Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e3133322e3136382e302f32322d3232203d3e2032373136.roa
File:                     3230302e3133322e3136382e302f32322d3232203d3e2032373136.roa (raw, json)
Hash identifier:          c9EPGJxoAv2ac+ZMRv6oSI+20Eak8d1hoXjCdQggwF8=
Subject key identifier:   48:D5:D5:81:F3:3D:4A:4D:93:08:AB:35:21:88:87:85:8B:87:50:53
Certificate issuer:       /CN=D54C376960A26972A0B767BDA084048DFFE3673E
Certificate serial:       5DDF5F7B2EF17F859F7176B3E182895960B39406
Authority key identifier: D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e3133322e3136382e302f32322d3232203d3e2032373136.roa
Signing time:             Tue 22 Jul 2025 15:09:05 +0000
ROA not before:           Tue 22 Jul 2025 15:04:05 +0000
ROA not after:            Tue 21 Jul 2026 15:09:05 +0000
asID:                     2716
IP address blocks:        200.132.168.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl
                          rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 15:13:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:df:5f:7b:2e:f1:7f:85:9f:71:76:b3:e1:82:89:59:60:b3:94:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D54C376960A26972A0B767BDA084048DFFE3673E
        Validity
            Not Before: Jul 22 15:04:05 2025 GMT
            Not After : Jul 21 15:09:05 2026 GMT
        Subject: CN=48D5D581F33D4A4D9308AB35218887858B875053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b2:e2:fb:df:70:18:53:d8:3f:65:02:b8:0a:
                    a6:c0:af:78:29:9c:5b:ab:23:65:33:00:af:43:b9:
                    22:91:5c:c5:1b:b2:f9:da:ed:b5:ff:c3:28:df:ff:
                    43:9f:57:a0:56:a4:c3:4a:ab:d3:c2:fe:4d:60:3d:
                    5f:14:bd:88:18:49:21:e0:dd:7f:2f:db:3f:0f:73:
                    0b:90:4f:93:a1:ad:76:44:1d:25:a6:1c:26:a7:28:
                    9d:dd:8b:10:fe:8d:34:d0:3c:d8:ec:d1:bc:07:c5:
                    21:3d:4e:f1:bd:e1:57:e1:a3:5b:68:96:9f:c3:f9:
                    b1:19:75:ba:ff:30:ff:54:7a:44:10:c3:eb:0b:75:
                    28:81:cb:ae:27:6b:7e:2f:88:a1:85:a6:ab:9e:97:
                    32:05:e5:02:6d:bd:c1:f2:7e:dd:b8:73:2f:b1:07:
                    52:19:da:4a:25:d2:93:f6:0d:d6:4f:46:8d:40:97:
                    8a:28:14:98:22:ba:4d:91:69:ea:0a:f2:4b:ac:21:
                    41:74:da:16:16:a0:ad:6c:94:77:81:53:12:98:87:
                    a8:0b:2c:07:b9:31:b7:9c:f7:b5:d3:5d:a4:33:c2:
                    1c:2b:4e:6e:24:fa:8b:df:58:cb:96:59:fa:31:56:
                    71:ab:5f:57:12:f9:64:74:8b:5c:fe:80:f4:3e:e1:
                    97:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:D5:D5:81:F3:3D:4A:4D:93:08:AB:35:21:88:87:85:8B:87:50:53
            X509v3 Authority Key Identifier:
                keyid:D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e3133322e3136382e302f32322d3232203d3e2032373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.132.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ba:09:74:55:88:2f:63:b5:a1:45:60:e1:31:20:b8:8b:29:62:
         57:ba:36:8e:69:8e:84:7a:f4:d6:26:a3:d7:91:38:47:b1:64:
         25:ba:4c:e6:7f:58:b8:29:7f:6e:40:7a:ab:6c:da:4c:db:51:
         6f:32:3c:e6:bc:3e:fd:61:84:1d:44:0e:be:b1:24:9d:4c:f7:
         60:82:ef:79:8b:bb:21:b6:88:e1:0e:e4:5d:06:9c:e9:bf:53:
         13:77:06:3a:b4:a4:41:80:b4:dd:16:c3:3a:b5:82:18:40:3c:
         c5:dd:e7:f4:b2:23:44:fa:f7:5d:d4:34:a1:a4:eb:ea:ea:0d:
         a2:e0:f5:de:83:7e:f0:5b:cb:42:a5:b5:af:fb:27:6d:98:06:
         83:47:fe:24:56:39:8f:0e:0d:df:64:8a:dd:e1:34:b5:b5:a5:
         f5:0e:b6:0f:36:95:b1:34:c4:5b:7b:94:ce:9b:9c:d9:91:e8:
         b7:07:d3:d3:eb:6e:94:03:15:5d:e7:da:a5:8d:93:a4:d9:41:
         72:89:5f:f9:05:bc:ac:88:29:78:07:2f:e5:ad:b1:b8:42:3b:
         29:e0:42:d0:31:6f:ff:30:b8:5e:f1:91:bd:d6:28:52:93:e1:
         f5:9d:70:8d:a7:29:46:e1:8a:0f:a5:f1:6d:51:dc:95:39:b4:
         eb:43:7b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:28:28 2025 by rpki-client