Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/3230302e35302e3230302e302f32322d3234203d3e20323730343637.roa
File:                     3230302e35302e3230302e302f32322d3234203d3e20323730343637.roa (raw, json)
Hash identifier:          qR6iS5F06BWnuM8HyC9ItrpXDfvJvjlt1MMd4yffj18=
Subject key identifier:   A7:ED:ED:71:E4:B8:59:26:BD:BE:5B:7B:2E:8B:29:1D:6D:1F:64:C7
Certificate issuer:       /CN=CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF
Certificate serial:       5A4FB50809C997503A43B04815D74A95B9AB57DD
Authority key identifier: CA:F5:20:4B:41:16:9C:BB:F2:F6:8A:50:0E:03:6F:BA:6C:3C:3B:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/3230302e35302e3230302e302f32322d3234203d3e20323730343637.roa
Signing time:             Fri 15 Aug 2025 04:12:35 +0000
ROA not before:           Fri 15 Aug 2025 04:07:35 +0000
ROA not after:            Fri 14 Aug 2026 04:12:35 +0000
asID:                     270467
IP address blocks:        200.50.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.crl
                          rsync://rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 04:44:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:4f:b5:08:09:c9:97:50:3a:43:b0:48:15:d7:4a:95:b9:ab:57:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF
        Validity
            Not Before: Aug 15 04:07:35 2025 GMT
            Not After : Aug 14 04:12:35 2026 GMT
        Subject: CN=A7EDED71E4B85926BDBE5B7B2E8B291D6D1F64C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:bd:b2:db:14:df:cb:c0:15:03:5f:5f:c8:fd:
                    86:e0:18:9d:90:c6:f3:74:54:c1:7d:7d:fe:03:83:
                    28:81:56:50:8b:c6:b7:ba:c7:bb:7b:fd:92:8e:8b:
                    89:fa:fc:3b:83:1d:54:b1:02:7d:47:78:69:bd:dd:
                    9e:75:3a:9f:eb:8c:6c:af:71:32:8d:a7:7d:b0:6b:
                    6b:64:ed:cd:b6:c8:37:57:2e:67:18:2c:0c:06:5e:
                    bd:f3:4f:ac:8e:50:f0:2f:56:12:67:5a:de:96:35:
                    28:65:e2:f0:08:3a:3c:cc:ce:c4:05:9c:9a:19:07:
                    0e:51:5f:44:b2:2c:bf:ba:aa:8a:5e:ac:2f:40:9f:
                    be:74:99:ab:5b:48:32:32:f7:78:ae:d3:70:52:9d:
                    5d:f5:9c:94:7f:80:81:d9:4c:b3:b6:e5:5b:f6:84:
                    29:c9:96:ef:52:6e:fc:0a:1a:41:8c:9a:73:7b:f2:
                    96:62:97:f8:93:91:e4:55:25:73:88:46:54:db:81:
                    f7:6d:aa:8f:71:f6:69:de:03:dd:09:d5:33:cd:4f:
                    41:cc:df:78:4e:73:ac:cd:71:06:35:65:5f:63:ef:
                    83:ac:05:5e:2d:c1:2b:97:44:1c:29:17:a9:02:55:
                    ed:5e:21:3d:38:52:73:5e:95:b1:50:31:e4:a5:00:
                    ad:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:ED:ED:71:E4:B8:59:26:BD:BE:5B:7B:2E:8B:29:1D:6D:1F:64:C7
            X509v3 Authority Key Identifier:
