:3f:74:e6:92:4a:6e:7a:f6:59:
         7d:62:f0:7b:45:f0:77:f2:58:41:2e:a3:86:22:a3:1a:78:06:
         7a:25:c4:56:64:f9:21:49:2a:07:83:fa:89:a9:b3:47:4e:89:
         29:dd:1c:d3:0c:bd:23:67:3d:7c:34:7d:78:7a:64:1e:67:dc:
         37:16:75:86:e0:7d:86:97:74:c5:16:95:61:4d:ff:cb:c9:a6:
         35:0b:05:4e:12:15:a8:af:80:98:fa:3e:56:8f:a1:90:d6:d8:
         68:6b:84:6b:4b:0e:98:20:a0:2b:e9:36:cd:64:be:64:4e:31:
         26:1b:fb:9f:db:c3:2b:85:b8:99:f0:39:b9:df:2d:26:24:f6:
         d7:b2:5a:cd:a7:01:cd:31:5f:06:80:5a:c2:a6:8c:f9:8f:ca:
         41:03:af:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:27:42 2025 by rpki-client