Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3230302e37392e3138342e302f32322d3232203d3e20323632343434.roa
File:                     3230302e37392e3138342e302f32322d3232203d3e20323632343434.roa (raw, json)
Hash identifier:          LAqK22FoLjJY9DkSBajcf3cSP40L2Zg2xaRu7hLiPl4=
Subject key identifier:   A4:64:B0:60:2C:AC:AC:E5:F2:98:81:3A:DE:39:DD:B3:94:9C:56:F3
Certificate issuer:       /CN=B883529218840F471E398CF8F585B71D007A2B35
Certificate serial:       58A39C793C454386AA583020D8CB1B99ECBC1C7E
Authority key identifier: B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3230302e37392e3138342e302f32322d3232203d3e20323632343434.roa
Signing time:             Wed 09 Jul 2025 14:04:41 +0000
ROA not before:           Wed 09 Jul 2025 13:59:41 +0000
ROA not after:            Wed 08 Jul 2026 14:04:41 +0000
asID:                     262444
IP address blocks:        200.79.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl
                          rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 15:16:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:a3:9c:79:3c:45:43:86:aa:58:30:20:d8:cb:1b:99:ec:bc:1c:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B883529218840F471E398CF8F585B71D007A2B35
        Validity
            Not Before: Jul  9 13:59:41 2025 GMT
            Not After : Jul  8 14:04:41 2026 GMT
        Subject: CN=A464B0602CACACE5F298813ADE39DDB3949C56F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:31:b8:25:1e:24:d6:85:85:49:4e:fb:08:67:
                    5e:6b:5d:90:1f:46:2f:e3:54:94:ca:55:86:0b:ed:
                    d4:43:12:b6:c3:1c:b6:04:5f:12:af:f5:58:39:b6:
                    3e:22:2f:e8:65:fc:f7:09:84:b5:f7:88:ed:39:b2:
                    90:6f:8b:3c:c4:b0:93:5c:f6:14:df:f1:9b:19:7a:
                    3e:0a:cb:31:30:68:cd:b4:db:93:0d:b0:d0:ec:96:
                    f9:87:0e:3d:c3:bf:45:57:5d:ac:3e:9c:26:db:33:
                    e0:87:94:d6:3a:4c:de:55:f1:8b:bc:b0:58:e3:93:
                    39:9b:e3:fe:44:8e:39:5f:da:51:d2:e1:25:8c:df:
                    86:29:57:5d:22:df:3b:84:db:20:44:4d:99:b0:98:
                    14:ef:5d:e7:7e:41:9f:e4:15:5a:8d:aa:4c:f4:cb:
                    98:df:51:ca:83:62:77:aa:70:ee:a0:4e:69:0e:f2:
                    c2:e4:66:a3:67:97:34:b9:ba:d7:1f:80:fc:ee:f7:
                    7a:85:75:c4:67:a1:30:11:b0:77:1e:69:6e:af:6f:
                    05:2d:40:6e:fe:31:d6:b7:71:28:f2:7a:c6:62:8a:
                    de:c1:57:6f:54:ed:75:71:44:50:ca:90:60:7f:5a:
                    70:cc:a8:b7:80:86:4c:78:dc:8f:e4:ab:26:48:5f:
                    3b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:64:B0:60:2C:AC:AC:E5:F2:98:81:3A:DE:39:DD:B3:94:9C:56:F3
            X509v3 Authority Key Identifier:
                keyid:B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3230302e37392e3138342e302f32322d3232203d3e20323632343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.79.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:2d:07:d6:40:74:92:31:b4:03:74:d7:a3:20:96:bc:16:b8:
         82:47:70:5d:0e:30:0b:25:e5:dd:d3:9d:d1:70:3e:f9:fb:14:
         9a:c7:f5:37:d7:de:9e:46:d9:d5:cf:05:72:39:07:46:55:92:
         e7:46:a1:bb:6d:82:54:fa:67:59:23:94:93:c2:53:b4:17:c6:
         8f:c9:6f:0f:37:e1:00:d6:64:e7:7c:c2:05:40:1c:ad:03:99:
         51:b7:b8:5e:ed:94:db:b8:a2:81:ff:6b:f2:cc:8c:90:6f:d0:
         bb:74:bb:bb:62:0c:12:90:32:15:8b:6e:c1:9a:6f:b8:86:59:
         38:75:58:b4:3d:a3:4d:80:a1:b2:a1:d6:68:c9:a8:34:ca:a6:
         ca:d5:67:0c:f6:46:8d:f7:fa:7c:3a:ea:00:82:1d:81:26:51:
         eb:ca:66:f4:8f:29:e1:55:ca:cd:18:56:cc:55:b6:70:03:43:
         f7:6f:00:95:8d:c6:90:09:aa:ed:4e:39:80:b6:aa:bb:e8:7a:
         8c:60:97:5c:44:76:de:18:5f:d1:c2:ac:c3:c5:ba:50:3a:8b:
         cd:69:f8:e6:95:6d:51:f3:ae:d8:0b:5f:84:e3:4a:f7:7d:b0:
         7d:4b:85:fa:61:98:3e:85:28:bd:25:13:df:40:19:d6:a7:67:
         32:83:c6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:04:33 2025 by rpki-client