Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HyY9XAg9uTww8e6VfriAbwX7AVNzKXjN7DVAGfks6LYF/0/3230302e32342e3130302e302f32342d3234203d3e20323731363038.roa
File:                     3230302e32342e3130302e302f32342d3234203d3e20323731363038.roa (raw, json)
Hash identifier:          5mEyOeyobZFOISJH8ZkZWAbTqArgvEMRYRdUrWIQdDI=
Subject key identifier:   A4:9F:46:F7:DC:A2:E1:13:E1:7D:5E:C5:23:AB:B7:F1:56:0C:E4:12
Certificate issuer:       /CN=272D4C56DE64C83FE291166829B6E1D3581F58FF
Certificate serial:       77372D88BDCD9F75F0431D94AABC3D138E94855B
Authority key identifier: 27:2D:4C:56:DE:64:C8:3F:E2:91:16:68:29:B6:E1:D3:58:1F:58:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/272D4C56DE64C83FE291166829B6E1D3581F58FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HyY9XAg9uTww8e6VfriAbwX7AVNzKXjN7DVAGfks6LYF/0/3230302e32342e3130302e302f32342d3234203d3e20323731363038.roa
Signing time:             Mon 28 Jul 2025 23:09:57 +0000
ROA not before:           Mon 28 Jul 2025 23:04:57 +0000
ROA not after:            Mon 27 Jul 2026 23:09:57 +0000
asID:                     271608
IP address blocks:        200.24.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HyY9XAg9uTww8e6VfriAbwX7AVNzKXjN7DVAGfks6LYF/0/272D4C56DE64C83FE291166829B6E1D3581F58FF.crl
                          rsync://rpki-repo.registro.br/repo/HyY9XAg9uTww8e6VfriAbwX7AVNzKXjN7DVAGfks6LYF/0/272D4C56DE64C83FE291166829B6E1D3581F58FF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/272D4C56DE64C83FE291166829B6E1D3581F58FF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:37:2d:88:bd:cd:9f:75:f0:43:1d:94:aa:bc:3d:13:8e:94:85:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=272D4C56DE64C83FE291166829B6E1D3581F58FF
        Validity
            Not Before: Jul 28 23:04:57 2025 GMT
            Not After : Jul 27 23:09:57 2026 GMT
        Subject: CN=A49F46F7DCA2E113E17D5EC523ABB7F1560CE412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:a2:62:03:21:10:22:b4:d5:14:8e:fb:6f:05:
                    e8:29:d7:ba:58:17:ff:5b:ee:96:f1:e9:3d:0b:9f:
                    4f:af:ce:96:5a:77:a6:bf:25:6f:38:a1:ac:d6:9e:
                    57:4b:2f:91:4a:1b:ad:bd:17:70:3c:ab:5c:2f:a6:
                    d7:48:dd:1e:2e:60:cb:f1:86:83:15:97:2e:a6:93:
                    c5:fd:2b:c1:64:85:78:6f:bb:ff:5e:1e:42:4a:1c:
                    9e:f4:a2:b2:de:5e:ed:a4:ff:ea:81:6a:ca:58:8f:
                    1b:1f:58:55:13:6a:ee:c8:ca:ca:08:05:33:e6:39:
                    80:2d:55:56:cb:85:9d:df:a6:70:38:26:1a:cf:60:
                    30:80:71:60:c9:8d:27:91:12:db:5e:03:ce:37:de:
                    27:bf:de:37:d2:9a:27:2e:01:41:89:b3:8f:40:26:
                    08:59:d4:90:10:52:8a:6f:ff:bc:97:76:f8:26:ec:
                    8c:c6:5f:fe:09:b6:47:d7:ac:e0:a6:8d:1c:55:6b:
                    ea:f5:35:2d:74:15:38:df:3d:1d:e9:ef:6a:f0:51:
                    aa:fa:b2:8f:6c:c0:75:9a:f4:bf:ab:de:33:8e:78:
                    85:28:46:d4:22:fa:65:85:1d:bf:34:f7:88:3e:64:
                    cb:85:4a:9f:aa:31:54:ed:9e:ee:54:1a:c3:7c:66:
                    dc:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:9F:46:F7:DC:A2:E1:13:E1:7D:5E:C5:23:AB:B7:F1:56:0C:E4:12
            X509v3 Authority Key Identifier:
                keyid:27:2D:4C:56:DE:64:C8:3F:E2:91:16:68:29:B6:E1:D3:58:1F:58:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HyY9XAg9uTww8e6VfriAbwX7AVNzKXjN7DVAGfks6LYF/0/272D4C56DE64C83FE291166829B6E1D3581F58FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/272D4C56DE64C83FE291166829B6E1D3581F58FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HyY9XAg9uTww8e6VfriAbwX7AVNzKXjN7DVAGfks6LYF/0/3230302e32342e3130302e302f32342d3234203d3e20323731363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.24.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:7c:b2:59:24:3b:a5:6b:33:d1:53:0f:20:a0:6e:ae:69:35:
         6e:3c:85:0e:75:11:21:32:b3:b3:54:74:64:9f:e1:75:f8:b5:
         8b:41:d8:0d:e7:34:14:12:c9:b0:9f:eb:19:a2:cb:0e:ea:7e:
         7b:94:07:fc:13:53:88:9e:2a:f4:94:c8:dc:72:d9:b1:c1:56:
         de:11:d8:a7:1f:01:13:e5:2c:cd:40:92:d6:76:51:be:61:5f:
         f6:04:c1:e7:e7:52:64:e2:a1:20:39:f5:96:0d:a6:13:c3:84:
         4a:46:f9:6b:9f:c0:5d:78:fa:60:fa:9b:0d:ac:eb:77:e2:93:
         c6:1c:ba:00:a0:02:88:28:26:5b:12:b1:f6:5f:cd:6c:76:bb:
         d6:09:02:f1:63:a5:d4:44:7a:d0:26:1a:8e:3a:cb:e0:e3:5a:
         29:ba:fd:c1:76:0a:bf:d0:c3:0c:71:e7:e4:76:46:2b:8d:8b:
         bb:f3:37:03:8e:f4:83:da:8d:1e:2b:44:d0:6d:29:18:98:a7:
         41:34:f2:75:15:24:1f:8d:5a:bd:a0:d7:c8:d7:6e:4c:3d:70:
         38:51:e7:04:a1:2b:17:d7:e0:21:8e:35:55:14:66:9e:5f:4b:
         8e:8c:b1:5d:27:7d:a3:f6:85:c6:b0:72:f1:13:df:3c:b9:56:
         92:df:f9:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:21:13 2025 by rpki-client