Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/3230302e37332e3231362e302f32332d3233203d3e20323730343833.roa
File:                     3230302e37332e3231362e302f32332d3233203d3e20323730343833.roa (raw, json)
Hash identifier:          rK0IOV+EidUJoiUuH5PAx/A/dJ9zzuIc7Z7E9C5lbSQ=
Subject key identifier:   1B:DA:02:A1:54:CA:68:7F:C7:73:52:25:12:7C:BE:CF:EE:13:6F:00
Certificate issuer:       /CN=CAF88395E9979EFFC03351307D8CD0E54554BBDB
Certificate serial:       01A8ADFD84043A2D2784EBA4B4F4D87E59FAF365
Authority key identifier: CA:F8:83:95:E9:97:9E:FF:C0:33:51:30:7D:8C:D0:E5:45:54:BB:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF88395E9979EFFC03351307D8CD0E54554BBDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/3230302e37332e3231362e302f32332d3233203d3e20323730343833.roa
Signing time:             Fri 20 Jun 2025 20:13:27 +0000
ROA not before:           Fri 20 Jun 2025 20:08:27 +0000
ROA not after:            Fri 19 Jun 2026 20:13:27 +0000
asID:                     270483
IP address blocks:        200.73.216.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.crl
                          rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF88395E9979EFFC03351307D8CD0E54554BBDB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 01:37:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a8:ad:fd:84:04:3a:2d:27:84:eb:a4:b4:f4:d8:7e:59:fa:f3:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAF88395E9979EFFC03351307D8CD0E54554BBDB
        Validity
            Not Before: Jun 20 20:08:27 2025 GMT
            Not After : Jun 19 20:13:27 2026 GMT
        Subject: CN=1BDA02A154CA687FC7735225127CBECFEE136F00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:47:a6:cc:4b:d7:73:93:ac:08:5c:c7:3b:2f:
                    00:cb:4e:e5:b3:3d:62:6a:db:13:99:31:a2:8d:87:
                    02:0e:c0:9f:5f:ce:a4:ff:3d:ba:04:e7:cc:75:eb:
                    04:7e:27:de:61:64:7f:ad:46:e6:13:81:2c:e6:4d:
                    54:58:c3:4b:64:ec:ab:01:58:14:1a:10:b6:0c:01:
                    de:19:23:29:3a:fc:04:7e:6b:2b:5b:58:c7:e6:88:
                    f6:1a:09:ad:75:5f:b2:d9:70:0a:c4:f3:fd:cd:37:
                    02:20:b4:0c:72:ef:fa:00:02:90:4a:bc:47:cf:d5:
                    21:92:01:69:79:a3:73:ca:6d:4e:07:ca:36:ba:fc:
                    6a:a2:bd:d9:e4:44:6f:54:a0:2c:94:28:43:3d:42:
                    2a:5c:4f:b3:57:f4:fa:92:66:98:aa:7e:7c:c1:53:
                    39:a7:3f:dc:82:ff:e8:b7:3b:60:37:5c:fa:10:99:
                    84:61:7b:a8:13:b8:42:56:2e:81:0e:4a:fa:69:9a:
                    ac:cb:42:ce:ce:d6:22:4e:29:cb:e0:92:ed:ac:33:
                    90:5b:77:6a:a2:9c:ec:19:db:b3:55:a0:eb:39:01:
                    22:9e:fb:d4:a3:66:2f:9f:c0:6d:ad:4f:f6:64:ac:
                    a5:6e:51:44:77:f7:64:b8:7c:74:57:cd:b8:51:ba:
                    aa:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:DA:02:A1:54:CA:68:7F:C7:73:52:25:12:7C:BE:CF:EE:13:6F:00
            X509v3 Authority Key Identifier:
                keyid:CA:F8:83:95:E9:97:9E:FF:C0:33:51:30:7D:8C:D0:E5:45:54:BB:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF88395E9979EFFC03351307D8CD0E54554BBDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/3230302e37332e3231362e302f32332d3233203d3e20323730343833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.73.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:71:f6:19:38:5a:7b:b1:ff:83:49:4b:a4:69:e8:bc:8f:db:
         7c:00:a0:e7:86:d8:fa:cb:4e:51:9c:d8:73:d8:b1:4d:06:f0:
         c7:bd:90:0e:69:fe:9a:cf:4c:88:79:87:bf:e3:e4:4c:fc:fd:
         e4:34:46:0c:7f:fe:5b:c6:35:51:75:85:04:bc:a6:c8:fa:63:
         de:fc:62:13:dd:e8:c0:de:e2:50:05:33:4f:dc:f8:0b:0c:ee:
         2d:fe:b1:f5:56:1c:36:37:19:6c:ba:6b:3b:33:0f:f1:a6:07:
         f8:4b:a8:41:4d:ff:4c:fa:ab:72:d3:a2:3b:2c:ed:00:0d:9a:
         66:b1:c7:1a:9d:b9:8c:04:dd:60:ab:02:71:f8:af:69:f1:d2:
         16:be:46:21:3e:65:01:3a:d5:d0:6b:d4:ec:08:8c:2e:65:69:
         b6:7a:b5:23:e0:b2:ad:a7:c5:e8:50:c2:47:c2:d8:e9:64:15:
         96:ce:4b:13:b9:9a:d1:3c:15:2a:7c:59:a7:54:12:28:c0:ce:
         eb:f9:b1:35:19:4f:f5:f3:63:be:0a:a6:2f:af:68:3b:cb:f0:
         b0:99:cd:20:ec:7e:ed:e9:9c:d5:94:0e:0e:86:fd:00:b8:08:
         81:b4:90:19:85:31:a6:c8:bc:3b:6e:66:43:ce:2c:eb:5c:25:
         99:b6:c6:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 17:35:43 2025 by rpki-client