Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/3230302e35302e3230302e302f32322d3234203d3e20323730343637.roa
File:                     3230302e35302e3230302e302f32322d3234203d3e20323730343637.roa (raw, json)
Hash identifier:          AJeEclXa5CwX2AB7q02vhN8/s4ZahQeA1KNn13EmJOg=
Subject key identifier:   27:4C:5E:F0:77:61:B9:50:AC:05:D4:DB:FA:F6:06:B2:6C:28:27:7A
Certificate issuer:       /CN=CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF
Certificate serial:       22F4F836795CB14D7F9DF453B80E89F31D65C2C6
Authority key identifier: CA:F5:20:4B:41:16:9C:BB:F2:F6:8A:50:0E:03:6F:BA:6C:3C:3B:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/3230302e35302e3230302e302f32322d3234203d3e20323730343637.roa
Signing time:             Fri 17 Jul 2026 05:09:45 +0000
ROA not before:           Fri 17 Jul 2026 05:04:45 +0000
ROA not after:            Fri 16 Jul 2027 05:09:45 +0000
asID:                     270467
IP address blocks:        200.50.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.crl
                          rsync://rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 03:16:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:f4:f8:36:79:5c:b1:4d:7f:9d:f4:53:b8:0e:89:f3:1d:65:c2:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF
        Validity
            Not Before: Jul 17 05:04:45 2026 GMT
            Not After : Jul 16 05:09:45 2027 GMT
        Subject: CN=274C5EF07761B950AC05D4DBFAF606B26C28277A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6f:40:a9:23:99:81:c8:4b:3a:eb:f2:ed:4c:
                    99:49:92:8b:e9:04:e6:f4:f5:ae:25:d5:5f:35:19:
                    cb:55:24:67:45:b1:0e:45:97:39:72:f9:b1:5a:03:
                    5e:9c:e4:8c:0f:25:8c:a6:13:04:81:1e:be:bf:2b:
                    c7:0a:04:21:4b:da:05:57:b8:6a:00:c9:e6:59:fe:
                    10:f9:d6:d2:67:32:ca:e3:ec:5e:10:50:03:37:e7:
                    2c:fe:2f:3a:d2:1c:7d:da:64:fc:56:f2:ea:63:19:
                    be:f6:b6:80:de:d1:8e:7d:22:8d:1e:40:4a:d6:e5:
                    86:4d:2f:9c:8e:82:2e:34:a6:e6:1b:73:c8:8b:6f:
                    dd:6d:b6:4f:53:3a:4f:b0:06:bc:3f:4f:ac:ab:b2:
                    d6:5f:e4:cc:e9:fe:7e:47:8e:ad:1c:bd:4d:43:46:
                    66:b2:fe:7d:00:b0:e3:1f:d2:ef:1d:1b:a0:ce:87:
                    dc:a9:32:8c:77:23:ad:99:bb:5d:46:0c:47:d0:a4:
                    59:68:3f:c4:ef:b8:1a:15:7e:05:82:bd:22:de:ac:
                    04:4d:19:4e:0e:6e:df:e8:5b:6b:67:b8:c2:e8:e7:
                    39:7e:fe:72:e1:69:e8:a9:f7:e8:9d:f0:9b:5c:d3:
                    08:2b:c6:e5:6c:d3:ea:9f:cb:53:f4:a6:07:76:25:
                    ff:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:4C:5E:F0:77:61:B9:50:AC:05:D4:DB:FA:F6:06:B2:6C:28:27:7A
            X509v3 Authority Key Identifier:
