Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/3230302e3232352e34382e302f32312d3231203d3e203631363130.roa
File:                     3230302e3232352e34382e302f32312d3231203d3e203631363130.roa (raw, json)
Hash identifier:          BDByrLzTnWdKH66ft4GYs1p0O6zDU2ZSnyP1zi+H6o0=
Subject key identifier:   94:66:12:A3:93:00:64:8E:36:6B:8F:90:EF:80:23:FE:EC:8B:D0:F0
Certificate issuer:       /CN=4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD
Certificate serial:       6D006579EBF23602B7C2ED9F6C6DAD8C4931F614
Authority key identifier: 4B:3F:BC:1F:37:21:B6:D1:1E:11:B1:D8:79:FC:6A:C8:99:4D:7D:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/3230302e3232352e34382e302f32312d3231203d3e203631363130.roa
Signing time:             Sun 24 May 2026 22:06:32 +0000
ROA not before:           Sun 24 May 2026 22:01:32 +0000
ROA not after:            Sun 23 May 2027 22:06:32 +0000
asID:                     61610
IP address blocks:        200.225.48.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.crl
                          rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 20:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:00:65:79:eb:f2:36:02:b7:c2:ed:9f:6c:6d:ad:8c:49:31:f6:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD
        Validity
            Not Before: May 24 22:01:32 2026 GMT
            Not After : May 23 22:06:32 2027 GMT
        Subject: CN=946612A39300648E366B8F90EF8023FEEC8BD0F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:90:3c:71:c4:3b:80:02:d8:48:46:da:8b:d9:
                    dc:fc:96:76:3f:76:55:1d:00:c2:a5:3c:43:39:14:
                    a3:bc:5c:18:12:38:f7:5b:ee:a3:51:d9:f9:03:c5:
                    4f:c5:3f:51:06:82:2d:49:e3:6c:48:f1:c8:f5:9c:
                    82:9b:99:e4:07:96:21:fb:da:31:35:b5:2c:61:96:
                    c6:04:e4:7f:2a:65:b6:2c:7b:a7:77:29:b5:a6:85:
                    47:b6:a4:0d:9d:af:10:c2:36:7e:f4:b7:37:05:21:
                    26:6f:28:82:03:33:c3:47:55:13:41:44:e9:c8:0b:
                    94:de:23:1a:84:c1:81:4e:66:96:60:5e:34:70:f9:
                    22:da:37:a8:cc:20:b1:98:a5:2b:72:19:cd:83:c6:
                    45:c5:46:85:6e:be:59:58:01:13:87:2d:a9:1f:d3:
                    47:63:6d:f9:af:25:3e:f3:8f:f0:71:dd:9c:c2:2c:
                    d6:04:48:9a:bc:56:78:c1:db:21:d5:18:8a:25:8d:
                    11:5a:e0:dc:2b:c7:2f:ec:1e:b6:39:20:1b:54:ab:
                    6c:53:52:3c:8f:4e:be:ff:2b:23:26:88:8c:ae:98:
                    83:5c:46:5b:b7:79:43:b2:d2:e3:d7:2e:9f:2f:1e:
                    cb:25:84:27:e6:39:9d:d3:45:d8:1b:56:5f:6f:35:
                    c7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:66:12:A3:93:00:64:8E:36:6B:8F:90:EF:80:23:FE:EC:8B:D0:F0
            X509v3 Authority Key Identifier:
                keyid:4B:3F:BC:1F:37:21:B6:D1:1E:11:B1:D8:79:FC:6A:C8:99:4D:7D:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/3230302e3232352e34382e302f32312d3231203d3e203631363130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.225.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         04:db:72:e8:00:98:1e:ae:99:06:f6:44:2d:1e:a5:ad:2a:ca:
         11:98:30:07:35:30:09:e6:da:26:fd:44:a7:50:45:37:d2:b2:
         51:4b:9e:42:de:f5:ec:50:75:29:14:5f:18:bf:20:e7:7c:f1:
         6f:dd:e8:30:bd:75:c3:5f:c6:97:e6:7e:d8:c6:af:eb:e6:21:
         a0:64:0a:98:c1:18:d5:30:c6:c5:d0:fb:3d:5d:1c:3d:e6:f5:
         d1:05:2e:61:70:8b:4d:38:fc:1c:f1:e1:77:05:b9:61:9c:0e:
         62:2b:55:ee:ee:c3:9f:f9:ef:36:1a:27:1c:9f:fb:69:4c:70:
         26:24:24:04:e0:b3:e0:e6:8a:14:4e:d8:45:76:c8:68:23:3e:
         2b:da:82:71:e7:a8:2b:eb:2b:a2:f5:ac:72:f4:50:07:74:80:
         6c:48:eb:56:05:c5:28:e2:ca:85:a3:92:7f:06:24:c6:c2:a8:
         cf:50:44:35:c4:e3:0e:fb:fd:87:fd:de:8e:b8:e2:c5:9e:8a:
         cb:99:e7:f3:8d:74:ea:d2:42:b3:15:a5:94:2f:ee:3f:8d:e1:
         78:5d:28:7b:06:53:41:40:ae:1f:5b:98:61:da:83:61:b4:42:
         7e:97:db:d0:73:d8:5a:2f:13:54:40:a9:07:7f:b7:6f:4a:e8:
         39:58:4c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:04:53 2026 by rpki-client