Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/3230302e36362e3131322e302f32302d3230203d3e20323632383132.roa
File:                     3230302e36362e3131322e302f32302d3230203d3e20323632383132.roa (raw, json)
Hash identifier:          86ObSQfxJVrCZsZpsNmCdcLAPiOp/2qduXAXh3czUCU=
Subject key identifier:   77:63:3D:AF:2F:69:7E:A5:0E:44:D2:40:CB:63:10:17:67:0B:BE:36
Certificate issuer:       /CN=A8C40D851EE06F7454DE9587BD8710CA3EAB8536
Certificate serial:       5990178B3F53E6DC159318AA604DE04D4CA29532
Authority key identifier: A8:C4:0D:85:1E:E0:6F:74:54:DE:95:87:BD:87:10:CA:3E:AB:85:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/3230302e36362e3131322e302f32302d3230203d3e20323632383132.roa
Signing time:             Mon 14 Jul 2025 15:31:13 +0000
ROA not before:           Mon 14 Jul 2025 15:26:13 +0000
ROA not after:            Mon 13 Jul 2026 15:31:13 +0000
asID:                     262812
IP address blocks:        200.66.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.crl
                          rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 10:29:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:90:17:8b:3f:53:e6:dc:15:93:18:aa:60:4d:e0:4d:4c:a2:95:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8C40D851EE06F7454DE9587BD8710CA3EAB8536
        Validity
            Not Before: Jul 14 15:26:13 2025 GMT
            Not After : Jul 13 15:31:13 2026 GMT
        Subject: CN=77633DAF2F697EA50E44D240CB631017670BBE36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f2:89:01:f1:5f:98:3a:a9:22:b1:a5:01:0c:
                    cd:07:7b:8c:f3:7c:75:69:12:94:56:05:23:3b:ec:
                    de:6a:0b:9e:00:db:57:a5:33:79:59:39:2a:5a:d6:
                    b5:eb:b9:4b:78:73:d8:46:97:9c:5b:c0:5d:14:6b:
                    6b:b5:c6:76:da:20:51:d9:87:e8:a3:26:63:55:f5:
                    96:8a:57:cb:3f:4b:44:f0:cf:6e:55:78:6b:91:8b:
                    3e:42:de:d8:2c:f7:e3:ab:b7:3c:16:d9:c3:fc:01:
                    60:9e:d6:4e:b3:07:3f:15:c2:a8:07:8e:78:21:73:
                    81:8a:ab:5a:01:03:16:c6:c7:79:21:d6:53:c1:38:
                    77:b9:9c:27:0d:38:ea:5b:17:9f:5a:1d:08:39:8f:
                    f7:6e:95:54:46:09:c4:f0:a8:77:da:24:67:89:41:
                    26:1f:f4:0f:db:4c:ea:84:6b:48:92:4c:c4:c6:b9:
                    44:9e:01:5c:65:2d:3b:04:84:09:76:a4:7c:0a:69:
                    e0:28:c9:14:25:dd:9b:cf:82:76:48:b1:c9:33:41:
                    a4:90:43:94:02:13:c4:5c:61:93:e3:b8:2b:08:d1:
                    1e:7c:6e:f7:02:55:e7:3e:e4:bb:12:d6:66:57:e0:
                    52:f0:65:ec:ee:0a:07:09:0d:49:e3:c6:e6:b3:cb:
                    e2:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:63:3D:AF:2F:69:7E:A5:0E:44:D2:40:CB:63:10:17:67:0B:BE:36
            X509v3 Authority Key Identifier:
