Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/3230302e31332e38342e302f32322d3234203d3e20323730343430.roa
File:                     3230302e31332e38342e302f32322d3234203d3e20323730343430.roa (raw, json)
Hash identifier:          8tAcj88Dsr6KX0GVpwjVn7wUOpm8augB6XHOYX1uv5I=
Subject key identifier:   6A:4C:08:EF:2C:1D:43:B0:0C:63:81:14:47:EE:15:20:A3:6D:26:D2
Certificate issuer:       /CN=A35B88CF5779B0065EDB77B9499B21C43A3F7C8A
Certificate serial:       662231FF8E0F2A43CC85EBF5A35C62B02EDD3D00
Authority key identifier: A3:5B:88:CF:57:79:B0:06:5E:DB:77:B9:49:9B:21:C4:3A:3F:7C:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A35B88CF5779B0065EDB77B9499B21C43A3F7C8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/3230302e31332e38342e302f32322d3234203d3e20323730343430.roa
Signing time:             Mon 11 Aug 2025 14:22:46 +0000
ROA not before:           Mon 11 Aug 2025 14:17:46 +0000
ROA not after:            Mon 10 Aug 2026 14:22:46 +0000
asID:                     270440
IP address blocks:        200.13.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/A35B88CF5779B0065EDB77B9499B21C43A3F7C8A.crl
                          rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/A35B88CF5779B0065EDB77B9499B21C43A3F7C8A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A35B88CF5779B0065EDB77B9499B21C43A3F7C8A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Aug 2025 18:51:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:22:31:ff:8e:0f:2a:43:cc:85:eb:f5:a3:5c:62:b0:2e:dd:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A35B88CF5779B0065EDB77B9499B21C43A3F7C8A
        Validity
            Not Before: Aug 11 14:17:46 2025 GMT
            Not After : Aug 10 14:22:46 2026 GMT
        Subject: CN=6A4C08EF2C1D43B00C63811447EE1520A36D26D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e7:c0:b8:ae:b9:de:f4:3c:c5:9c:fa:73:42:
                    16:88:c2:80:dc:58:5e:22:3f:ab:2f:fc:05:3f:27:
                    37:c3:60:de:a6:f4:17:4a:77:5f:e0:bb:16:05:dc:
                    d5:06:fa:6b:71:11:5e:a9:1a:58:b7:80:a9:ae:6f:
                    a4:0e:b1:5e:2d:b3:cc:d4:92:c8:da:af:8a:cd:60:
                    20:ec:40:58:ba:79:11:7f:63:7e:e7:f4:8b:29:d2:
                    98:d9:a7:35:a8:d6:bc:34:e3:b7:cb:2f:52:eb:1f:
                    f8:38:71:6b:91:3e:c3:38:50:f2:7b:46:33:83:4e:
                    bf:da:bb:03:1b:05:d6:c6:ff:a0:cc:a1:f8:8f:96:
                    d3:c7:28:7f:9c:bb:54:19:b7:1c:df:d1:7f:87:59:
                    52:f1:9a:6a:26:09:a5:3f:20:d4:37:e7:8a:c2:cf:
                    dd:35:62:06:6d:51:41:0f:3e:0b:ff:14:d3:57:ee:
                    17:23:51:10:28:38:9e:27:d1:f1:f1:5c:93:0c:36:
                    8e:ee:5e:5d:2d:bd:3b:ed:14:6f:78:06:b0:cc:eb:
                    b8:e3:fb:e5:29:50:06:8b:59:6d:46:f5:68:49:ad:
                    c0:15:de:3e:87:92:8f:8e:54:cd:e5:6d:bc:4c:14:
                    4b:f6:51:63:b8:ce:a7:76:41:29:ce:b6:ff:e6:7e:
                    fb:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:4C:08:EF:2C:1D:43:B0:0C:63:81:14:47:EE:15:20:A3:6D:26:D2
            X509v3 Authority Key Identifier:
                keyid:A3:5B:88:CF:57:79:B0:06:5E:DB:77:B9:49:9B:21:C4:3A:3F:7C:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/A35B88CF5779B0065EDB77B9499B21C43A3F7C8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A35B88CF5779B0065EDB77B9499B21C43A3F7C8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/3230302e31332e38342e302f32322d3234203d3e20323730343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:6a:04:9d:68:ae:29:78:94:60:a8:52:f7:ab:2c:7a:8e:a7:
         4e:9f:01:6e:d1:b7:e8:6c:89:f2:28:a4:64:05:ea:85:7d:6a:
         fc:2c:4d:11:30:4b:93:a7:b6:03:00:c8:44:53:1f:51:78:e6:
         f4:20:cd:9f:6d:ab:c0:08:39:e2:85:ee:24:de:be:e3:17:e1:
         85:66:0a:8d:df:0b:71:a5:fb:71:13:b0:16:87:bc:52:df:20:
         85:29:96:18:63:52:27:25:7f:32:84:a2:7c:71:3a:8e:c5:36:
         7a:24:82:b9:3d:98:32:2f:4b:1f:60:b8:6f:b1:15:3b:30:51:
         0d:58:e2:c0:4a:dd:19:4f:f9:fa:66:e1:3e:7c:47:31:47:5d:
         a7:6e:09:aa:be:c5:2c:ec:69:8a:e0:de:67:c4:9e:79:e5:da:
         ef:5f:39:80:13:f2:c6:33:fa:a5:6a:eb:b9:b3:85:cf:4d:dc:
         68:4d:a0:4b:62:bc:55:ee:95:fd:92:f4:88:65:46:35:7a:34:
         c4:c3:27:77:29:11:37:55:3b:6c:31:93:d9:58:27:50:61:ef:
         97:a2:ed:0c:bd:b2:23:44:5b:63:95:b3:66:3e:d8:87:d8:d1:
         8c:f3:8d:08:05:b8:bc:44:ba:40:ca:45:a6:5b:11:f3:a3:33:
         3c:da:27:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 14 08:58:08 2025 by rpki-client