Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/3230302e342e3131302e302f32342d3234203d3e20323731343739.roa
File:                     3230302e342e3131302e302f32342d3234203d3e20323731343739.roa (raw, json)
Hash identifier:          r1/NaOReTMvEhjEoGJOv5z/q3B462OIXcXxcPmtxi2g=
Subject key identifier:   47:28:67:EE:F6:23:A1:1F:39:73:A6:16:DC:63:CD:A5:C3:98:9B:D3
Certificate issuer:       /CN=5CFBEAE8ED6B099801F3BCC4847C1CFB3FE609DF
Certificate serial:       440C06275C1BC01D9A665B0FCF4CC4AACDECF048
Authority key identifier: 5C:FB:EA:E8:ED:6B:09:98:01:F3:BC:C4:84:7C:1C:FB:3F:E6:09:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CFBEAE8ED6B099801F3BCC4847C1CFB3FE609DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/3230302e342e3131302e302f32342d3234203d3e20323731343739.roa
Signing time:             Fri 17 Oct 2025 17:43:37 +0000
ROA not before:           Fri 17 Oct 2025 17:38:37 +0000
ROA not after:            Fri 16 Oct 2026 17:43:37 +0000
asID:                     271479
IP address blocks:        200.4.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/5CFBEAE8ED6B099801F3BCC4847C1CFB3FE609DF.crl
                          rsync://rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/5CFBEAE8ED6B099801F3BCC4847C1CFB3FE609DF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CFBEAE8ED6B099801F3BCC4847C1CFB3FE609DF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 05:22:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:0c:06:27:5c:1b:c0:1d:9a:66:5b:0f:cf:4c:c4:aa:cd:ec:f0:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CFBEAE8ED6B099801F3BCC4847C1CFB3FE609DF
        Validity
            Not Before: Oct 17 17:38:37 2025 GMT
            Not After : Oct 16 17:43:37 2026 GMT
        Subject: CN=472867EEF623A11F3973A616DC63CDA5C3989BD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ec:86:7f:c0:c7:af:ef:3a:84:09:88:1e:bb:
                    37:f1:d5:69:1f:d1:22:f8:bd:4e:a5:a0:12:68:6e:
                    64:8e:e3:c2:2b:f5:59:97:70:b4:ce:9a:6e:0a:b9:
                    3f:20:7e:e7:25:d3:2f:0d:a7:0d:12:9c:50:33:91:
                    87:e1:a7:4e:eb:f7:3e:8e:93:58:14:b1:54:ef:e0:
                    25:f0:97:22:34:8c:92:a8:66:9a:dc:7f:93:eb:f9:
                    39:cb:60:2a:57:d7:96:6e:e9:5a:7a:d7:a6:fe:9f:
                    85:f6:00:6c:7e:82:2d:c8:80:2c:20:45:08:3c:a7:
                    9b:21:2e:16:31:49:dd:96:cd:29:37:50:39:b9:98:
                    1a:30:ce:21:9d:cf:87:7c:83:4d:56:5a:3a:bc:de:
                    c3:39:19:1a:39:9c:e4:bf:a5:6d:a6:5d:cb:b7:cc:
                    ed:a2:72:42:cc:a9:2e:0c:0c:e2:0a:e0:93:a8:4c:
                    9d:ff:14:fd:86:8d:80:c8:e6:24:4e:0e:88:98:e7:
                    81:89:69:2e:3f:ea:44:08:ab:bc:f3:6d:fa:9c:47:
                    3e:69:fa:91:4e:96:99:1c:b7:b8:31:50:22:7c:10:
                    50:18:09:43:f0:7d:13:c5:1c:eb:8d:c3:30:e8:d8:
                    c4:7f:70:50:7d:76:28:51:fa:88:b3:cb:ff:43:d2:
                    c2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:28:67:EE:F6:23:A1:1F:39:73:A6:16:DC:63:CD:A5:C3:98:9B:D3
            X509v3 Authority Key Identifier:
                keyid:5C:FB:EA:E8:ED:6B:09:98:01:F3:BC:C4:84:7C:1C:FB:3F:E6:09:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/5CFBEAE8ED6B099801F3BCC4847C1CFB3FE609DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CFBEAE8ED6B099801F3BCC4847C1CFB3FE609DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/3230302e342e3131302e302f32342d3234203d3e20323731343739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.4.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:38:32:9b:66:88:28:90:00:a2:b4:01:82:4f:6a:ca:82:ca:
         a9:fe:64:6e:36:b2:87:b2:e3:3a:61:8e:65:78:1e:ed:03:cd:
         f8:ab:56:30:44:ae:9f:92:3a:17:de:23:b3:eb:f6:08:99:f8:
         57:b6:a1:df:e3:0e:1a:68:67:63:84:b2:b8:da:c8:08:09:25:
         ae:bd:8e:ab:10:7a:a8:8b:d4:ef:be:1d:d3:a9:f4:16:44:0b:
         fd:f2:b3:f0:bf:2b:11:fb:42:75:6f:3c:cd:49:7a:c3:a5:d4:
         92:96:70:e6:d5:29:d0:f6:89:f8:90:20:ee:fe:a9:bd:77:03:
         2c:b8:14:93:6a:bb:46:88:75:ed:a8:e7:cd:e7:c9:39:94:d4:
         f1:ce:c0:04:b3:78:82:5f:6b:df:17:24:18:07:90:68:c4:52:
         e5:e3:ed:52:c9:01:c9:8f:2a:0a:3b:57:9c:20:0a:c5:7d:be:
         1d:ae:49:96:17:8b:3f:06:74:2e:55:f1:40:bc:fa:a7:94:93:
         48:3f:50:cb:00:95:90:3d:77:c1:06:41:c8:89:9b:99:f0:77:
         0f:25:71:1a:52:13:0e:04:8d:71:3c:18:3c:dc:66:d5:d6:2c:
         12:e8:e5:e8:47:59:a0:be:4e:77:5c:b1:1d:ed:27:f7:6c:0d:
         ab:a2:f8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:04:14 2025 by rpki-client