Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/3132382e3230312e34302e302f32332d3233203d3e20323636363531.roa
File:                     3132382e3230312e34302e302f32332d3233203d3e20323636363531.roa (raw, json)
Hash identifier:          o4JnUJZiVwQrp/eMZmZKR+MwefjKuhiH1badgAUEMho=
Subject key identifier:   91:4B:D9:0C:6F:AD:D9:D7:30:88:EC:3D:B0:45:DB:19:F6:45:EF:60
Certificate issuer:       /CN=652B30E6DC4E618B4E74D3B661B8AC39694AFF27
Certificate serial:       796C551D958EB90E34BC7C52B1CBC4A1ACCFFC1D
Authority key identifier: 65:2B:30:E6:DC:4E:61:8B:4E:74:D3:B6:61:B8:AC:39:69:4A:FF:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/3132382e3230312e34302e302f32332d3233203d3e20323636363531.roa
Signing time:             Thu 26 Jun 2025 18:20:07 +0000
ROA not before:           Thu 26 Jun 2025 18:15:07 +0000
ROA not after:            Thu 25 Jun 2026 18:20:07 +0000
asID:                     266651
IP address blocks:        128.201.40.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.crl
                          rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 02 Jul 2025 09:59:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:6c:55:1d:95:8e:b9:0e:34:bc:7c:52:b1:cb:c4:a1:ac:cf:fc:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=652B30E6DC4E618B4E74D3B661B8AC39694AFF27
        Validity
            Not Before: Jun 26 18:15:07 2025 GMT
            Not After : Jun 25 18:20:07 2026 GMT
        Subject: CN=914BD90C6FADD9D73088EC3DB045DB19F645EF60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3b:d3:fa:65:38:e0:36:68:82:c5:b1:10:2b:
                    14:ca:e9:21:a2:2c:1c:a9:80:12:94:d4:81:a2:b0:
                    e4:af:ea:ec:f6:d1:35:c7:ba:ef:00:56:a7:40:d9:
                    ed:81:da:08:ee:32:bd:57:6b:8e:7b:8a:dc:83:a2:
                    88:7a:05:50:79:88:77:bd:ad:c9:99:d1:ac:31:10:
                    7a:5e:7e:fd:69:dd:45:f9:72:58:67:37:df:4e:28:
                    6b:65:5e:58:db:8f:55:77:0d:2e:8c:64:ed:43:6d:
                    b5:7c:b8:68:e5:85:81:80:8c:ba:40:a0:41:27:e2:
                    3e:35:8c:df:c7:1b:2d:68:20:ae:71:19:ec:d9:08:
                    88:8f:61:ec:a0:92:19:26:83:91:7e:ee:41:52:d3:
                    a8:f7:22:64:73:aa:e7:3b:7e:8a:82:8e:45:94:60:
                    58:10:8c:fd:71:49:36:38:a1:86:dc:06:ac:2f:8f:
                    9b:bf:21:12:48:95:94:08:0a:cb:f9:0f:b9:85:78:
                    0e:e9:60:67:c9:d1:b8:6a:e3:59:c3:73:94:23:d5:
                    b6:c5:86:d6:cf:a1:28:eb:8e:b1:13:bd:11:c9:bc:
                    8d:1c:16:d1:89:45:52:30:6d:70:2f:6a:34:02:80:
                    b6:cb:b9:ee:e0:be:8a:2b:8a:17:24:cf:49:bd:06:
                    70:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:4B:D9:0C:6F:AD:D9:D7:30:88:EC:3D:B0:45:DB:19:F6:45:EF:60
            X509v3 Authority Key Identifier:
                keyid:65:2B:30:E6:DC:4E:61:8B:4E:74:D3:B6:61:B8:AC:39:69:4A:FF:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/3132382e3230312e34302e302f32332d3233203d3e20323636363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:ae:71:b7:14:99:3c:0d:08:f5:f9:b5:49:df:f6:6d:b8:5f:
         b5:0f:ba:74:7a:bd:42:4e:01:58:b6:9c:c1:13:2b:25:2e:15:
         6f:27:f9:37:5e:c5:9b:60:14:c9:da:b1:09:88:9c:be:fa:65:
         e0:8b:2a:7a:78:e8:ab:11:70:e2:26:5b:49:73:a1:a8:d9:ba:
         16:ae:22:61:7c:c4:88:4d:4e:53:12:af:57:47:d0:41:eb:30:
         05:8f:3c:4d:d6:8c:e9:a9:93:ca:bf:70:0c:d0:dd:67:4f:db:
         b7:36:2e:e9:b3:d1:1b:94:af:d5:28:f7:89:be:e2:d8:f9:74:
         9f:05:ec:29:b1:a6:73:81:c6:73:b8:0e:56:22:f5:4c:4d:90:
         d3:6e:b8:f2:48:d5:7b:ad:ba:59:79:92:4b:16:38:b2:d2:fb:
         f7:bd:a2:1c:bd:36:94:0a:5e:f2:00:b4:61:c6:f5:00:c8:8e:
         10:79:ef:26:89:64:11:c7:b2:6e:e0:76:14:69:e6:87:0e:fc:
         96:71:35:5b:f1:60:c2:e3:b5:ce:c9:12:4e:af:60:84:05:3c:
         18:34:21:97:81:58:da:9e:32:37:01:e7:e7:1c:9f:fc:20:64:
         5f:a4:40:c5:99:35:c6:01:82:c4:f8:63:4b:8a:69:f1:4f:6c:
         f3:f8:ef:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 13:29:43 2025 by rpki-client