Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/3230302e3139342e3234382e302f32312d3234203d3e203131343332.roa
File:                     3230302e3139342e3234382e302f32312d3234203d3e203131343332.roa (raw, json)
Hash identifier:          a/anI/DEzSqZoI8B/pgtkLBew6NhIrSbY9Zq35SdvII=
Subject key identifier:   06:BC:83:4E:43:41:14:4C:EF:6F:90:6D:20:CF:D0:61:50:2C:BC:D7
Certificate issuer:       /CN=EF1A3C5F9F8138A78E275347F4AF8805B5574F33
Certificate serial:       298FFAD46B065640CB9388B5022D8D81BFD113E0
Authority key identifier: EF:1A:3C:5F:9F:81:38:A7:8E:27:53:47:F4:AF:88:05:B5:57:4F:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF1A3C5F9F8138A78E275347F4AF8805B5574F33.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/3230302e3139342e3234382e302f32312d3234203d3e203131343332.roa
Signing time:             Tue 01 Jul 2025 17:36:34 +0000
ROA not before:           Tue 01 Jul 2025 17:31:34 +0000
ROA not after:            Tue 30 Jun 2026 17:36:34 +0000
asID:                     11432
IP address blocks:        200.194.248.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/EF1A3C5F9F8138A78E275347F4AF8805B5574F33.crl
                          rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/EF1A3C5F9F8138A78E275347F4AF8805B5574F33.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF1A3C5F9F8138A78E275347F4AF8805B5574F33.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 13:48:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:8f:fa:d4:6b:06:56:40:cb:93:88:b5:02:2d:8d:81:bf:d1:13:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF1A3C5F9F8138A78E275347F4AF8805B5574F33
        Validity
            Not Before: Jul  1 17:31:34 2025 GMT
            Not After : Jun 30 17:36:34 2026 GMT
        Subject: CN=06BC834E4341144CEF6F906D20CFD061502CBCD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:6b:75:7f:a1:dd:ac:0e:f5:d6:f3:23:21:2a:
                    8a:cd:e9:cf:08:6b:74:7b:74:11:e9:68:81:68:98:
                    f5:4b:18:4f:50:4f:34:d7:65:fd:e0:10:02:c9:7d:
                    c3:26:af:b5:9f:1e:e5:22:1c:28:93:c6:ce:eb:c3:
                    a0:a3:25:86:c1:f2:d3:d6:32:30:f4:41:ca:9b:13:
                    59:11:98:e2:8b:4d:a0:1d:16:28:7e:56:05:8f:42:
                    50:4f:a4:ee:ef:d4:4c:61:cc:ff:24:8f:2c:8f:f3:
                    aa:c6:f0:d7:46:5a:be:5c:8b:54:61:9d:70:f7:cf:
                    80:a5:9d:02:df:08:7c:69:b7:c6:0e:33:f6:5a:61:
                    77:dc:a8:7b:bb:cd:43:14:31:3e:a2:eb:21:d6:d8:
                    9b:21:19:d3:9d:53:30:7d:4e:27:5e:4a:4f:f2:f8:
                    0d:fd:2a:bb:02:41:76:3e:23:5e:d3:2e:31:8f:89:
                    28:97:e1:b5:26:f7:65:fc:8f:20:ae:20:0e:4f:ad:
                    3d:ef:bd:b1:ad:3a:48:17:4b:66:a0:c0:0b:1a:b9:
                    dc:1d:16:7c:e6:17:08:35:54:4a:95:8e:4d:19:aa:
                    aa:cb:5e:ea:cf:c4:0d:cb:63:c4:4b:9b:7f:d3:1e:
                    69:e0:18:f0:f9:f4:fd:ae:1f:4a:fb:39:f9:90:1b:
                    ca:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:BC:83:4E:43:41:14:4C:EF:6F:90:6D:20:CF:D0:61:50:2C:BC:D7
            X509v3 Authority Key Identifier:
                keyid:EF:1A:3C:5F:9F:81:38:A7:8E:27:53:47:F4:AF:88:05:B5:57:4F:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/EF1A3C5F9F8138A78E275347F4AF8805B5574F33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF1A3C5F9F8138A78E275347F4AF8805B5574F33.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/3230302e3139342e3234382e302f32312d3234203d3e203131343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.194.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         38:92:37:8e:dc:b7:63:71:b3:42:ce:96:10:a1:ed:0d:8d:bc:
         34:c0:af:28:36:28:d2:72:78:a3:38:b6:53:6a:8d:5a:d7:be:
         5f:df:48:ec:de:2e:79:0d:d6:48:8f:a5:5e:cc:db:00:0c:3b:
         de:d3:86:0f:aa:58:78:d3:81:0d:85:b2:7e:dc:d3:be:da:d3:
         0e:86:34:ef:70:c9:81:cf:4e:6a:2f:04:cf:61:2f:59:7b:61:
         cf:09:a3:86:9a:19:7c:04:ca:ba:43:84:66:bc:99:b9:41:4a:
         34:c2:b2:6f:3c:6f:4d:76:3d:66:a8:dc:3c:76:0a:ce:b2:13:
         51:9e:3d:ee:aa:66:b2:7e:44:c2:05:2d:1f:09:bc:ec:fc:c5:
         e7:12:61:1b:3b:a3:b7:a6:d0:80:7a:20:e4:f1:6b:d8:fe:30:
         40:b4:84:c4:04:13:0f:ec:11:ea:23:1d:b2:1a:e5:59:60:68:
         76:f5:46:61:64:c1:35:54:98:54:0c:65:0c:14:42:2b:28:ec:
         aa:22:8f:a8:1f:ed:d2:73:c9:67:c0:8b:23:3f:28:7c:73:27:
         a9:48:98:2d:d8:28:37:e9:c9:26:12:1c:92:67:b3:89:43:32:
         52:8f:c3:37:01:6c:fa:7a:6b:c1:b3:a7:8d:e7:66:1e:57:16:
         30:68:aa:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 16:19:44 2025 by rpki-client