Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3230302e3232302e3133362e302f32342d3234203d3e203237363933.roa
File:                     3230302e3232302e3133362e302f32342d3234203d3e203237363933.roa (raw, json)
Hash identifier:          WvrIf1U8F2onB5UrJa3Mxk0TrZTLIWOlRSjPA+7MVT0=
Subject key identifier:   58:AA:36:AA:2F:E1:9A:49:31:9E:D1:14:FF:53:EE:54:B7:F8:A3:3A
Certificate issuer:       /CN=3345439099C79C13F583D2238E3BB7D0D60D6877
Certificate serial:       250928CE8F318416AD7DED1E8854545B32BE65FC
Authority key identifier: 33:45:43:90:99:C7:9C:13:F5:83:D2:23:8E:3B:B7:D0:D6:0D:68:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3230302e3232302e3133362e302f32342d3234203d3e203237363933.roa
Signing time:             Tue 23 Sep 2025 15:19:34 +0000
ROA not before:           Tue 23 Sep 2025 15:14:34 +0000
ROA not after:            Tue 22 Sep 2026 15:19:34 +0000
asID:                     27693
IP address blocks:        200.220.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.crl
                          rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 08:56:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:09:28:ce:8f:31:84:16:ad:7d:ed:1e:88:54:54:5b:32:be:65:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3345439099C79C13F583D2238E3BB7D0D60D6877
        Validity
            Not Before: Sep 23 15:14:34 2025 GMT
            Not After : Sep 22 15:19:34 2026 GMT
        Subject: CN=58AA36AA2FE19A49319ED114FF53EE54B7F8A33A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6f:48:5c:6c:87:20:72:cb:60:99:4d:32:b5:
                    85:6c:1b:f4:a6:15:82:95:a1:e7:28:19:a4:7e:d9:
                    d7:7a:a8:17:0b:a2:e9:91:5a:72:00:5e:d6:15:d7:
                    85:e5:f0:36:e0:d1:9f:fe:d3:17:b3:02:1e:ea:4a:
                    a5:69:1e:90:e6:33:ea:74:a8:57:db:df:b7:36:fa:
                    db:9b:8a:4d:e7:0d:13:8d:47:38:0a:7b:8f:9c:64:
                    e4:5b:5c:ec:93:d0:4d:8d:47:41:81:6f:6e:88:27:
                    ec:3a:ce:e6:b3:8c:7b:04:16:95:bf:8c:f5:69:ac:
                    91:04:cc:70:44:8e:c7:5a:c5:b5:94:65:f0:70:05:
                    10:22:32:f4:85:de:c1:b3:a3:57:28:b6:44:22:a9:
                    e6:b9:1e:bc:71:63:93:96:86:91:dd:14:de:71:2e:
                    d9:5e:e4:33:14:f9:0c:ae:d4:08:52:a5:6d:c6:83:
                    b8:d5:4e:b3:26:52:30:4f:fe:15:9c:39:a8:a8:e6:
                    05:52:46:03:7e:da:ab:86:94:f6:f0:66:6e:fc:39:
                    e2:4d:d9:3f:34:1f:5c:5d:db:36:90:39:03:ea:a2:
                    f6:67:d5:dd:74:6d:21:39:48:18:c6:ae:88:da:ae:
                    64:e9:8a:2c:c6:3b:89:7b:e6:59:df:e5:f8:b2:55:
                    9d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:AA:36:AA:2F:E1:9A:49:31:9E:D1:14:FF:53:EE:54:B7:F8:A3:3A
            X509v3 Authority Key Identifier:
                keyid:33:45:43:90:99:C7:9C:13:F5:83:D2:23:8E:3B:B7:D0:D6:0D:68:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3230302e3232302e3133362e302f32342d3234203d3e203237363933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.220.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:f9:bd:5a:8e:1b:5b:f7:ce:0f:cf:9e:3a:c1:87:60:25:30:
         2f:d5:70:f6:be:dc:e2:41:f8:0d:21:e7:84:84:4d:5d:25:d7:
         19:e3:e9:b9:0f:b4:5a:e5:aa:9c:58:3f:32:0e:8b:09:a4:be:
         82:bf:71:d4:ae:94:0b:af:46:99:85:1f:9f:ff:e5:33:4f:12:
         49:d4:53:de:30:14:11:08:bb:c9:47:7a:0a:0d:9c:c2:c4:21:
         9f:50:24:fd:b2:ef:78:8b:05:3d:1d:72:26:3d:5e:63:39:35:
         6b:b0:07:79:57:cd:2f:25:35:f2:f6:0c:79:b1:48:b4:5e:cf:
         a3:60:f7:f1:4b:78:10:a0:ea:6b:fc:e8:95:3f:1d:07:1c:fa:
         d0:94:da:45:73:6b:a1:1a:70:02:d7:72:08:bc:97:bf:c6:af:
         05:75:da:7d:f3:a0:9a:8a:0b:69:51:d6:43:a2:c4:7c:89:bd:
         3c:10:0f:ed:74:58:15:60:12:74:04:3f:e7:88:c1:8b:5c:ff:
         90:cf:18:26:8e:f4:93:53:cd:86:4c:d7:fe:55:f5:b4:b6:49:
         db:d4:4a:63:e4:80:e4:22:4a:ad:4e:35:1b:f1:02:bd:92:63:
         6e:8b:0c:4a:cd:f5:fb:9d:be:28:82:eb:f6:0c:c2:22:26:17:
         f7:42:5e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:12:07 2025 by rpki-client