Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/0/3230302e3134322e3232342e302f32322d3234203d3e20323730393331.roa
File:                     3230302e3134322e3232342e302f32322d3234203d3e20323730393331.roa (raw, json)
Hash identifier:          +k9SBA0b4hGy+gKwJZ70sOS+jRS1RXL4Gqj6hwBEfrE=
Subject key identifier:   0E:2C:37:6A:46:14:BD:53:1E:E3:7D:F5:E2:F6:2E:0F:F3:59:51:E6
Certificate issuer:       /CN=542883AF217B55CA895036F0F5CDBCE406386E83
Certificate serial:       31B8B18031CBC6C02A0A0C0F44E9CD9FAAEC218F
Authority key identifier: 54:28:83:AF:21:7B:55:CA:89:50:36:F0:F5:CD:BC:E4:06:38:6E:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/542883AF217B55CA895036F0F5CDBCE406386E83.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/0/3230302e3134322e3232342e302f32322d3234203d3e20323730393331.roa
Signing time:             Tue 07 Oct 2025 18:34:59 +0000
ROA not before:           Tue 07 Oct 2025 18:29:59 +0000
ROA not after:            Tue 06 Oct 2026 18:34:59 +0000
asID:                     270931
IP address blocks:        200.142.224.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/0/542883AF217B55CA895036F0F5CDBCE406386E83.crl
                          rsync://rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/0/542883AF217B55CA895036F0F5CDBCE406386E83.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/542883AF217B55CA895036F0F5CDBCE406386E83.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 08:31:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:b8:b1:80:31:cb:c6:c0:2a:0a:0c:0f:44:e9:cd:9f:aa:ec:21:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=542883AF217B55CA895036F0F5CDBCE406386E83
        Validity
            Not Before: Oct  7 18:29:59 2025 GMT
            Not After : Oct  6 18:34:59 2026 GMT
        Subject: CN=0E2C376A4614BD531EE37DF5E2F62E0FF35951E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:21:ea:7c:93:6d:e4:47:b8:16:e1:3f:5b:41:
                    4f:c4:4c:1e:98:f4:dd:b2:3d:54:0b:af:db:df:70:
                    3e:04:0d:5b:2d:95:80:91:cc:cb:46:b2:5d:82:a5:
                    8f:03:7f:f2:75:bc:cd:37:ff:f1:da:3a:89:1e:a0:
                    aa:af:68:c4:aa:4d:3c:1f:4e:d0:b0:bf:bb:be:44:
                    f4:d7:50:82:94:6f:c2:0c:77:f7:09:43:ec:3c:92:
                    d6:98:d7:2d:5c:4c:9e:12:51:b3:84:a4:e4:a0:2c:
                    bc:c5:c9:52:b6:c0:2a:4c:78:4f:6d:6e:f4:cf:20:
                    9e:cb:7d:95:7e:86:53:12:84:52:aa:3d:16:06:5a:
                    55:de:8c:fd:50:e7:20:d6:02:f9:41:f6:1a:96:68:
                    cb:23:6b:b0:1e:ca:b4:31:39:03:2d:a4:b1:60:f3:
                    88:1c:17:3d:f6:09:70:83:18:02:bf:8f:f1:8c:7b:
                    4d:2c:e0:ce:d4:3f:10:ae:20:3a:8d:9d:1d:ba:3d:
                    19:6a:78:35:c8:d3:b0:7c:6b:72:06:cd:6b:d1:c3:
                    8c:0e:09:5a:87:16:fc:ab:0d:1d:88:78:ac:ab:7d:
                    77:ee:1b:02:62:65:cc:8e:ff:0d:e0:ec:a7:35:09:
                    d5:10:be:eb:4f:fc:af:13:b8:55:50:15:86:ec:38:
                    c1:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:2C:37:6A:46:14:BD:53:1E:E3:7D:F5:E2:F6:2E:0F:F3:59:51:E6
            X509v3 Authority Key Identifier:
                keyid:54:28:83:AF:21:7B:55:CA:89:50:36:F0:F5:CD:BC:E4:06:38:6E:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/0/542883AF217B55CA895036F0F5CDBCE406386E83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/542883AF217B55CA895036F0F5CDBCE406386E83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/0/3230302e3134322e3232342e302f32322d3234203d3e20323730393331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.142.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:8a:74:9b:93:73:7d:e2:8d:46:40:6f:48:01:79:b4:26:f4:
         fc:4a:6a:78:ea:7d:e9:fb:eb:b3:88:24:8c:0e:3b:93:59:63:
         e8:50:39:c2:81:00:49:4f:46:e4:ec:6b:06:64:5c:31:32:86:
         7f:fb:ad:0d:05:0c:00:fd:f7:69:ab:7b:6c:3e:13:cd:3f:cd:
         e0:75:bd:4b:fe:36:b3:7c:3e:aa:5e:a2:5b:2d:92:14:50:14:
         83:a9:fc:64:92:4a:ca:a3:6a:a5:e8:8c:5e:27:57:cc:f3:ca:
         22:3d:9c:40:68:d8:b8:f4:f3:11:cd:ec:b5:83:c6:e7:32:57:
         7c:f3:71:73:57:d1:64:e6:41:03:5e:55:a0:7e:2a:52:1b:94:
         9c:d7:4d:e7:6e:17:0a:db:17:ad:2c:49:f2:3e:b3:40:ec:e8:
         5c:a7:7b:fd:5e:84:e8:61:18:0c:0b:c5:1c:b4:82:68:94:03:
         69:27:03:d9:ba:42:5e:e0:38:73:e9:d3:51:bd:50:86:37:e4:
         ae:4e:0d:c0:4a:87:a0:73:ca:d4:7d:65:c0:47:99:f0:19:10:
         d2:1c:12:15:53:dd:01:4f:ee:e6:1d:d9:1c:56:33:80:5a:bf:
         fc:6d:60:db:4b:28:c9:34:d6:c2:c9:c2:a1:25:37:8c:2d:06:
         ed:78:77:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 10:17:18 2025 by rpki-client