Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3230302e3232302e3134302e302f32322d3232203d3e203237363933.roa
File:                     3230302e3232302e3134302e302f32322d3232203d3e203237363933.roa (raw, json)
Hash identifier:          whb8zdBbRL63ksPIfUJx9P+6sF6znP9zVgZ1JZZo8Ac=
Subject key identifier:   08:A2:96:9E:DE:38:52:28:15:D5:FF:CC:08:08:D9:2D:14:69:7C:7B
Certificate issuer:       /CN=3345439099C79C13F583D2238E3BB7D0D60D6877
Certificate serial:       6375BF5B20CD016D3FD5F6DF882030CCAC5C5A57
Authority key identifier: 33:45:43:90:99:C7:9C:13:F5:83:D2:23:8E:3B:B7:D0:D6:0D:68:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3230302e3232302e3134302e302f32322d3232203d3e203237363933.roa
Signing time:             Tue 23 Sep 2025 15:19:34 +0000
ROA not before:           Tue 23 Sep 2025 15:14:34 +0000
ROA not after:            Tue 22 Sep 2026 15:19:34 +0000
asID:                     27693
IP address blocks:        200.220.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.crl
                          rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 08:56:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:75:bf:5b:20:cd:01:6d:3f:d5:f6:df:88:20:30:cc:ac:5c:5a:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3345439099C79C13F583D2238E3BB7D0D60D6877
        Validity
            Not Before: Sep 23 15:14:34 2025 GMT
            Not After : Sep 22 15:19:34 2026 GMT
        Subject: CN=08A2969EDE38522815D5FFCC0808D92D14697C7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:5b:e8:cd:1a:5f:85:5c:85:06:bd:37:44:4c:
                    38:f1:ce:19:27:ea:5e:64:b6:35:cd:59:69:3f:54:
                    ec:96:ad:d8:97:1b:6d:c7:67:4f:f4:0d:5d:1a:a8:
                    5c:1a:e8:67:71:cd:61:8a:44:1e:2a:29:b7:94:04:
                    3e:c7:7d:5a:94:93:f8:21:74:c7:b1:0c:d3:0f:f4:
                    fc:8d:ce:03:20:84:8e:51:3f:71:d8:4e:cb:cb:59:
                    70:82:7b:99:39:7c:da:b4:cc:13:fa:db:6a:7c:30:
                    d3:1c:2a:7a:ab:ae:6e:a0:b6:3e:23:17:d8:31:ce:
                    29:d0:a0:ee:e5:17:22:4b:1d:47:bb:29:c1:b4:75:
                    c0:37:92:44:b4:43:f1:66:5b:cc:e1:5a:41:be:87:
                    9d:37:3b:44:49:33:2f:01:24:37:35:a0:c4:bf:62:
                    f5:21:40:7d:d7:7f:5f:25:48:2b:26:ab:4b:37:a8:
                    57:9b:f8:cc:2a:7f:68:12:33:b2:5a:cd:c8:06:14:
                    46:e0:cf:a6:d7:3e:fc:bb:a9:45:c5:6b:c1:d0:ed:
                    b6:26:1b:af:4c:05:66:2f:84:05:26:b3:5e:2c:51:
                    c9:09:cc:a4:85:2a:f4:0a:d3:f8:6d:cb:9c:f1:01:
                    36:4d:e3:ce:b6:ae:15:75:30:32:90:b7:f5:54:19:
                    ed:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:A2:96:9E:DE:38:52:28:15:D5:FF:CC:08:08:D9:2D:14:69:7C:7B
            X509v3 Authority Key Identifier:
                keyid:33:45:43:90:99:C7:9C:13:F5:83:D2:23:8E:3B:B7:D0:D6:0D:68:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3230302e3232302e3134302e302f32322d3232203d3e203237363933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.220.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:e3:34:7b:a9:7d:71:d3:8d:5b:cc:5d:95:1d:17:ac:18:7c:
         e1:dc:1a:70:a6:3b:ea:df:6c:98:a5:92:f9:39:7d:d4:0d:a1:
         63:27:a5:3b:62:9f:b0:b8:89:46:0c:3e:6e:54:02:a8:63:cc:
         98:d4:9d:93:17:ca:3f:0a:11:d8:26:c4:e4:99:35:30:8f:dd:
         99:64:8e:5a:15:43:3c:25:d8:31:88:7b:a3:41:a4:7c:44:6b:
         6c:8e:44:12:6d:a6:42:d9:ca:31:64:a3:6d:4f:8f:ae:8f:e7:
         6c:69:d2:fe:94:d4:b0:e9:e5:b5:11:98:09:c3:b5:e1:a8:94:
         64:80:d4:f8:08:34:0e:0f:0e:a9:9c:f3:bc:6b:e8:ef:89:1f:
         ab:b0:c1:08:92:8b:4b:37:c2:85:43:9f:2e:86:2c:ed:d7:db:
         cc:93:40:47:11:29:10:d7:a4:9d:be:60:6e:f1:9d:d3:a0:73:
         8e:4c:3d:3e:8d:74:13:31:29:73:2e:e2:aa:66:c8:df:aa:4f:
         b2:47:1e:ac:59:20:ad:d2:50:49:5e:ff:ad:19:a0:d7:78:92:
         0b:b8:61:9d:1c:a7:d0:38:bb:cf:e0:9d:d0:eb:40:97:94:98:
         b8:72:b5:54:91:5c:e7:b6:7f:70:4f:81:28:14:87:83:79:98:
         c7:f6:ce:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:12:18 2025 by rpki-client