                keyid:CA:F5:20:4B:41:16:9C:BB:F2:F6:8A:50:0E:03:6F:BA:6C:3C:3B:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAF5204B41169CBBF2F68A500E036FBA6C3C3BEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/45gdg3jFiibsv9H2xjr1U7zdvCXssGhagbaRwrHW6JE9/0/3230302e35302e3230302e302f32322d3234203d3e20323730343637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:f0:1d:32:75:b6:1b:fd:03:c0:e0:41:31:ec:d5:47:17:29:
         6f:42:1d:e1:55:da:f4:82:e5:23:bb:7d:9c:f9:d3:e6:1c:c6:
         ee:49:9a:34:fe:e5:26:47:a8:96:3d:ce:4b:d7:07:59:70:b4:
         e2:70:85:3a:55:9d:44:6e:85:46:7c:18:68:40:94:46:51:a2:
         ec:94:1c:1c:21:e2:2a:ac:a0:d6:9d:35:4f:0f:0b:b0:24:a4:
         dd:c7:c2:1d:9b:c4:75:e5:52:4e:d3:56:1e:3e:1e:a2:9a:72:
         19:be:6e:65:1a:3e:cb:ce:60:96:f5:8b:fd:be:95:3e:71:5d:
         01:55:18:e7:c5:7c:a0:34:77:4f:15:c6:87:f0:15:61:fe:86:
         0a:f7:69:25:b6:b1:24:85:56:a7:89:8f:06:73:2c:49:5a:e7:
         d9:75:a3:de:ee:3b:40:0e:4d:8f:2b:7f:e4:c0:c6:77:13:09:
         2f:0f:9c:02:c1:da:fa:35:fc:45:bd:51:18:4b:1a:36:e5:8e:
         83:68:88:43:73:7d:22:0d:f0:77:2c:c8:e9:fc:3c:68:2a:d4:
         2c:2b:f7:04:76:37:b0:12:08:4c:a8:19:c5:91:c2:db:ba:d1:
         7a:22:eb:e7:b3:ae:fb:87:36:f0:d1:fd:ae:61:a8:5d:5c:fa:
         56:c3:5c:e1
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUIvT4NnlcsU1/nfRTuA6J8x1lwsYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0FGNTIwNEI0MTE2OUNCQkYyRjY4QTUwMEUwMzZGQkE2
QzNDM0JFRjAeFw0yNjA3MTcwNTA0NDVaFw0yNzA3MTYwNTA5NDVaMDMxMTAvBgNV
BAMTKDI3NEM1RUYwNzc2MUI5NTBBQzA1RDREQkZBRjYwNkIyNkMyODI3N0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjb0CpI5mByEs66/LtTJlJkovp
BOb09a4l1V81GctVJGdFsQ5Flzly+bFaA16c5IwPJYymEwSBHr6/K8cKBCFL2gVX
uGoAyeZZ/hD51tJnMsrj7F4QUAM35yz+LzrSHH3aZPxW8upjGb72toDe0Y59Io0e
QErW5YZNL5yOgi40puYbc8iLb91ttk9TOk+wBrw/T6yrstZf5Mzp/n5Hjq0cvU1D
Rmay/n0AsOMf0u8dG6DOh9ypMox3I62Zu11GDEfQpFloP8TvuBoVfgWCvSLerARN
GU4Obt/oW2tnuMLo5zl+/nLhaeip9+id8Jtc0wgrxuVs0+qfy1P0pgd2Jf+VAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUJ0xe8HdhuVCsBdTb+vYGsmwoJ3owHwYDVR0j
BBgwFoAUyvUgS0EWnLvy9opQDgNvumw8O+8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDVnZGczakZpaWJzdjlIMnhqcjFVN3pkdkNYc3NHaGFnYmFSd3JIVzZK
RTkvMC9DQUY1MjA0QjQxMTY5Q0JCRjJGNjhBNTAwRTAzNkZCQTZDM0MzQkVGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBRjUyMDRCNDExNjlDQkJG
MkY2OEE1MDBFMDM2RkJBNkMzQzNCRUYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ1Z2RnM2pGaWlic3Y5SDJ4anIxVTd6ZHZDWHNzR2hhZ2JhUndySFc2SkU5LzAv
MzIzMDMwMmUzNTMwMmUzMjMwMzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3
MzAzNDM2Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALIMsgwDQYJKoZIhvcNAQELBQADggEBAD/wHTJ1
thv9A8DgQTHs1UcXKW9CHeFV2vSC5SO7fZz50+Ycxu5JmjT+5SZHqJY9zkvXB1lw
tOJwhTpVnURuhUZ8GGhAlEZRouyUHBwh4iqsoNadNU8PC7AkpN3Hwh2bxHXlUk7T
Vh4+HqKachm+bmUaPsvOYJb1i/2+lT5xXQFVGOfFfKA0d08VxofwFWH+hgr3aSW2
sSSFVqeJjwZzLEla59l1o97uO0AOTY8rf+TAxncTCS8PnALB2vo1/EW9URhLGjbl
joNoiENzfSIN8HcsyOn8PGgq1Cwr9wR2N7ASCEyoGcWRwtu60Xoi6+ezrvuHNvDR
/a5hqF1c+lbDXOE=
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:27:34 2026 by rpki-client