Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9KsvbamK9EfnhV8AXwo5nm44syvbUq5EvemzcnACa8mk/0/3230302e33392e35322e302f32322d3332203d3e20323731343139.roa
File:                     3230302e33392e35322e302f32322d3332203d3e20323731343139.roa (raw, json)
Hash identifier:          2WZYsRWQGLmqQaaHyt6ni/lDn2n7LakVQZwx6Qz77LE=
Subject key identifier:   CA:38:59:96:FA:7B:3A:1E:72:9E:06:91:E7:07:02:26:24:26:24:E7
Certificate issuer:       /CN=6686C98E5028794E9E46723E7D80810F92D9AECF
Certificate serial:       42F61C2E9B0433F811CB5B0941D7D84D70BAFF07
Authority key identifier: 66:86:C9:8E:50:28:79:4E:9E:46:72:3E:7D:80:81:0F:92:D9:AE:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6686C98E5028794E9E46723E7D80810F92D9AECF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9KsvbamK9EfnhV8AXwo5nm44syvbUq5EvemzcnACa8mk/0/3230302e33392e35322e302f32322d3332203d3e20323731343139.roa
Signing time:             Mon 30 Jun 2025 13:28:38 +0000
ROA not before:           Mon 30 Jun 2025 13:23:38 +0000
ROA not after:            Mon 29 Jun 2026 13:28:38 +0000
asID:                     271419
IP address blocks:        200.39.52.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9KsvbamK9EfnhV8AXwo5nm44syvbUq5EvemzcnACa8mk/0/6686C98E5028794E9E46723E7D80810F92D9AECF.crl
                          rsync://rpki-repo.registro.br/repo/9KsvbamK9EfnhV8AXwo5nm44syvbUq5EvemzcnACa8mk/0/6686C98E5028794E9E46723E7D80810F92D9AECF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6686C98E5028794E9E46723E7D80810F92D9AECF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 02 Jul 2025 07:29:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:f6:1c:2e:9b:04:33:f8:11:cb:5b:09:41:d7:d8:4d:70:ba:ff:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6686C98E5028794E9E46723E7D80810F92D9AECF
        Validity
            Not Before: Jun 30 13:23:38 2025 GMT
            Not After : Jun 29 13:28:38 2026 GMT
        Subject: CN=CA385996FA7B3A1E729E0691E7070226242624E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e0:cb:34:a6:23:89:3d:1e:0d:c4:98:01:2c:
                    20:0d:21:58:d1:e0:b2:a6:ac:f2:59:30:97:29:af:
                    19:3e:37:36:5f:c0:60:e2:e0:9f:dd:70:44:61:a5:
                    6f:20:0a:d5:3b:82:a1:18:ab:27:43:40:66:bf:e9:
                    40:53:13:e7:76:f3:12:ef:f1:8a:f4:b7:f5:14:e6:
                    73:1f:04:4e:17:69:7d:c0:00:5c:b3:a1:ac:45:7a:
                    cf:62:b1:1f:ae:6c:ed:d3:10:e8:92:19:b7:c0:b0:
                    f8:c8:a1:a9:30:ab:13:d0:23:25:aa:e8:eb:e3:6f:
                    6c:0f:00:00:96:f6:fb:bc:3f:eb:b6:b9:fa:e2:8f:
                    5c:4a:01:4e:5f:1d:15:5d:1d:a2:df:7e:04:79:54:
                    33:7b:c0:48:1e:95:fc:0a:5c:08:bb:c1:9d:db:56:
                    21:f5:c8:2e:1f:a3:d8:a4:a5:c8:f9:1c:91:37:9d:
                    c0:59:18:bc:d6:ac:28:cc:9c:b0:a3:03:30:a1:2e:
                    8e:ab:d8:bb:b9:78:f3:21:16:d0:7f:c5:4d:70:ce:
                    b6:19:98:82:9d:5c:73:3b:05:e0:a2:fd:8c:3e:67:
                    22:4a:56:a6:e7:14:c7:2e:71:92:b1:df:9a:19:27:
                    5e:f5:7a:37:73:5e:06:48:20:a5:8c:3e:ec:9c:85:
                    d3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:38:59:96:FA:7B:3A:1E:72:9E:06:91:E7:07:02:26:24:26:24:E7
            X509v3 Authority Key Identifier:
                keyid:66:86:C9:8E:50:28:79:4E:9E:46:72:3E:7D:80:81:0F:92:D9:AE:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9KsvbamK9EfnhV8AXwo5nm44syvbUq5EvemzcnACa8mk/0/6686C98E5028794E9E46723E7D80810F92D9AECF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6686C98E5028794E9E46723E7D80810F92D9AECF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9KsvbamK9EfnhV8AXwo5nm44syvbUq5EvemzcnACa8mk/0/3230302e33392e35322e302f32322d3332203d3e20323731343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bb:8a:e4:4f:01:eb:7b:fd:38:2b:7c:04:33:d4:f3:a9:cc:09:
         65:93:02:71:41:22:eb:8a:02:10:8b:6f:2a:11:51:50:0f:65:
         38:58:a3:f2:39:e8:0d:d8:c9:89:08:2c:f1:e8:54:cd:6a:bb:
         61:5c:1f:fe:07:a0:99:fc:52:f3:a8:90:92:68:92:c9:58:ce:
         72:fc:4b:f7:a7:44:e7:25:53:a1:96:16:53:08:39:d9:84:76:
         b6:97:57:e2:34:1d:88:55:2a:ac:ac:90:ca:bd:f8:4e:ed:a5:
         a5:c3:ac:88:92:6c:26:c8:4d:8c:d6:3e:ae:b9:ae:6d:e8:d9:
         0f:bc:e8:03:fd:d3:3a:ce:e2:2c:a0:ab:60:c7:93:fa:99:13:
         ae:c5:34:f6:df:c8:6c:26:ee:5a:9e:42:a7:b3:37:70:6a:e6:
         e0:7b:cd:0c:b4:af:1f:25:17:92:51:8c:95:98:8f:c8:89:83:
         ca:df:fa:96:e1:6a:fe:1b:f8:ee:c7:75:93:6e:b1:ad:aa:0e:
         4e:78:5e:2f:6f:53:57:71:03:d1:60:fa:e5:75:f6:aa:9c:f6:
         c5:8e:03:69:0a:f2:05:c2:03:ab:8b:54:c0:17:5d:07:46:f4:
         8e:33:79:ae:94:ac:a1:76:46:91:89:3d:25:d4:55:b9:99:53:
         34:dc:df:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 11:49:56 2025 by rpki-client