                keyid:CA:F5:20:4B:41:16:9C:BB:F2:F6:8A:50:0E:03:6F:BA:6C:3C:3B:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/3230302e35302e3230302e302f32322d3234203d3e20323730343637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:5c:d8:9d:77:9b:11:54:c4:4e:b8:96:98:d4:de:0d:59:01:
         a9:de:b2:04:70:bb:76:3b:82:b8:cb:c1:e4:fd:8d:24:7f:10:
         b0:57:a9:e2:e0:d4:84:48:c9:e4:e9:59:4b:d5:40:b6:8a:1c:
         ce:ff:25:c1:45:fd:2b:8a:40:a8:b1:bf:14:99:92:8d:eb:d1:
         39:69:02:3f:5a:40:14:04:ef:bd:74:f6:77:72:64:f4:d2:95:
         84:a2:57:c5:c5:66:e3:e6:89:73:28:15:ce:6c:a4:50:9e:0f:
         8e:17:d3:1d:04:7f:3f:05:bd:35:84:4e:b5:bf:6f:a4:4d:62:
         2d:a5:e5:72:42:cb:1b:92:42:0c:7f:d6:51:7d:a1:d6:33:f8:
         60:08:88:fa:09:5c:a1:30:40:77:1d:88:ce:ad:16:c4:8c:c6:
         9c:db:2c:51:f2:79:5a:14:0c:7f:fb:4d:73:c5:23:bb:4b:25:
         de:64:e5:fc:47:93:37:6d:78:cf:13:96:92:7f:25:4a:78:02:
         be:c7:dd:da:ca:b5:c8:75:18:a5:3a:d6:f7:f8:6b:74:36:9b:
         82:f2:29:1f:1b:d6:88:44:86:25:3e:2c:61:89:8c:d9:d6:59:
         6a:f7:c8:a2:ac:c7:bd:0a:73:77:e2:8e:4d:0d:d3:c7:d2:81:
         22:c7:ac:b3
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWk+1CAnJl1A6Q7BIFddKlbmrV90wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0FGNTIwNEI0MTE2OUNCQkYyRjY4QTUwMEUwMzZGQkE2
QzNDM0JFRjAeFw0yNTA4MTUwNDA3MzVaFw0yNjA4MTQwNDEyMzVaMDMxMTAvBgNV
BAMTKEE3RURFRDcxRTRCODU5MjZCREJFNUI3QjJFOEIyOTFENkQxRjY0QzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCavbLbFN/LwBUDX1/I/YbgGJ2Q
xvN0VMF9ff4DgyiBVlCLxre6x7t7/ZKOi4n6/DuDHVSxAn1HeGm93Z51Op/rjGyv
cTKNp32wa2tk7c22yDdXLmcYLAwGXr3zT6yOUPAvVhJnWt6WNShl4vAIOjzMzsQF
nJoZBw5RX0SyLL+6qoperC9An750matbSDIy93iu03BSnV31nJR/gIHZTLO25Vv2
hCnJlu9SbvwKGkGMmnN78pZil/iTkeRVJXOIRlTbgfdtqo9x9mneA90J1TPNT0HM
33hOc6zNcQY1ZV9j74OsBV4twSuXRBwpF6kCVe1eIT04UnNelbFQMeSlAK2XAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUp+3tceS4WSa9vlt7LospHW0fZMcwHwYDVR0j
BBgwFoAUyvUgS0EWnLvy9opQDgNvumw8O+8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDVnZGczakZpaWJzdjlIMnhqcjFVN3pkdkNYc3NHaGFnYmFSd3JIVzZK
RTkvMC9DQUY1MjA0QjQxMTY5Q0JCRjJGNjhBNTAwRTAzNkZCQTZDM0MzQkVGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBRjUyMDRCNDExNjlDQkJG
MkY2OEE1MDBFMDM2RkJBNkMzQzNCRUYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ1Z2RnM2pGaWlic3Y5SDJ4anIxVTd6ZHZDWHNzR2hhZ2JhUndySFc2SkU5LzAv
MzIzMDMwMmUzNTMwMmUzMjMwMzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3
MzAzNDM2Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALIMsgwDQYJKoZIhvcNAQELBQADggEBAIpc2J13
mxFUxE64lpjU3g1ZAanesgRwu3Y7grjLweT9jSR/ELBXqeLg1IRIyeTpWUvVQLaK
HM7/JcFF/SuKQKixvxSZko3r0TlpAj9aQBQE77109ndyZPTSlYSiV8XFZuPmiXMo
Fc5spFCeD44X0x0Efz8FvTWETrW/b6RNYi2l5XJCyxuSQgx/1lF9odYz+GAIiPoJ
XKEwQHcdiM6tFsSMxpzbLFHyeVoUDH/7TXPFI7tLJd5k5fxHkzdteM8TlpJ/JUp4
Ar7H3drKtch1GKU61vf4a3Q2m4LyKR8b1ohEhiU+LGGJjNnWWWr3yKKsx70Kc3fi
jk0N08fSgSLHrLM=
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:37:56 2025 by rpki-client