Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/3230302e3233352e3132382e302f31372d3332203d3e20323731363430.roa
File:                     3230302e3233352e3132382e302f31372d3332203d3e20323731363430.roa (raw, json)
Hash identifier:          5XCfm4762VoEq9B+AIK1txdY44UVD7KV9RKCCW8bhhs=
Subject key identifier:   84:47:37:B7:ED:53:7F:0E:63:90:C2:84:89:4F:E1:68:BA:C6:29:E1
Certificate issuer:       /CN=A165F278E6914CF9E78ACCD421F0FEB106E8DEF1
Certificate serial:       71BA674F27EBFECEECE5D6DB2C820A7D389C4829
Authority key identifier: A1:65:F2:78:E6:91:4C:F9:E7:8A:CC:D4:21:F0:FE:B1:06:E8:DE:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A165F278E6914CF9E78ACCD421F0FEB106E8DEF1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/3230302e3233352e3132382e302f31372d3332203d3e20323731363430.roa
Signing time:             Fri 27 Jun 2025 16:53:27 +0000
ROA not before:           Fri 27 Jun 2025 16:48:27 +0000
ROA not after:            Fri 26 Jun 2026 16:53:27 +0000
asID:                     271640
IP address blocks:        200.235.128.0/17 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/A165F278E6914CF9E78ACCD421F0FEB106E8DEF1.crl
                          rsync://rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/A165F278E6914CF9E78ACCD421F0FEB106E8DEF1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A165F278E6914CF9E78ACCD421F0FEB106E8DEF1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 02 Jul 2025 11:22:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:ba:67:4f:27:eb:fe:ce:ec:e5:d6:db:2c:82:0a:7d:38:9c:48:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A165F278E6914CF9E78ACCD421F0FEB106E8DEF1
        Validity
            Not Before: Jun 27 16:48:27 2025 GMT
            Not After : Jun 26 16:53:27 2026 GMT
        Subject: CN=844737B7ED537F0E6390C284894FE168BAC629E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:96:5e:bf:0d:1b:4b:6f:38:3b:cf:f9:f9:dc:
                    41:75:24:ea:92:05:6c:bd:cc:8b:35:17:d6:27:8a:
                    9e:17:81:01:04:16:b0:c5:ad:9d:b0:16:73:46:48:
                    97:23:cc:f5:51:d1:4d:87:fc:bb:04:b1:61:3b:cf:
                    fa:5a:31:80:c1:79:1b:ab:f4:c7:de:df:d1:e3:81:
                    29:58:d8:ff:39:db:14:3e:6e:31:a4:17:58:cc:98:
                    28:a6:ee:dc:9e:10:31:f3:65:13:0f:2e:c5:40:0b:
                    63:2d:76:b1:c5:cb:07:c6:b5:b1:79:18:b4:30:de:
                    1f:40:2d:61:e4:b2:11:fd:42:b8:43:34:a1:67:63:
                    fc:e6:a9:7a:b0:61:db:2e:1b:3a:fd:51:fd:87:19:
                    4a:f2:bf:b8:9d:33:bc:50:b1:93:ea:fe:5a:f8:89:
                    77:d3:ac:91:ef:3c:a1:44:12:15:ba:32:0c:2d:b7:
                    0c:07:37:c9:26:25:a3:27:a9:a4:7a:b8:4b:d2:01:
                    bd:5f:92:d0:24:60:29:c3:0f:32:ec:e8:2e:94:b2:
                    d9:fc:bf:7d:53:c7:8f:90:ac:19:ad:30:57:36:7b:
                    79:bb:bc:c1:84:46:00:47:71:6c:65:e1:11:12:ab:
                    79:b9:bf:99:23:71:18:11:96:c2:e7:02:c9:35:11:
                    6c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:47:37:B7:ED:53:7F:0E:63:90:C2:84:89:4F:E1:68:BA:C6:29:E1
            X509v3 Authority Key Identifier:
                keyid:A1:65:F2:78:E6:91:4C:F9:E7:8A:CC:D4:21:F0:FE:B1:06:E8:DE:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/A165F278E6914CF9E78ACCD421F0FEB106E8DEF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A165F278E6914CF9E78ACCD421F0FEB106E8DEF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/3230302e3233352e3132382e302f31372d3332203d3e20323731363430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.235.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         b5:01:61:c5:ad:f7:8a:c4:7a:9f:c5:b8:e4:27:59:d2:d7:24:
         70:db:f9:4b:03:4d:27:e9:6b:03:50:96:90:ec:f4:10:02:5f:
         b8:c7:3b:33:2b:f9:76:c2:be:13:7f:d9:64:76:f9:27:a3:c9:
         36:dd:c5:4c:95:0c:e9:68:3a:2f:08:6e:cf:a9:0d:dd:96:40:
         53:b2:00:b0:5c:92:6c:e1:d6:b2:ba:05:30:f3:6b:b7:d5:cd:
         c6:b1:7f:ca:c7:7a:02:89:3b:69:0b:d4:7c:65:cb:91:00:8c:
         8a:69:96:f5:1b:08:93:35:41:85:f6:16:08:d1:7d:85:40:17:
         9b:6d:1a:43:ff:0f:b2:c8:ad:a4:97:95:5b:b3:76:52:89:5d:
         b9:ce:a6:ad:b9:b2:c2:aa:81:21:93:f8:b2:2f:2a:ac:41:10:
         19:f4:f7:17:da:03:44:5d:c0:b4:97:0e:33:54:79:19:8b:25:
         69:b0:43:86:51:22:51:b2:0a:78:43:5e:84:8d:c5:9b:a9:62:
         f5:d8:a3:bf:3a:da:5b:5d:fd:98:34:ca:66:75:7b:74:a2:a2:
         f4:1e:8d:83:c9:9d:14:8e:0f:f8:78:68:da:76:fd:33:88:8e:
         65:58:cb:4f:ee:9d:fa:3c:0b:40:5b:4a:dc:39:50:57:d2:f1:
         3c:27:a3:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 15:44:06 2025 by rpki-client