Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e3133322e322e302f32342d3234203d3e2032373136.roa
File:                     3230302e3133322e322e302f32342d3234203d3e2032373136.roa (raw, json)
Hash identifier:          NkvDbk3YO1q8ZAo1qULuNaBgxiSgzDj12m89Eu5iGQo=
Subject key identifier:   AA:93:8F:AA:66:BA:87:39:2B:DE:82:EF:FA:15:4D:0F:49:80:7F:71
Certificate issuer:       /CN=D54C376960A26972A0B767BDA084048DFFE3673E
Certificate serial:       3E60D71F27E198764A5ACE68C734177F882D2C42
Authority key identifier: D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e3133322e322e302f32342d3234203d3e2032373136.roa
Signing time:             Tue 22 Jul 2025 15:09:03 +0000
ROA not before:           Tue 22 Jul 2025 15:04:03 +0000
ROA not after:            Tue 21 Jul 2026 15:09:03 +0000
asID:                     2716
IP address blocks:        200.132.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl
                          rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 15:13:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:60:d7:1f:27:e1:98:76:4a:5a:ce:68:c7:34:17:7f:88:2d:2c:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D54C376960A26972A0B767BDA084048DFFE3673E
        Validity
            Not Before: Jul 22 15:04:03 2025 GMT
            Not After : Jul 21 15:09:03 2026 GMT
        Subject: CN=AA938FAA66BA87392BDE82EFFA154D0F49807F71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:33:fe:84:d4:49:71:c7:76:59:17:8c:5c:9c:
                    07:7c:f2:0b:0e:8d:5e:88:bd:98:a9:fe:f3:64:f3:
                    62:6a:87:9b:31:10:73:64:d2:b8:69:6b:35:93:c8:
                    1e:be:51:c7:29:70:d9:17:00:df:90:e2:d0:6d:3c:
                    50:4e:01:46:87:d8:be:39:84:1e:57:2f:3f:5d:3c:
                    70:55:26:e0:76:73:2e:4c:fc:b9:95:cb:7b:37:c4:
                    09:b8:5e:9c:b2:2b:59:b1:7d:99:40:5f:e3:11:bd:
                    6e:4e:23:f5:57:05:82:ff:d1:99:9c:ac:cc:c7:4e:
                    32:d0:65:18:91:51:2b:b2:c7:b6:85:43:40:3e:9f:
                    98:7b:91:85:c1:d9:38:e9:32:ed:ac:01:83:da:9f:
                    04:61:95:94:0b:88:8c:ae:41:90:cf:0f:9a:f3:81:
                    ff:a0:d1:99:4f:0c:11:b9:17:2e:dd:22:3f:37:b9:
                    fb:5b:c7:c3:16:bc:27:c7:e7:5b:3d:af:e2:5e:d3:
                    1c:cf:52:2f:0b:22:4a:9f:41:3a:33:08:20:e0:d3:
                    44:1e:c9:17:60:ce:bd:31:de:9e:4a:0d:56:3e:4f:
                    25:8d:a9:99:c9:ea:74:fe:1d:92:50:67:3c:4c:7b:
                    ec:3b:2b:d7:73:ab:16:79:0f:db:68:53:1c:6f:8a:
                    d4:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:93:8F:AA:66:BA:87:39:2B:DE:82:EF:FA:15:4D:0F:49:80:7F:71
            X509v3 Authority Key Identifier:
