Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/3230302e3232352e34382e302f32312d3234203d3e203631363130.roa
File:                     3230302e3232352e34382e302f32312d3234203d3e203631363130.roa (raw, json)
Hash identifier:          XDRvlgM7P/xCqIV7RBx9C1F+pF33T02pxj0uA1WTtiQ=
Subject key identifier:   CF:37:BE:57:15:35:FD:34:14:9C:69:B0:68:1D:57:8C:62:E0:7C:EB
Certificate issuer:       /CN=4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD
Certificate serial:       03220087F504B8BFF09B9EDDC8CD97FF4AEA5382
Authority key identifier: 4B:3F:BC:1F:37:21:B6:D1:1E:11:B1:D8:79:FC:6A:C8:99:4D:7D:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/3230302e3232352e34382e302f32312d3234203d3e203631363130.roa
Signing time:             Sun 22 Jun 2025 21:47:26 +0000
ROA not before:           Sun 22 Jun 2025 21:42:26 +0000
ROA not after:            Sun 21 Jun 2026 21:47:26 +0000
asID:                     61610
IP address blocks:        200.225.48.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.crl
                          rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 00:39:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:22:00:87:f5:04:b8:bf:f0:9b:9e:dd:c8:cd:97:ff:4a:ea:53:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD
        Validity
            Not Before: Jun 22 21:42:26 2025 GMT
            Not After : Jun 21 21:47:26 2026 GMT
        Subject: CN=CF37BE571535FD34149C69B0681D578C62E07CEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:38:b8:bf:c3:b0:f6:98:3d:1b:32:65:f4:28:
                    c3:71:48:e9:bd:35:6a:ae:74:05:46:8c:80:06:fb:
                    e5:1b:05:0f:77:6b:46:6e:63:98:1d:d4:6b:e6:34:
                    3c:5a:90:f7:2d:ce:ff:7e:94:47:f2:f0:9d:70:be:
                    4b:00:a1:a7:64:d4:40:fa:3d:23:26:fa:de:62:be:
                    f2:b8:00:b9:c1:88:5f:48:f5:ab:a9:99:79:71:d7:
                    bf:39:2e:a1:8f:ed:ff:dd:51:69:47:0d:c2:5b:49:
                    40:a9:dd:de:f1:10:2d:6b:dc:a2:ed:20:ca:02:d7:
                    41:5a:2d:f2:a5:35:31:a0:eb:63:df:04:5d:61:1a:
                    ed:7e:a8:6f:4b:c9:93:15:a5:f5:c0:c7:c0:0a:7a:
                    7a:6b:48:88:c6:d1:c3:e9:1b:6d:c9:93:ea:f1:3c:
                    45:a2:9c:a8:d3:10:12:4e:52:dd:e4:37:5e:ec:8c:
                    2f:fa:7b:65:4a:ca:06:01:46:80:0f:08:c8:a7:ed:
                    b3:83:06:06:fe:73:58:6d:b6:80:df:4c:8b:16:22:
                    26:06:32:9e:b1:1d:b2:b6:04:72:c4:f5:53:6c:fd:
                    5d:ba:63:e6:ae:4c:78:be:69:4f:cc:6d:89:b7:74:
                    b6:20:a5:03:7b:72:c7:16:15:8d:54:c7:55:e7:05:
                    19:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:37:BE:57:15:35:FD:34:14:9C:69:B0:68:1D:57:8C:62:E0:7C:EB
            X509v3 Authority Key Identifier:
                keyid:4B:3F:BC:1F:37:21:B6:D1:1E:11:B1:D8:79:FC:6A:C8:99:4D:7D:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/3230302e3232352e34382e302f32312d3234203d3e203631363130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.225.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         60:bb:32:68:c1:2b:b3:f3:0b:3f:8a:d6:b6:ac:38:d1:2d:07:
         c6:2d:ec:0d:b6:e8:8c:50:97:da:4d:b5:c0:b7:03:75:24:00:
         8f:4f:cd:43:08:e2:b6:dc:19:99:d9:fb:b0:6a:f9:37:88:a6:
         69:e9:c0:f7:61:7f:86:c5:02:26:6c:d4:5c:ca:69:8c:dc:ad:
         04:63:c8:93:1b:44:65:54:91:16:9b:04:a0:b6:6e:a2:e7:85:
         09:e6:c6:8d:cb:4e:da:9e:46:80:db:27:0a:48:2f:b4:ff:43:
         2e:44:5e:99:56:23:2f:64:b3:1a:f9:60:75:ab:ee:34:ec:5b:
         a2:7e:f2:50:9e:25:c9:2b:31:b9:98:5c:19:3f:24:96:b3:d7:
         f2:4c:c2:76:94:ae:af:c5:be:30:c6:e7:cd:b2:e8:a5:18:ac:
         d8:1e:04:76:4f:78:db:8f:81:45:96:14:94:80:6f:03:95:c7:
         ff:ec:53:da:66:eb:8d:12:c2:81:6d:81:1d:ee:37:34:2f:3e:
         d8:74:86:29:fe:23:61:04:80:eb:4d:61:f1:2e:5a:ae:c4:85:
         88:29:1e:83:28:9e:9f:15:91:03:17:7a:9d:bd:64:3e:b0:02:
         fa:03:9e:3a:12:da:61:1e:4e:13:3e:c8:64:e3:b5:67:09:12:
         95:0e:31:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 04:40:50 2025 by rpki-client