Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/3230302e36362e3132372e302f32342d3234203d3e20323632383132.roa
File:                     3230302e36362e3132372e302f32342d3234203d3e20323632383132.roa (raw, json)
Hash identifier:          VJ6Lo2xBc7gkaBKJFNw2LzruV7jdOmMI+2DmPsASmJ0=
Subject key identifier:   C5:0E:2E:9B:3B:FA:09:E7:00:C0:35:EF:79:37:DE:35:AC:A8:1C:EB
Certificate issuer:       /CN=A8C40D851EE06F7454DE9587BD8710CA3EAB8536
Certificate serial:       50E7B71AF0D55CDE7DC0384495F5D1B69F30F262
Authority key identifier: A8:C4:0D:85:1E:E0:6F:74:54:DE:95:87:BD:87:10:CA:3E:AB:85:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/3230302e36362e3132372e302f32342d3234203d3e20323632383132.roa
Signing time:             Mon 14 Jul 2025 15:31:11 +0000
ROA not before:           Mon 14 Jul 2025 15:26:11 +0000
ROA not after:            Mon 13 Jul 2026 15:31:11 +0000
asID:                     262812
IP address blocks:        200.66.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.crl
                          rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 10:29:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:e7:b7:1a:f0:d5:5c:de:7d:c0:38:44:95:f5:d1:b6:9f:30:f2:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8C40D851EE06F7454DE9587BD8710CA3EAB8536
        Validity
            Not Before: Jul 14 15:26:11 2025 GMT
            Not After : Jul 13 15:31:11 2026 GMT
        Subject: CN=C50E2E9B3BFA09E700C035EF7937DE35ACA81CEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:5a:87:6a:1e:c6:8c:56:56:62:e7:06:1b:e7:
                    22:75:82:39:b0:77:16:22:19:d1:bd:a4:22:e8:9f:
                    fb:e1:5a:34:ed:c8:2c:76:ed:4f:39:f4:3b:30:65:
                    f4:e5:60:6d:33:93:02:6b:c9:c8:d3:e6:ff:6b:3f:
                    1d:96:9c:51:cb:9c:53:12:26:65:80:1d:0e:4e:8b:
                    77:87:85:43:ef:5b:51:08:52:79:51:70:e3:74:b3:
                    6a:00:7d:83:bd:d0:16:1f:ec:6b:90:0c:b0:94:df:
                    b9:9d:5a:de:9a:1c:ee:e0:14:db:49:53:8a:f9:35:
                    19:14:70:ee:ea:e7:2f:58:dd:57:1b:2b:2f:bf:fd:
                    5f:6a:8b:3e:9d:a8:f6:f6:04:59:0a:a9:3d:5a:9b:
                    04:5a:69:49:7b:5c:e1:fd:f6:02:83:9e:15:bb:2f:
                    25:46:2e:57:d2:83:79:b9:ed:ec:ce:4c:35:e9:9d:
                    64:63:d5:a8:ea:9b:b6:11:76:2b:1d:ea:5b:28:f4:
                    81:d3:ff:95:64:73:8e:5f:ff:46:31:be:d2:69:d4:
                    12:e1:71:d7:7c:77:c3:4e:e4:1e:a2:da:46:b9:65:
                    f5:a8:a2:b0:9f:6c:be:ca:f5:0d:2f:b6:10:4e:2b:
                    09:d6:df:66:16:81:cd:2c:aa:32:b3:e9:36:fb:c1:
                    77:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:0E:2E:9B:3B:FA:09:E7:00:C0:35:EF:79:37:DE:35:AC:A8:1C:EB
            X509v3 Authority Key Identifier:
                keyid:A8:C4:0D:85:1E:E0:6F:74:54:DE:95:87:BD:87:10:CA:3E:AB:85:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/3230302e36362e3132372e302f32342d3234203d3e20323632383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.66.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:1d:87:b7:2a:b5:58:8f:33:8c:b9:d7:ff:f1:18:90:45:ea:
         0b:53:4e:a0:1c:57:73:49:34:37:70:8f:81:0d:e8:bd:a1:7b:
         d7:21:3e:c5:85:66:fe:59:2f:4c:76:f9:6f:6c:d5:63:ca:0f:
         76:0a:4b:d1:b8:e7:3b:1b:2e:36:27:e7:51:36:0f:59:23:dd:
         97:2e:b7:bc:5c:3d:31:64:2a:f9:a2:92:b2:b6:24:dc:4c:87:
         c3:b3:31:33:2d:fa:8b:98:fa:41:b3:a4:09:e9:13:f8:f8:36:
         6a:40:32:13:21:65:7b:7e:6a:95:5c:d2:12:35:5f:80:89:a3:
         1d:e1:51:00:86:8f:de:fd:9c:23:2f:96:b9:4b:d0:0d:8c:1b:
         99:fb:86:ca:7f:f8:85:0f:e3:1d:b4:d8:e3:46:56:87:fa:4c:
         4b:b8:9d:9f:27:34:35:08:ee:62:6a:a6:a0:e4:f5:86:54:7a:
         d8:98:8c:ce:1d:bd:ba:91:22:91:9d:ed:e9:00:c7:45:72:d3:
         58:7a:57:6f:d4:3d:c4:50:62:de:ae:18:47:00:11:f4:3f:cf:
         e3:fc:9a:a1:42:88:fb:e6:dd:7b:b0:58:9a:46:86:f6:d2:35:
         54:9e:42:0c:66:37:7a:78:26:3b:4e:58:43:29:62:5b:71:a8:
         1f:17:05:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:08:26 2025 by rpki-client