Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/3230302e362e34382e302f32342d3332203d3e20323731313838.roa
File:                     3230302e362e34382e302f32342d3332203d3e20323731313838.roa (raw, json)
Hash identifier:          HXzDFfjvaudy+HCQJ3LevFAJF+IlNvHbKDb7azvjpI4=
Subject key identifier:   42:4B:20:B8:33:F6:F6:7E:2D:1A:71:08:07:4F:68:7C:10:8F:C3:08
Certificate issuer:       /CN=C9DB8EA11F6A5A485AEC29556143815DB2507A3B
Certificate serial:       28D62D8877ACA995200AFEAB8D116A84E929D6DC
Authority key identifier: C9:DB:8E:A1:1F:6A:5A:48:5A:EC:29:55:61:43:81:5D:B2:50:7A:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/3230302e362e34382e302f32342d3332203d3e20323731313838.roa
Signing time:             Wed 18 Jun 2025 20:32:08 +0000
ROA not before:           Wed 18 Jun 2025 20:27:08 +0000
ROA not after:            Wed 17 Jun 2026 20:32:08 +0000
asID:                     271188
IP address blocks:        200.6.48.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.crl
                          rsync://rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Jun 2025 03:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:d6:2d:88:77:ac:a9:95:20:0a:fe:ab:8d:11:6a:84:e9:29:d6:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9DB8EA11F6A5A485AEC29556143815DB2507A3B
        Validity
            Not Before: Jun 18 20:27:08 2025 GMT
            Not After : Jun 17 20:32:08 2026 GMT
        Subject: CN=424B20B833F6F67E2D1A7108074F687C108FC308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a6:ba:35:43:dc:af:0b:ac:a4:e3:f9:0e:7c:
                    38:5b:c6:9b:f6:db:93:2a:08:fa:52:34:1f:32:65:
                    b5:48:cf:79:fb:37:e5:11:02:4c:eb:d9:c6:78:c7:
                    c5:e1:ec:78:70:de:e1:65:5c:1a:2b:79:32:cd:3b:
                    5c:51:f9:80:b8:5e:e0:4f:e3:fc:5e:ec:ab:e1:1e:
                    f6:33:2e:02:68:48:9c:89:f6:73:fe:c3:3f:be:d1:
                    7c:c2:29:fd:26:3b:46:38:db:4f:c1:c3:70:8c:ba:
                    d6:c0:f8:cf:80:38:62:ec:59:32:9a:79:c5:e9:d1:
                    e0:1e:ee:e7:69:aa:0d:27:56:b6:6b:90:d2:7f:d8:
                    39:cd:e0:de:4f:9a:2d:7b:90:d0:18:da:d5:f3:f9:
                    dd:7d:54:98:3f:b2:30:d2:5e:df:f4:37:51:d7:76:
                    46:b5:bd:f6:24:76:1e:05:c2:9d:fe:dc:b3:50:18:
                    b8:19:af:2c:da:71:b7:5a:20:55:26:ab:5d:a4:e4:
                    b2:94:5b:e5:b6:8a:07:9d:49:77:b5:0e:1e:09:bd:
                    60:91:6e:46:df:1d:e1:07:b3:17:c2:35:68:6e:e5:
                    98:a3:06:bd:26:4e:c0:53:75:84:be:93:7e:85:8c:
                    83:88:d8:a2:41:ce:f7:d4:f8:c9:62:56:c3:ae:f8:
                    95:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:4B:20:B8:33:F6:F6:7E:2D:1A:71:08:07:4F:68:7C:10:8F:C3:08
            X509v3 Authority Key Identifier:
                keyid:C9:DB:8E:A1:1F:6A:5A:48:5A:EC:29:55:61:43:81:5D:B2:50:7A:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/3230302e362e34382e302f32342d3332203d3e20323731313838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.6.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:77:d1:12:c1:70:ad:48:c8:17:11:db:8f:b5:08:ba:30:84:
         90:d5:f2:ca:55:8c:e2:5b:e4:ce:5e:44:d6:99:2a:a9:89:25:
         3c:eb:b2:55:18:9d:54:88:ca:0d:27:5c:1e:1c:33:9d:00:4a:
         5e:54:47:12:09:a8:a5:07:31:bf:d8:d1:57:e0:84:c9:c6:b9:
         2f:57:ec:3d:fa:d9:58:55:28:b9:5d:18:61:82:6e:91:ca:d8:
         a2:a2:a9:c0:7f:79:76:d8:ec:f8:87:73:9c:97:07:97:67:3c:
         fc:fe:d6:38:76:f3:b0:61:b8:0d:c3:c0:d2:9e:77:fa:22:20:
         55:02:e2:5f:11:40:90:8f:84:1e:77:b9:32:f2:05:7d:de:c6:
         de:b1:38:41:4d:27:9e:fc:ee:c9:ad:e4:84:4a:ba:7d:eb:9e:
         db:f3:76:96:ef:48:2e:36:07:d7:4e:45:ad:7f:2e:11:1b:fc:
         75:02:45:32:2c:b6:6f:74:64:4c:bd:7f:cd:fd:42:0d:49:c3:
         cf:c1:49:c2:d3:18:7e:1b:2b:d5:4f:0d:e3:f0:15:ce:37:4f:
         63:1d:2d:eb:ce:d5:d9:ff:3f:66:c4:a1:ca:d9:0a:cc:67:bc:
         ed:4a:be:3b:1a:f1:51:65:12:87:05:51:82:c5:5c:d3:19:ea:
         36:d6:91:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 08:54:23 2025 by rpki-client