Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/3230302e33342e3231372e302f32342d3234203d3e203631363839.roa
File:                     3230302e33342e3231372e302f32342d3234203d3e203631363839.roa (raw, json)
Hash identifier:          uivicO+WxNeHSbZi3VDHCKox0HsKFmIQDYpR2bZucDM=
Subject key identifier:   C1:1F:A2:6E:FE:3B:6B:A4:58:E5:82:FE:AA:62:92:14:09:75:B4:20
Certificate issuer:       /CN=10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8
Certificate serial:       52E6362C783765D5C763302BB57215F561FE88D3
Authority key identifier: 10:AE:8C:BC:A0:92:BB:DA:E3:C0:6D:F9:94:1E:4C:00:AB:06:56:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/3230302e33342e3231372e302f32342d3234203d3e203631363839.roa
Signing time:             Fri 25 Jul 2025 20:48:44 +0000
ROA not before:           Fri 25 Jul 2025 20:43:44 +0000
ROA not after:            Fri 24 Jul 2026 20:48:44 +0000
asID:                     61689
IP address blocks:        200.34.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.crl
                          rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:e6:36:2c:78:37:65:d5:c7:63:30:2b:b5:72:15:f5:61:fe:88:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8
        Validity
            Not Before: Jul 25 20:43:44 2025 GMT
            Not After : Jul 24 20:48:44 2026 GMT
        Subject: CN=C11FA26EFE3B6BA458E582FEAA6292140975B420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:0a:f7:28:5c:3c:95:86:17:fb:30:02:e4:e9:
                    7b:ce:f3:3b:ba:51:c1:ce:00:5b:f8:30:d6:6a:e1:
                    72:03:4b:cb:14:3d:d1:05:4f:92:e0:9a:a2:18:4b:
                    c0:f0:02:ea:ff:8b:bf:b8:f3:7b:ab:bb:8c:43:1c:
                    4a:88:8a:fa:1a:0b:6a:2c:e2:0d:05:2f:35:46:ee:
                    6d:82:66:1a:59:27:3c:cf:fb:25:a1:64:b7:39:05:
                    f1:59:d5:4b:a5:22:e7:34:4e:19:85:28:f7:f1:fb:
                    31:6d:bf:4b:82:89:01:e2:8a:dc:90:b6:ba:f4:f7:
                    19:7f:11:be:f8:b5:79:04:84:6d:ed:79:6e:82:c6:
                    71:c6:ee:ab:ac:76:c1:17:5d:02:5b:7d:62:0d:ee:
                    54:ad:35:65:f7:0a:fa:7d:2d:93:94:e6:14:df:93:
                    96:ff:61:52:f2:6d:80:98:eb:7c:49:42:99:e4:76:
                    41:ae:f2:32:6d:2e:8e:04:8c:d8:b5:f8:ca:82:1f:
                    db:69:de:75:62:50:dc:65:56:78:77:95:54:db:a1:
                    de:a8:0f:55:55:26:53:bb:11:5f:0e:97:3f:e5:39:
                    53:b1:21:26:e9:38:4a:50:ca:9c:2f:d1:52:a6:97:
                    93:3b:5e:20:90:01:a1:a7:2a:36:6b:c0:69:10:46:
                    f2:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:1F:A2:6E:FE:3B:6B:A4:58:E5:82:FE:AA:62:92:14:09:75:B4:20
            X509v3 Authority Key Identifier:
                keyid:10:AE:8C:BC:A0:92:BB:DA:E3:C0:6D:F9:94:1E:4C:00:AB:06:56:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/3230302e33342e3231372e302f32342d3234203d3e203631363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.34.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:18:32:e7:66:d9:dd:39:72:8c:2d:15:f6:cd:69:c0:68:16:
         e5:f1:13:c6:c5:a7:3a:84:22:47:6b:6e:4a:73:e2:ca:16:8a:
         21:f7:26:4d:66:22:a7:d3:d1:12:14:65:62:a9:69:39:e5:24:
         e3:c2:f1:ba:e8:44:96:38:b8:69:b1:c2:8b:8e:52:39:ae:da:
         c2:8d:00:5e:62:e5:91:71:eb:11:f8:88:f3:b1:cd:8a:12:33:
         c8:d4:57:46:64:27:7c:8a:d8:fd:a7:23:21:62:a0:31:8f:d3:
         eb:0b:83:44:e1:21:46:da:5d:2d:a0:46:56:1a:1d:ca:0c:02:
         e0:df:95:c4:06:64:67:8a:fd:85:54:6c:3c:96:25:35:6f:50:
         ff:c3:b5:47:73:6a:e2:1e:5c:f8:88:a9:63:1f:37:80:6f:5f:
         ec:05:9a:0d:f1:08:55:a9:da:22:ad:9f:c2:8e:f4:21:e2:9d:
         ea:cd:43:b4:3c:fb:16:54:75:10:28:f0:e1:ca:69:b7:dd:b8:
         ee:f5:bc:15:2f:e0:ee:8e:e4:cd:9d:32:0d:b9:5c:48:b2:2f:
         96:68:b4:74:75:d7:de:f9:7e:60:74:81:e2:4e:94:65:da:f5:
         aa:9d:1e:a7:7a:a7:70:42:f1:1f:06:8f:cf:9c:40:26:a3:ca:
         79:b0:f5:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:51:13 2025 by rpki-client