Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8UoSkvSSNwoYNAd6PMzAUuUchW6YBaugzpHQLDSMVEsJ/0/3230302e3139362e3133322e302f32322d3234203d3e203631353833.roa
File:                     3230302e3139362e3133322e302f32322d3234203d3e203631353833.roa (raw, json)
Hash identifier:          IGK9bikwl479Siulu7ctvhgdcOWmkPJYpmcMQNhidzY=
Subject key identifier:   F6:47:0E:C2:15:23:3B:80:37:C0:31:CF:98:5D:8F:5D:33:06:71:5B
Certificate issuer:       /CN=3CB1370100AB2291FE24983311386BE8544EB443
Certificate serial:       6A853B905DA7A4CBC4E9F030ABCA25734E672A6B
Authority key identifier: 3C:B1:37:01:00:AB:22:91:FE:24:98:33:11:38:6B:E8:54:4E:B4:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CB1370100AB2291FE24983311386BE8544EB443.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8UoSkvSSNwoYNAd6PMzAUuUchW6YBaugzpHQLDSMVEsJ/0/3230302e3139362e3133322e302f32322d3234203d3e203631353833.roa
Signing time:             Wed 25 Jun 2025 19:26:52 +0000
ROA not before:           Wed 25 Jun 2025 19:21:52 +0000
ROA not after:            Wed 24 Jun 2026 19:26:52 +0000
asID:                     61583
IP address blocks:        200.196.132.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8UoSkvSSNwoYNAd6PMzAUuUchW6YBaugzpHQLDSMVEsJ/0/3CB1370100AB2291FE24983311386BE8544EB443.crl
                          rsync://rpki-repo.registro.br/repo/8UoSkvSSNwoYNAd6PMzAUuUchW6YBaugzpHQLDSMVEsJ/0/3CB1370100AB2291FE24983311386BE8544EB443.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CB1370100AB2291FE24983311386BE8544EB443.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 14:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:85:3b:90:5d:a7:a4:cb:c4:e9:f0:30:ab:ca:25:73:4e:67:2a:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CB1370100AB2291FE24983311386BE8544EB443
        Validity
            Not Before: Jun 25 19:21:52 2025 GMT
            Not After : Jun 24 19:26:52 2026 GMT
        Subject: CN=F6470EC215233B8037C031CF985D8F5D3306715B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d4:3a:af:02:47:86:40:5b:d0:08:93:b8:ec:
                    54:2b:fe:63:dd:11:d5:f8:11:f5:d8:cb:83:b5:be:
                    25:59:8c:d6:cc:05:d7:fc:91:3b:fb:18:59:16:c2:
                    85:46:f0:7d:6d:0f:4d:01:e4:33:5e:d1:7a:03:44:
                    da:b3:4f:a7:94:c0:46:90:cd:ba:92:8f:d3:fd:2d:
                    ba:0c:25:93:45:eb:a4:38:55:97:88:d8:c9:14:95:
                    1b:ed:fc:b0:8f:64:95:8b:59:74:cf:2b:50:14:b7:
                    0d:3e:94:fb:54:7d:23:d6:b2:79:4e:3b:ce:59:be:
                    6d:72:36:5c:12:c1:d0:61:f4:0e:82:66:67:dc:f3:
                    c1:a0:b5:9f:43:eb:47:5a:07:ea:0e:1b:b0:74:15:
                    37:84:99:1a:00:ec:28:ea:f7:08:61:60:ab:e2:4c:
                    f8:dd:07:7c:97:1e:e6:f6:79:bd:f7:ff:12:6e:07:
                    1b:35:e7:5b:2a:03:04:09:88:a4:1b:60:7f:a4:b8:
                    97:e6:41:bb:6d:0f:7d:14:f4:fa:be:e9:48:4c:f5:
                    d7:cb:a3:d6:ce:a7:11:1d:48:b5:a8:56:16:86:35:
                    67:ce:94:97:ce:6d:8c:82:11:b5:e1:ae:c5:b8:18:
                    fa:50:44:e0:12:3e:dd:c3:ad:a7:99:38:65:2f:84:
                    1c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:47:0E:C2:15:23:3B:80:37:C0:31:CF:98:5D:8F:5D:33:06:71:5B
            X509v3 Authority Key Identifier:
                keyid:3C:B1:37:01:00:AB:22:91:FE:24:98:33:11:38:6B:E8:54:4E:B4:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8UoSkvSSNwoYNAd6PMzAUuUchW6YBaugzpHQLDSMVEsJ/0/3CB1370100AB2291FE24983311386BE8544EB443.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CB1370100AB2291FE24983311386BE8544EB443.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UoSkvSSNwoYNAd6PMzAUuUchW6YBaugzpHQLDSMVEsJ/0/3230302e3139362e3133322e302f32322d3234203d3e203631353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.196.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:a6:cd:30:c2:89:d4:70:41:88:f8:9e:df:9d:58:96:1b:77:
         56:77:83:b4:c0:0c:bf:29:05:a3:cf:d0:43:49:36:7b:c4:01:
         1f:aa:f5:f4:49:01:6c:09:c6:c3:5d:71:17:33:ae:48:6a:49:
         d8:b2:e1:ea:33:44:0e:b0:93:d7:5e:a4:56:81:ce:62:dc:c3:
         57:93:5a:14:5c:c9:5d:d5:19:95:b7:03:1d:e8:6b:12:93:2e:
         03:d5:2e:93:ba:e4:70:a5:2a:56:52:1c:c7:99:47:22:7b:28:
         02:54:f3:fe:97:b7:70:10:d8:5c:45:b5:bc:5e:b3:de:10:cd:
         96:82:a6:0f:1c:cc:40:49:c8:0d:14:01:01:6a:f0:12:64:54:
         aa:ef:56:52:c6:f1:88:4a:aa:f5:31:f3:50:e6:f8:3e:1a:71:
         19:0c:b8:9f:4b:8f:6d:6a:47:ef:f0:22:d8:fd:44:c5:ca:78:
         dd:07:f4:f3:fe:e5:d4:06:a0:e6:93:64:82:f4:05:2d:6d:41:
         8e:ec:84:4c:86:9f:81:c4:6f:2e:69:af:58:f8:be:bb:47:9b:
         4e:34:a0:29:e8:cf:75:f6:c4:45:d7:f3:2d:65:48:13:f0:b6:
         cd:df:17:ae:4f:54:55:f3:99:c0:d7:7c:7d:7c:58:80:5b:2c:
         47:b6:ee:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 17:27:30 2025 by rpki-client