Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/3230302e37332e3231362e302f32342d3234203d3e20323730343833.roa
File:                     3230302e37332e3231362e302f32342d3234203d3e20323730343833.roa (raw, json)
Hash identifier:          O22CqyazHO7QsfMKVz3bn+StHnBcbRXfWsVfyk+nEJo=
Subject key identifier:   4B:DF:73:1E:06:2D:65:40:C5:16:46:AD:D4:1F:41:4F:5B:A6:CE:71
Certificate issuer:       /CN=CAF88395E9979EFFC03351307D8CD0E54554BBDB
Certificate serial:       5C4C1781EA2FB46E7B82683DD1B5C06799295CAE
Authority key identifier: CA:F8:83:95:E9:97:9E:FF:C0:33:51:30:7D:8C:D0:E5:45:54:BB:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF88395E9979EFFC03351307D8CD0E54554BBDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/3230302e37332e3231362e302f32342d3234203d3e20323730343833.roa
Signing time:             Fri 20 Jun 2025 20:13:28 +0000
ROA not before:           Fri 20 Jun 2025 20:08:28 +0000
ROA not after:            Fri 19 Jun 2026 20:13:28 +0000
asID:                     270483
IP address blocks:        200.73.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.crl
                          rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF88395E9979EFFC03351307D8CD0E54554BBDB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 01:37:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:4c:17:81:ea:2f:b4:6e:7b:82:68:3d:d1:b5:c0:67:99:29:5c:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAF88395E9979EFFC03351307D8CD0E54554BBDB
        Validity
            Not Before: Jun 20 20:08:28 2025 GMT
            Not After : Jun 19 20:13:28 2026 GMT
        Subject: CN=4BDF731E062D6540C51646ADD41F414F5BA6CE71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:87:28:e5:0e:96:22:6f:7f:52:44:a8:63:e6:
                    fb:1d:04:6f:57:8f:45:f5:a9:3f:43:a8:24:51:ab:
                    68:42:60:61:04:96:60:d2:57:4f:d7:76:ed:cd:a2:
                    8a:69:c3:a6:d2:3e:57:dc:a0:1e:be:f6:c0:f1:02:
                    a7:ce:d5:c9:c6:70:da:82:58:b3:5e:a7:e4:49:9c:
                    aa:46:16:22:dc:2f:d1:3b:df:0c:5c:ca:07:55:95:
                    ec:ca:9a:9b:dd:91:19:70:54:e0:93:f5:65:8a:05:
                    b8:86:13:d6:8e:a0:96:54:26:66:a1:78:a9:0e:92:
                    a2:e5:52:5c:f2:21:d2:8b:4c:c1:06:6c:69:ec:7a:
                    f2:69:07:00:63:16:86:f3:e6:59:68:1f:2f:7b:1c:
                    b3:4a:f4:ba:6f:cc:90:b7:13:5b:fb:5b:e5:48:32:
                    21:cb:c2:24:d5:b6:6f:45:49:67:11:a0:4a:9f:c6:
                    2f:e8:76:41:16:f1:2c:cb:e5:65:3f:a7:66:b2:50:
                    2e:27:9f:62:68:95:1b:02:7d:38:3c:2c:85:2e:c4:
                    46:e8:22:f4:11:89:27:bc:4a:f1:9a:2c:50:d3:df:
                    ca:de:5a:17:e9:f4:6d:7a:91:27:af:15:cb:87:28:
                    23:8e:91:06:20:c5:77:0e:cb:27:05:16:cf:01:01:
                    50:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:DF:73:1E:06:2D:65:40:C5:16:46:AD:D4:1F:41:4F:5B:A6:CE:71
            X509v3 Authority Key Identifier:
                keyid:CA:F8:83:95:E9:97:9E:FF:C0:33:51:30:7D:8C:D0:E5:45:54:BB:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/CAF88395E9979EFFC03351307D8CD0E54554BBDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF88395E9979EFFC03351307D8CD0E54554BBDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BWoPU1HhXuEnP5Z6D2KYU1nzPoKNdsyTvdjMchA5Vt98/0/3230302e37332e3231362e302f32342d3234203d3e20323730343833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.73.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:6a:2f:ef:09:02:9e:7f:39:14:a0:fc:69:a2:a8:53:e7:e2:
         05:8b:30:2f:48:70:8b:eb:72:1b:35:fe:dc:32:50:a6:9d:0e:
         11:48:f0:27:c7:55:b4:75:de:9a:77:3a:99:ad:53:a8:be:78:
         03:9a:56:7a:a7:c3:bb:5f:72:63:e3:c8:5d:cb:ad:b3:bd:02:
         0d:43:10:47:c4:4b:91:1b:9f:e3:04:84:a0:66:6b:af:c9:1f:
         b8:8c:7d:25:d7:50:43:88:e2:79:8d:23:2c:af:f5:a2:14:d8:
         83:71:9f:e0:dd:c8:bf:7d:6c:10:a8:99:a6:ad:24:02:92:ca:
         a5:1f:80:7a:6c:a2:78:51:e3:d5:71:14:51:b0:3e:44:32:26:
         71:4c:5e:db:ce:5f:0d:bb:03:c1:60:40:15:e6:96:f8:77:f2:
         61:5b:d2:78:f5:76:b6:92:a9:e0:75:4e:d6:fb:f9:2c:17:97:
         34:00:77:8e:63:08:0f:7a:eb:aa:52:d8:ce:7c:03:2c:1f:8e:
         c3:b8:06:e6:3e:f6:e6:fe:5d:9a:67:f9:4b:90:4c:95:ba:7f:
         58:cb:a6:3d:c5:d8:17:f5:4e:db:71:7b:62:c0:47:2e:47:65:
         41:60:57:de:3f:3e:bb:4c:51:67:ee:d7:40:70:2f:e4:04:a6:
         c6:7e:48:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 17:40:21 2025 by rpki-client