Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/3230302e36362e3131322e302f32312d3231203d3e20323632383132.roa
File:                     3230302e36362e3131322e302f32312d3231203d3e20323632383132.roa (raw, json)
Hash identifier:          gnB7euS6Z4Pdoek62v8q+BMNEhqq7X4UGQ8zS4yAdAk=
Subject key identifier:   B4:90:7C:77:B3:58:73:CF:B7:72:40:CF:09:99:BD:A4:C6:6B:30:87
Certificate issuer:       /CN=A8C40D851EE06F7454DE9587BD8710CA3EAB8536
Certificate serial:       3E11AF33307C1C0B346D7FC76479628BF9AECB13
Authority key identifier: A8:C4:0D:85:1E:E0:6F:74:54:DE:95:87:BD:87:10:CA:3E:AB:85:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/3230302e36362e3131322e302f32312d3231203d3e20323632383132.roa
Signing time:             Mon 14 Jul 2025 15:31:16 +0000
ROA not before:           Mon 14 Jul 2025 15:26:16 +0000
ROA not after:            Mon 13 Jul 2026 15:31:16 +0000
asID:                     262812
IP address blocks:        200.66.112.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.crl
                          rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 10:29:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:11:af:33:30:7c:1c:0b:34:6d:7f:c7:64:79:62:8b:f9:ae:cb:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8C40D851EE06F7454DE9587BD8710CA3EAB8536
        Validity
            Not Before: Jul 14 15:26:16 2025 GMT
            Not After : Jul 13 15:31:16 2026 GMT
        Subject: CN=B4907C77B35873CFB77240CF0999BDA4C66B3087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:23:1d:8a:62:38:7b:4d:d2:7b:08:ce:b2:f5:
                    d7:82:5b:f2:18:85:51:be:e1:cd:f0:35:bf:d0:ea:
                    a5:05:91:cb:81:6f:56:d7:2d:e1:2f:7f:3d:81:12:
                    10:1e:e2:86:a3:ed:b7:76:a5:69:56:f1:2f:ee:2e:
                    17:25:42:26:c5:98:d3:ab:34:f6:94:3e:59:d6:0b:
                    2f:b1:12:92:74:b0:0a:7c:07:03:19:5f:a7:5b:9f:
                    79:c2:48:01:54:c1:4d:0a:a1:5c:d4:11:f4:d6:b9:
                    54:28:82:d0:95:6e:1e:3f:a8:6b:7c:26:2f:f9:b0:
                    f5:79:dc:ca:72:79:97:24:55:4b:9a:bf:e0:20:f3:
                    6b:e1:f3:2a:f7:53:c1:b7:fa:2d:d8:a4:20:38:5b:
                    44:0d:c1:00:d6:fc:b3:55:76:89:65:78:72:29:9a:
                    1f:ec:72:ce:4b:f9:8d:1d:01:52:0a:c5:fc:4e:65:
                    21:ee:ad:ef:3b:bf:56:cc:8e:f7:c8:2d:04:c3:6d:
                    eb:3c:74:68:11:83:64:b7:c5:0f:00:85:ad:43:b4:
                    3a:e4:7e:a2:9e:1e:74:bd:60:c0:6d:60:24:40:3e:
                    c6:1d:da:31:a4:3b:eb:39:64:c8:de:4f:ee:d9:2a:
                    fa:da:00:70:71:17:cb:43:c5:79:7d:74:b9:a1:90:
                    87:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:90:7C:77:B3:58:73:CF:B7:72:40:CF:09:99:BD:A4:C6:6B:30:87
            X509v3 Authority Key Identifier:
                keyid:A8:C4:0D:85:1E:E0:6F:74:54:DE:95:87:BD:87:10:CA:3E:AB:85:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/3230302e36362e3131322e302f32312d3231203d3e20323632383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.66.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1e:a3:8d:2f:52:5a:be:4b:db:17:dd:21:0f:f3:5d:60:ff:3d:
         52:52:29:e3:02:2e:2c:73:ee:b3:9a:47:f0:60:c8:e8:1b:49:
         7a:2e:d6:d4:3b:bb:39:a0:62:28:bf:1b:ad:ca:a8:7c:ce:98:
         18:9f:c6:7b:10:40:ee:de:17:5e:49:58:fb:29:fe:1b:f9:dc:
         f8:21:0d:34:28:30:09:b2:35:ca:80:30:30:f1:d0:5e:2a:4d:
         44:eb:1b:2a:8e:ad:b2:df:0e:19:63:23:63:b9:ca:cd:42:4b:
         28:0a:73:b2:fb:9e:ad:9d:0d:7e:ea:d0:74:25:39:45:fd:64:
         2a:ac:25:1f:d4:4f:cd:9d:47:63:b0:30:d1:9c:b7:58:12:3f:
         2c:9a:1b:32:23:66:01:a5:ae:4c:b4:a1:f3:14:a9:fd:31:39:
         7a:e6:f0:9b:d2:7f:ed:27:33:9e:a6:e3:4e:e3:b4:47:f7:42:
         ef:d4:72:8b:7e:7b:72:96:17:db:39:38:2a:bc:af:fa:54:08:
         23:3c:2d:d5:00:19:df:4f:81:66:28:c5:27:bc:b4:8b:c4:0b:
         2f:2c:b6:ef:a8:1f:d3:8a:4c:ab:b4:87:19:33:ab:de:51:34:
         a0:c5:17:1f:10:6e:e0:4b:82:30:7f:b5:6d:7f:5f:4e:f3:3d:
         72:80:97:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:08:56 2025 by rpki-client