Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e3133322e3136342e302f32322d3232203d3e2032373136.roa
File:                     3230302e3133322e3136342e302f32322d3232203d3e2032373136.roa (raw, json)
Hash identifier:          /6ED60rSGFgzfNiZ2sGfHsZZ9TKQaXa+l3l01J6sN68=
Subject key identifier:   06:BF:A8:85:08:13:54:D3:6D:89:95:F5:81:D6:34:9B:A7:EE:9A:7B
Certificate issuer:       /CN=D54C376960A26972A0B767BDA084048DFFE3673E
Certificate serial:       6075DCE35284A39F7266D29A3554A7DE08CBBD14
Authority key identifier: D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e3133322e3136342e302f32322d3232203d3e2032373136.roa
Signing time:             Tue 22 Jul 2025 15:09:06 +0000
ROA not before:           Tue 22 Jul 2025 15:04:06 +0000
ROA not after:            Tue 21 Jul 2026 15:09:06 +0000
asID:                     2716
IP address blocks:        200.132.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl
                          rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 15:13:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:75:dc:e3:52:84:a3:9f:72:66:d2:9a:35:54:a7:de:08:cb:bd:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D54C376960A26972A0B767BDA084048DFFE3673E
        Validity
            Not Before: Jul 22 15:04:06 2025 GMT
            Not After : Jul 21 15:09:06 2026 GMT
        Subject: CN=06BFA885081354D36D8995F581D6349BA7EE9A7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ff:54:9b:6a:b8:93:58:9a:24:34:2f:91:e4:
                    75:55:18:b9:fd:73:6f:9c:ad:b2:a5:50:3a:05:29:
                    0c:fa:3a:c9:fe:c1:64:7c:1b:09:9e:71:43:53:36:
                    cb:c5:f3:25:0c:1e:11:75:4c:cd:14:56:b6:b1:01:
                    35:90:20:50:a6:21:f7:cb:dc:e5:dd:ef:d1:d5:af:
                    fe:82:30:7d:3c:7b:0e:86:6b:55:c8:b6:76:c5:2d:
                    94:b5:88:02:28:fd:a2:c1:8c:5d:d1:fa:c0:a9:ad:
                    00:a1:90:27:2a:84:11:ac:6f:08:bf:e5:53:df:11:
                    23:65:b8:fc:a8:6a:1d:6a:c2:bb:11:b2:53:30:32:
                    6c:15:03:78:cf:e3:18:b6:dd:01:c8:37:bc:3d:b4:
                    52:f2:9a:08:9c:1f:8b:91:0d:fd:42:8e:ae:89:c5:
                    49:49:82:50:4f:67:1f:d0:61:01:a1:bb:80:b5:38:
                    53:8e:73:1e:a3:b3:7b:44:3c:80:ff:be:06:3e:55:
                    08:0d:26:ce:9e:41:76:c2:4f:e3:7a:3d:5e:88:c8:
                    2e:7a:e6:f7:27:24:1b:ea:f9:ff:89:09:2b:13:33:
                    66:76:b5:50:16:15:e3:9a:1b:b7:ee:09:58:38:9b:
                    87:e2:d0:5c:f8:31:8e:f7:b6:07:2d:8f:a2:51:eb:
                    ac:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:BF:A8:85:08:13:54:D3:6D:89:95:F5:81:D6:34:9B:A7:EE:9A:7B
            X509v3 Authority Key Identifier:
                keyid:D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e3133322e3136342e302f32322d3232203d3e2032373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.132.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:38:7e:fb:4c:37:bd:07:bf:61:20:c3:14:59:a0:67:01:30:
         1c:74:9a:b2:7a:a3:43:be:6f:a1:60:98:1a:66:64:a2:93:f9:
         dc:7a:32:18:69:f7:6f:78:e7:ef:05:80:75:04:d9:5c:ec:d4:
         62:27:a8:94:f5:06:17:33:4f:40:ac:44:ab:4d:f3:60:aa:41:
         11:b2:e6:56:ff:a7:a2:03:03:ae:24:ea:71:02:1b:4f:3d:b4:
         79:3f:d1:9f:62:fa:29:7e:b6:79:ab:e9:f7:81:11:81:87:64:
         cd:ae:22:b6:5b:95:67:92:9f:f7:5e:a9:de:4d:a1:1e:fb:c5:
         75:c8:3b:58:e7:1d:66:a0:3d:e7:87:01:44:17:ef:43:1d:ca:
         05:0f:85:99:91:6d:54:7a:b2:d4:d7:29:df:48:75:be:19:9e:
         91:a3:71:8c:16:8a:b1:5e:6f:80:fb:6c:d1:5e:4b:62:ac:dc:
         4d:37:41:a3:58:aa:59:03:8a:7e:ed:6b:a2:0d:bc:e1:0c:b7:
         8e:5e:2e:35:73:f0:fa:58:9c:0b:56:8b:23:0e:45:b4:29:99:
         21:a2:ed:3b:3d:a9:40:9f:a9:74:bc:a9:f2:27:68:9a:4c:a1:
         de:c8:dc:8c:c0:73:5c:57:91:d0:ae:f7:76:dd:83:0e:ee:11:
         1c:e5:b5:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:29:13 2025 by rpki-client