Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7SJGduP7QWRqCRvTofYhEqkdEYrfy1a8WXSv9jf935Ce/0/3230302e322e32382e302f32322d3332203d3e20323731373430.roa
File:                     3230302e322e32382e302f32322d3332203d3e20323731373430.roa (raw, json)
Hash identifier:          xH0dMkPcfPGZOlS45HMSFOPXFq3VtUhfm6JEDn0ZzAQ=
Subject key identifier:   1F:B4:DC:1B:A5:57:5A:01:33:FD:CE:BB:AD:6B:1D:3E:56:2D:7E:F7
Certificate issuer:       /CN=BB69C30AFE3000AA40C5CA42919493B9257CBF23
Certificate serial:       29F6B1088354E75C7AAABAD3F85078DB3A0C912B
Authority key identifier: BB:69:C3:0A:FE:30:00:AA:40:C5:CA:42:91:94:93:B9:25:7C:BF:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB69C30AFE3000AA40C5CA42919493B9257CBF23.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7SJGduP7QWRqCRvTofYhEqkdEYrfy1a8WXSv9jf935Ce/0/3230302e322e32382e302f32322d3332203d3e20323731373430.roa
Signing time:             Fri 03 Oct 2025 19:23:58 +0000
ROA not before:           Fri 03 Oct 2025 19:18:58 +0000
ROA not after:            Fri 02 Oct 2026 19:23:58 +0000
asID:                     271740
IP address blocks:        200.2.28.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7SJGduP7QWRqCRvTofYhEqkdEYrfy1a8WXSv9jf935Ce/0/BB69C30AFE3000AA40C5CA42919493B9257CBF23.crl
                          rsync://rpki-repo.registro.br/repo/7SJGduP7QWRqCRvTofYhEqkdEYrfy1a8WXSv9jf935Ce/0/BB69C30AFE3000AA40C5CA42919493B9257CBF23.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB69C30AFE3000AA40C5CA42919493B9257CBF23.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 10:26:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:f6:b1:08:83:54:e7:5c:7a:aa:ba:d3:f8:50:78:db:3a:0c:91:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB69C30AFE3000AA40C5CA42919493B9257CBF23
        Validity
            Not Before: Oct  3 19:18:58 2025 GMT
            Not After : Oct  2 19:23:58 2026 GMT
        Subject: CN=1FB4DC1BA5575A0133FDCEBBAD6B1D3E562D7EF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bc:94:81:cd:82:cc:95:2a:92:09:c4:6a:1f:
                    00:82:ac:08:e8:de:ee:e0:42:a3:f0:66:87:1f:0c:
                    fa:60:63:47:f2:02:ef:60:ac:e5:7e:1c:a8:cb:dd:
                    5a:36:2e:b7:3e:76:71:06:1f:8a:78:4a:59:08:d6:
                    07:35:d4:91:10:f4:52:df:e0:f7:a1:3f:2c:4c:f6:
                    1d:aa:b0:31:f7:ba:cc:eb:c2:7d:28:60:a5:1f:99:
                    54:eb:6d:46:6e:c9:20:d3:79:0f:1f:67:a0:a3:b5:
                    f4:0e:d7:01:ca:a6:7a:d3:51:c6:c0:da:6f:17:d0:
                    3f:60:87:36:8b:f8:b4:95:10:4c:9d:31:ab:42:ab:
                    78:05:92:70:ac:c9:d4:75:ec:1b:4d:f8:91:d6:2d:
                    ed:4a:0c:b5:0f:28:bd:d9:28:38:d3:05:ff:0b:cf:
                    bc:38:e2:fe:4f:d8:3c:da:0d:57:c7:32:25:f1:dd:
                    80:10:a1:57:35:61:49:d9:ee:7f:3d:8c:65:6e:c6:
                    d1:38:06:f3:4f:96:c4:43:6c:0d:0d:bc:53:88:07:
                    2f:95:0a:b8:89:01:dd:8c:52:3a:4e:09:4d:47:95:
                    98:f5:65:ea:3e:fa:08:e7:60:fd:4b:02:17:4b:c5:
                    53:ae:1a:51:03:46:fb:69:dd:ae:42:47:54:71:eb:
                    33:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:B4:DC:1B:A5:57:5A:01:33:FD:CE:BB:AD:6B:1D:3E:56:2D:7E:F7
            X509v3 Authority Key Identifier:
                keyid:BB:69:C3:0A:FE:30:00:AA:40:C5:CA:42:91:94:93:B9:25:7C:BF:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7SJGduP7QWRqCRvTofYhEqkdEYrfy1a8WXSv9jf935Ce/0/BB69C30AFE3000AA40C5CA42919493B9257CBF23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB69C30AFE3000AA40C5CA42919493B9257CBF23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7SJGduP7QWRqCRvTofYhEqkdEYrfy1a8WXSv9jf935Ce/0/3230302e322e32382e302f32322d3332203d3e20323731373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.2.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:45:65:63:b5:22:2e:60:e2:c9:f2:52:a4:97:0a:94:ae:13:
         63:a8:e2:7a:19:a7:3f:a6:4f:cb:2c:87:02:cf:e0:e6:2a:fc:
         c0:6d:73:61:5a:b2:96:b9:12:c6:a6:83:a8:5d:01:c8:19:bf:
         29:5a:6e:44:8e:70:98:42:fd:bf:60:1b:db:9c:65:68:70:f8:
         8a:af:e4:49:7d:1a:10:aa:ac:08:81:8e:d7:bd:3f:52:7e:29:
         b0:a7:5f:8e:3e:8b:fd:b9:e6:70:cf:9f:fa:e2:d3:26:82:d5:
         7b:b1:1c:64:a3:9a:3a:51:82:d1:83:4c:4b:9f:80:8f:86:a8:
         12:fa:f0:18:89:31:a4:69:94:44:0d:66:d4:cb:2a:85:d2:db:
         87:5f:38:af:67:b4:d0:8b:82:f9:49:b4:81:cd:93:3e:08:8b:
         8f:51:06:00:ac:b5:1f:8c:90:70:fe:0a:6c:d6:4f:4a:61:6f:
         5a:83:50:ec:92:6c:20:4f:1d:68:9c:cf:bd:0c:89:19:97:9e:
         12:9b:96:8a:c8:59:36:34:17:44:60:a0:8b:6c:5a:7d:05:ce:
         02:0a:f5:b6:22:95:83:1f:3d:cb:8b:e4:fe:e8:67:bc:b7:46:
         02:16:22:6d:b1:16:39:86:71:c4:32:cd:73:51:3c:7b:7f:8d:
         fb:f8:c0:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:25:55 2025 by rpki-client