Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/3230302e36362e3131362e302f32332d3233203d3e20323632383132.roa
File:                     3230302e36362e3131362e302f32332d3233203d3e20323632383132.roa (raw, json)
Hash identifier:          JEbS684E60wnxGkBAitOCeROj5JLHEdddP2nfsyzzoA=
Subject key identifier:   71:0F:90:C2:DE:74:0B:BA:2E:08:CD:FE:5C:BF:E2:FE:02:F6:B4:F0
Certificate issuer:       /CN=A8C40D851EE06F7454DE9587BD8710CA3EAB8536
Certificate serial:       690EB9504F0B0B18C70DAE6F78FE55AADBA4F137
Authority key identifier: A8:C4:0D:85:1E:E0:6F:74:54:DE:95:87:BD:87:10:CA:3E:AB:85:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/3230302e36362e3131362e302f32332d3233203d3e20323632383132.roa
Signing time:             Mon 14 Jul 2025 15:31:09 +0000
ROA not before:           Mon 14 Jul 2025 15:26:09 +0000
ROA not after:            Mon 13 Jul 2026 15:31:09 +0000
asID:                     262812
IP address blocks:        200.66.116.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.crl
                          rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:0e:b9:50:4f:0b:0b:18:c7:0d:ae:6f:78:fe:55:aa:db:a4:f1:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8C40D851EE06F7454DE9587BD8710CA3EAB8536
        Validity
            Not Before: Jul 14 15:26:09 2025 GMT
            Not After : Jul 13 15:31:09 2026 GMT
        Subject: CN=710F90C2DE740BBA2E08CDFE5CBFE2FE02F6B4F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c3:51:56:68:21:94:8b:f2:bf:88:6c:cb:14:
                    94:b8:c5:e8:95:6a:e3:b4:20:a6:c3:f1:14:33:2d:
                    cf:dd:d7:9e:73:0d:48:c8:13:cf:89:0a:fd:43:32:
                    00:84:87:60:3a:88:c3:55:cd:b1:17:65:54:ad:e1:
                    08:f3:45:fc:e0:68:45:d2:80:f5:d3:c3:ea:9e:1b:
                    99:38:da:3f:32:c4:de:13:e9:e2:5a:c8:4d:d6:b1:
                    40:ce:62:50:54:13:45:59:50:39:6f:42:89:76:0b:
                    c8:db:2f:81:fd:b3:67:cb:3f:61:7e:f0:b6:8c:2d:
                    66:f1:79:fd:fa:c4:79:60:15:6b:95:8a:f5:df:a9:
                    d2:7d:e2:5e:e5:a4:78:19:6d:6e:32:c7:46:2f:88:
                    48:1c:9c:c9:d4:33:8b:26:56:66:4d:86:3e:24:85:
                    5a:b2:85:96:9c:b0:89:39:d8:d6:10:7c:47:ed:39:
                    e9:8e:ed:ca:cc:13:b2:c8:13:6c:b2:0a:f1:24:7b:
                    db:eb:7e:76:30:e3:f1:bf:cc:c5:c5:0c:1d:ac:53:
                    b0:ed:97:29:5f:b2:ea:b6:c7:29:36:8a:be:29:55:
                    28:7f:5d:b6:95:5f:29:1d:14:69:31:e7:48:15:60:
                    b3:60:07:2c:3f:85:7f:78:00:62:c3:8b:ec:ae:72:
                    55:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:0F:90:C2:DE:74:0B:BA:2E:08:CD:FE:5C:BF:E2:FE:02:F6:B4:F0
            X509v3 Authority Key Identifier:
                keyid:A8:C4:0D:85:1E:E0:6F:74:54:DE:95:87:BD:87:10:CA:3E:AB:85:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/3230302e36362e3131362e302f32332d3233203d3e20323632383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.66.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:58:e1:c6:fd:27:ce:60:43:c9:47:3e:2f:78:a1:c4:2b:1e:
         09:af:84:92:bf:6b:f8:30:17:b3:a9:a2:89:5e:43:38:41:b1:
         f3:e8:c6:3e:62:8b:fd:16:c2:7a:81:59:72:19:5f:6a:ae:68:
         82:58:ea:03:e0:6d:c1:aa:8c:64:7c:70:37:d4:9c:9c:d1:9a:
         de:f3:9f:fe:2c:71:2b:27:10:3a:f2:14:b6:ff:0e:c6:49:4f:
         8c:54:82:26:ba:b6:3f:50:ff:93:e9:e8:01:0e:40:55:3a:95:
         e9:ff:af:c6:78:a4:ea:c4:6e:30:79:61:4a:ac:b6:00:c9:d6:
         40:c9:ec:ba:d8:52:af:e5:31:13:fa:58:dc:4b:94:72:1f:d0:
         ac:b5:4a:c6:00:69:c4:e4:bb:3e:5e:dd:31:c5:7e:30:eb:03:
         9f:01:c9:06:b0:33:6d:3d:2d:ff:48:92:a2:25:9a:27:de:24:
         74:ce:16:d8:08:74:0c:3e:8c:56:95:40:cd:38:08:c5:73:33:
         14:e8:67:c2:62:1f:97:17:58:95:50:0f:ed:24:94:7e:66:e2:
         77:63:80:2d:f1:4f:18:f0:2d:0f:8e:93:cf:cf:be:4d:c1:19:
         1a:68:94:1a:31:35:a1:df:b7:24:2b:5c:fc:88:29:9d:89:80:
         d9:b0:07:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:51:28 2025 by rpki-client