Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/3230302e342e3131302e302f32342d3332203d3e20323731343739.roa
File:                     3230302e342e3131302e302f32342d3332203d3e20323731343739.roa (raw, json)
Hash identifier:          SccXLsoqNkxe4R1SLewa356xjBPZYsrj2+IpgNQ4mvQ=
Subject key identifier:   78:39:58:58:02:0F:44:9B:BF:EE:25:29:13:5E:E0:2F:8A:E1:2F:C6
Certificate issuer:       /CN=F2BCDEE27FCE809FBB2CBD318ED16F5077F2E713
Certificate serial:       6CA2B52747879384419158F233072FBFBC74D3C7
Authority key identifier: F2:BC:DE:E2:7F:CE:80:9F:BB:2C:BD:31:8E:D1:6F:50:77:F2:E7:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2BCDEE27FCE809FBB2CBD318ED16F5077F2E713.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/3230302e342e3131302e302f32342d3332203d3e20323731343739.roa
Signing time:             Thu 24 Jul 2025 03:36:21 +0000
ROA not before:           Thu 24 Jul 2025 03:31:21 +0000
ROA not after:            Thu 23 Jul 2026 03:36:21 +0000
asID:                     271479
IP address blocks:        200.4.110.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/F2BCDEE27FCE809FBB2CBD318ED16F5077F2E713.crl
                          rsync://rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/F2BCDEE27FCE809FBB2CBD318ED16F5077F2E713.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2BCDEE27FCE809FBB2CBD318ED16F5077F2E713.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 12 Aug 2025 09:26:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:a2:b5:27:47:87:93:84:41:91:58:f2:33:07:2f:bf:bc:74:d3:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2BCDEE27FCE809FBB2CBD318ED16F5077F2E713
        Validity
            Not Before: Jul 24 03:31:21 2025 GMT
            Not After : Jul 23 03:36:21 2026 GMT
        Subject: CN=78395858020F449BBFEE2529135EE02F8AE12FC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:3c:bc:70:eb:9a:b1:98:47:4d:38:2d:39:16:
                    29:87:fd:71:88:24:e0:4f:6b:59:9a:40:6c:ca:4c:
                    11:c6:89:9d:c9:a8:a3:e1:61:76:9f:4a:92:31:cf:
                    fd:99:99:8d:45:3c:49:94:0f:68:d0:7d:c8:87:b7:
                    91:ac:99:62:de:fa:65:39:7a:47:7b:4b:7d:f4:79:
                    94:de:f4:97:c7:a8:b1:b6:c9:87:85:b3:10:25:8a:
                    4e:d9:db:df:47:f3:b0:a7:45:e1:3e:2c:20:b1:47:
                    ce:d4:99:da:b2:cb:45:10:f3:94:f3:3f:76:e9:a5:
                    c2:0c:cf:40:90:80:aa:11:c3:a0:ec:4d:0c:4d:1f:
                    aa:55:ce:7a:f7:16:95:43:cc:9b:78:49:12:2a:89:
                    9d:c0:d4:8e:83:a0:48:33:4d:08:52:29:67:f6:d7:
                    49:de:d7:69:09:91:b5:98:2c:c1:5c:29:d0:82:b2:
                    25:f9:e7:fe:7f:f0:c6:e2:bb:14:e2:47:32:3b:9a:
                    b7:6c:aa:59:68:e6:2f:f9:17:29:73:d1:42:7d:16:
                    13:73:ba:11:68:1f:d1:7f:17:11:fc:08:29:2e:a5:
                    c0:b4:39:f6:66:b6:64:f3:36:4d:ef:aa:ff:ec:40:
                    f7:d2:b1:a4:10:09:6a:d1:d3:e8:0c:ee:79:c2:32:
                    98:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:39:58:58:02:0F:44:9B:BF:EE:25:29:13:5E:E0:2F:8A:E1:2F:C6
            X509v3 Authority Key Identifier:
                keyid:F2:BC:DE:E2:7F:CE:80:9F:BB:2C:BD:31:8E:D1:6F:50:77:F2:E7:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/F2BCDEE27FCE809FBB2CBD318ED16F5077F2E713.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2BCDEE27FCE809FBB2CBD318ED16F5077F2E713.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/3230302e342e3131302e302f32342d3332203d3e20323731343739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.4.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:d0:e4:09:22:89:f9:ed:62:25:37:a4:fa:26:e8:49:b0:3e:
         21:c7:20:75:8e:24:3d:51:e5:99:5c:41:f6:bd:c2:04:d5:44:
         bb:cc:f9:1a:45:e2:1f:52:c5:5f:c9:69:15:0e:32:97:fc:9a:
         30:7d:cc:4e:76:11:23:9e:3b:fd:49:7e:9e:b5:42:4d:1a:59:
         b2:4b:fa:24:49:e1:7f:f5:f0:40:ee:19:01:ae:3c:be:d6:5f:
         a7:3e:a7:65:f4:fa:32:59:93:a3:52:6f:8c:0c:fb:e2:18:96:
         fd:e6:e2:fe:c5:9d:4d:73:6f:49:f6:0d:5e:01:82:4a:f8:17:
         a3:d2:0a:88:db:15:f2:d1:f1:c6:37:c5:47:1e:5c:13:00:0b:
         27:64:bd:dc:9a:cc:d0:d2:d5:28:d9:9d:dd:ab:06:78:1b:3b:
         01:69:6a:1e:f6:ed:ef:50:93:30:35:6c:84:ce:06:93:ee:58:
         a0:48:46:06:53:20:41:b7:c5:59:b7:9e:b0:ab:07:bd:9c:82:
         96:7f:f2:92:c2:ce:45:5b:06:bb:9a:db:7a:f4:5c:da:2b:da:
         ca:ed:7d:bd:a3:48:6c:b7:cd:e9:07:8b:82:1a:4f:7b:29:06:
         00:60:5a:63:19:17:ed:3e:b1:94:32:50:af:27:6f:f9:fd:cf:
         bb:7a:55:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:00:03 2025 by rpki-client