Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/3230302e36362e3132362e302f32342d3234203d3e20323632383132.roa
File:                     3230302e36362e3132362e302f32342d3234203d3e20323632383132.roa (raw, json)
Hash identifier:          34Aou5vjHXME1lKvCRlmo98BEdRc9mwv6MSYR+1sZnw=
Subject key identifier:   D7:EA:B0:FE:93:5B:C9:6A:BD:05:96:D6:DF:40:7E:1F:FB:99:0D:A3
Certificate issuer:       /CN=A8C40D851EE06F7454DE9587BD8710CA3EAB8536
Certificate serial:       3AC3740ACF200347280B0D118DB9841EDA768FD3
Authority key identifier: A8:C4:0D:85:1E:E0:6F:74:54:DE:95:87:BD:87:10:CA:3E:AB:85:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/3230302e36362e3132362e302f32342d3234203d3e20323632383132.roa
Signing time:             Mon 14 Jul 2025 15:31:05 +0000
ROA not before:           Mon 14 Jul 2025 15:26:05 +0000
ROA not after:            Mon 13 Jul 2026 15:31:05 +0000
asID:                     262812
IP address blocks:        200.66.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.crl
                          rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:c3:74:0a:cf:20:03:47:28:0b:0d:11:8d:b9:84:1e:da:76:8f:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8C40D851EE06F7454DE9587BD8710CA3EAB8536
        Validity
            Not Before: Jul 14 15:26:05 2025 GMT
            Not After : Jul 13 15:31:05 2026 GMT
        Subject: CN=D7EAB0FE935BC96ABD0596D6DF407E1FFB990DA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:22:d1:90:ed:6e:b9:5a:b0:40:c4:85:62:ac:
                    54:1b:0c:c3:24:af:9a:96:79:6d:99:04:9f:11:b4:
                    92:92:2d:b2:e7:ce:ef:38:76:93:c1:43:dd:00:2c:
                    e5:9f:c4:8b:77:df:ff:c9:29:15:a0:8c:b9:f9:de:
                    01:3e:f7:23:81:c0:ee:35:47:f6:83:ce:14:00:66:
                    79:79:f6:bd:c5:cf:d4:65:ad:8f:ec:97:55:32:4d:
                    05:ef:89:0a:29:f0:d2:f4:1a:49:bc:a1:48:95:de:
                    1e:ba:7d:bc:ee:06:30:22:29:e2:8d:f1:89:12:f7:
                    dd:f2:ec:a0:00:58:f0:cb:bf:37:f5:02:a0:df:95:
                    d8:57:9a:a6:bd:ab:21:f4:6f:1b:ff:59:35:fb:ca:
                    30:65:99:4e:e2:21:1b:00:b2:9f:d8:02:80:9f:24:
                    84:f5:24:b1:db:82:a6:cf:0c:40:c8:59:b2:c4:dc:
                    af:8d:78:18:4c:04:17:12:b0:57:c9:90:56:f9:ce:
                    96:3a:5d:33:9c:1e:72:67:b2:66:46:45:c8:03:b1:
                    29:31:32:b1:4e:98:b5:ad:81:56:56:c5:8e:75:a9:
                    ab:b7:7b:cd:a2:4c:81:43:30:0d:80:7e:94:7c:d8:
                    41:24:9b:b3:73:0c:6f:74:e3:33:10:94:70:33:08:
                    11:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:EA:B0:FE:93:5B:C9:6A:BD:05:96:D6:DF:40:7E:1F:FB:99:0D:A3
            X509v3 Authority Key Identifier:
                keyid:A8:C4:0D:85:1E:E0:6F:74:54:DE:95:87:BD:87:10:CA:3E:AB:85:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/3230302e36362e3132362e302f32342d3234203d3e20323632383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.66.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:6c:ce:48:3b:9f:1d:d7:cc:7f:d8:0b:fc:9b:fd:8f:d7:f4:
         15:26:e1:c8:b0:fd:ab:83:df:8c:65:df:83:c2:9e:0c:e5:f7:
         0f:28:5e:c0:86:7d:e6:3b:41:30:96:47:b9:b6:47:00:eb:ac:
         e9:30:c0:28:a7:3f:d5:51:c6:93:81:57:f2:aa:35:1e:bd:73:
         79:0e:0e:f0:58:af:35:ab:60:8a:15:54:66:46:35:1c:38:79:
         3c:d9:b2:c7:cd:77:28:83:81:42:a9:7e:c1:40:9e:5d:65:47:
         5d:8b:a9:85:28:9b:25:c8:6a:ec:4d:0d:a1:09:35:ff:cb:8e:
         2a:e3:79:29:1c:47:6b:2c:a0:ce:9b:b3:ce:c3:93:b5:a3:d6:
         73:9b:a1:a6:1d:66:0c:92:35:32:8d:1b:f3:e9:a4:ba:2f:c0:
         cc:86:0a:df:50:51:d4:b3:31:93:1e:78:36:42:00:57:80:97:
         2a:4f:90:e9:a7:c2:cb:c4:6f:47:aa:4e:4d:5a:82:ac:8e:34:
         69:20:d3:27:31:b3:15:6b:c3:a9:a2:ea:ba:92:a0:7a:99:6c:
         e6:3a:21:5b:29:4d:5e:ab:a4:c4:75:ec:96:a9:dc:22:5a:d1:
         91:ac:89:1b:d6:c6:27:5d:b9:25:1f:7d:84:1f:d7:43:8a:1a:
         d3:34:fa:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:58:57 2025 by rpki-client