Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3230302e3232302e3132382e302f32312d3231203d3e203237363933.roa
File:                     3230302e3232302e3132382e302f32312d3231203d3e203237363933.roa (raw, json)
Hash identifier:          cPA0Htf/4V+j0TDfYM4JtWoQEuZ36lZk/cZIaJBI3m8=
Subject key identifier:   BC:03:89:7F:19:D3:D8:D9:92:7F:5D:2E:A8:81:F9:F0:4C:88:60:2B
Certificate issuer:       /CN=3345439099C79C13F583D2238E3BB7D0D60D6877
Certificate serial:       7D313B6C4E63F188A2C67536103D30E5CD455F31
Authority key identifier: 33:45:43:90:99:C7:9C:13:F5:83:D2:23:8E:3B:B7:D0:D6:0D:68:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3230302e3232302e3132382e302f32312d3231203d3e203237363933.roa
Signing time:             Tue 23 Sep 2025 15:19:32 +0000
ROA not before:           Tue 23 Sep 2025 15:14:32 +0000
ROA not after:            Tue 22 Sep 2026 15:19:32 +0000
asID:                     27693
IP address blocks:        200.220.128.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.crl
                          rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 08:56:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:31:3b:6c:4e:63:f1:88:a2:c6:75:36:10:3d:30:e5:cd:45:5f:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3345439099C79C13F583D2238E3BB7D0D60D6877
        Validity
            Not Before: Sep 23 15:14:32 2025 GMT
            Not After : Sep 22 15:19:32 2026 GMT
        Subject: CN=BC03897F19D3D8D9927F5D2EA881F9F04C88602B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:09:b4:31:04:19:bd:7a:11:0a:0f:b1:6d:ae:
                    f3:3c:a8:f2:47:83:9a:a3:e4:a3:21:38:89:ea:c8:
                    ae:16:02:83:58:99:08:8f:1e:b6:60:eb:5e:71:d8:
                    32:4d:6b:69:21:4f:e4:ec:f7:e4:2f:bc:1d:b3:21:
                    12:70:f0:96:5a:6c:c4:0c:de:c9:95:f2:67:d5:64:
                    19:5f:3e:49:7a:c9:aa:04:16:39:32:ca:e1:e8:b4:
                    de:07:73:75:18:bd:04:34:0a:bd:8b:33:d2:df:b3:
                    fe:1b:e6:9d:9a:b4:27:ec:0a:bd:4c:95:a8:3f:3d:
                    66:ce:33:51:91:00:dc:7b:90:4c:39:fd:3c:0c:12:
                    14:77:bb:3f:5a:fc:63:89:32:48:3a:93:1f:fd:23:
                    0b:80:5f:e7:ae:eb:2e:6d:1e:2a:90:c8:88:9c:97:
                    e0:38:52:4a:87:36:94:ae:1f:6d:ba:41:73:70:7a:
                    97:a5:5f:6f:1f:4a:1b:a8:e9:08:93:ac:1c:93:3f:
                    72:83:5c:33:2b:ac:99:01:7f:97:46:93:b7:8c:fa:
                    24:18:58:7d:92:e8:fb:f9:6b:7b:e6:ff:4b:c4:18:
                    d9:2e:d0:5c:fd:d3:50:b9:0e:2d:c4:f0:b9:17:1f:
                    8a:ba:a8:d9:b4:27:e1:54:c4:98:37:db:05:d6:97:
                    b0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:03:89:7F:19:D3:D8:D9:92:7F:5D:2E:A8:81:F9:F0:4C:88:60:2B
            X509v3 Authority Key Identifier:
                keyid:33:45:43:90:99:C7:9C:13:F5:83:D2:23:8E:3B:B7:D0:D6:0D:68:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3230302e3232302e3132382e302f32312d3231203d3e203237363933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.220.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6f:33:9b:2c:e3:e2:a7:cd:87:b2:bd:9e:19:f2:7d:a8:47:31:
         a2:7a:5e:e1:96:e1:df:c2:09:22:9b:a4:64:a3:92:c4:09:7b:
         6c:a6:57:da:e8:74:66:fe:97:02:48:d6:45:ba:97:2f:64:e8:
         60:8d:2c:08:b6:b3:7f:ac:08:b3:57:5e:8e:8e:81:35:bd:72:
         28:47:a2:88:50:03:47:a0:bf:f0:94:03:13:95:6c:da:76:92:
         a6:9a:bc:e6:57:0a:f2:3f:08:60:07:f2:26:32:d6:5a:fa:1f:
         b7:bb:ef:35:5c:46:ad:e4:73:6d:33:2f:ea:27:36:07:9d:a8:
         1e:23:d4:e2:12:a1:41:53:0d:ca:fa:5f:1f:c8:77:6f:9e:a7:
         8f:9b:b5:a4:9b:5b:75:b5:81:a6:60:7f:31:f4:42:af:bd:fc:
         7a:3c:56:b6:0c:f5:d2:5d:cc:bf:9e:61:94:85:52:42:b0:b0:
         6d:a9:bf:cf:01:5d:37:be:e5:34:38:31:99:3f:93:b2:80:c0:
         08:1c:f8:14:c4:5a:74:b9:7a:6b:92:57:b0:06:c7:0c:e9:b8:
         b4:1a:7a:54:50:31:c7:7d:23:19:64:bb:9c:81:62:00:28:bb:
         f7:0f:a2:77:35:b0:bb:74:a0:bf:83:db:74:39:90:bc:13:1d:
         ff:6a:05:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:38:35 2025 by rpki-client