Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/3230312e3231362e38382e302f32342d3234203d3e20323731373236.roa
File:                     3230312e3231362e38382e302f32342d3234203d3e20323731373236.roa (raw, json)
Hash identifier:          3UwPYcxVHheWIwCOhwO740kSBZeRKRM4EpzhT4xYRog=
Subject key identifier:   BB:FB:60:83:6A:F5:9F:D6:C9:2F:D6:B0:B1:3D:38:A8:19:49:27:3C
Certificate issuer:       /CN=E4A60880B8D4EC0024322D87A27CBCBDC2192A65
Certificate serial:       1D5D181042C998DFABE47636394F96D5000F5613
Authority key identifier: E4:A6:08:80:B8:D4:EC:00:24:32:2D:87:A2:7C:BC:BD:C2:19:2A:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/3230312e3231362e38382e302f32342d3234203d3e20323731373236.roa
Signing time:             Fri 08 Aug 2025 03:00:00 +0000
ROA not before:           Fri 08 Aug 2025 02:55:00 +0000
ROA not after:            Fri 07 Aug 2026 03:00:00 +0000
asID:                     271726
IP address blocks:        201.216.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.crl
                          rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 08:51:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:5d:18:10:42:c9:98:df:ab:e4:76:36:39:4f:96:d5:00:0f:56:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4A60880B8D4EC0024322D87A27CBCBDC2192A65
        Validity
            Not Before: Aug  8 02:55:00 2025 GMT
            Not After : Aug  7 03:00:00 2026 GMT
        Subject: CN=BBFB60836AF59FD6C92FD6B0B13D38A81949273C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a3:8b:e3:f4:c2:45:62:57:ce:19:8e:27:17:
                    53:3b:48:49:0b:13:16:15:8b:b1:1c:8b:fe:70:1b:
                    b7:c9:65:6a:70:e6:82:b1:8c:1c:4f:6b:13:c3:ef:
                    2e:da:92:4a:ec:64:56:48:75:a7:86:8a:c9:aa:da:
                    b2:a4:6b:3f:d1:cc:3b:8c:f0:20:91:2d:1f:76:c3:
                    1c:39:2a:2f:3b:70:d7:38:83:5e:d0:88:7f:a5:70:
                    93:fd:26:0d:64:a1:6a:db:33:60:ab:6c:b1:5a:ef:
                    ac:16:f6:8f:56:96:d2:d2:87:6b:9d:88:da:ac:db:
                    15:0c:fe:23:66:6a:c9:82:8f:9f:46:fe:81:74:cd:
                    76:c6:87:71:21:59:7e:e2:ec:37:fd:32:36:c9:98:
                    ac:48:bf:44:c5:3e:6d:a5:db:d0:5c:a8:a4:46:52:
                    1f:1a:6c:40:63:a9:15:77:ac:4a:c0:11:9d:1e:be:
                    fb:0d:9c:a7:20:12:3d:fd:d7:65:dc:fc:cd:5f:e4:
                    f2:fd:c8:2f:6b:80:d8:7e:44:1f:14:25:4f:8b:3f:
                    02:39:46:c0:64:82:81:72:91:27:85:3f:d5:7d:fa:
                    f2:37:7d:c0:40:18:c4:05:49:fe:72:de:1c:d3:0e:
                    d0:a6:75:96:4d:d6:14:f5:c6:f8:24:bf:be:fc:3a:
                    29:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:FB:60:83:6A:F5:9F:D6:C9:2F:D6:B0:B1:3D:38:A8:19:49:27:3C
            X509v3 Authority Key Identifier:
                keyid:E4:A6:08:80:B8:D4:EC:00:24:32:2D:87:A2:7C:BC:BD:C2:19:2A:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/3230312e3231362e38382e302f32342d3234203d3e20323731373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.216.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:8c:8e:cb:1c:c4:cf:56:7b:30:d3:e0:c9:13:3a:ce:91:08:
         a9:c2:e9:1f:4c:bf:25:bd:fc:96:00:d0:14:f7:3f:c3:4e:55:
         fe:88:80:d1:28:0c:81:eb:22:52:1a:a6:c1:a7:6f:9d:70:07:
         2a:17:10:2f:8f:26:d0:5f:f8:42:bb:10:a9:24:83:81:3b:8d:
         f6:49:c9:2d:d1:b4:eb:70:b6:cd:28:fd:78:9d:bb:25:7d:b5:
         e8:a2:b1:4b:84:7d:31:87:5e:9a:1c:b4:77:53:e7:a1:53:f5:
         1f:2e:8d:0d:11:c1:f3:d6:a0:00:8c:5f:4f:73:96:6b:cc:57:
         b2:49:e6:7d:5a:17:9d:ae:04:31:d7:60:af:23:9a:eb:a5:48:
         e1:db:52:4f:b4:cf:93:2c:8c:47:47:de:2d:9b:8e:26:45:1f:
         be:4e:76:1b:f2:c3:3b:bd:2b:d7:08:44:28:32:23:c4:61:8f:
         2b:56:fa:dd:7c:89:a6:92:71:98:98:99:c0:f8:06:09:91:97:
         34:4b:9d:b8:59:1d:f7:dc:98:56:fa:4c:8e:18:d3:a9:d8:6f:
         09:2c:31:c2:a9:8e:61:4b:f8:e1:38:3f:be:cf:0b:44:d0:0c:
         23:38:72:d8:47:98:ab:da:47:c1:33:01:0d:04:b7:cd:26:3a:
         12:9f:da:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:56:46 2025 by rpki-client