Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/3230302e3134352e302e302f31362d3234203d3e203533313636.roa
File:                     3230302e3134352e302e302f31362d3234203d3e203533313636.roa (raw, json)
Hash identifier:          +0a+WonyMKVwYjssNSZDN1qhUOl1TAIwzXcZ5e4MiEY=
Subject key identifier:   AF:59:5D:91:C2:3E:75:9C:A7:31:F8:58:D0:06:C1:AC:F5:83:16:B2
Certificate issuer:       /CN=725BCF70C08F4B2744E301141EF06513A96F28D6
Certificate serial:       5F4DF477F216463830675F3CA39989F8C0AFA19F
Authority key identifier: 72:5B:CF:70:C0:8F:4B:27:44:E3:01:14:1E:F0:65:13:A9:6F:28:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/725BCF70C08F4B2744E301141EF06513A96F28D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/3230302e3134352e302e302f31362d3234203d3e203533313636.roa
Signing time:             Tue 09 Sep 2025 14:17:28 +0000
ROA not before:           Tue 09 Sep 2025 14:12:28 +0000
ROA not after:            Tue 08 Sep 2026 14:17:28 +0000
asID:                     53166
IP address blocks:        200.145.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/725BCF70C08F4B2744E301141EF06513A96F28D6.crl
                          rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/725BCF70C08F4B2744E301141EF06513A96F28D6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/725BCF70C08F4B2744E301141EF06513A96F28D6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 02:48:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:4d:f4:77:f2:16:46:38:30:67:5f:3c:a3:99:89:f8:c0:af:a1:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=725BCF70C08F4B2744E301141EF06513A96F28D6
        Validity
            Not Before: Sep  9 14:12:28 2025 GMT
            Not After : Sep  8 14:17:28 2026 GMT
        Subject: CN=AF595D91C23E759CA731F858D006C1ACF58316B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f9:79:10:a3:e1:15:7c:00:71:a1:ef:c0:d8:
                    1a:3b:2a:eb:b3:af:05:b9:a4:f0:6e:5b:66:dd:16:
                    a4:d2:45:95:88:44:fc:38:c5:1f:92:bd:c6:c7:f4:
                    13:12:1e:8b:12:6d:aa:7d:50:65:e8:ff:7b:cc:b0:
                    91:a8:c4:6b:73:fa:79:8e:55:3a:72:6a:f2:3a:28:
                    98:df:58:73:40:e1:72:9e:c9:e2:7f:b7:fd:66:8b:
                    71:bf:32:9c:c4:d5:7b:a2:d1:14:85:19:42:ec:87:
                    84:f1:1a:8e:51:8a:97:e8:92:fd:5e:f3:9c:48:d5:
                    bf:81:fd:76:37:ef:5f:e1:0f:9a:3a:00:50:30:cb:
                    d1:59:6d:20:eb:f7:2d:a6:39:59:8a:3e:11:38:e4:
                    85:35:e2:32:73:d9:92:7d:ea:32:13:cb:5e:76:29:
                    e6:c0:d8:22:88:57:9a:56:93:c8:fc:79:ca:39:e4:
                    8c:52:7f:e5:93:b2:b3:f9:90:42:10:ab:f7:2b:29:
                    09:e8:f6:eb:1f:1c:1c:55:7b:52:90:13:b1:46:f1:
                    8d:4d:0b:40:46:2e:36:55:ff:ff:30:83:4f:fe:e4:
                    ba:9f:cd:71:2a:96:6a:da:d1:9c:75:ae:c8:fa:6a:
                    57:b3:50:85:db:2c:06:c1:7f:09:da:ed:b5:93:b9:
                    1d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:59:5D:91:C2:3E:75:9C:A7:31:F8:58:D0:06:C1:AC:F5:83:16:B2
            X509v3 Authority Key Identifier:
                keyid:72:5B:CF:70:C0:8F:4B:27:44:E3:01:14:1E:F0:65:13:A9:6F:28:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/725BCF70C08F4B2744E301141EF06513A96F28D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/725BCF70C08F4B2744E301141EF06513A96F28D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/3230302e3134352e302e302f31362d3234203d3e203533313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.145.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6f:d7:2a:7a:5f:fc:f4:fe:b5:69:f5:4c:6c:e9:df:9a:2e:46:
         f7:a2:bb:a7:c6:74:64:2e:30:61:d0:a8:94:d2:ad:91:7e:0d:
         fd:c2:17:a1:3f:ee:c6:7b:d5:3a:c8:e7:d3:73:e3:f3:09:aa:
         1e:ee:49:54:23:94:7d:ee:b9:7e:5d:c3:5c:0f:e6:83:ae:ea:
         f4:b6:f8:3d:a7:51:c3:22:16:a3:64:4d:55:fa:05:a1:78:19:
         83:bd:d2:00:57:ad:a5:f7:b2:93:5b:c5:77:27:39:cd:57:15:
         06:47:74:06:f5:b6:b4:e9:46:f3:4c:11:71:9c:26:8a:45:0b:
         5c:01:07:4e:88:db:3c:d0:80:cd:8c:c5:18:59:c0:3d:d0:10:
         bd:4c:13:f4:5e:e2:8e:f4:33:d5:3c:56:91:0a:c4:e6:f6:d0:
         69:d8:9f:bf:3b:ef:2c:d9:fe:ad:22:23:fc:1c:ea:b5:13:c8:
         5f:85:1e:1b:a0:55:10:af:3f:64:98:65:82:16:cd:1f:42:bb:
         87:65:e0:94:c8:15:3b:bc:99:67:c0:b0:00:4c:e3:0b:e1:8b:
         4b:e3:b5:5b:2a:01:30:b0:89:41:7e:e5:6c:3d:27:69:d4:4e:
         a3:c3:65:4a:93:b9:e4:c9:5d:e7:3c:52:3d:1a:ba:4e:e4:eb:
         af:85:09:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:00:54 2025 by rpki-client