Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/3230302e3135322e3138382e302f32342d3234203d3e203238353839.roa
File:                     3230302e3135322e3138382e302f32342d3234203d3e203238353839.roa (raw, json)
Hash identifier:          97Hqw/Hjy6vpViUGKG6oux7vmpj8k8RgQ7Zn6dKlD+8=
Subject key identifier:   FF:A3:15:7A:EC:9C:75:6C:D0:F9:CB:52:83:B2:9D:81:5A:E9:37:10
Certificate issuer:       /CN=ABEDCE5CA2A73752E848B305E7DCB48075860E71
Certificate serial:       76A37330CAE71DBB7A811BB969C3900A9A817E8D
Authority key identifier: AB:ED:CE:5C:A2:A7:37:52:E8:48:B3:05:E7:DC:B4:80:75:86:0E:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABEDCE5CA2A73752E848B305E7DCB48075860E71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/3230302e3135322e3138382e302f32342d3234203d3e203238353839.roa
Signing time:             Fri 27 Jun 2025 20:39:01 +0000
ROA not before:           Fri 27 Jun 2025 20:34:01 +0000
ROA not after:            Fri 26 Jun 2026 20:39:01 +0000
asID:                     28589
IP address blocks:        200.152.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/ABEDCE5CA2A73752E848B305E7DCB48075860E71.crl
                          rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/ABEDCE5CA2A73752E848B305E7DCB48075860E71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABEDCE5CA2A73752E848B305E7DCB48075860E71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 07:10:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:a3:73:30:ca:e7:1d:bb:7a:81:1b:b9:69:c3:90:0a:9a:81:7e:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABEDCE5CA2A73752E848B305E7DCB48075860E71
        Validity
            Not Before: Jun 27 20:34:01 2025 GMT
            Not After : Jun 26 20:39:01 2026 GMT
        Subject: CN=FFA3157AEC9C756CD0F9CB5283B29D815AE93710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a9:d9:61:c5:0c:6d:45:00:e6:23:6e:86:9f:
                    12:cd:d6:64:07:bc:6b:3e:35:13:ad:bb:17:1e:38:
                    92:85:67:19:35:f4:9c:74:6f:bd:7b:ee:84:22:80:
                    ac:c7:70:cb:ba:2a:c2:c2:11:e7:b5:d5:51:2d:7e:
                    89:96:53:cc:6e:73:14:a6:64:27:f5:12:7d:a9:aa:
                    00:3b:c2:ea:b2:64:da:a8:aa:5a:18:4c:24:f6:b7:
                    a7:fe:54:cd:b8:df:ab:13:41:b5:a0:e6:8b:94:54:
                    8d:5f:8f:40:6c:c1:af:60:46:8c:2e:bd:25:69:4a:
                    6a:d4:0d:53:3b:dd:2b:ff:18:5c:55:e2:30:82:81:
                    dd:e1:e8:d0:22:ea:13:b8:76:f4:b3:8e:b3:e0:0b:
                    46:89:87:14:8c:a2:11:0f:34:c6:57:42:26:0e:6f:
                    00:25:f8:0d:55:82:aa:46:b1:b7:b8:e7:54:10:6e:
                    05:84:ed:ee:40:03:2b:46:c2:d8:f3:59:6f:2e:cd:
                    ad:83:e9:41:0c:8d:f1:86:36:5b:b0:89:6d:3a:ab:
                    57:dc:d1:50:2d:da:80:8a:a6:46:aa:10:0d:87:ce:
                    61:be:a0:1b:bb:4d:ec:c7:a4:14:15:5f:16:d6:c8:
                    2a:7a:d1:86:df:7d:66:10:57:81:a5:24:e8:25:99:
                    50:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:A3:15:7A:EC:9C:75:6C:D0:F9:CB:52:83:B2:9D:81:5A:E9:37:10
            X509v3 Authority Key Identifier:
                keyid:AB:ED:CE:5C:A2:A7:37:52:E8:48:B3:05:E7:DC:B4:80:75:86:0E:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/ABEDCE5CA2A73752E848B305E7DCB48075860E71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABEDCE5CA2A73752E848B305E7DCB48075860E71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/3230302e3135322e3138382e302f32342d3234203d3e203238353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:55:81:58:dd:f5:18:6e:1f:45:cb:07:9e:bc:81:df:09:9c:
         fa:eb:1b:35:18:d5:93:3e:59:ba:c0:b9:62:19:9b:74:c1:7e:
         6b:d2:df:27:20:13:36:01:60:3b:b5:f0:e5:04:df:6d:a8:b5:
         ef:db:6c:5e:6f:ab:d7:e7:7f:d0:e4:b5:05:c7:79:8c:32:eb:
         fa:6d:c6:74:3d:a9:4f:ce:f0:b5:3a:43:8a:a7:41:58:f4:f5:
         88:6c:38:ee:59:e4:c7:30:7a:0c:b2:6a:b5:09:41:5d:96:4d:
         91:49:bc:ad:9e:1f:ab:38:c3:63:63:36:e6:cc:f0:0d:66:6c:
         e3:86:bc:ba:dc:c6:83:64:4c:18:42:59:98:43:1c:87:d1:f5:
         a5:01:4e:13:34:51:e8:e6:44:57:2c:01:56:22:16:e2:04:b3:
         c4:4c:fa:f7:66:65:97:d6:04:4c:23:c2:ea:0f:8a:23:95:8a:
         15:8f:1f:24:bd:ff:14:e3:a0:eb:6a:8e:92:99:ed:bd:9c:6f:
         76:e7:e5:2c:1d:8f:95:fb:a5:d9:52:e0:a2:31:41:a2:c9:9c:
         13:27:45:4e:c1:cb:ec:28:27:49:2e:d2:b4:97:98:a4:3f:c1:
         75:b3:29:86:9c:a8:b3:5d:48:4c:1a:30:73:b8:f6:58:e4:21:
         b6:d6:32:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:14:52 2025 by rpki-client