Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/3230312e3231362e39302e302f32342d3234203d3e20323731373236.roa
File:                     3230312e3231362e39302e302f32342d3234203d3e20323731373236.roa (raw, json)
Hash identifier:          176HohP2cDemhErmtcMScxIcp388+bZ2+jEdX0cpY0U=
Subject key identifier:   79:94:EB:53:E1:7A:64:D3:6E:36:68:15:7C:9A:5B:12:BF:6D:7D:ED
Certificate issuer:       /CN=E4A60880B8D4EC0024322D87A27CBCBDC2192A65
Certificate serial:       19BC906DBDCB85D3803FB251BA3AD3AB7CC2D601
Authority key identifier: E4:A6:08:80:B8:D4:EC:00:24:32:2D:87:A2:7C:BC:BD:C2:19:2A:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/3230312e3231362e39302e302f32342d3234203d3e20323731373236.roa
Signing time:             Fri 08 Aug 2025 03:00:00 +0000
ROA not before:           Fri 08 Aug 2025 02:55:00 +0000
ROA not after:            Fri 07 Aug 2026 03:00:00 +0000
asID:                     271726
IP address blocks:        201.216.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.crl
                          rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 13:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:bc:90:6d:bd:cb:85:d3:80:3f:b2:51:ba:3a:d3:ab:7c:c2:d6:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4A60880B8D4EC0024322D87A27CBCBDC2192A65
        Validity
            Not Before: Aug  8 02:55:00 2025 GMT
            Not After : Aug  7 03:00:00 2026 GMT
        Subject: CN=7994EB53E17A64D36E3668157C9A5B12BF6D7DED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:63:70:29:cb:b1:96:0a:9f:66:1f:20:79:c2:
                    c8:52:c1:40:6c:e5:22:a1:57:c1:4d:dd:55:74:33:
                    f6:70:44:f2:db:40:85:56:96:fb:6f:da:25:ee:61:
                    48:4c:16:f8:ce:80:d0:87:ec:f4:e1:4e:82:9f:f2:
                    9a:41:c4:ff:6f:77:ea:d3:81:d8:9e:a4:f1:1f:bf:
                    35:07:25:9c:f6:93:9e:e1:a4:36:7b:e2:2c:a7:30:
                    f9:12:61:1c:83:f5:e1:9d:5a:a9:1b:f1:cf:c0:76:
                    3f:49:86:50:ed:76:77:2c:05:95:33:60:63:a3:d0:
                    fe:2f:bc:0f:5e:d7:f2:2b:2b:ee:96:98:25:b8:92:
                    9b:98:30:84:85:a6:ca:08:61:53:a7:c8:8d:a5:eb:
                    32:f6:26:bd:a1:1a:fb:f9:a4:32:44:04:b8:20:39:
                    7d:2e:8a:26:18:43:d6:43:8d:29:86:e9:99:f0:fe:
                    8a:f9:4d:7a:56:8f:89:24:64:07:91:5a:b1:b4:66:
                    de:16:17:30:eb:da:7a:36:7a:20:91:60:b8:db:d8:
                    46:05:a7:a8:08:7c:70:cd:98:a0:48:75:7f:7f:06:
                    96:73:a4:cc:e0:3f:7e:40:61:89:0e:40:7c:98:7e:
                    78:4c:11:9c:33:28:9d:ec:26:16:2d:c8:41:9b:bd:
                    da:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:94:EB:53:E1:7A:64:D3:6E:36:68:15:7C:9A:5B:12:BF:6D:7D:ED
            X509v3 Authority Key Identifier:
                keyid:E4:A6:08:80:B8:D4:EC:00:24:32:2D:87:A2:7C:BC:BD:C2:19:2A:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/3230312e3231362e39302e302f32342d3234203d3e20323731373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.216.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:b6:28:60:23:71:5c:6a:0f:90:32:f7:ef:91:32:94:b2:2d:
         14:de:cf:93:9d:ff:ff:c4:36:72:1a:9d:5c:0d:65:7a:0d:31:
         86:9c:6b:62:71:8e:90:d7:bb:32:d2:23:e1:f2:fa:ed:b5:9a:
         68:d3:f2:80:8e:aa:97:45:7f:e3:a8:92:a6:36:ef:66:3e:3d:
         c8:40:39:0c:67:ed:12:82:10:bb:f7:ca:e7:53:7f:aa:0f:59:
         75:d6:d3:ed:73:bb:df:e0:11:f3:99:0c:e9:21:00:13:c7:88:
         0a:e3:d1:d7:ef:88:cc:71:69:db:e2:3a:9e:45:b4:99:38:04:
         27:ec:2b:4c:77:31:53:3f:18:35:c5:28:90:a5:a6:1f:79:8f:
         48:66:87:33:70:9f:7c:09:52:e9:6e:c8:c1:a6:28:e5:58:44:
         88:bc:72:97:a7:28:85:fb:28:ae:cb:8c:0e:76:17:cf:51:ff:
         65:5d:99:cd:78:25:5a:3a:ac:bc:2f:64:6d:0c:24:5b:39:a5:
         1f:7d:2a:14:54:8f:7c:00:14:e1:27:90:9b:0d:fb:58:16:a5:
         00:3b:36:a5:70:f2:2f:8f:2a:98:37:7b:95:55:ce:79:82:dd:
         62:98:81:90:72:a7:e1:c6:92:86:c6:d1:6b:95:d5:ce:2d:67:
         2d:c0:e2:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:15:54 2025 by rpki-client