Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/3230302e37312e37322e302f32322d3332203d3e20323636323136.roa
File:                     3230302e37312e37322e302f32322d3332203d3e20323636323136.roa (raw, json)
Hash identifier:          YvegZmyo9sJ4pcNnNHBjTBF2t5WeDgSktWpePZYDq0g=
Subject key identifier:   B6:85:61:68:4B:C1:A3:15:16:7F:17:02:23:72:92:9D:44:D1:AC:E2
Certificate issuer:       /CN=8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD
Certificate serial:       354D59EBA46DDAEA4438CE6B46A37E9C400A25EC
Authority key identifier: 8D:E1:EB:F4:EE:33:44:5E:39:8B:F5:5C:7B:FB:B0:54:E8:54:6F:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/3230302e37312e37322e302f32322d3332203d3e20323636323136.roa
Signing time:             Tue 17 Jun 2025 16:33:28 +0000
ROA not before:           Tue 17 Jun 2025 16:28:28 +0000
ROA not after:            Tue 16 Jun 2026 16:33:28 +0000
asID:                     266216
IP address blocks:        200.71.72.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.crl
                          rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 02:47:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:4d:59:eb:a4:6d:da:ea:44:38:ce:6b:46:a3:7e:9c:40:0a:25:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD
        Validity
            Not Before: Jun 17 16:28:28 2025 GMT
            Not After : Jun 16 16:33:28 2026 GMT
        Subject: CN=B68561684BC1A315167F17022372929D44D1ACE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:29:8c:2d:e6:22:aa:28:b4:1d:c3:bf:ed:19:
                    44:0f:6d:0a:a9:38:56:49:29:57:d3:ae:e9:50:73:
                    c3:d1:27:9d:20:1b:fc:2c:25:f5:68:d1:31:1f:77:
                    c8:c7:ad:98:74:56:b4:e8:e0:7c:70:7a:75:4c:17:
                    ed:4b:1b:b1:c6:5d:64:d6:90:b6:5a:11:65:72:2a:
                    cd:f9:88:ea:6b:a4:4a:f9:a9:50:a1:ff:d3:f6:43:
                    99:47:70:98:b8:c9:8e:57:e5:91:7b:4c:64:73:23:
                    75:fc:10:dd:8f:1a:d4:e1:d2:4c:a3:c4:a6:7f:9a:
                    0a:b7:61:74:75:9a:11:1e:08:80:15:84:9a:6d:6c:
                    1e:4f:92:26:12:09:63:a0:c3:1a:b6:86:bf:71:a4:
                    ff:e2:af:23:21:78:1e:01:1c:da:37:7d:64:f1:c3:
                    bf:7d:bf:79:05:d8:57:4b:ca:91:eb:63:4a:bd:d5:
                    4c:48:50:0c:88:ed:5d:75:49:a4:4b:a1:5c:cb:78:
                    b8:53:06:50:5a:4d:ef:9c:0f:0e:69:ec:44:84:4c:
                    02:eb:15:ec:38:92:4b:a5:9c:83:1b:32:75:c9:df:
                    6c:14:35:b4:37:3b:27:3f:81:b5:68:42:72:78:11:
                    f5:b4:e7:61:39:4e:cb:4e:21:c4:24:02:e4:b5:29:
                    ad:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:85:61:68:4B:C1:A3:15:16:7F:17:02:23:72:92:9D:44:D1:AC:E2
            X509v3 Authority Key Identifier:
                keyid:8D:E1:EB:F4:EE:33:44:5E:39:8B:F5:5C:7B:FB:B0:54:E8:54:6F:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/3230302e37312e37322e302f32322d3332203d3e20323636323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:97:7f:a5:d9:57:bb:79:87:4d:b2:4c:4d:d1:10:77:aa:1b:
         6f:a2:36:7d:b6:1f:51:ab:f4:e2:67:6b:03:9b:ec:25:36:c1:
         e6:d9:40:59:26:99:0a:71:91:2e:90:96:76:b8:8c:64:6c:a6:
         d0:22:26:00:2e:da:1f:c9:f5:6c:27:1f:86:e5:f1:94:0f:3d:
         89:65:27:7d:4a:b1:d0:3a:ae:ca:87:59:5e:8e:bb:3b:b2:1d:
         28:45:6d:02:d4:43:70:83:c0:70:42:9f:bc:d7:83:9c:53:09:
         39:77:ed:df:d6:01:51:70:5c:96:70:e5:e6:d1:1e:84:62:20:
         e6:b4:76:0b:be:56:49:83:55:d6:12:f7:f9:71:66:6f:af:6b:
         67:b4:95:aa:23:3c:35:fb:45:96:03:7b:36:bf:23:aa:1e:14:
         96:69:18:27:8c:f4:96:ae:11:66:11:ef:e1:31:54:20:41:1d:
         9d:f1:2b:14:fb:12:f8:85:ba:6a:45:10:d7:2d:18:bf:c5:f6:
         ae:a5:04:1b:1a:34:d6:e2:f0:2a:b6:6c:94:f6:37:32:11:32:
         ae:43:24:b8:42:fc:23:70:c4:b5:93:1f:ad:01:17:92:43:9c:
         5c:66:28:1a:3b:a2:56:07:9e:2a:ea:91:94:f2:34:47:5f:71:
         81:c5:c0:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 18:05:46 2025 by rpki-client