Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e3133322e302e302f31362d3136203d3e2032373136.roa
File:                     3230302e3133322e302e302f31362d3136203d3e2032373136.roa (raw, json)
Hash identifier:          W9Xnzmm62YBAfzhe/0BmPJlksI7IcrtBRICiBlgDCRQ=
Subject key identifier:   AD:5A:C4:49:D8:E2:CB:E0:2F:23:5E:17:5F:C2:12:8D:DD:07:8E:3F
Certificate issuer:       /CN=D54C376960A26972A0B767BDA084048DFFE3673E
Certificate serial:       4A6A82682601037011C525AE60966A6D5DD37BAE
Authority key identifier: D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e3133322e302e302f31362d3136203d3e2032373136.roa
Signing time:             Tue 22 Jul 2025 15:09:06 +0000
ROA not before:           Tue 22 Jul 2025 15:04:06 +0000
ROA not after:            Tue 21 Jul 2026 15:09:06 +0000
asID:                     2716
IP address blocks:        200.132.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl
                          rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 15:13:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:6a:82:68:26:01:03:70:11:c5:25:ae:60:96:6a:6d:5d:d3:7b:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D54C376960A26972A0B767BDA084048DFFE3673E
        Validity
            Not Before: Jul 22 15:04:06 2025 GMT
            Not After : Jul 21 15:09:06 2026 GMT
        Subject: CN=AD5AC449D8E2CBE02F235E175FC2128DDD078E3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:00:6e:af:37:c8:56:e4:d8:39:de:a3:64:c5:
                    6d:6c:57:8a:a0:e1:a8:52:e1:8f:b9:d2:60:bb:b1:
                    ec:d4:8c:e3:7d:19:4e:24:37:73:5b:9c:62:af:a7:
                    92:69:dd:80:62:85:a5:c6:c6:c4:03:bc:ec:93:7b:
                    23:d6:cc:6b:5f:e6:12:07:f3:d1:2b:9a:ec:1d:9c:
                    71:02:e6:5e:be:17:4f:4c:39:fc:bd:72:0a:bc:a2:
                    a7:a8:b6:bf:a2:48:71:4f:6a:13:94:9a:28:39:76:
                    66:7d:b5:9a:33:c3:cb:26:dd:ca:fd:4e:f5:3b:f0:
                    34:3b:01:c6:0f:33:e2:6a:85:ca:bb:31:a4:79:96:
                    b6:ab:af:c5:37:86:65:ce:a6:94:3c:b9:84:b8:d3:
                    d8:be:9c:4e:38:e9:06:54:94:2b:16:61:db:78:1d:
                    86:78:65:ef:6c:b9:60:31:34:09:d1:e4:91:d2:92:
                    25:f6:2c:5a:61:93:05:8b:08:a2:70:c8:17:2c:cc:
                    0d:72:f5:9e:8e:ab:96:fb:20:fa:6b:5d:34:e2:29:
                    b7:d9:8b:14:d9:98:b4:16:f6:13:29:69:38:2a:c7:
                    16:0b:9b:9b:2d:7a:5d:d5:56:82:d3:24:5e:82:64:
                    be:01:e1:c2:4a:08:b7:ae:8c:97:ba:bf:22:28:13:
                    70:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:5A:C4:49:D8:E2:CB:E0:2F:23:5E:17:5F:C2:12:8D:DD:07:8E:3F
            X509v3 Authority Key Identifier:
                keyid:D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e3133322e302e302f31362d3136203d3e2032373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.132.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2d:be:f7:85:ed:b3:0c:a6:b2:0d:ee:da:57:ac:85:29:1c:8f:
         ca:a2:5d:9a:80:18:f4:85:6e:6d:81:ec:71:b9:76:b8:0a:ec:
         a3:91:df:c4:26:37:59:30:c5:61:c5:9d:c8:45:0c:3e:cd:c8:
         7e:3e:d4:bf:8a:e0:a1:67:aa:2b:48:d3:62:65:f2:7a:cc:53:
         42:fb:f4:82:81:bd:26:ca:ae:c1:fc:5d:24:12:17:be:f5:76:
         4f:2a:c0:99:61:f8:93:3f:f6:f6:c5:0a:a1:e8:7f:36:68:f1:
         f9:85:24:cd:e2:0f:e3:e7:2a:0f:7e:1a:b0:07:9f:f7:17:ac:
         e3:2b:15:81:0a:e1:e4:26:91:90:25:c7:ea:23:05:7c:5e:e2:
         1a:9c:a3:53:5e:70:e6:62:4b:46:f4:c4:dd:aa:5d:b3:2d:3a:
         ac:5f:6a:8f:c4:7b:06:d8:d4:51:1c:de:0c:82:be:40:f5:ef:
         61:28:5a:85:71:62:ac:c9:50:b2:f5:49:61:7b:e5:2f:ce:26:
         2e:74:7e:2d:5a:5a:33:6d:38:c6:f2:23:bb:33:54:31:00:06:
         d8:43:d9:15:02:02:1e:0b:99:d9:bf:f8:fc:43:b0:c8:54:9d:
         ea:56:62:27:91:e2:94:43:f0:60:10:0f:5a:2d:d8:05:a7:53:
         9b:77:03:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:29:45 2025 by rpki-client