Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/0/3230302e302e36342e302f32342d3234203d3e20323731313830.roa
File:                     3230302e302e36342e302f32342d3234203d3e20323731313830.roa (raw, json)
Hash identifier:          rtgPsjEvrft8zzHlyyMigdsHOXzeRbr5m37PyhBdAbE=
Subject key identifier:   56:2D:6E:E2:1A:97:29:E9:51:1C:79:E1:8E:C1:5A:A7:EA:57:DD:76
Certificate issuer:       /CN=DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A
Certificate serial:       2CFCB9848821F37B263A95AB45F977412B07DEF2
Authority key identifier: DA:2C:3B:25:72:C3:BC:A9:22:5E:87:2B:77:D7:EB:EC:51:E4:A0:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/0/3230302e302e36342e302f32342d3234203d3e20323731313830.roa
Signing time:             Mon 29 Sep 2025 13:05:29 +0000
ROA not before:           Mon 29 Sep 2025 13:00:29 +0000
ROA not after:            Mon 28 Sep 2026 13:05:29 +0000
asID:                     271180
IP address blocks:        200.0.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/0/DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A.crl
                          rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/0/DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 10:15:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:fc:b9:84:88:21:f3:7b:26:3a:95:ab:45:f9:77:41:2b:07:de:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A
        Validity
            Not Before: Sep 29 13:00:29 2025 GMT
            Not After : Sep 28 13:05:29 2026 GMT
        Subject: CN=562D6EE21A9729E9511C79E18EC15AA7EA57DD76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e3:f0:87:7c:68:f7:24:e0:10:27:29:cf:21:
                    84:5c:30:3c:42:91:a3:cd:21:67:17:d6:44:b3:1d:
                    29:d7:e8:53:24:d7:36:a6:bc:95:cf:f9:bb:77:30:
                    7e:eb:37:f2:8c:f5:20:58:b8:c2:f6:15:cc:83:ef:
                    20:ad:db:0c:1f:d1:b1:7d:ad:08:af:8f:1d:a0:0e:
                    5c:c8:78:ea:5c:3a:88:21:5e:58:dd:52:29:34:28:
                    6d:92:7a:18:a9:0c:d4:81:9a:19:74:55:19:92:65:
                    eb:58:2c:c8:e3:c3:3a:7a:88:07:b2:ef:59:16:b9:
                    af:cf:d9:b1:be:fa:f3:42:96:27:66:f9:6b:28:58:
                    20:f9:fd:4a:f5:ed:b8:17:c4:d5:49:06:1e:58:04:
                    2e:9d:00:73:af:d4:3e:00:2e:c4:3b:ec:11:d4:69:
                    47:6a:61:53:73:76:c1:f6:48:b1:92:21:f3:55:25:
                    7d:e1:a1:40:68:ed:96:5c:f9:3a:f1:54:22:b9:0c:
                    14:db:0c:a8:dd:a6:12:5b:6e:d2:5f:90:c5:64:c6:
                    ac:e1:c6:c2:e2:38:f5:e6:27:94:63:01:6c:2e:a4:
                    02:10:f0:2d:dd:a4:9e:f3:b0:74:b4:51:a8:12:71:
                    66:8e:aa:9e:cc:4f:68:e7:31:9a:91:ad:b0:01:9e:
                    f0:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:2D:6E:E2:1A:97:29:E9:51:1C:79:E1:8E:C1:5A:A7:EA:57:DD:76
            X509v3 Authority Key Identifier:
