Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ea1T4Yn9kYebJmSgF6uTnMwQ9kGNgfPXRqbESgr6Div6/0/3230302e3231392e32382e302f32322d3332203d3e20323730383236.roa
File:                     3230302e3231392e32382e302f32322d3332203d3e20323730383236.roa (raw, json)
Hash identifier:          hw+YTABSbPeWCR8UTlP54KeiMFs8MqldHLFZApPfYG4=
Subject key identifier:   25:71:0F:8D:DA:8F:63:EB:86:A1:02:3D:9C:29:3A:E0:77:EB:F0:DD
Certificate issuer:       /CN=615BBE24D38E2F3DEF05DE9B7A3FDAAFCBD3B67E
Certificate serial:       7B8C615F2967A3319F65E3DAEDDA856FAC85E894
Authority key identifier: 61:5B:BE:24:D3:8E:2F:3D:EF:05:DE:9B:7A:3F:DA:AF:CB:D3:B6:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/615BBE24D38E2F3DEF05DE9B7A3FDAAFCBD3B67E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ea1T4Yn9kYebJmSgF6uTnMwQ9kGNgfPXRqbESgr6Div6/0/3230302e3231392e32382e302f32322d3332203d3e20323730383236.roa
Signing time:             Fri 20 Jun 2025 21:03:55 +0000
ROA not before:           Fri 20 Jun 2025 20:58:55 +0000
ROA not after:            Fri 19 Jun 2026 21:03:55 +0000
asID:                     270826
IP address blocks:        200.219.28.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ea1T4Yn9kYebJmSgF6uTnMwQ9kGNgfPXRqbESgr6Div6/0/615BBE24D38E2F3DEF05DE9B7A3FDAAFCBD3B67E.crl
                          rsync://rpki-repo.registro.br/repo/Ea1T4Yn9kYebJmSgF6uTnMwQ9kGNgfPXRqbESgr6Div6/0/615BBE24D38E2F3DEF05DE9B7A3FDAAFCBD3B67E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/615BBE24D38E2F3DEF05DE9B7A3FDAAFCBD3B67E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 17:13:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:8c:61:5f:29:67:a3:31:9f:65:e3:da:ed:da:85:6f:ac:85:e8:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615BBE24D38E2F3DEF05DE9B7A3FDAAFCBD3B67E
        Validity
            Not Before: Jun 20 20:58:55 2025 GMT
            Not After : Jun 19 21:03:55 2026 GMT
        Subject: CN=25710F8DDA8F63EB86A1023D9C293AE077EBF0DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:6a:e2:39:42:5b:f2:b2:79:6d:48:5c:46:1e:
                    10:b6:84:31:68:79:ae:5e:e8:03:20:db:6a:b8:40:
                    bd:6d:f2:22:ee:76:2c:58:b2:3f:c8:d3:b3:32:60:
                    7a:a8:cd:11:f7:2c:8b:3c:a0:ce:58:6a:7b:5e:8a:
                    df:ca:24:92:d8:ae:6e:56:8f:d2:41:75:b9:01:d1:
                    ac:6a:d4:1b:2c:04:de:42:2f:fa:d5:52:be:a1:f9:
                    6d:f9:2a:e0:b6:2e:76:ed:1c:b7:e3:97:0e:d7:11:
                    35:f5:75:a3:4f:bd:d9:16:85:53:a6:b3:17:00:7c:
                    e3:57:ec:55:d4:bb:76:9a:db:48:5e:31:ca:10:e0:
                    01:9d:66:11:fe:05:4e:0d:30:a6:fa:7b:68:4c:dd:
                    60:a8:4b:ba:6a:a6:3c:cc:65:74:1b:04:43:b6:9a:
                    db:84:88:7d:86:0b:46:79:c6:78:e3:bf:e3:2d:ec:
                    3a:3a:8a:7c:33:b6:7e:94:4c:68:93:a8:b4:d7:ac:
                    32:ab:e6:de:37:c6:ef:61:cb:0f:3e:07:d6:cd:86:
                    ac:d9:f8:9e:5d:9d:66:11:cf:53:13:39:4b:a6:3e:
                    4e:ef:27:7b:e8:d1:2a:68:83:23:79:49:92:83:fb:
                    5d:2e:9b:ac:ee:88:d8:9d:ca:55:3f:dc:57:7f:29:
                    1d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:71:0F:8D:DA:8F:63:EB:86:A1:02:3D:9C:29:3A:E0:77:EB:F0:DD
            X509v3 Authority Key Identifier:
                keyid:61:5B:BE:24:D3:8E:2F:3D:EF:05:DE:9B:7A:3F:DA:AF:CB:D3:B6:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ea1T4Yn9kYebJmSgF6uTnMwQ9kGNgfPXRqbESgr6Div6/0/615BBE24D38E2F3DEF05DE9B7A3FDAAFCBD3B67E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/615BBE24D38E2F3DEF05DE9B7A3FDAAFCBD3B67E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ea1T4Yn9kYebJmSgF6uTnMwQ9kGNgfPXRqbESgr6Div6/0/3230302e3231392e32382e302f32322d3332203d3e20323730383236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:5b:58:44:cd:75:15:1b:c8:a8:52:a5:39:4a:4d:b3:5b:c7:
         6e:13:b4:f4:b9:6b:6e:97:1a:b7:95:d0:55:6e:29:c4:df:c4:
         37:6e:b7:0f:6a:a0:9d:28:e4:e2:f5:29:6f:d8:a5:09:3d:63:
         f7:b1:1e:21:5c:a9:ba:9b:7f:3d:02:e2:a8:88:0c:40:93:20:
         f8:2a:d1:79:7f:fe:d1:c5:e9:74:11:b5:8d:3a:b0:43:36:c8:
         53:9b:19:f8:4a:ce:df:db:f3:1b:17:56:6b:d1:6f:71:79:fa:
         5d:77:33:12:ae:d4:d8:f7:fb:23:a8:b3:50:7d:66:66:d2:8a:
         9e:cd:06:6f:5d:bc:f7:e0:17:41:f3:d1:52:ff:8d:07:1e:8c:
         3b:17:b1:bb:f8:ab:4c:06:a0:aa:bd:a2:94:0e:7d:1e:96:7d:
         cb:90:77:d2:66:fa:f6:5d:29:a5:3b:9e:08:89:01:45:2c:64:
         01:eb:fe:3b:fc:ee:70:d1:e5:75:1d:99:67:bc:27:7c:76:7b:
         33:36:19:c4:1b:48:fd:6e:37:b1:d0:37:7c:09:09:6c:81:7f:
         0f:59:b3:69:57:9f:bd:d2:69:44:55:57:e8:ff:42:54:fc:76:
         2c:c8:56:37:a3:9f:cb:8a:01:90:56:4c:47:56:c2:bc:d6:d0:
         3c:55:e5:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 07:58:43 2025 by rpki-client