Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3230302e3232302e3133362e302f32312d3231203d3e203237363933.roa
File:                     3230302e3232302e3133362e302f32312d3231203d3e203237363933.roa (raw, json)
Hash identifier:          5Vfemg2a9Vukh2A5a6NAU1fTNcTEuaqtYmAIf1UyTmY=
Subject key identifier:   0A:E0:3D:E1:E1:4E:AE:82:05:C1:92:10:FC:F5:EE:8A:9E:27:B5:CE
Certificate issuer:       /CN=3345439099C79C13F583D2238E3BB7D0D60D6877
Certificate serial:       6B10F297AF791AC764272DD77E12DF429B965904
Authority key identifier: 33:45:43:90:99:C7:9C:13:F5:83:D2:23:8E:3B:B7:D0:D6:0D:68:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3230302e3232302e3133362e302f32312d3231203d3e203237363933.roa
Signing time:             Tue 23 Sep 2025 15:19:32 +0000
ROA not before:           Tue 23 Sep 2025 15:14:32 +0000
ROA not after:            Tue 22 Sep 2026 15:19:32 +0000
asID:                     27693
IP address blocks:        200.220.136.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.crl
                          rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 08:56:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:10:f2:97:af:79:1a:c7:64:27:2d:d7:7e:12:df:42:9b:96:59:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3345439099C79C13F583D2238E3BB7D0D60D6877
        Validity
            Not Before: Sep 23 15:14:32 2025 GMT
            Not After : Sep 22 15:19:32 2026 GMT
        Subject: CN=0AE03DE1E14EAE8205C19210FCF5EE8A9E27B5CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f4:76:42:22:d6:05:ff:be:81:0c:c8:fe:8a:
                    2d:0d:7b:01:4b:77:e9:4c:a0:93:6a:86:32:29:22:
                    4d:83:d9:5a:59:d8:53:06:48:60:50:09:ed:b1:1b:
                    6a:63:61:a5:6d:0f:18:ca:4c:3e:ec:00:27:96:9f:
                    ca:35:47:4a:90:28:56:2d:5c:0c:ec:52:1c:7c:68:
                    07:80:30:64:1f:c2:1b:d5:6f:40:88:cc:2e:ec:79:
                    a1:b6:9b:5c:8e:fb:83:97:09:72:1d:23:36:eb:10:
                    78:14:48:78:05:e8:f7:a8:20:bc:cc:9c:29:44:fa:
                    ec:67:d0:c0:41:5f:7a:0c:96:10:bc:f9:e4:71:37:
                    22:53:55:ad:90:d0:1e:9e:96:f4:57:66:b4:cd:7e:
                    22:7a:3e:a0:60:aa:1e:98:7e:12:61:63:a4:09:8b:
                    c6:e5:e4:e9:c0:38:8f:8d:f4:31:44:20:4a:e5:e3:
                    22:3a:9f:2a:6c:0e:b2:6b:43:f8:04:0d:ee:ab:56:
                    88:4f:04:c8:24:cb:13:7d:a1:96:e4:94:6b:ac:bc:
                    15:ca:83:c2:28:a1:3f:61:32:bb:3e:00:21:a8:2a:
                    06:94:cb:dd:48:34:da:4a:55:59:36:a7:ef:a4:d5:
                    3d:39:e0:94:53:c1:b1:54:83:aa:1b:e5:dc:e6:33:
                    e3:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:E0:3D:E1:E1:4E:AE:82:05:C1:92:10:FC:F5:EE:8A:9E:27:B5:CE
            X509v3 Authority Key Identifier:
                keyid:33:45:43:90:99:C7:9C:13:F5:83:D2:23:8E:3B:B7:D0:D6:0D:68:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3230302e3232302e3133362e302f32312d3231203d3e203237363933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.220.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7f:92:78:11:10:eb:35:31:11:54:ca:04:1b:79:f1:24:d8:58:
         07:a4:b7:98:cf:b6:00:c9:56:de:99:b7:a9:08:68:94:cf:6c:
         47:d0:18:7f:c9:c0:83:83:cc:4d:e0:fb:a1:14:4a:24:f3:16:
         7f:7a:9d:d9:24:04:c2:7d:f1:ca:40:18:79:eb:25:ac:77:0e:
         f8:dd:08:5f:e7:83:29:da:cb:63:76:8c:85:bb:12:60:5c:7d:
         b3:b5:a9:3e:95:7f:01:aa:99:11:e7:6c:fe:cb:c9:6d:13:a8:
         e7:3e:f6:79:10:1d:f9:8e:7f:b0:86:d4:3e:b9:4c:4e:56:59:
         a4:77:90:b7:3f:cd:fd:f2:fb:f4:25:10:81:58:1c:48:bf:d8:
         fa:dc:06:41:ed:0e:c6:86:d9:d9:27:c4:e0:a9:2b:51:d5:f5:
         bc:09:aa:45:33:c7:5d:4c:91:75:ce:93:77:4e:50:65:2e:41:
         2c:ad:b0:df:d0:d3:88:81:03:28:ce:4e:a7:a8:ad:99:4b:03:
         56:21:36:58:fb:24:83:5c:b5:59:a5:54:cc:68:88:36:a3:ae:
         ff:91:b9:a0:24:dc:63:e4:0c:8b:81:7e:b1:f5:1d:c5:ad:52:
         a3:71:a7:da:b4:f5:20:45:b4:c5:fb:bc:c4:1a:10:56:aa:6c:
         3d:e1:89:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:38:08 2025 by rpki-client