Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/87pNC4Pcrw8MPimdGUpgWYMV8999pkeCzbWhThNrgY3B/0/3230302e3131352e36392e302f32342d3234203d3e20323730383835.roa
File:                     3230302e3131352e36392e302f32342d3234203d3e20323730383835.roa (raw, json)
Hash identifier:          QBxQJmn6e5rWhnsmygSejUfWcDD7VK1p4qQa+tBFfXg=
Subject key identifier:   1C:80:07:CB:BC:43:38:DA:D0:EA:97:75:46:14:FE:74:E5:7B:C3:22
Certificate issuer:       /CN=E283C40EE803134A57D75DCB34D29EA4396601DB
Certificate serial:       439566331A8CE5B95D0400343CEEDB207A62618C
Authority key identifier: E2:83:C4:0E:E8:03:13:4A:57:D7:5D:CB:34:D2:9E:A4:39:66:01:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E283C40EE803134A57D75DCB34D29EA4396601DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87pNC4Pcrw8MPimdGUpgWYMV8999pkeCzbWhThNrgY3B/0/3230302e3131352e36392e302f32342d3234203d3e20323730383835.roa
Signing time:             Thu 02 Oct 2025 13:31:29 +0000
ROA not before:           Thu 02 Oct 2025 13:26:29 +0000
ROA not after:            Thu 01 Oct 2026 13:31:29 +0000
asID:                     270885
IP address blocks:        200.115.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/87pNC4Pcrw8MPimdGUpgWYMV8999pkeCzbWhThNrgY3B/0/E283C40EE803134A57D75DCB34D29EA4396601DB.crl
                          rsync://rpki-repo.registro.br/repo/87pNC4Pcrw8MPimdGUpgWYMV8999pkeCzbWhThNrgY3B/0/E283C40EE803134A57D75DCB34D29EA4396601DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E283C40EE803134A57D75DCB34D29EA4396601DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 19:13:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:95:66:33:1a:8c:e5:b9:5d:04:00:34:3c:ee:db:20:7a:62:61:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E283C40EE803134A57D75DCB34D29EA4396601DB
        Validity
            Not Before: Oct  2 13:26:29 2025 GMT
            Not After : Oct  1 13:31:29 2026 GMT
        Subject: CN=1C8007CBBC4338DAD0EA97754614FE74E57BC322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e6:0b:3c:33:37:f1:aa:f1:72:fe:f4:e2:82:
                    45:4b:3c:3a:d1:21:22:a4:8b:9f:01:c0:d2:2f:c2:
                    2d:a4:bb:b8:f2:ff:b8:1e:1a:80:d0:4e:34:52:b7:
                    fe:48:6d:df:e0:97:51:42:cf:d8:34:ae:78:f2:cb:
                    5a:33:b4:5b:df:ee:68:bd:80:2f:a8:4b:50:76:eb:
                    b6:b2:d1:c6:40:42:c8:8f:95:3b:e4:01:b4:7a:9c:
                    2e:f7:07:03:31:6f:25:ab:3a:54:d4:e8:92:e6:6e:
                    a3:4d:2d:17:60:3a:cb:d9:2a:b0:43:24:c4:81:53:
                    6b:16:72:e1:ba:f8:72:75:28:1e:ca:36:8c:42:a4:
                    33:ae:57:9b:17:c7:5b:5a:d6:86:8c:43:ad:6a:de:
                    2f:45:0a:63:e0:44:c9:59:43:09:27:1f:d3:d3:2a:
                    96:a1:ce:df:2f:37:1a:7f:8e:b9:16:80:42:43:8f:
                    a4:f6:f4:f7:70:96:8d:4a:b9:34:1a:67:c3:9d:1e:
                    18:86:6c:56:f3:c7:ef:35:64:12:18:8c:0d:50:5e:
                    0e:0d:97:59:a7:ca:bc:08:e7:d6:e1:f7:39:a6:2f:
                    3c:4f:4a:8c:3d:cf:6e:80:63:82:5f:4b:49:b2:49:
                    8f:11:6e:95:34:52:6a:d4:75:db:9e:77:40:85:a3:
                    18:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:80:07:CB:BC:43:38:DA:D0:EA:97:75:46:14:FE:74:E5:7B:C3:22
            X509v3 Authority Key Identifier:
                keyid:E2:83:C4:0E:E8:03:13:4A:57:D7:5D:CB:34:D2:9E:A4:39:66:01:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87pNC4Pcrw8MPimdGUpgWYMV8999pkeCzbWhThNrgY3B/0/E283C40EE803134A57D75DCB34D29EA4396601DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E283C40EE803134A57D75DCB34D29EA4396601DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87pNC4Pcrw8MPimdGUpgWYMV8999pkeCzbWhThNrgY3B/0/3230302e3131352e36392e302f32342d3234203d3e20323730383835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d1:5f:d2:84:32:4d:13:17:15:0d:86:0f:19:3c:7c:82:93:92:
         eb:f4:2a:1b:c3:04:57:c4:f4:41:c1:1f:78:9a:eb:fa:44:90:
         e0:d7:62:ca:50:85:8a:48:51:bc:fb:0f:a2:0a:e2:e2:c1:2e:
         c8:b8:71:f1:84:ab:7d:f4:37:6e:6d:0b:91:51:ff:88:12:8a:
         7e:25:1a:87:28:3b:61:74:b3:85:df:1a:92:e9:16:56:97:02:
         bb:c1:af:92:a2:51:5f:58:0e:0b:1d:c7:de:77:77:35:72:05:
         94:17:12:81:64:ba:52:9a:a0:9a:7e:08:4c:ce:4f:52:29:53:
         36:98:1b:40:f0:5f:0a:1d:a8:f2:69:dd:19:64:2e:49:20:45:
         06:26:85:7a:87:54:49:8b:d8:24:5c:61:46:85:31:1c:fe:cf:
         1e:18:e7:68:78:ff:17:e7:71:77:6b:46:24:91:cc:75:ce:09:
         ff:27:b2:2f:0a:32:ff:1d:fa:6f:4a:dc:bf:3c:c0:f9:9a:99:
         7b:96:b1:c6:5d:f4:29:b1:0b:03:bf:79:27:1c:03:1e:bc:b1:
         5a:8f:b2:63:3a:2a:29:e5:00:37:43:fe:af:4f:96:67:4c:e6:
         58:55:e3:62:c1:9d:7e:a0:8d:c2:96:94:da:ca:b2:e9:f4:3c:
         89:9b:cd:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:19:30 2025 by rpki-client