Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3230302e37392e3139302e302f32332d3233203d3e20323632343434.roa
File:                     3230302e37392e3139302e302f32332d3233203d3e20323632343434.roa (raw, json)
Hash identifier:          QLUgiIJhj3g51Dj/wXjqYy9xcOlFBmLuiouM+lY8T0c=
Subject key identifier:   C8:03:6A:F1:A7:5B:AC:B2:D2:5A:C9:A7:9D:AC:10:8F:37:56:B7:EF
Certificate issuer:       /CN=B883529218840F471E398CF8F585B71D007A2B35
Certificate serial:       53578530DF30B4BEDB84F71760CDBADDC882EEEE
Authority key identifier: B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3230302e37392e3139302e302f32332d3233203d3e20323632343434.roa
Signing time:             Wed 09 Jul 2025 14:04:42 +0000
ROA not before:           Wed 09 Jul 2025 13:59:42 +0000
ROA not after:            Wed 08 Jul 2026 14:04:42 +0000
asID:                     262444
IP address blocks:        200.79.190.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl
                          rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 15:16:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:57:85:30:df:30:b4:be:db:84:f7:17:60:cd:ba:dd:c8:82:ee:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B883529218840F471E398CF8F585B71D007A2B35
        Validity
            Not Before: Jul  9 13:59:42 2025 GMT
            Not After : Jul  8 14:04:42 2026 GMT
        Subject: CN=C8036AF1A75BACB2D25AC9A79DAC108F3756B7EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:29:0a:37:d3:ac:a3:3a:33:76:c1:b1:1b:48:
                    b7:46:29:2c:bb:45:da:2d:aa:10:7c:24:3b:18:7c:
                    25:e4:b2:5f:a5:70:10:00:46:e0:e6:4c:cf:8a:3d:
                    54:db:57:75:0f:95:47:14:a6:57:e7:e6:ae:42:f9:
                    dd:64:40:3a:6c:c5:9a:e1:63:5d:bd:92:b3:43:9d:
                    fb:5c:dd:57:58:d9:bf:ef:17:96:06:01:fc:41:9f:
                    56:ae:e6:5f:e1:d3:81:10:cc:43:4b:8c:ca:10:ff:
                    5c:38:26:50:6d:f3:e5:ff:92:d0:0b:3b:30:2f:0f:
                    b6:14:94:f4:03:db:cb:5c:ec:5f:67:e3:85:ad:a1:
                    bd:84:1c:df:a3:df:19:41:e1:30:0e:48:33:ad:0d:
                    f9:c3:f6:53:85:86:d5:86:76:8d:8f:56:d7:96:9d:
                    e2:97:7e:7a:ba:37:ec:7d:26:f7:74:c7:d9:0c:7d:
                    1d:72:7e:1f:93:6b:3b:2b:b1:2e:c5:c1:96:ea:53:
                    79:14:d8:f2:1b:49:02:bb:60:b6:8e:4e:47:f5:80:
                    c6:10:71:02:8e:a5:8c:37:22:d8:fc:cd:5a:f2:04:
                    82:59:55:74:46:c2:7c:21:88:b5:0d:7c:21:5c:59:
                    21:fb:34:a6:d3:62:80:ed:9e:23:6f:0a:bf:dd:b3:
                    ec:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:03:6A:F1:A7:5B:AC:B2:D2:5A:C9:A7:9D:AC:10:8F:37:56:B7:EF
            X509v3 Authority Key Identifier:
