Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/3230302e33392e3134372e302f32342d3234203d3e20323730373538.roa
File:                     3230302e33392e3134372e302f32342d3234203d3e20323730373538.roa (raw, json)
Hash identifier:          O8e9DXJvAa/KWMFK2FYeZwhi5US5RXKgx/CxA7EEXq4=
Subject key identifier:   F3:69:0B:88:0B:F7:3A:C8:58:AF:3C:2A:25:19:0D:9C:61:0D:AD:77
Certificate issuer:       /CN=7BEEBD056146455EA8F344FAB5588758068DAA8A
Certificate serial:       4925A15D04B9D35EF9837C13469D3C8E2E7BF503
Authority key identifier: 7B:EE:BD:05:61:46:45:5E:A8:F3:44:FA:B5:58:87:58:06:8D:AA:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BEEBD056146455EA8F344FAB5588758068DAA8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/3230302e33392e3134372e302f32342d3234203d3e20323730373538.roa
Signing time:             Tue 17 Jun 2025 15:50:03 +0000
ROA not before:           Tue 17 Jun 2025 15:45:03 +0000
ROA not after:            Tue 16 Jun 2026 15:50:03 +0000
asID:                     270758
IP address blocks:        200.39.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/7BEEBD056146455EA8F344FAB5588758068DAA8A.crl
                          rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/7BEEBD056146455EA8F344FAB5588758068DAA8A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BEEBD056146455EA8F344FAB5588758068DAA8A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 21:39:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:25:a1:5d:04:b9:d3:5e:f9:83:7c:13:46:9d:3c:8e:2e:7b:f5:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BEEBD056146455EA8F344FAB5588758068DAA8A
        Validity
            Not Before: Jun 17 15:45:03 2025 GMT
            Not After : Jun 16 15:50:03 2026 GMT
        Subject: CN=F3690B880BF73AC858AF3C2A25190D9C610DAD77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:98:d5:43:49:b0:78:59:3c:71:64:cf:4c:12:
                    42:ad:44:79:9c:7b:66:2c:c3:a3:d9:9a:9c:c7:7a:
                    ce:be:81:b4:fa:8c:72:04:99:40:29:eb:d7:82:18:
                    b3:c0:b3:f8:87:7c:26:2b:49:ee:8e:c9:45:ba:4e:
                    11:06:7e:63:f5:98:a9:f8:da:6a:6f:83:84:24:7a:
                    cd:06:7c:68:40:ee:c3:f4:8f:c2:8f:af:78:6d:1a:
                    81:01:60:69:f6:49:6f:f3:49:4e:e9:64:29:d7:14:
                    0f:96:24:43:98:88:40:aa:3d:e8:b2:7c:c1:a1:7a:
                    c4:a7:13:e2:77:a6:76:94:bf:54:4a:59:be:c0:eb:
                    b5:2d:47:48:e3:72:ea:14:56:ee:44:06:62:90:c3:
                    cb:98:2e:d5:10:e1:b8:76:be:d1:2a:29:25:c3:54:
                    49:48:d8:ca:3a:e1:e5:a4:b0:b3:e7:aa:c6:3f:f9:
                    46:73:a5:57:e3:e7:ab:40:e6:16:f1:a9:6c:34:50:
                    75:bd:01:ec:4a:f6:20:a1:23:18:24:35:62:0e:18:
                    94:bf:f6:d7:47:97:32:5f:bb:8d:e3:44:fa:63:3b:
                    e7:76:f2:f0:75:a9:81:13:92:7c:5b:a7:72:58:7d:
                    21:fc:37:f8:7a:f1:ab:6d:a0:81:1e:41:41:57:5c:
                    ca:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:69:0B:88:0B:F7:3A:C8:58:AF:3C:2A:25:19:0D:9C:61:0D:AD:77
            X509v3 Authority Key Identifier:
                keyid:7B:EE:BD:05:61:46:45:5E:A8:F3:44:FA:B5:58:87:58:06:8D:AA:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/7BEEBD056146455EA8F344FAB5588758068DAA8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BEEBD056146455EA8F344FAB5588758068DAA8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/3230302e33392e3134372e302f32342d3234203d3e20323730373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:02:c2:81:54:31:85:6c:0c:3f:9c:42:d8:d4:9d:b3:6d:62:
         42:9d:3e:88:9f:99:fa:b2:11:4d:7e:c3:f6:47:67:b7:61:b5:
         29:44:aa:81:72:d8:fa:e6:29:41:f5:cd:ac:45:02:38:05:ef:
         55:5a:2b:6e:31:dd:ad:ca:22:10:69:1c:69:c8:9d:44:69:6c:
         85:f4:27:73:56:e3:d1:8d:0e:b9:f1:cb:83:53:76:88:39:a8:
         a0:82:fd:38:48:04:1b:3f:36:fa:ee:68:6b:d4:13:b8:63:e3:
         63:90:af:a2:6f:0e:d7:14:36:60:a8:20:12:69:7a:ce:9f:bd:
         5e:9e:db:44:eb:a1:cc:13:9f:a3:3c:a3:8f:f8:d5:2c:ba:21:
         5d:b0:e8:48:6c:61:9e:b5:b2:a4:49:00:43:05:9b:a7:48:34:
         09:c2:6a:30:1d:7c:a2:93:4f:a0:37:0b:00:e0:87:81:7c:db:
         c2:39:5e:da:d6:44:8b:63:8b:73:8e:5f:99:c6:c4:51:54:ad:
         e5:98:e5:ac:42:ff:db:c7:45:65:60:27:63:9b:18:25:33:59:
         22:8b:58:cc:c8:5a:f0:dd:bc:19:c0:cd:b6:18:7e:28:8c:d5:
         93:10:86:f4:6b:44:f8:ec:04:da:11:d8:ed:e8:64:f5:bf:72:
         bc:0c:a5:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 12:52:09 2025 by rpki-client