                keyid:A8:C4:0D:85:1E:E0:6F:74:54:DE:95:87:BD:87:10:CA:3E:AB:85:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/3230302e36362e3131322e302f32302d3230203d3e20323632383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.66.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4f:a1:9b:05:83:23:27:53:f8:f3:77:92:ff:4e:7e:e0:c6:ee:
         4d:68:23:3d:b3:d7:76:d2:1c:d2:b9:dc:68:48:23:55:3b:b5:
         5f:e9:7f:33:a5:28:00:0d:88:20:6a:ac:7b:4c:c8:c3:26:a6:
         30:af:23:e6:c0:49:1d:fc:e2:2a:66:9a:85:54:bb:f2:cd:8b:
         0a:84:52:70:76:a9:4d:7e:bf:f7:c2:7d:39:71:2c:85:b3:46:
         07:01:f7:d4:aa:a2:2b:d1:c0:e0:ed:97:9e:af:78:56:5d:e4:
         34:d5:0a:bc:51:91:57:d6:b2:31:3d:5a:21:08:5b:ee:f2:70:
         b3:7e:0f:68:fa:25:17:d5:fd:b2:48:22:04:bb:2d:c2:46:fe:
         5f:d2:ef:96:78:6f:cd:ee:bc:45:06:34:25:8e:0d:0a:bf:2c:
         5e:04:16:be:52:fc:65:92:bb:15:ae:80:6a:31:8a:4a:60:e2:
         e6:69:3a:a5:62:29:2c:83:ec:34:81:cc:60:ad:94:fe:34:4c:
         48:b2:73:d9:3c:d0:9f:a9:52:6b:09:d6:79:38:0f:c9:cd:9d:
         2a:a5:c2:14:70:34:c2:5c:9d:a0:59:ed:05:9b:88:21:e0:cc:
         dc:74:d8:99:3f:c0:a7:6e:e3:c8:60:78:f9:4f:41:ad:14:bd:
         00:3c:5a:4a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWZAXiz9T5twVkxiqYE3gTUyilTIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQThDNDBEODUxRUUwNkY3NDU0REU5NTg3QkQ4NzEwQ0Ez
RUFCODUzNjAeFw0yNTA3MTQxNTI2MTNaFw0yNjA3MTMxNTMxMTNaMDMxMTAvBgNV
BAMTKDc3NjMzREFGMkY2OTdFQTUwRTQ0RDI0MENCNjMxMDE3NjcwQkJFMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG8okB8V+YOqkisaUBDM0He4zz
fHVpEpRWBSM77N5qC54A21elM3lZOSpa1rXruUt4c9hGl5xbwF0Ua2u1xnbaIFHZ
h+ijJmNV9ZaKV8s/S0Twz25VeGuRiz5C3tgs9+OrtzwW2cP8AWCe1k6zBz8VwqgH
jnghc4GKq1oBAxbGx3kh1lPBOHe5nCcNOOpbF59aHQg5j/dulVRGCcTwqHfaJGeJ
QSYf9A/bTOqEa0iSTMTGuUSeAVxlLTsEhAl2pHwKaeAoyRQl3ZvPgnZIsckzQaSQ
Q5QCE8RcYZPjuCsI0R58bvcCVec+5LsS1mZX4FLwZezuCgcJDUnjxuazy+KrAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUd2M9ry9pfqUORNJAy2MQF2cLvjYwHwYDVR0j
BBgwFoAUqMQNhR7gb3RU3pWHvYcQyj6rhTYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3JwZENGNVRqUVVndEI1dmJ5NGRMaU1TbkVFRjFrV0IzOHJyNjN3Nkx3
ZncvMC9BOEM0MEQ4NTFFRTA2Rjc0NTRERTk1ODdCRDg3MTBDQTNFQUI4NTM2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E4QzQwRDg1MUVFMDZGNzQ1
NERFOTU4N0JEODcxMENBM0VBQjg1MzYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NycGRDRjVUalFVZ3RCNXZieTRkTGlNU25FRUYxa1dCMzhycjYzdzZMd2Z3LzAv
MzIzMDMwMmUzNjM2MmUzMTMxMzIyZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzMjM2
MzIzODMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBATIQnAwDQYJKoZIhvcNAQELBQADggEBAE+hmwWD
IydT+PN3kv9OfuDG7k1oIz2z13bSHNK53GhII1U7tV/pfzOlKAANiCBqrHtMyMMm
pjCvI+bASR384ipmmoVUu/LNiwqEUnB2qU1+v/fCfTlxLIWzRgcB99SqoivRwODt
l56veFZd5DTVCrxRkVfWsjE9WiEIW+7ycLN+D2j6JRfV/bJIIgS7LcJG/l/S75Z4
b83uvEUGNCWODQq/LF4EFr5S/GWSuxWugGoxikpg4uZpOqViKSyD7DSBzGCtlP40
TEiyc9k80J+pUmsJ1nk4D8nNnSqlwhRwNMJcnaBZ7QWbiCHgzNx02Jk/wKdu48hg
ePlPQa0UvQA8Wko=
-----END CERTIFICATE-----
Generated at Sun Aug 10 21:08:14 2025 by rpki-client