Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/3230302e36362e3132352e302f32342d3234203d3e20323632383132.roa
File:                     3230302e36362e3132352e302f32342d3234203d3e20323632383132.roa (raw, json)
Hash identifier:          sG/RJSreeSWoQTNPkAjhcUYR9n/6u8XCL3goO7QLpyY=
Subject key identifier:   32:EA:61:72:99:BA:D8:B2:DA:B8:8B:87:F5:0C:51:40:EF:43:DF:2B
Certificate issuer:       /CN=A8C40D851EE06F7454DE9587BD8710CA3EAB8536
Certificate serial:       0DB8B53C8BFB42163D5E729538335C602D6ED835
Authority key identifier: A8:C4:0D:85:1E:E0:6F:74:54:DE:95:87:BD:87:10:CA:3E:AB:85:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/3230302e36362e3132352e302f32342d3234203d3e20323632383132.roa
Signing time:             Mon 14 Jul 2025 15:31:08 +0000
ROA not before:           Mon 14 Jul 2025 15:26:08 +0000
ROA not after:            Mon 13 Jul 2026 15:31:08 +0000
asID:                     262812
IP address blocks:        200.66.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.crl
                          rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:b8:b5:3c:8b:fb:42:16:3d:5e:72:95:38:33:5c:60:2d:6e:d8:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8C40D851EE06F7454DE9587BD8710CA3EAB8536
        Validity
            Not Before: Jul 14 15:26:08 2025 GMT
            Not After : Jul 13 15:31:08 2026 GMT
        Subject: CN=32EA617299BAD8B2DAB88B87F50C5140EF43DF2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:da:aa:52:8e:53:3a:33:8c:47:b4:e6:70:46:
                    ca:62:c0:aa:64:56:57:6a:bf:b4:0d:c2:64:71:86:
                    43:76:f2:65:7e:fd:54:07:4e:54:8e:ae:b7:1d:0e:
                    32:d7:84:8d:61:d9:68:ad:a1:be:6d:c1:96:1b:6f:
                    77:d2:14:e2:f0:f1:d2:f2:30:d9:60:85:a8:7f:7b:
                    34:4e:38:b9:38:f5:be:20:5e:c5:bd:78:b8:75:cc:
                    0c:69:ea:47:2e:ab:ed:b2:d5:7f:a0:6b:09:c8:03:
                    45:4f:55:f0:08:3b:20:d0:83:c8:6f:1d:1f:13:d8:
                    7f:b8:ab:79:d4:a9:3a:ee:3a:a6:0e:8f:df:ed:6a:
                    10:8c:44:aa:76:1e:09:ba:23:45:5a:9c:b4:ed:4c:
                    42:49:fd:c4:41:9d:ae:59:b2:62:2d:67:9f:e1:77:
                    2f:a8:3c:f9:85:a9:b6:d6:20:27:96:88:d0:ab:93:
                    08:23:c8:29:46:74:08:7f:26:a0:2c:2c:f2:ca:15:
                    6c:02:15:c6:2d:10:5c:9c:08:7a:c4:39:77:d5:69:
                    7a:3c:57:d2:fa:65:70:49:b7:f1:35:a6:fe:8b:3f:
                    17:61:6e:c4:bb:5f:f3:18:18:f0:93:a6:db:81:49:
                    dd:03:ba:1e:cc:87:60:d4:df:ec:96:67:83:32:43:
                    30:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:EA:61:72:99:BA:D8:B2:DA:B8:8B:87:F5:0C:51:40:EF:43:DF:2B
            X509v3 Authority Key Identifier:
                keyid:A8:C4:0D:85:1E:E0:6F:74:54:DE:95:87:BD:87:10:CA:3E:AB:85:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/3230302e36362e3132352e302f32342d3234203d3e20323632383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.66.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:4f:b1:79:e9:f7:cf:4b:f9:10:39:41:ca:d1:be:53:be:a3:
         6a:51:cb:97:88:72:e8:ae:87:79:d6:90:02:44:ed:5e:73:a4:
         f7:01:2c:f3:c8:f5:25:fc:47:46:6e:44:6c:8f:a4:13:7f:c1:
         ae:6d:5c:72:0d:68:fd:1d:96:3b:bd:0b:93:f6:0b:8a:af:9c:
         fa:a2:d0:ad:e1:64:20:3c:b6:02:95:e0:27:28:f7:e2:4b:55:
         44:ea:22:69:7a:c4:c7:d9:08:c9:2b:58:64:48:1a:ef:f0:30:
         d8:00:dd:39:af:17:15:8b:a2:ab:5c:f9:a1:82:6f:88:52:2e:
         c0:c7:f4:4a:50:68:51:8b:fe:81:14:d6:40:c9:16:3e:99:16:
         8b:fd:06:8d:5a:c0:35:91:b2:05:40:f0:d4:b2:d9:d9:c6:e6:
         dc:5a:67:70:4d:28:b5:f9:3b:15:ee:47:b3:98:5b:b2:f0:09:
         0e:7c:04:0a:36:d2:88:f2:83:e2:65:cc:73:0f:05:35:78:d7:
         92:c0:50:db:db:a2:55:5e:fa:a8:e3:50:21:98:12:20:5c:5a:
         94:8e:0d:8f:5d:32:1d:42:7c:c5:b5:37:64:28:ac:e6:cd:ee:
         1c:cd:38:b0:be:f8:48:e8:29:bc:6a:b3:3b:51:3b:04:9b:b0:
         50:26:40:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:56:00 2025 by rpki-client