Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/948iD2h8XvwkiBNCCTMxW71LCSUEHmYP41H8qdB943ti/0/3230302e332e31362e302f32302d3234203d3e203532363839.roa
File:                     3230302e332e31362e302f32302d3234203d3e203532363839.roa (raw, json)
Hash identifier:          vGHgtO8ibKMXxeWBo4E7fEjw5gPab7XjuXYqjKBnSLM=
Subject key identifier:   F2:14:1A:A1:91:1F:93:00:0D:61:00:C1:E7:6F:12:A7:47:7D:F1:57
Certificate issuer:       /CN=D4F7947FFA165065796964648407CC7868D8C807
Certificate serial:       4B350CD7D41272AF57A2F76A493912822A7D9AA1
Authority key identifier: D4:F7:94:7F:FA:16:50:65:79:69:64:64:84:07:CC:78:68:D8:C8:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4F7947FFA165065796964648407CC7868D8C807.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/948iD2h8XvwkiBNCCTMxW71LCSUEHmYP41H8qdB943ti/0/3230302e332e31362e302f32302d3234203d3e203532363839.roa
Signing time:             Mon 15 Sep 2025 00:27:01 +0000
ROA not before:           Mon 15 Sep 2025 00:22:01 +0000
ROA not after:            Mon 14 Sep 2026 00:27:01 +0000
asID:                     52689
IP address blocks:        200.3.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/948iD2h8XvwkiBNCCTMxW71LCSUEHmYP41H8qdB943ti/0/D4F7947FFA165065796964648407CC7868D8C807.crl
                          rsync://rpki-repo.registro.br/repo/948iD2h8XvwkiBNCCTMxW71LCSUEHmYP41H8qdB943ti/0/D4F7947FFA165065796964648407CC7868D8C807.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4F7947FFA165065796964648407CC7868D8C807.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 08:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:35:0c:d7:d4:12:72:af:57:a2:f7:6a:49:39:12:82:2a:7d:9a:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4F7947FFA165065796964648407CC7868D8C807
        Validity
            Not Before: Sep 15 00:22:01 2025 GMT
            Not After : Sep 14 00:27:01 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:2b:76:a6:08:8b:0c:2e:77:85:08:79:07:5a:
                    7b:0d:3a:2d:cf:0b:fc:87:15:2f:55:6f:d1:b2:9a:
                    71:90:11:d3:59:71:b1:df:47:92:32:fe:f8:f2:f1:
                    37:50:a9:c6:e5:8c:7e:4d:15:32:65:c1:25:29:14:
                    be:67:99:e0:1d:57:a5:af:46:57:61:b3:30:ec:9a:
                    d8:ab:f2:e2:ad:0b:e0:23:ce:8c:3d:9e:cb:c1:52:
                    fb:4b:f5:e6:fd:09:f3:6e:cc:73:41:d0:0c:08:aa:
                    80:a0:7e:54:41:da:8f:51:c0:69:11:63:e3:83:fb:
                    22:12:86:f3:be:e7:4d:bc:12:6d:e3:a2:d5:29:8e:
                    8e:77:2d:b0:23:4d:28:ab:ba:bc:c9:c9:5b:85:9b:
                    68:47:60:88:e9:37:58:e6:90:c3:ed:6b:6a:19:da:
                    3a:12:42:29:ce:0d:4e:6c:19:60:0c:ea:cd:bb:01:
                    0a:9c:86:c0:5a:ca:54:d1:0b:e1:58:01:d8:9e:05:
                    c7:ef:f7:08:ef:1c:b5:b9:0c:e7:b4:57:b5:5f:75:
                    ee:aa:dd:f4:7a:22:50:a5:e1:8d:cf:99:81:25:1a:
                    7c:13:93:8d:b6:ac:f9:28:7e:52:5c:85:cf:86:1a:
                    92:9d:b6:41:2c:71:c7:af:d9:11:42:b9:a7:69:21:
                    26:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:14:1A:A1:91:1F:93:00:0D:61:00:C1:E7:6F:12:A7:47:7D:F1:57
            X509v3 Authority Key Identifier:
                keyid:D4:F7:94:7F:FA:16:50:65:79:69:64:64:84:07:CC:78:68:D8:C8:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/948iD2h8XvwkiBNCCTMxW71LCSUEHmYP41H8qdB943ti/0/D4F7947FFA165065796964648407CC7868D8C807.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4F7947FFA165065796964648407CC7868D8C807.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/948iD2h8XvwkiBNCCTMxW71LCSUEHmYP41H8qdB943ti/0/3230302e332e31362e302f32302d3234203d3e203532363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.3.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         58:38:ef:5c:fb:ea:c4:e6:76:69:ff:0c:69:b1:f3:1b:ba:48:
         a9:e0:72:df:b3:34:54:94:fd:2f:8e:c4:8a:5d:d9:81:83:a1:
         3a:91:88:2a:74:7f:e3:56:af:d1:a6:38:de:28:8d:70:48:4b:
         d0:68:22:44:a4:b1:d7:c0:3a:49:48:93:e7:85:2b:6f:68:4f:
         d9:a7:15:32:1a:81:05:d2:67:72:a8:d5:b5:02:bb:af:12:82:
         21:5a:d0:ac:86:4c:25:e8:5e:b7:ed:0c:ed:f5:b2:55:fa:20:
         2a:1a:03:54:7e:e1:fb:2c:ec:ad:99:da:fd:62:ab:73:8d:fe:
         0a:df:d0:bc:12:31:33:24:cc:65:0c:bc:2d:02:76:5d:34:6a:
         e8:f5:2c:ab:d4:18:cc:3b:2d:d7:40:7e:65:02:ef:89:0b:ac:
         b3:f3:8d:cc:6e:e7:8a:55:48:02:5e:16:45:48:b1:cd:c1:8b:
         36:0c:ac:d8:9b:67:e7:26:dc:31:85:f0:17:75:76:de:a3:c2:
         70:4f:ae:37:98:f2:d2:c0:97:b8:fb:11:40:c7:e3:bc:2f:64:
         b1:90:ef:26:b4:93:54:c3:43:fd:91:d0:e8:64:6a:88:f0:73:
         ba:cc:a6:50:67:7f:a3:40:40:b5:4a:c1:f7:6e:00:fd:b5:a3:
         84:a7:64:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:18:25 2025 by rpki-client