Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3230302e3233362e3232342e302f31392d3332203d3e203238363439.roa
File:                     3230302e3233362e3232342e302f31392d3332203d3e203238363439.roa (raw, json)
Hash identifier:          edhm4mLP6ulAjKAg+6EnguVj28XYDl7wBsEbh6VnR6c=
Subject key identifier:   D1:B5:DA:F0:57:69:04:7C:FE:F0:30:50:FD:C0:0B:DF:A6:D4:6C:E3
Certificate issuer:       /CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
Certificate serial:       630E7F9F455685D3FEA14906FF38576F62413796
Authority key identifier: 01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3230302e3233362e3232342e302f31392d3332203d3e203238363439.roa
Signing time:             Fri 15 Aug 2025 20:31:16 +0000
ROA not before:           Fri 15 Aug 2025 20:26:16 +0000
ROA not after:            Fri 14 Aug 2026 20:31:16 +0000
asID:                     28649
IP address blocks:        200.236.224.0/19 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl
                          rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 08:32:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:0e:7f:9f:45:56:85:d3:fe:a1:49:06:ff:38:57:6f:62:41:37:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
        Validity
            Not Before: Aug 15 20:26:16 2025 GMT
            Not After : Aug 14 20:31:16 2026 GMT
        Subject: CN=D1B5DAF05769047CFEF03050FDC00BDFA6D46CE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:07:20:46:d9:16:4e:90:30:f4:ea:5e:b1:e0:
                    9b:a6:42:e5:50:49:78:ed:f4:d1:d0:b4:b8:48:a3:
                    be:13:7c:52:28:55:28:60:e8:f6:cd:b9:12:f6:f0:
                    68:05:d3:f8:ce:2d:87:aa:80:17:1e:24:a8:e9:5d:
                    b4:4a:72:17:db:0a:03:5c:98:bd:db:40:92:29:04:
                    68:b5:3c:dd:7c:0f:64:e5:a5:5a:04:2d:2f:ab:40:
                    e4:30:8c:3f:e0:8f:00:32:f4:6f:9b:b6:7e:eb:d2:
                    ef:6f:d1:15:de:0c:75:ac:cf:65:5a:29:8e:dd:d1:
                    be:2f:ae:3a:31:9a:0a:a7:e2:d6:c6:2e:c9:a5:14:
                    be:49:d3:f9:11:78:bf:b6:37:91:01:a9:09:e1:d0:
                    8d:05:5a:09:26:e8:7d:5d:09:cb:bc:0f:2d:42:b9:
                    8e:91:39:9a:38:c5:1c:80:9c:22:f6:35:8d:ce:52:
                    1c:e6:98:0a:7f:91:3a:b9:66:ef:05:3a:74:ab:8f:
                    36:eb:19:92:63:2e:ba:20:64:ee:df:54:34:5d:4c:
                    fe:ef:e7:60:40:68:0f:d3:85:d2:9e:99:f8:cb:bc:
                    e0:b1:2a:d5:1a:c9:14:ec:41:00:5d:2e:d6:d0:80:
                    90:c4:31:35:a9:b6:e1:12:f0:d3:20:41:bc:cf:5a:
                    3d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:B5:DA:F0:57:69:04:7C:FE:F0:30:50:FD:C0:0B:DF:A6:D4:6C:E3
            X509v3 Authority Key Identifier:
                keyid:01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3230302e3233362e3232342e302f31392d3332203d3e203238363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.236.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         49:8f:47:a2:ea:93:06:b6:d6:5f:71:ba:8d:4e:0d:02:67:ea:
         c0:78:be:2c:a1:ae:02:1b:d0:b7:ed:3c:bd:80:b6:87:e8:8a:
         30:fa:42:d6:da:9c:94:e2:39:9f:17:37:93:1c:ac:b4:44:74:
         67:03:29:ca:f4:e6:84:0d:dd:4b:96:73:25:e0:54:00:fb:62:
         19:32:aa:2f:ca:9f:ca:dc:ed:56:19:79:9f:6a:90:15:7e:b6:
         a1:b8:50:d3:60:41:ec:db:8b:7e:23:6e:01:05:f0:36:c8:38:
         e5:22:a2:86:a8:39:eb:4a:1f:27:20:8f:10:45:9a:e1:5f:79:
         5c:98:ec:eb:63:22:1a:6b:27:97:a2:e0:89:4c:fd:8f:ec:71:
         fd:d9:5b:83:5c:42:b4:d7:c7:7f:9e:6c:2b:bb:12:44:31:c0:
         f5:9c:63:44:b7:40:1c:cb:87:82:4e:51:17:56:35:a0:de:53:
         2c:d8:dc:ae:72:d3:4e:76:d1:55:3f:b6:d7:eb:e8:b7:23:9b:
         fb:5c:19:52:de:83:b8:ac:29:af:a7:f7:7a:e5:8b:10:ff:32:
         31:76:84:88:27:30:0c:a0:c2:48:31:03:65:ce:ad:a1:ad:21:
         7e:c9:69:e1:ba:13:9b:1d:1f:0d:ae:12:86:d8:2b:dd:b3:47:
         ad:7f:6d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:09:45 2025 by rpki-client