Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/3230302e3139322e39362e302f32312d3234203d3e203133333537.roa
File:                     3230302e3139322e39362e302f32312d3234203d3e203133333537.roa (raw, json)
Hash identifier:          lAp7W6P14X33ArHsfUCB0iSDiJX2ZRlV6WeDx5+TlfY=
Subject key identifier:   C4:FE:C6:90:D2:5C:41:55:A2:4C:80:16:6E:D9:14:56:B8:20:FC:28
Certificate issuer:       /CN=B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE
Certificate serial:       35E18001D8AB31E9C680B587E1BBD80922C2B7DA
Authority key identifier: B4:5D:1A:8A:F7:4D:94:B0:E0:B1:35:67:36:C8:BC:9A:FB:01:85:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/3230302e3139322e39362e302f32312d3234203d3e203133333537.roa
Signing time:             Thu 21 Aug 2025 15:08:28 +0000
ROA not before:           Thu 21 Aug 2025 15:03:28 +0000
ROA not after:            Thu 20 Aug 2026 15:08:28 +0000
asID:                     13357
IP address blocks:        200.192.96.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.crl
                          rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 Aug 2025 02:39:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:e1:80:01:d8:ab:31:e9:c6:80:b5:87:e1:bb:d8:09:22:c2:b7:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE
        Validity
            Not Before: Aug 21 15:03:28 2025 GMT
            Not After : Aug 20 15:08:28 2026 GMT
        Subject: CN=C4FEC690D25C4155A24C80166ED91456B820FC28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e8:3e:b0:6e:3d:6e:06:55:ac:0f:2e:32:27:
                    ac:8e:5c:aa:38:27:54:68:70:f5:af:40:74:58:ef:
                    0b:c2:ff:7c:7a:d2:34:9c:2a:9e:30:08:24:7a:8b:
                    72:5d:6b:cd:92:8e:fb:91:d0:ab:ad:3d:80:3f:d5:
                    1d:a6:a6:b7:92:37:49:df:87:51:3d:31:cb:53:2d:
                    ed:61:ec:14:05:d8:c9:38:0e:38:a3:70:10:72:da:
                    94:d4:ef:3a:0f:3c:f0:04:5e:72:ae:6c:a8:9e:93:
                    80:32:c0:33:d5:9e:fc:f3:b7:34:01:23:1b:a6:d9:
                    93:7b:b9:f3:d8:cd:12:7e:25:36:50:58:ac:df:a8:
                    2c:4e:87:2f:70:6d:bf:8c:6c:e7:67:0d:45:9b:7e:
                    cc:68:2e:62:84:48:12:af:57:f1:97:18:f1:ac:82:
                    b3:2a:81:04:69:f2:73:7a:85:f7:01:f3:04:b5:92:
                    cd:58:ca:f9:d6:3b:9b:78:15:79:37:ba:7b:bd:48:
                    1f:0b:19:b9:32:3d:f9:30:02:97:1f:65:59:57:a2:
                    6f:ae:60:0c:14:c0:9c:39:c4:32:90:a3:16:9f:d7:
                    0b:fa:4f:6b:f7:c0:a2:ec:62:9c:69:8c:f9:e9:33:
                    05:9f:fc:2b:76:86:90:4d:56:87:9d:49:1d:eb:bd:
                    4f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:FE:C6:90:D2:5C:41:55:A2:4C:80:16:6E:D9:14:56:B8:20:FC:28
            X509v3 Authority Key Identifier:
                keyid:B4:5D:1A:8A:F7:4D:94:B0:E0:B1:35:67:36:C8:BC:9A:FB:01:85:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/3230302e3139322e39362e302f32312d3234203d3e203133333537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.192.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         bb:e8:1f:bb:b6:65:0f:3f:62:ec:74:83:67:6b:c4:58:f1:0e:
         22:22:f3:c2:55:b6:f0:bb:9b:4c:ee:8a:54:fe:d6:bb:13:52:
         78:fb:1e:f6:2b:61:87:16:04:d5:bb:bb:66:78:d2:f7:32:29:
         3f:c5:54:58:da:f3:56:1d:94:61:31:87:c5:9d:74:8b:ec:da:
         a7:b0:36:7b:32:74:d6:7e:84:4d:0d:0a:51:96:dc:2a:78:51:
         de:ec:b1:e1:d5:34:42:72:46:a9:f2:db:9d:1e:01:a2:07:88:
         3d:51:03:1d:e2:98:8f:dc:bc:7d:3e:13:bc:76:02:dc:e6:80:
         1b:8b:7d:6a:63:29:4a:b4:39:9c:80:77:97:9d:c2:92:5e:6f:
         b0:93:52:95:b8:3b:f1:89:6d:2e:96:b2:63:b5:4c:df:b4:82:
         eb:77:09:62:c2:6e:f0:da:33:e8:f5:bd:37:df:4c:45:79:be:
         28:29:5e:97:60:cc:53:45:ba:75:98:b7:8d:d0:53:61:94:e9:
         a4:3b:9a:f4:3e:5f:83:de:99:b2:78:15:8d:ec:c4:75:ee:f9:
         98:b4:b4:78:9e:e4:e6:cd:2c:77:fa:dd:9d:45:06:d4:a4:ca:
         f8:e4:ff:77:7d:c4:e9:af:67:e9:c5:6e:63:95:d9:05:78:1d:
         89:dc:1a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:24:15 2025 by rpki-client