Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyq5Pd5SHowmEwmqdN4ivBJTZBLv14yazRkWRq6BmzVe/0/3230302e35332e36382e302f32322d3332203d3e20323731333034.roa
File:                     3230302e35332e36382e302f32322d3332203d3e20323731333034.roa (raw, json)
Hash identifier:          ipAx9iitrr/4ZuYHWSVFbmfgqlg/jJy8oTAERql54FA=
Subject key identifier:   C2:06:3F:F8:CA:97:AE:D8:18:D2:4D:B4:90:5B:78:8C:55:C4:80:0B
Certificate issuer:       /CN=FB6D7199BFDFE92288F7B49F621FD09D2FF9FE89
Certificate serial:       478FC42988032C809A4276DABCE6D314E9B1F651
Authority key identifier: FB:6D:71:99:BF:DF:E9:22:88:F7:B4:9F:62:1F:D0:9D:2F:F9:FE:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB6D7199BFDFE92288F7B49F621FD09D2FF9FE89.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyq5Pd5SHowmEwmqdN4ivBJTZBLv14yazRkWRq6BmzVe/0/3230302e35332e36382e302f32322d3332203d3e20323731333034.roa
Signing time:             Thu 26 Jun 2025 18:26:10 +0000
ROA not before:           Thu 26 Jun 2025 18:21:10 +0000
ROA not after:            Thu 25 Jun 2026 18:26:10 +0000
asID:                     271304
IP address blocks:        200.53.68.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyq5Pd5SHowmEwmqdN4ivBJTZBLv14yazRkWRq6BmzVe/0/FB6D7199BFDFE92288F7B49F621FD09D2FF9FE89.crl
                          rsync://rpki-repo.registro.br/repo/Fyq5Pd5SHowmEwmqdN4ivBJTZBLv14yazRkWRq6BmzVe/0/FB6D7199BFDFE92288F7B49F621FD09D2FF9FE89.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB6D7199BFDFE92288F7B49F621FD09D2FF9FE89.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 18:22:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:8f:c4:29:88:03:2c:80:9a:42:76:da:bc:e6:d3:14:e9:b1:f6:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB6D7199BFDFE92288F7B49F621FD09D2FF9FE89
        Validity
            Not Before: Jun 26 18:21:10 2025 GMT
            Not After : Jun 25 18:26:10 2026 GMT
        Subject: CN=C2063FF8CA97AED818D24DB4905B788C55C4800B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b2:6b:cf:bf:85:ac:af:18:3c:be:8e:7c:17:
                    c4:4a:5e:47:81:33:d9:01:1b:1f:ae:c7:3d:a8:4e:
                    42:d8:a6:f5:52:7f:b2:a5:94:f9:01:90:92:ea:73:
                    fd:f6:5f:f8:0d:39:17:2a:9d:2c:3e:66:fc:48:1c:
                    bf:bf:8f:64:5c:26:7d:d0:97:6f:e6:3e:9f:22:63:
                    4d:4c:fb:53:fd:9e:9e:80:ac:5c:f3:89:17:bd:ab:
                    00:ad:aa:9e:55:c2:43:23:bb:7a:4d:e5:c0:b1:8a:
                    cf:60:e8:a6:0b:a4:78:59:f9:e3:bb:74:87:4c:a6:
                    69:c2:a1:1d:dd:b0:49:d1:36:25:91:bc:da:19:67:
                    d6:72:94:bd:cd:4d:ea:ff:0c:12:97:90:52:c0:00:
                    7e:3c:82:46:64:14:8d:f6:e3:24:2f:1a:e5:8d:3b:
                    1e:06:05:c6:ba:d8:36:32:e9:50:a0:c5:9f:f7:fb:
                    d9:8f:e4:bb:9c:1e:60:dd:33:e0:3d:06:30:76:91:
                    77:56:bc:19:97:cd:ae:20:da:a8:e2:02:dc:88:c2:
                    17:06:38:05:64:d7:10:b5:c9:3b:b7:9a:41:cd:0c:
                    b6:ce:f3:2e:2e:24:78:b4:39:73:7e:7c:52:33:c8:
                    a9:a4:4c:77:69:2c:44:66:1f:6e:24:98:01:7f:81:
                    e6:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:06:3F:F8:CA:97:AE:D8:18:D2:4D:B4:90:5B:78:8C:55:C4:80:0B
            X509v3 Authority Key Identifier:
                keyid:FB:6D:71:99:BF:DF:E9:22:88:F7:B4:9F:62:1F:D0:9D:2F:F9:FE:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyq5Pd5SHowmEwmqdN4ivBJTZBLv14yazRkWRq6BmzVe/0/FB6D7199BFDFE92288F7B49F621FD09D2FF9FE89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB6D7199BFDFE92288F7B49F621FD09D2FF9FE89.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyq5Pd5SHowmEwmqdN4ivBJTZBLv14yazRkWRq6BmzVe/0/3230302e35332e36382e302f32322d3332203d3e20323731333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:54:64:88:0f:5a:a9:c1:6b:b9:b6:32:c0:f6:72:76:68:e3:
         a4:dd:77:da:03:bd:e9:f1:78:77:84:9f:3f:0f:2b:5a:48:45:
         52:f6:41:7f:e3:2f:c7:91:29:fa:83:3f:67:68:7e:1b:41:f8:
         46:99:94:e6:4c:19:10:5c:4f:50:61:e8:de:86:ef:44:97:84:
         57:3e:b8:85:9f:15:ea:54:14:d9:60:4b:44:61:fb:df:9c:ee:
         38:23:1a:3c:8c:bd:bb:05:e0:72:6b:e4:1b:52:0d:dd:43:6f:
         cb:7a:15:a0:8e:cd:be:6f:39:80:5b:ee:77:24:a8:ec:bb:0b:
         a2:f9:68:56:d6:ff:f9:e9:f2:88:4d:3d:23:06:9b:b2:ab:65:
         95:88:77:45:5d:fa:74:d4:cd:b8:bd:ad:9a:c4:2e:59:1c:ca:
         d6:09:59:28:29:7e:4c:f0:f6:dd:5b:ee:d7:39:5f:e4:0d:14:
         84:48:60:05:8a:80:da:60:07:5c:40:9e:03:65:c3:88:40:99:
         3f:b9:5f:15:8e:d2:c3:12:11:5e:83:eb:32:96:dc:ba:59:55:
         7c:83:68:ff:cc:e1:1e:26:de:97:c0:40:32:74:2f:a8:83:0f:
         a3:f5:63:32:ad:70:ad:00:c2:ca:f6:fc:93:3d:11:d3:4d:14:
         8c:89:af:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 19:16:22 2025 by rpki-client