                keyid:D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e3133322e322e302f32342d3234203d3e2032373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.132.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:2a:09:57:2e:cf:c1:93:a0:e7:4a:14:89:c3:63:8c:db:cc:
         41:5e:76:26:6a:07:fa:8a:e3:9c:c0:e1:87:fa:dd:ae:f6:03:
         66:64:e6:41:08:9d:e7:9d:6c:32:21:df:18:87:f5:58:71:d0:
         a0:6e:5b:36:35:20:a2:b3:2a:25:18:f1:c8:f8:c3:f9:01:4f:
         f8:c0:22:a8:da:6d:92:93:6c:6b:12:2d:d6:21:be:1b:00:8f:
         be:7f:7f:b1:9e:6d:8d:35:ac:25:99:54:f3:5f:c5:23:97:58:
         b4:a1:c8:fe:72:1c:e3:d0:bd:ed:4f:57:28:62:17:f3:66:97:
         04:ad:d2:c1:aa:77:1d:ae:f8:26:d7:fc:20:e7:5e:b1:7e:f6:
         3d:99:f9:d5:fd:98:71:2c:5b:29:1b:78:b1:fd:c3:f5:ed:2b:
         e8:62:30:77:69:b1:30:21:52:15:e4:e8:cb:b8:3b:ba:f9:4c:
         8a:5a:89:7a:86:64:49:27:2d:23:d9:5e:77:95:74:5d:b9:80:
         01:14:da:21:08:58:f5:15:43:2c:ed:bf:47:e4:2f:cc:d9:f7:
         c8:09:7a:4c:ff:db:74:83:26:f6:66:4a:43:3b:71:ef:43:85:
         f7:f5:82:e6:68:b6:86:1a:0d:2f:84:13:0f:f5:70:99:bc:e8:
         70:ae:ec:99
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUPmDXHyfhmHZKWs5oxzQXf4gtLEIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDU0QzM3Njk2MEEyNjk3MkEwQjc2N0JEQTA4NDA0OERG
RkUzNjczRTAeFw0yNTA3MjIxNTA0MDNaFw0yNjA3MjExNTA5MDNaMDMxMTAvBgNV
BAMTKEFBOTM4RkFBNjZCQTg3MzkyQkRFODJFRkZBMTU0RDBGNDk4MDdGNzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAM/6E1Elxx3ZZF4xcnAd88gsO
jV6IvZip/vNk82Jqh5sxEHNk0rhpazWTyB6+UccpcNkXAN+Q4tBtPFBOAUaH2L45
hB5XLz9dPHBVJuB2cy5M/LmVy3s3xAm4XpyyK1mxfZlAX+MRvW5OI/VXBYL/0Zmc
rMzHTjLQZRiRUSuyx7aFQ0A+n5h7kYXB2TjpMu2sAYPanwRhlZQLiIyuQZDPD5rz
gf+g0ZlPDBG5Fy7dIj83uftbx8MWvCfH51s9r+Je0xzPUi8LIkqfQTozCCDg00Qe
yRdgzr0x3p5KDVY+TyWNqZnJ6nT+HZJQZzxMe+w7K9dzqxZ5D9toUxxvitQ5AgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUqpOPqma6hzkr3oLv+hVND0mAf3EwHwYDVR0j
BBgwFoAU1Uw3aWCiaXKgt2e9oIQEjf/jZz4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEViNEFHamZOWTl6ZDd0Qm13aFRYTFRKeUZGQUZ6VUZxUGdlSFVDTjFT
d2EvMS9ENTRDMzc2OTYwQTI2OTcyQTBCNzY3QkRBMDg0MDQ4REZGRTM2NzNFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q1NEMzNzY5NjBBMjY5NzJB
MEI3NjdCREEwODQwNDhERkZFMzY3M0UuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhFYjRBR2pmTlk5emQ3dEJtd2hUWExUSnlGRkFGelVGcVBnZUhVQ04xU3dhLzEv
MzIzMDMwMmUzMTMzMzIyZTMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMx
MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADIhAIwDQYJKoZIhvcNAQELBQADggEBAJ8qCVcuz8GToOdK
FInDY4zbzEFediZqB/qK45zA4Yf63a72A2Zk5kEIneedbDIh3xiH9Vhx0KBuWzY1
IKKzKiUY8cj4w/kBT/jAIqjabZKTbGsSLdYhvhsAj75/f7GebY01rCWZVPNfxSOX
WLShyP5yHOPQve1PVyhiF/NmlwSt0sGqdx2u+CbX/CDnXrF+9j2Z+dX9mHEsWykb
eLH9w/XtK+hiMHdpsTAhUhXk6Mu4O7r5TIpaiXqGZEknLSPZXneVdF25gAEU2iEI
WPUVQyztv0fkL8zZ98gJekz/23SDJvZmSkM7ce9Dhff1guZotoYaDS+EEw/1cJm8
6HCu7Jk=
-----END CERTIFICATE-----
Generated at Sun Aug 24 02:41:08 2025 by rpki-client