Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3230302e3136392e3131322e302f32302d3234203d3e203232303835.roa
File:                     3230302e3136392e3131322e302f32302d3234203d3e203232303835.roa (raw, json)
Hash identifier:          K+hqMqedi4qTDsAAvik8Mg1dGNQ9gPIJZqW3LifrHkE=
Subject key identifier:   4A:C2:F6:6C:2D:88:87:A6:5F:EF:0E:68:CF:F4:31:47:BC:F3:6E:FC
Certificate issuer:       /CN=D5EBEEFD45A0D90B5E60CD8D4B4384098353E828
Certificate serial:       0B83410724593CDE3EB67D17C24A04EBE5A73649
Authority key identifier: D5:EB:EE:FD:45:A0:D9:0B:5E:60:CD:8D:4B:43:84:09:83:53:E8:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3230302e3136392e3131322e302f32302d3234203d3e203232303835.roa
Signing time:             Tue 17 Jun 2025 15:00:00 +0000
ROA not before:           Tue 17 Jun 2025 14:55:00 +0000
ROA not after:            Tue 16 Jun 2026 15:00:00 +0000
asID:                     22085
IP address blocks:        200.169.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.crl
                          rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 15:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:83:41:07:24:59:3c:de:3e:b6:7d:17:c2:4a:04:eb:e5:a7:36:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5EBEEFD45A0D90B5E60CD8D4B4384098353E828
        Validity
            Not Before: Jun 17 14:55:00 2025 GMT
            Not After : Jun 16 15:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ae:21:db:b2:79:40:b6:61:85:86:ec:56:b3:
                    b5:a3:e5:84:72:cb:61:4e:98:63:c5:51:03:23:87:
                    df:4c:b9:62:91:49:72:85:ca:92:31:81:bd:d9:9f:
                    63:50:e1:ed:d1:b3:73:73:30:bd:9e:6c:ea:0c:1b:
                    5c:2a:5e:61:7b:2a:8b:9e:ab:bf:92:31:3f:5f:c7:
                    2c:4a:21:5d:1b:3e:06:8b:37:87:af:63:9c:7b:59:
                    d5:0e:ed:07:28:c2:8c:ad:93:0a:9e:e5:78:52:b1:
                    8e:82:15:5c:2b:a3:b7:85:42:f6:c0:9d:8d:60:f1:
                    5f:0f:b2:7c:75:16:a6:eb:5d:1e:3a:79:73:eb:88:
                    68:c7:ec:ef:55:86:93:d4:88:6c:69:0f:85:8d:55:
                    a0:79:37:2c:b5:3b:c6:ff:3e:6a:2f:14:7f:c6:32:
                    eb:df:4c:51:25:54:17:f6:98:42:a9:af:a7:c1:f4:
                    b5:43:6c:60:34:20:98:89:4f:a3:10:e0:57:2f:9f:
                    39:af:0d:e5:1d:d3:78:47:dd:3b:55:e8:f1:30:bb:
                    28:ef:c9:cf:23:34:75:2d:1d:6b:13:d8:15:22:47:
                    3c:68:50:01:e9:c3:9d:3a:a8:7f:b9:d8:37:81:da:
                    d6:fc:6d:bf:18:a0:e3:70:9b:6a:64:0f:c6:e1:ec:
                    9a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:C2:F6:6C:2D:88:87:A6:5F:EF:0E:68:CF:F4:31:47:BC:F3:6E:FC
            X509v3 Authority Key Identifier:
                keyid:D5:EB:EE:FD:45:A0:D9:0B:5E:60:CD:8D:4B:43:84:09:83:53:E8:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3230302e3136392e3131322e302f32302d3234203d3e203232303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.169.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7b:18:54:8d:0f:cd:72:86:37:f9:c8:22:39:a7:d9:c7:57:5f:
         89:73:c7:d5:82:ac:7c:a9:66:31:67:38:ab:2a:c7:be:c5:41:
         d3:98:39:c6:1b:d0:7c:9f:17:33:cc:ec:17:26:8b:44:c0:69:
         7d:6b:4b:79:b6:be:b3:7a:24:cf:21:bf:4e:6e:43:ee:27:48:
         45:50:3c:4d:19:f0:28:90:9a:6a:c2:38:ab:ff:2e:e2:7d:e8:
         29:82:c7:64:13:ee:84:f1:eb:2e:27:d1:60:2b:08:e8:ef:f7:
         b2:15:e7:c9:be:d2:ac:db:18:5d:38:ee:30:16:08:43:af:e0:
         47:46:5d:e5:a7:35:e6:33:03:2e:8d:1a:8c:18:bb:9b:38:93:
         26:ff:e3:cf:99:0f:40:c5:dd:14:a2:3b:05:a5:c2:74:dd:d2:
         be:52:73:14:f1:b4:59:28:76:ab:ff:d6:6f:b1:55:15:e5:0d:
         ab:19:ee:67:dd:08:41:eb:d1:0e:0f:ac:90:98:e5:22:13:f1:
         e0:8f:a6:ed:dd:87:ed:87:71:02:bd:62:67:67:bc:f4:ab:db:
         10:dc:c8:1b:04:58:05:4e:26:4e:48:d7:d8:40:35:6c:f9:88:
         14:2e:55:cd:34:4a:ab:86:df:97:c4:de:0c:38:6b:3f:d6:d8:
         69:b6:81:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 00:03:05 2025 by rpki-client