Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3230302e3232352e3134312e302f32342d3234203d3e203631373937.roa
File:                     3230302e3232352e3134312e302f32342d3234203d3e203631373937.roa (raw, json)
Hash identifier:          l2pZNL91WgDF1LkX0u09X7z/G5hf05BRD8uUsf14Zhk=
Subject key identifier:   31:00:E0:1F:A8:13:6F:BF:E7:12:E1:E8:19:16:6B:0C:7A:CC:DD:27
Certificate issuer:       /CN=FE4DA27833757CF1F5DCB4799D9D238117F31532
Certificate serial:       2AA467A7F6DDEFAD4464896B2E59F7AE18549673
Authority key identifier: FE:4D:A2:78:33:75:7C:F1:F5:DC:B4:79:9D:9D:23:81:17:F3:15:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE4DA27833757CF1F5DCB4799D9D238117F31532.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3230302e3232352e3134312e302f32342d3234203d3e203631373937.roa
Signing time:             Fri 06 Jun 2025 11:45:10 +0000
ROA not before:           Fri 06 Jun 2025 11:40:10 +0000
ROA not after:            Fri 05 Jun 2026 11:45:10 +0000
asID:                     61797
IP address blocks:        200.225.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/FE4DA27833757CF1F5DCB4799D9D238117F31532.crl
                          rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/FE4DA27833757CF1F5DCB4799D9D238117F31532.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE4DA27833757CF1F5DCB4799D9D238117F31532.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 10:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:a4:67:a7:f6:dd:ef:ad:44:64:89:6b:2e:59:f7:ae:18:54:96:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE4DA27833757CF1F5DCB4799D9D238117F31532
        Validity
            Not Before: Jun  6 11:40:10 2025 GMT
            Not After : Jun  5 11:45:10 2026 GMT
        Subject: CN=3100E01FA8136FBFE712E1E819166B0C7ACCDD27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c9:bc:78:ec:45:18:4b:cb:4e:85:87:4d:c4:
                    ac:35:28:07:38:64:a1:23:71:14:7c:02:90:21:8b:
                    f8:a8:cc:1f:67:69:87:0e:9e:81:42:9a:9a:58:f2:
                    23:13:68:eb:a7:06:f3:be:8f:d7:88:75:f3:96:b7:
                    eb:49:73:45:b1:a0:27:f9:5e:2e:a8:7e:eb:79:d1:
                    1c:02:28:1b:a7:f7:76:6f:ba:c2:29:32:28:b5:c0:
                    66:60:11:db:50:a4:74:e0:24:ed:36:7f:d0:a1:61:
                    27:1f:c2:71:a0:a9:ac:85:ce:f5:02:7e:6f:dd:8d:
                    ea:74:8e:4b:b2:bc:a2:d3:38:9b:f4:ae:fd:12:81:
                    c7:81:25:63:8f:f0:01:7c:e2:70:c5:fd:99:0f:9a:
                    a1:89:cd:93:b4:51:bb:91:6a:c7:b5:8c:d2:28:3e:
                    0c:66:1f:b7:69:f2:71:f1:9e:6b:23:69:2b:12:a3:
                    1f:79:f6:31:15:08:3a:f5:3e:b0:1a:e9:b9:f9:0e:
                    e2:3f:66:e0:a0:b6:8c:73:0c:55:9f:4d:80:db:2b:
                    d3:59:9a:56:27:e2:f6:f8:87:2f:21:6f:d2:f6:8f:
                    1a:43:d6:c3:7e:70:34:19:e4:de:c4:5a:f0:ed:84:
                    cc:0f:cf:92:56:1d:90:08:e7:fc:2b:1b:40:f3:0c:
                    88:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:00:E0:1F:A8:13:6F:BF:E7:12:E1:E8:19:16:6B:0C:7A:CC:DD:27
            X509v3 Authority Key Identifier:
                keyid:FE:4D:A2:78:33:75:7C:F1:F5:DC:B4:79:9D:9D:23:81:17:F3:15:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/FE4DA27833757CF1F5DCB4799D9D238117F31532.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE4DA27833757CF1F5DCB4799D9D238117F31532.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3230302e3232352e3134312e302f32342d3234203d3e203631373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.225.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:77:d5:9d:3b:30:f1:c7:40:dc:d3:de:c9:36:0d:42:c3:cb:
         d7:5f:c4:ee:a8:40:ab:4b:78:26:18:f6:b6:5b:9a:cf:b8:80:
         57:4d:6e:26:cb:db:73:2f:d7:00:f3:45:74:86:bd:65:21:13:
         e8:93:97:d6:ff:de:6a:1d:2c:57:e7:ec:c0:03:d7:ac:58:7a:
         c3:c6:09:0c:27:e3:1f:96:38:f9:01:fe:f0:ab:4b:5b:b9:1b:
         06:d1:31:d7:21:3e:90:7e:97:bd:1d:8f:35:8f:57:30:ad:02:
         83:e2:1c:71:73:33:45:f2:34:74:7e:dd:c9:f7:d9:03:b6:a7:
         a4:37:f0:5a:5f:40:de:17:25:a1:23:ba:a4:81:86:82:bb:0e:
         6a:1b:fa:4b:82:9d:a2:60:94:0f:32:52:8e:12:c7:d1:d0:d4:
         29:f6:82:9a:6b:e1:36:e8:a7:ef:35:be:36:1f:c9:e7:ec:14:
         89:66:d3:aa:25:76:48:3f:c0:e1:5a:bf:c1:dc:a2:cd:d3:59:
         28:2b:c7:6b:9f:7c:c8:b0:fe:66:1c:08:8f:04:19:13:27:94:
         d3:40:b7:2c:2a:b0:27:d4:0d:0e:33:3a:4f:a2:72:cc:a2:64:
         d5:48:b7:e5:91:1d:a6:a6:28:42:c0:b9:09:a6:cf:bc:9e:92:
         02:48:07:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 01:13:24 2025 by rpki-client