Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/3230302e33342e3231362e302f32342d3234203d3e203631363839.roa
File:                     3230302e33342e3231362e302f32342d3234203d3e203631363839.roa (raw, json)
Hash identifier:          qF5e/j43vFVU0Rakjs77MNMnu63OVmULX8ahRcW9xQ0=
Subject key identifier:   70:21:4B:63:6A:B6:5C:10:B2:1F:D1:6B:08:40:10:4A:71:9E:F2:6B
Certificate issuer:       /CN=10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8
Certificate serial:       0A1365DA33E603F53E1D7AA663D9CCB7FF6429B5
Authority key identifier: 10:AE:8C:BC:A0:92:BB:DA:E3:C0:6D:F9:94:1E:4C:00:AB:06:56:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/3230302e33342e3231362e302f32342d3234203d3e203631363839.roa
Signing time:             Fri 25 Jul 2025 20:48:50 +0000
ROA not before:           Fri 25 Jul 2025 20:43:50 +0000
ROA not after:            Fri 24 Jul 2026 20:48:50 +0000
asID:                     61689
IP address blocks:        200.34.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.crl
                          rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 19:37:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:13:65:da:33:e6:03:f5:3e:1d:7a:a6:63:d9:cc:b7:ff:64:29:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8
        Validity
            Not Before: Jul 25 20:43:50 2025 GMT
            Not After : Jul 24 20:48:50 2026 GMT
        Subject: CN=70214B636AB65C10B21FD16B0840104A719EF26B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e5:08:05:42:55:93:73:60:f1:c2:92:9a:12:
                    92:e9:b0:5e:22:0a:91:93:17:01:42:dd:94:98:b1:
                    c4:d8:a2:64:61:56:e7:3b:50:45:ad:61:86:e9:2a:
                    71:d8:7a:9d:57:b9:1e:19:49:77:7c:72:74:a1:8d:
                    7e:3e:fc:b9:5c:46:54:d1:b0:51:94:7b:ae:d0:bf:
                    80:d3:a9:8e:7e:c0:a4:89:8d:20:b6:5b:3d:46:8f:
                    d3:b5:be:ec:b1:17:ab:04:fb:df:da:ea:f6:39:85:
                    a4:43:a0:6a:e4:4c:c4:3d:4a:f7:65:35:6a:88:a8:
                    f4:7c:04:25:cc:44:62:7e:83:8d:68:cc:fc:a2:76:
                    b7:7b:e6:8d:f1:a7:91:21:96:34:3e:d3:b3:da:6e:
                    02:f2:34:c1:96:55:30:fa:08:57:20:f3:ec:36:48:
                    eb:83:8a:25:91:86:e8:fa:1c:1b:10:8c:25:20:70:
                    1e:2d:ce:a7:aa:02:a3:66:39:fa:0c:2b:df:b9:30:
                    61:14:9c:6d:79:ea:e3:46:50:df:3a:77:ec:2b:0b:
                    9e:4f:6b:6e:45:03:c4:24:bc:28:76:84:d6:f3:80:
                    fc:c5:a7:e1:d3:77:23:92:72:03:89:58:6e:ef:ef:
                    5d:d0:7f:85:1d:d2:a3:ca:c8:90:6e:61:98:50:ca:
                    8a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:21:4B:63:6A:B6:5C:10:B2:1F:D1:6B:08:40:10:4A:71:9E:F2:6B
            X509v3 Authority Key Identifier:
                keyid:10:AE:8C:BC:A0:92:BB:DA:E3:C0:6D:F9:94:1E:4C:00:AB:06:56:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/3230302e33342e3231362e302f32342d3234203d3e203631363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.34.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:50:fe:dd:57:31:3b:8e:67:c7:de:eb:92:b9:74:fa:26:15:
         24:da:5c:79:a4:6a:7e:19:c3:17:84:2e:c8:28:91:73:10:fd:
         6d:70:0a:f5:c9:54:d6:0c:e3:ee:34:44:d9:e0:75:60:0f:b8:
         d6:4c:b5:b0:29:55:cd:27:73:dc:26:9b:9c:19:aa:a5:b8:71:
         57:87:c2:56:c8:80:e1:6f:88:8c:98:bc:8f:da:32:5e:a5:47:
         ea:d2:6e:b5:7e:6e:39:29:69:c8:c6:24:13:78:a5:5b:87:07:
         09:2c:3a:67:f0:9c:7a:4e:7a:59:ed:77:4a:09:80:4a:bd:98:
         c6:ee:30:60:b4:4f:6e:2c:e9:c4:9d:03:11:9e:e2:df:b9:f2:
         27:b6:22:01:84:4f:89:54:e7:b4:18:20:ef:42:c7:b6:7d:15:
         35:c1:6a:8c:d3:83:97:f0:3f:3f:5b:0d:e3:7b:2c:c1:f6:14:
         6a:1c:1c:92:f3:fa:22:11:4c:1f:34:9e:dc:9d:25:fb:e1:e4:
         fe:f6:e1:68:58:2e:4d:7c:73:a8:07:68:48:bb:48:99:78:d8:
         c8:b8:8c:34:cc:85:d4:be:7d:04:ff:11:cc:09:95:41:37:0d:
         8e:3d:f2:d4:bc:2b:72:62:02:5e:9f:4a:26:2f:a2:cd:06:60:
         52:30:ec:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:49:52 2025 by rpki-client