Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/87pNC4Pcrw8MPimdGUpgWYMV8999pkeCzbWhThNrgY3B/0/3230302e3131352e37302e302f32342d3234203d3e20323730383835.roa
File:                     3230302e3131352e37302e302f32342d3234203d3e20323730383835.roa (raw, json)
Hash identifier:          XwKSE6Qksk1qEk1se0m4vW7MO8Z0MSP/Rxou+Sg6krY=
Subject key identifier:   D6:CE:F0:7C:8B:92:7D:FD:78:FB:71:0A:23:65:77:C1:4A:BC:23:B2
Certificate issuer:       /CN=E283C40EE803134A57D75DCB34D29EA4396601DB
Certificate serial:       6DDD2C30FE9D660564F793967B0BB1B568D94FAF
Authority key identifier: E2:83:C4:0E:E8:03:13:4A:57:D7:5D:CB:34:D2:9E:A4:39:66:01:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E283C40EE803134A57D75DCB34D29EA4396601DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87pNC4Pcrw8MPimdGUpgWYMV8999pkeCzbWhThNrgY3B/0/3230302e3131352e37302e302f32342d3234203d3e20323730383835.roa
Signing time:             Thu 02 Oct 2025 13:31:35 +0000
ROA not before:           Thu 02 Oct 2025 13:26:35 +0000
ROA not after:            Thu 01 Oct 2026 13:31:35 +0000
asID:                     270885
IP address blocks:        200.115.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/87pNC4Pcrw8MPimdGUpgWYMV8999pkeCzbWhThNrgY3B/0/E283C40EE803134A57D75DCB34D29EA4396601DB.crl
                          rsync://rpki-repo.registro.br/repo/87pNC4Pcrw8MPimdGUpgWYMV8999pkeCzbWhThNrgY3B/0/E283C40EE803134A57D75DCB34D29EA4396601DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E283C40EE803134A57D75DCB34D29EA4396601DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 19:13:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:dd:2c:30:fe:9d:66:05:64:f7:93:96:7b:0b:b1:b5:68:d9:4f:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E283C40EE803134A57D75DCB34D29EA4396601DB
        Validity
            Not Before: Oct  2 13:26:35 2025 GMT
            Not After : Oct  1 13:31:35 2026 GMT
        Subject: CN=D6CEF07C8B927DFD78FB710A236577C14ABC23B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:99:6b:8a:91:7b:e0:f3:a8:5d:4c:31:5e:99:
                    16:36:d6:eb:6d:42:8a:14:a1:72:4f:90:f2:9f:72:
                    89:87:bc:f9:39:c7:ee:ef:61:32:37:0d:9c:84:05:
                    ac:f2:06:56:57:24:e9:8e:08:72:1c:c9:06:db:da:
                    1e:e5:7e:fd:8c:c8:74:5d:2c:22:cb:a8:c5:52:f7:
                    2d:4e:7c:cb:e4:ba:15:d5:f9:45:11:1a:d9:62:46:
                    8f:b9:00:41:fa:ae:ef:fa:f0:c0:44:16:c3:e3:f1:
                    26:48:ae:75:73:28:7e:a6:0c:d2:1e:4f:8d:69:4a:
                    22:be:07:37:c1:cc:47:77:e4:6c:37:68:0b:25:23:
                    26:66:1c:13:9a:21:02:2d:49:ac:7c:b0:01:df:9f:
                    6d:62:1d:cc:10:16:7a:33:dc:cd:73:08:9e:69:d9:
                    c1:50:eb:ae:67:f1:86:f6:e5:15:68:41:47:54:f0:
                    b9:97:da:88:95:ef:cf:09:a8:91:61:4a:33:7e:69:
                    97:4a:3d:04:09:14:3b:8b:3b:bb:0f:37:61:f0:45:
                    1a:5b:81:f1:27:1d:0b:e6:a2:c6:7e:65:b5:e2:70:
                    04:10:f0:a3:e1:46:05:f7:40:24:04:dd:8c:66:ba:
                    40:b2:4a:d4:37:0d:8b:c4:a9:b6:d3:cb:e8:46:a3:
                    2b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:CE:F0:7C:8B:92:7D:FD:78:FB:71:0A:23:65:77:C1:4A:BC:23:B2
            X509v3 Authority Key Identifier:
                keyid:E2:83:C4:0E:E8:03:13:4A:57:D7:5D:CB:34:D2:9E:A4:39:66:01:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87pNC4Pcrw8MPimdGUpgWYMV8999pkeCzbWhThNrgY3B/0/E283C40EE803134A57D75DCB34D29EA4396601DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E283C40EE803134A57D75DCB34D29EA4396601DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87pNC4Pcrw8MPimdGUpgWYMV8999pkeCzbWhThNrgY3B/0/3230302e3131352e37302e302f32342d3234203d3e20323730383835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:9b:c9:0e:97:30:17:c8:32:c8:de:52:21:4e:aa:6d:72:77:
         de:ce:03:6d:50:ef:1b:5c:e9:7a:56:2d:a2:2d:0a:a2:18:f5:
         b4:59:b1:80:fe:19:e3:fd:58:32:04:94:80:06:d0:c0:b8:bc:
         31:72:05:d3:b5:99:96:72:12:60:6a:eb:9f:b0:90:29:28:c4:
         09:89:a6:96:33:25:1e:ab:68:e6:82:f0:80:1e:a8:ca:4d:84:
         89:b0:c6:04:20:32:2f:6b:30:6a:ae:61:53:6a:7b:d1:94:83:
         71:b5:26:65:3f:c2:51:35:1c:62:8f:73:39:a3:30:6d:42:f5:
         a8:45:28:dc:a6:7b:19:ee:1d:a5:6d:ca:f5:aa:84:87:2b:a5:
         c3:d3:d6:9f:ab:2b:ce:d7:44:e6:c2:97:5f:fd:6d:89:ec:2e:
         30:af:0d:d3:80:a2:24:bf:87:fd:65:57:b8:9b:23:83:4c:01:
         08:06:d7:b1:8b:a3:b1:f9:f9:5a:e2:47:e6:cd:86:51:04:e8:
         74:02:f1:55:74:42:04:0c:d2:17:43:1a:a6:05:10:21:76:75:
         55:95:14:6e:d9:1d:27:ef:bd:3d:d0:97:9c:92:6a:ed:fc:1e:
         61:3c:25:4a:4b:78:51:73:2b:b5:0f:03:93:bb:f8:4c:34:97:
         18:53:a3:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:19:42 2025 by rpki-client