Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/3230302e33392e3134342e302f32332d3233203d3e20323730373538.roa
File:                     3230302e33392e3134342e302f32332d3233203d3e20323730373538.roa (raw, json)
Hash identifier:          byp4m7GwzFtXizKNIB10Y6S2W7hHiT2ASKgfSExDmqg=
Subject key identifier:   54:AF:18:08:28:A3:B6:64:09:01:1B:61:FC:D3:2B:B2:93:FA:23:EA
Certificate issuer:       /CN=687A6048EF56F775209873731BED7BB7E087AB69
Certificate serial:       68783F33FFB34CB3AD2356AF59853008D6542F4F
Authority key identifier: 68:7A:60:48:EF:56:F7:75:20:98:73:73:1B:ED:7B:B7:E0:87:AB:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687A6048EF56F775209873731BED7BB7E087AB69.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/3230302e33392e3134342e302f32332d3233203d3e20323730373538.roa
Signing time:             Wed 15 Oct 2025 15:48:06 +0000
ROA not before:           Wed 15 Oct 2025 15:43:06 +0000
ROA not after:            Wed 14 Oct 2026 15:48:06 +0000
asID:                     270758
IP address blocks:        200.39.144.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/687A6048EF56F775209873731BED7BB7E087AB69.crl
                          rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/687A6048EF56F775209873731BED7BB7E087AB69.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687A6048EF56F775209873731BED7BB7E087AB69.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 08:32:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:78:3f:33:ff:b3:4c:b3:ad:23:56:af:59:85:30:08:d6:54:2f:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=687A6048EF56F775209873731BED7BB7E087AB69
        Validity
            Not Before: Oct 15 15:43:06 2025 GMT
            Not After : Oct 14 15:48:06 2026 GMT
        Subject: CN=54AF180828A3B66409011B61FCD32BB293FA23EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:20:c6:23:d4:ef:5e:1c:35:03:e1:c6:3b:9e:
                    c0:4c:20:bc:70:59:3b:35:fe:27:67:81:74:c2:cd:
                    fd:81:d0:4e:89:a6:8f:b5:64:86:a4:1d:35:b5:5c:
                    20:ac:f5:7b:85:82:ad:7e:7e:0b:13:d2:55:e6:e7:
                    45:b3:09:8e:4f:98:89:96:38:2d:52:65:6a:1f:c7:
                    0a:26:70:47:02:19:45:6c:a1:d1:4f:00:6a:50:c6:
                    26:6c:0a:14:dd:b4:49:6c:a8:14:3a:90:f4:5e:a7:
                    8f:ea:6a:78:68:53:7b:fb:5f:8d:e1:d7:ae:05:9a:
                    3c:46:12:2c:b1:7c:b9:08:82:d8:4b:3e:22:46:51:
                    ba:8c:e0:40:3c:56:ad:6c:cf:21:85:87:26:17:86:
                    3d:1e:ba:2e:e3:de:72:89:8c:b8:42:cf:22:ae:dd:
                    36:94:83:31:3e:12:aa:0d:76:9e:ce:83:4d:1c:1a:
                    a3:9f:bc:da:9a:f1:7d:d9:02:01:a0:a2:78:62:a8:
                    33:3b:0e:8c:89:cd:ad:53:6d:4f:4c:cb:4f:34:dd:
                    c9:11:e8:73:a9:44:4e:0a:37:64:fe:f5:4a:f5:94:
                    a8:36:a7:07:32:5b:0f:f6:08:ec:d2:d1:b6:b9:3c:
                    9c:7f:22:da:0d:2c:1f:48:99:b2:48:50:8b:d7:3d:
                    02:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:AF:18:08:28:A3:B6:64:09:01:1B:61:FC:D3:2B:B2:93:FA:23:EA
            X509v3 Authority Key Identifier:
                keyid:68:7A:60:48:EF:56:F7:75:20:98:73:73:1B:ED:7B:B7:E0:87:AB:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/687A6048EF56F775209873731BED7BB7E087AB69.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687A6048EF56F775209873731BED7BB7E087AB69.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/3230302e33392e3134342e302f32332d3233203d3e20323730373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:c5:fa:ff:8c:b7:bf:09:a3:2d:f4:44:38:28:ee:b2:a0:33:
         10:0d:fc:e7:b6:18:05:1b:39:92:8c:0d:a4:fb:85:53:9f:37:
         83:97:d7:6b:2d:9b:ba:f6:7f:7a:56:5a:e1:73:1c:35:38:2b:
         39:62:8a:f2:10:4b:79:04:0a:ea:ae:e5:58:53:ed:6d:fe:27:
         78:c7:60:41:b6:67:30:a4:15:a0:58:82:61:a8:99:2a:47:a1:
         1a:3d:11:5b:c0:cc:97:08:a6:87:2f:ae:9f:59:c1:e7:1e:e3:
         90:f6:a4:6a:8a:f6:77:6a:7e:d8:c6:5e:fa:12:fd:a9:cf:e1:
         78:a3:35:2d:f6:1c:05:65:94:54:83:1c:5f:f9:e0:a1:56:1f:
         50:8e:c8:e7:4f:92:af:6c:7e:e7:8f:91:f9:b6:16:fc:82:55:
         7c:f7:dd:6f:8b:60:f7:a0:3b:b5:f8:6d:fc:fd:4c:16:62:83:
         96:16:de:cd:b8:01:05:a1:22:bc:98:58:98:67:2b:04:3c:bb:
         78:30:2c:c0:20:60:de:95:8f:04:ee:90:52:cd:1a:8c:e9:fd:
         a9:c7:87:36:f7:fa:10:1e:e5:a6:6f:dc:89:d8:5f:ed:d6:a9:
         76:00:39:61:e8:c9:4f:86:54:86:ec:a9:80:3c:10:a3:cb:dc:
         97:7e:b0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:23:28 2025 by rpki-client