                keyid:DA:2C:3B:25:72:C3:BC:A9:22:5E:87:2B:77:D7:EB:EC:51:E4:A0:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/0/DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA2C3B2572C3BCA9225E872B77D7EBEC51E4A01A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/0/3230302e302e36342e302f32342d3234203d3e20323731313830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:a5:c9:57:ca:c8:5f:b1:60:86:57:8a:ef:82:b5:b2:ff:e9:
         d7:89:c8:63:fd:c6:38:f5:44:4f:ea:6d:8c:cb:bc:63:74:e6:
         26:de:01:7f:62:c0:25:e3:53:d4:3e:ea:fc:36:45:17:64:4b:
         6e:20:e3:0d:c9:5e:01:55:e6:d5:5b:f6:ed:81:62:93:5d:a0:
         1a:a2:3e:59:8d:f5:64:b2:b1:f6:23:e5:8c:67:6b:f4:98:df:
         a5:fb:5b:3e:cb:4d:2e:90:ba:d9:6b:52:67:26:d2:9c:2c:96:
         b7:ab:70:c8:31:98:23:cd:f0:b4:ab:bd:a1:6c:24:e9:65:b3:
         61:17:46:75:23:f8:65:06:14:a8:0a:ad:ed:79:38:ff:a7:ad:
         fa:f4:9c:2b:e0:e1:21:29:e5:58:59:62:ab:4f:0f:6a:43:13:
         56:a5:94:3a:70:12:01:19:65:27:89:bb:b9:05:3d:cc:84:a7:
         32:9d:65:91:52:bf:f5:a1:da:b8:34:ca:cb:f9:cb:8d:88:9f:
         09:43:78:b5:4d:0b:14:f0:48:1d:2f:4f:8d:7c:3b:b4:39:a5:
         ad:ab:9a:2e:2d:e2:04:02:40:f8:d4:3d:f0:73:9b:8a:b7:ac:
         3c:d2:cc:ef:e2:1d:51:c7:52:ee:27:03:a4:30:2c:d7:b7:78:
         15:ab:76:b8
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIULPy5hIgh83smOpWrRfl3QSsH3vIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREEyQzNCMjU3MkMzQkNBOTIyNUU4NzJCNzdEN0VCRUM1
MUU0QTAxQTAeFw0yNTA5MjkxMzAwMjlaFw0yNjA5MjgxMzA1MjlaMDMxMTAvBgNV
BAMTKDU2MkQ2RUUyMUE5NzI5RTk1MTFDNzlFMThFQzE1QUE3RUE1N0RENzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh4/CHfGj3JOAQJynPIYRcMDxC
kaPNIWcX1kSzHSnX6FMk1zamvJXP+bt3MH7rN/KM9SBYuML2FcyD7yCt2wwf0bF9
rQivjx2gDlzIeOpcOoghXljdUik0KG2SehipDNSBmhl0VRmSZetYLMjjwzp6iAey
71kWua/P2bG++vNClidm+WsoWCD5/Ur17bgXxNVJBh5YBC6dAHOv1D4ALsQ77BHU
aUdqYVNzdsH2SLGSIfNVJX3hoUBo7ZZc+TrxVCK5DBTbDKjdphJbbtJfkMVkxqzh
xsLiOPXmJ5RjAWwupAIQ8C3dpJ7zsHS0UagScWaOqp7MT2jnMZqRrbABnvDzAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUVi1u4hqXKelRHHnhjsFap+pX3XYwHwYDVR0j
BBgwFoAU2iw7JXLDvKkiXocrd9fr7FHkoBowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEhkS3UxNzNpV2NOeXM1WWljTXlGNlI1S2tqVHduVlJrOFJkTXN5amhG
WW8vMC9EQTJDM0IyNTcyQzNCQ0E5MjI1RTg3MkI3N0Q3RUJFQzUxRTRBMDFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RBMkMzQjI1NzJDM0JDQTky
MjVFODcyQjc3RDdFQkVDNTFFNEEwMUEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRIZEt1MTczaVdjTnlzNVlpY015RjZSNUtralR3blZSazhSZE1zeWpoRllvLzAv
MzIzMDMwMmUzMDJlMzYzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczMTMx
MzgzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAMgAQDANBgkqhkiG9w0BAQsFAAOCAQEAfKXJV8rIX7Fg
hleK74K1sv/p14nIY/3GOPVET+ptjMu8Y3TmJt4Bf2LAJeNT1D7q/DZFF2RLbiDj
DcleAVXm1Vv27YFik12gGqI+WY31ZLKx9iPljGdr9JjfpftbPstNLpC62WtSZybS
nCyWt6twyDGYI83wtKu9oWwk6WWzYRdGdSP4ZQYUqAqt7Xk4/6et+vScK+DhISnl
WFliq08PakMTVqWUOnASARllJ4m7uQU9zISnMp1lkVK/9aHauDTKy/nLjYifCUN4
tU0LFPBIHS9PjXw7tDmlrauaLi3iBAJA+NQ98HObiresPNLM7+IdUcdS7icDpDAs
17d4Fat2uA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:21:12 2025 by rpki-client