Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/3230302e342e3130392e302f32342d3234203d3e20323731343739.roa
File:                     3230302e342e3130392e302f32342d3234203d3e20323731343739.roa (raw, json)
Hash identifier:          LB47s/AwaAHARNlDiQH8q5tyS8bn+gCgtLFtGMWnDVQ=
Subject key identifier:   79:94:FB:F8:16:42:0F:14:9C:C9:C3:87:36:46:28:80:C1:AD:47:D0
Certificate issuer:       /CN=5CFBEAE8ED6B099801F3BCC4847C1CFB3FE609DF
Certificate serial:       56D12114B0C8414865A742C3900B3C9F2288B4DB
Authority key identifier: 5C:FB:EA:E8:ED:6B:09:98:01:F3:BC:C4:84:7C:1C:FB:3F:E6:09:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CFBEAE8ED6B099801F3BCC4847C1CFB3FE609DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/3230302e342e3130392e302f32342d3234203d3e20323731343739.roa
Signing time:             Fri 17 Oct 2025 17:43:41 +0000
ROA not before:           Fri 17 Oct 2025 17:38:41 +0000
ROA not after:            Fri 16 Oct 2026 17:43:41 +0000
asID:                     271479
IP address blocks:        200.4.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/5CFBEAE8ED6B099801F3BCC4847C1CFB3FE609DF.crl
                          rsync://rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/5CFBEAE8ED6B099801F3BCC4847C1CFB3FE609DF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CFBEAE8ED6B099801F3BCC4847C1CFB3FE609DF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 05:22:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:d1:21:14:b0:c8:41:48:65:a7:42:c3:90:0b:3c:9f:22:88:b4:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CFBEAE8ED6B099801F3BCC4847C1CFB3FE609DF
        Validity
            Not Before: Oct 17 17:38:41 2025 GMT
            Not After : Oct 16 17:43:41 2026 GMT
        Subject: CN=7994FBF816420F149CC9C38736462880C1AD47D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1d:cb:bb:9f:05:d6:d9:d2:ac:7b:b6:f4:bc:
                    01:bb:d2:b0:75:40:24:e7:aa:98:e8:c0:bc:82:84:
                    62:db:1c:c0:09:6a:19:28:72:3f:f3:dc:3c:a0:7b:
                    03:a9:2b:75:80:87:73:67:db:95:41:d0:71:60:3a:
                    51:18:f6:88:c4:4c:3d:a6:d4:42:5d:b3:73:36:63:
                    a5:ab:6d:6d:2c:13:a8:ce:bb:ec:34:cf:3f:b9:05:
                    91:d6:b5:02:71:8d:8b:cd:fa:e5:11:96:48:3a:f1:
                    98:16:4c:cf:5e:27:80:11:15:13:6e:c5:9a:35:ef:
                    65:91:04:2f:01:74:42:2d:e7:05:d5:a9:3b:d0:ef:
                    73:6c:35:86:d2:4a:d6:3c:c6:ac:a9:eb:51:c6:84:
                    13:01:34:fd:72:d3:7d:36:d8:d9:46:d7:94:90:a7:
                    8e:ed:1a:87:0f:fb:98:ff:24:75:17:ac:7d:bc:71:
                    78:8f:16:8e:d1:09:32:b0:a1:b7:ce:80:34:01:76:
                    3b:8f:21:ca:53:54:8c:3d:a7:6a:64:4d:0f:7c:79:
                    35:2b:6f:06:26:90:36:03:ff:2d:04:c2:5b:a0:e6:
                    e3:26:60:9d:93:c6:f9:fd:21:8c:73:3c:0c:5c:d6:
                    e3:c6:39:18:90:3f:7e:68:71:49:a5:77:58:57:c4:
                    f9:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:94:FB:F8:16:42:0F:14:9C:C9:C3:87:36:46:28:80:C1:AD:47:D0
            X509v3 Authority Key Identifier:
                keyid:5C:FB:EA:E8:ED:6B:09:98:01:F3:BC:C4:84:7C:1C:FB:3F:E6:09:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/5CFBEAE8ED6B099801F3BCC4847C1CFB3FE609DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CFBEAE8ED6B099801F3BCC4847C1CFB3FE609DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/3230302e342e3130392e302f32342d3234203d3e20323731343739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.4.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:d8:de:38:06:38:16:80:3e:7c:35:fa:66:7d:32:ca:5d:20:
         6f:0b:80:db:fc:e0:4a:ec:e1:d4:d7:3e:d7:a9:b6:4f:e6:da:
         c0:dd:92:b9:da:43:58:81:a7:77:a4:b5:ab:45:6a:5b:8a:b9:
         47:fa:a4:63:e5:81:9b:87:50:87:f4:4f:a4:98:3c:fc:45:e8:
         a3:92:44:9a:7c:19:4e:50:53:8f:9c:85:1a:13:66:3e:f5:63:
         e3:5c:b5:16:01:fd:94:93:45:d7:83:c7:9a:46:2c:dc:40:c9:
         5b:82:fb:e9:9f:69:3a:87:24:4f:d7:e7:43:cd:cb:1b:f1:f3:
         3b:b1:e2:3e:1f:2f:1b:4a:e1:a5:5f:32:d6:af:fd:e3:de:e1:
         4f:71:5c:b1:9e:c8:2c:e1:25:37:6d:ba:e4:de:35:5c:d0:d1:
         88:08:a9:60:1d:29:a3:d0:3a:9a:6c:f7:2c:d5:bc:7b:ed:7b:
         fe:dc:6d:f9:33:c4:11:89:fe:08:ec:0a:84:3a:b7:11:0d:ac:
         df:4e:de:dd:78:bf:49:a8:6b:12:f6:6f:eb:7e:58:82:33:f2:
         fe:ee:2c:b0:11:89:15:16:ab:c7:a5:ed:f6:04:06:ca:8c:c7:
         f5:d1:d5:48:db:56:58:b0:e5:93:e8:0d:ed:9f:2c:93:93:d4:
         fd:26:fd:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:04:14 2025 by rpki-client