                keyid:B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3230302e37392e3139302e302f32332d3233203d3e20323632343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.79.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6b:1d:f3:3f:79:d8:37:54:15:5b:b3:17:54:0c:09:ad:17:ca:
         d8:10:0b:60:94:bd:a8:0b:8f:a9:df:d3:b8:01:78:2e:e9:08:
         62:e3:a5:f2:4b:83:6b:c5:55:73:82:60:f2:93:56:3c:50:53:
         bd:d8:41:c6:84:88:de:f7:1e:8f:00:47:9d:bc:da:74:d8:99:
         c2:38:ad:0f:94:45:1d:e4:a7:30:6b:b2:76:5c:f4:42:87:01:
         cb:64:2b:26:91:3c:74:9e:a7:20:3c:fe:d2:82:01:2b:12:b8:
         f6:c5:9f:78:39:6e:ae:7f:b3:c6:9d:e3:33:ea:44:e1:9b:d3:
         33:34:c3:15:c3:62:a8:3a:5c:42:ee:29:d4:e0:cc:10:1f:04:
         55:8d:32:73:01:66:d7:76:ae:b0:5a:bd:02:2b:04:46:27:91:
         c7:07:f2:e3:79:af:f7:27:c9:1f:63:de:24:60:1c:a7:a7:2c:
         50:0d:d1:f0:a8:c7:5b:2a:47:da:dc:14:fb:db:6c:0c:8c:41:
         68:3a:a0:b4:80:48:36:da:82:9d:fd:80:22:7b:9a:20:22:04:
         83:4d:b7:63:20:82:df:b4:76:dd:07:19:eb:1d:94:77:23:be:
         c8:29:c7:a3:8b:a7:f2:d1:48:38:e5:0b:ab:93:2e:7e:bf:a8:
         b4:57:90:f5
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUU1eFMN8wtL7bhPcXYM263ciC7u4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjg4MzUyOTIxODg0MEY0NzFFMzk4Q0Y4RjU4NUI3MUQw
MDdBMkIzNTAeFw0yNTA3MDkxMzU5NDJaFw0yNjA3MDgxNDA0NDJaMDMxMTAvBgNV
BAMTKEM4MDM2QUYxQTc1QkFDQjJEMjVBQzlBNzlEQUMxMDhGMzc1NkI3RUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjKQo306yjOjN2wbEbSLdGKSy7
RdotqhB8JDsYfCXksl+lcBAARuDmTM+KPVTbV3UPlUcUplfn5q5C+d1kQDpsxZrh
Y129krNDnftc3VdY2b/vF5YGAfxBn1au5l/h04EQzENLjMoQ/1w4JlBt8+X/ktAL
OzAvD7YUlPQD28tc7F9n44Wtob2EHN+j3xlB4TAOSDOtDfnD9lOFhtWGdo2PVteW
neKXfnq6N+x9Jvd0x9kMfR1yfh+TazsrsS7FwZbqU3kU2PIbSQK7YLaOTkf1gMYQ
cQKOpYw3Itj8zVryBIJZVXRGwnwhiLUNfCFcWSH7NKbTYoDtniNvCr/ds+yFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUyANq8adbrLLSWsmnnawQjzdWt+8wHwYDVR0j
BBgwFoAUuINSkhiED0ceOYz49YW3HQB6KzUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlFlZFp0SFM5eXFONjNvMXJzVEFMblhhQmFtTnZ0OW1MQWdlQmFnTjVQ
bjQvMS9CODgzNTI5MjE4ODQwRjQ3MUUzOThDRjhGNTg1QjcxRDAwN0EyQjM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I4ODM1MjkyMTg4NDBGNDcx
RTM5OENGOEY1ODVCNzFEMDA3QTJCMzUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJRZWRadEhTOXlxTjYzbzFyc1RBTG5YYUJhbU52dDltTEFnZUJhZ041UG40LzEv
MzIzMDMwMmUzNzM5MmUzMTM5MzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzIzNDM0MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAHIT74wDQYJKoZIhvcNAQELBQADggEBAGsd8z95
2DdUFVuzF1QMCa0XytgQC2CUvagLj6nf07gBeC7pCGLjpfJLg2vFVXOCYPKTVjxQ
U73YQcaEiN73Ho8AR5282nTYmcI4rQ+URR3kpzBrsnZc9EKHActkKyaRPHSepyA8
/tKCASsSuPbFn3g5bq5/s8ad4zPqROGb0zM0wxXDYqg6XELuKdTgzBAfBFWNMnMB
Ztd2rrBavQIrBEYnkccH8uN5r/cnyR9j3iRgHKenLFAN0fCox1sqR9rcFPvbbAyM
QWg6oLSASDbagp39gCJ7miAiBINNt2Mggt+0dt0HGesdlHcjvsgpx6OLp/LRSDjl
C6uTLn6/qLRXkPU=
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:09:19 2025 by rpki-client