Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/3230312e3231362e39302e302f32332d3233203d3e20323731373236.roa
File:                     3230312e3231362e39302e302f32332d3233203d3e20323731373236.roa (raw, json)
Hash identifier:          s+I5J+twM+tGKkqZeAnLBo4C5tqnaSE87WWkxc+yu6w=
Subject key identifier:   83:FA:2D:50:C3:79:02:DC:C3:4D:C7:7A:1A:62:11:58:68:EE:3C:21
Certificate issuer:       /CN=E4A60880B8D4EC0024322D87A27CBCBDC2192A65
Certificate serial:       7311EA85D06A90CA5CE228DE0F4FE5869BA2855E
Authority key identifier: E4:A6:08:80:B8:D4:EC:00:24:32:2D:87:A2:7C:BC:BD:C2:19:2A:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/3230312e3231362e39302e302f32332d3233203d3e20323731373236.roa
Signing time:             Fri 27 Jun 2025 18:00:00 +0000
ROA not before:           Fri 27 Jun 2025 17:55:00 +0000
ROA not after:            Fri 26 Jun 2026 18:00:00 +0000
asID:                     271726
IP address blocks:        201.216.90.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.crl
                          rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 23:18:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:11:ea:85:d0:6a:90:ca:5c:e2:28:de:0f:4f:e5:86:9b:a2:85:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4A60880B8D4EC0024322D87A27CBCBDC2192A65
        Validity
            Not Before: Jun 27 17:55:00 2025 GMT
            Not After : Jun 26 18:00:00 2026 GMT
        Subject: CN=83FA2D50C37902DCC34DC77A1A62115868EE3C21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9f:95:58:87:ab:c2:f6:4e:ce:5c:bf:34:a7:
                    5f:1c:09:17:97:4b:55:36:f6:b5:9f:8c:1c:e7:b5:
                    0e:d3:e3:85:cc:f2:1d:63:a3:c2:ad:12:c0:a8:17:
                    d4:76:ae:77:83:0f:17:c7:61:3a:61:3a:b8:be:36:
                    86:5f:5e:b1:19:e4:ce:4d:7a:ac:84:3b:72:e2:f2:
                    b5:b9:33:b6:db:bd:08:13:d2:92:10:7a:e9:21:19:
                    35:20:8e:96:38:9a:5e:7b:0f:7b:11:42:bc:ae:22:
                    89:11:89:26:eb:89:4a:aa:df:98:04:30:20:ec:6e:
                    5b:e2:c1:57:17:8b:57:d3:46:f4:20:16:b7:a5:91:
                    74:27:de:cf:3b:a7:26:e9:c7:da:e0:26:d1:c5:7f:
                    d0:f8:14:ca:e9:03:55:2d:99:3f:d2:56:8c:b4:c6:
                    3a:d7:c0:f8:96:ee:63:3d:3b:8d:b1:b5:b7:14:b6:
                    99:55:9c:69:38:04:00:bf:3e:6d:3f:e9:79:4c:a7:
                    5b:c8:46:a5:aa:21:bb:77:f6:b8:08:85:1d:6b:50:
                    89:43:15:63:67:ba:0b:1b:59:9d:bb:3b:0a:68:07:
                    81:6e:d2:62:0d:b1:93:0e:cc:8f:e2:6d:9d:47:4d:
                    c1:e5:dd:18:1f:93:82:ad:0e:b4:0f:f7:b2:2f:c7:
                    4a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:FA:2D:50:C3:79:02:DC:C3:4D:C7:7A:1A:62:11:58:68:EE:3C:21
            X509v3 Authority Key Identifier:
                keyid:E4:A6:08:80:B8:D4:EC:00:24:32:2D:87:A2:7C:BC:BD:C2:19:2A:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/3230312e3231362e39302e302f32332d3233203d3e20323731373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.216.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:09:8f:7c:77:b6:0f:a5:d3:cb:43:9d:8b:1e:a1:52:84:34:
         a3:ba:71:d5:ef:e8:2b:fc:3a:3e:35:c7:c8:b3:fc:07:4c:71:
         e0:00:20:5d:8b:c0:28:1a:76:e9:16:07:92:65:b6:2c:68:b8:
         cc:ea:4c:fc:d3:18:30:35:16:2d:fe:1f:fd:e1:a9:d9:3e:ec:
         13:54:d2:59:06:b8:45:aa:0a:0c:b0:8a:88:8b:51:8e:9c:cb:
         b3:6d:74:96:e1:f1:65:2a:87:3f:c4:20:d4:91:11:10:a7:7e:
         a8:44:b3:52:4b:3a:25:06:3f:3c:ca:bb:92:bf:f7:b1:87:06:
         cb:f0:92:38:ef:e2:f4:97:0f:7c:6d:c7:22:c9:b7:03:4f:6a:
         e5:92:3b:1b:c7:7f:5f:78:6d:8c:1e:de:55:e2:d3:e9:78:dc:
         df:d1:17:0f:24:f1:c2:6e:0f:be:c5:cc:5b:49:9f:bf:a3:06:
         d9:8e:89:3f:1e:95:7c:43:30:93:93:29:e6:62:0b:ca:04:a9:
         f1:9e:2c:a2:4a:1f:ee:ff:e9:d9:a4:2c:fc:18:3c:70:3d:df:
         86:99:80:99:27:a6:c7:76:97:d5:57:80:13:fe:ca:18:92:19:
         9d:62:81:23:0f:06:73:49:7b:55:63:fd:61:43:e5:df:92:f8:
         38:88:f6:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 06:48:07 2025 by rpki-client