Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HyY9XAg9uTww8e6VfriAbwX7AVNzKXjN7DVAGfks6LYF/0/3230302e32342e3130332e302f32342d3234203d3e20323731363038.roa
File:                     3230302e32342e3130332e302f32342d3234203d3e20323731363038.roa (raw, json)
Hash identifier:          nuojUYoYdWOMmfPozvEcuDFLAVivgzc/wcNTrZzSS4k=
Subject key identifier:   19:71:05:4B:1C:EF:03:4A:FD:9D:44:21:15:51:25:5C:67:9A:00:76
Certificate issuer:       /CN=272D4C56DE64C83FE291166829B6E1D3581F58FF
Certificate serial:       6B62A46E6B826187A622A9C2AF82E6E88DFDB24B
Authority key identifier: 27:2D:4C:56:DE:64:C8:3F:E2:91:16:68:29:B6:E1:D3:58:1F:58:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/272D4C56DE64C83FE291166829B6E1D3581F58FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HyY9XAg9uTww8e6VfriAbwX7AVNzKXjN7DVAGfks6LYF/0/3230302e32342e3130332e302f32342d3234203d3e20323731363038.roa
Signing time:             Mon 28 Jul 2025 23:10:39 +0000
ROA not before:           Mon 28 Jul 2025 23:05:39 +0000
ROA not after:            Mon 27 Jul 2026 23:10:39 +0000
asID:                     271608
IP address blocks:        200.24.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HyY9XAg9uTww8e6VfriAbwX7AVNzKXjN7DVAGfks6LYF/0/272D4C56DE64C83FE291166829B6E1D3581F58FF.crl
                          rsync://rpki-repo.registro.br/repo/HyY9XAg9uTww8e6VfriAbwX7AVNzKXjN7DVAGfks6LYF/0/272D4C56DE64C83FE291166829B6E1D3581F58FF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/272D4C56DE64C83FE291166829B6E1D3581F58FF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:62:a4:6e:6b:82:61:87:a6:22:a9:c2:af:82:e6:e8:8d:fd:b2:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=272D4C56DE64C83FE291166829B6E1D3581F58FF
        Validity
            Not Before: Jul 28 23:05:39 2025 GMT
            Not After : Jul 27 23:10:39 2026 GMT
        Subject: CN=1971054B1CEF034AFD9D44211551255C679A0076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:82:36:bb:d3:86:e7:64:f9:c1:e0:ef:54:c3:
                    0f:e7:12:9f:e8:02:cf:fe:9e:3f:d8:9c:d1:ed:e1:
                    63:5a:d2:7c:e0:8c:83:12:8a:3c:31:36:85:6a:08:
                    88:98:45:5c:35:c6:34:d0:fc:4d:27:20:85:93:b6:
                    ad:a2:d0:09:1b:30:e7:3d:41:9b:9c:db:7d:a3:3a:
                    04:96:99:01:82:27:1e:7b:eb:ee:e6:5b:b7:82:34:
                    ea:6c:e2:82:29:85:c4:cd:31:11:0b:c9:13:f1:11:
                    9d:45:f4:d8:b0:5d:f4:df:88:e0:08:e0:15:f1:dc:
                    e8:f9:63:22:da:f6:8a:cc:e8:7c:36:90:94:f2:03:
                    e2:93:7c:e3:b3:2d:19:4b:4a:3a:f4:03:75:5d:fd:
                    df:c2:fb:a5:e0:d4:c2:5b:81:f3:31:66:0d:28:d4:
                    f7:e7:26:7a:1f:f2:45:e7:8b:d2:f6:e8:fd:7f:c7:
                    08:d6:73:d7:46:4d:cd:4d:0d:9c:d1:ca:65:fc:5a:
                    03:37:b9:c6:33:a4:33:91:02:0c:25:45:2c:1d:87:
                    1d:52:b2:31:ad:2e:c6:23:ad:90:44:27:8d:28:60:
                    29:11:6e:12:48:55:b5:9a:5c:d6:a8:9f:f8:aa:d0:
                    c0:ff:a4:cd:16:d1:2a:a3:29:ff:ab:e8:59:73:05:
                    b3:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:71:05:4B:1C:EF:03:4A:FD:9D:44:21:15:51:25:5C:67:9A:00:76
            X509v3 Authority Key Identifier:
                keyid:27:2D:4C:56:DE:64:C8:3F:E2:91:16:68:29:B6:E1:D3:58:1F:58:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HyY9XAg9uTww8e6VfriAbwX7AVNzKXjN7DVAGfks6LYF/0/272D4C56DE64C83FE291166829B6E1D3581F58FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/272D4C56DE64C83FE291166829B6E1D3581F58FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HyY9XAg9uTww8e6VfriAbwX7AVNzKXjN7DVAGfks6LYF/0/3230302e32342e3130332e302f32342d3234203d3e20323731363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.24.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:cd:33:08:ee:54:9c:da:b3:45:48:d0:d8:e5:cd:a2:1e:ae:
         5d:0e:9b:fa:b5:19:58:ae:75:22:b4:f6:2f:8a:0f:11:ca:13:
         98:4a:3d:42:3b:f3:a1:ae:76:c7:13:41:eb:18:28:69:87:ac:
         28:a5:cc:96:fc:3e:38:69:e8:e9:27:26:fd:99:7f:8a:45:f0:
         ef:cd:b8:e3:3e:70:05:0d:d9:9c:cd:4e:0d:0e:52:3b:29:f2:
         8a:f4:5c:69:d9:b6:2c:bf:8d:ab:5a:a7:a2:e5:2a:76:98:30:
         a9:21:52:80:43:7d:e7:34:9d:47:eb:24:3d:6c:22:3b:26:5a:
         05:f2:d0:91:ae:26:a3:b0:49:8b:92:54:42:14:e1:ce:74:ee:
         da:2f:99:5e:61:4d:48:dd:0b:01:b3:e9:cd:7d:cc:1b:18:b0:
         f7:e3:90:b1:97:2f:11:e9:b8:c9:79:48:81:e9:ab:38:db:52:
         de:4f:d6:91:3d:64:fe:7c:b5:77:e1:1e:2f:55:76:3b:5b:eb:
         d3:7f:84:e4:c6:f0:e4:57:e8:1c:c5:db:38:20:46:53:25:eb:
         46:df:74:7f:ed:ab:6d:02:82:97:ba:d9:3a:f3:c7:eb:6e:83:
         7e:33:0e:90:c7:13:03:d3:24:b9:b2:8a:ec:2c:c8:3b:4b:dd:
         e6:5a:51:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:18:17 2025 by rpki-client