Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/3230312e3231362e39312e302f32342d3234203d3e20323731373236.roa
File:                     3230312e3231362e39312e302f32342d3234203d3e20323731373236.roa (raw, json)
Hash identifier:          SCqvVnKJWTAi35+y92o83+gSn5huhZy+MP2Rrg5qquM=
Subject key identifier:   02:23:1E:D7:C6:2D:DC:64:8A:D5:49:1D:EB:14:13:74:15:42:B9:B2
Certificate issuer:       /CN=E4A60880B8D4EC0024322D87A27CBCBDC2192A65
Certificate serial:       1E5468AEB1E7FAA236E79CBDBDE80C2AD0FF6B74
Authority key identifier: E4:A6:08:80:B8:D4:EC:00:24:32:2D:87:A2:7C:BC:BD:C2:19:2A:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/3230312e3231362e39312e302f32342d3234203d3e20323731373236.roa
Signing time:             Fri 08 Aug 2025 03:00:00 +0000
ROA not before:           Fri 08 Aug 2025 02:55:00 +0000
ROA not after:            Fri 07 Aug 2026 03:00:00 +0000
asID:                     271726
IP address blocks:        201.216.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.crl
                          rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 13:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:54:68:ae:b1:e7:fa:a2:36:e7:9c:bd:bd:e8:0c:2a:d0:ff:6b:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4A60880B8D4EC0024322D87A27CBCBDC2192A65
        Validity
            Not Before: Aug  8 02:55:00 2025 GMT
            Not After : Aug  7 03:00:00 2026 GMT
        Subject: CN=02231ED7C62DDC648AD5491DEB1413741542B9B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:e1:87:2d:1e:9a:7c:59:78:fa:36:6d:ba:47:
                    ff:78:36:d3:cc:de:83:c1:05:c0:ea:ef:c1:ac:b4:
                    e0:2a:06:f8:5f:45:21:e0:c9:37:31:08:47:7b:07:
                    8d:38:01:c1:ac:9a:0b:39:77:de:8d:9a:28:91:bd:
                    ee:82:a5:55:77:00:e7:24:11:14:e1:cd:73:1b:f1:
                    47:fd:bd:38:59:1f:1d:b1:01:f1:33:45:b3:9a:9d:
                    0c:d9:0b:8a:c7:9b:6b:75:e2:90:25:ae:08:ae:55:
                    e4:37:ff:f5:e2:ba:71:db:44:6b:da:84:89:1f:97:
                    e8:c7:8c:e6:d8:a5:9b:51:ad:fc:31:23:f1:d0:3b:
                    a9:90:48:31:c4:ee:d0:ef:e9:31:eb:84:da:5f:7a:
                    d1:9a:db:58:a9:40:b6:4e:7c:54:6e:64:eb:ba:07:
                    6b:b8:bd:5a:ab:e5:e6:1c:4a:a9:8f:1d:37:72:e5:
                    08:d6:d6:7b:55:b9:d0:6d:05:f1:63:65:05:a2:ce:
                    fe:c8:44:01:d5:e8:3f:e4:9e:b7:a9:62:01:5f:c9:
                    84:5e:75:0a:23:23:6b:8a:85:60:3c:3d:22:a7:92:
                    74:fd:f2:76:22:7e:4e:ab:63:73:87:06:6d:38:ec:
                    ce:b0:5d:33:08:92:37:46:49:6b:ec:cf:d5:23:8f:
                    91:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:23:1E:D7:C6:2D:DC:64:8A:D5:49:1D:EB:14:13:74:15:42:B9:B2
            X509v3 Authority Key Identifier:
                keyid:E4:A6:08:80:B8:D4:EC:00:24:32:2D:87:A2:7C:BC:BD:C2:19:2A:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/3230312e3231362e39312e302f32342d3234203d3e20323731373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.216.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:3a:72:13:44:37:b6:c0:07:34:cc:d6:bc:b7:12:b7:68:77:
         40:fb:62:ff:1a:07:1c:80:a2:8a:df:31:5b:5c:b1:5a:e3:98:
         bc:ae:02:7a:65:c8:29:21:cf:24:e9:61:3f:25:8a:0e:31:4c:
         93:e2:4d:14:d9:6b:2a:3f:76:39:cd:06:db:ac:61:56:64:fc:
         70:01:2b:78:9a:d2:f7:d6:2d:ef:3d:f4:1a:d8:fd:aa:50:27:
         dc:53:42:9f:34:b6:a1:a0:c0:af:7c:48:f5:1b:df:35:c4:d4:
         14:10:c7:4e:6c:b3:df:24:be:36:96:ce:d1:7a:2c:ac:bc:6a:
         57:05:4d:b4:eb:c5:67:e3:c8:c7:c5:0c:83:83:95:94:81:8c:
         fd:86:f9:3a:f2:e7:a6:c2:a8:bd:30:7d:14:03:12:56:0d:15:
         d4:29:66:96:c4:94:2c:1e:e2:45:3c:a7:45:32:ea:93:24:ab:
         b5:80:ef:8d:72:28:fe:8c:f2:a4:b6:c2:2c:42:c0:f0:26:ed:
         4e:6d:b6:6a:ec:90:15:4e:6f:f4:04:79:6e:94:f4:63:8e:55:
         2a:86:8d:78:90:bb:ca:71:d1:14:34:57:96:d6:d7:d0:85:38:
         a7:24:8f:15:ac:f5:06:fa:b6:f0:58:60:d5:fa:f5:71:f5:55:
         42:53:50:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:55:41 2025 by rpki-client