Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D657bXPCT1rs5scmeJ57CSV712Bf6Lgm7BY3FrvytfbG/1/3230302e3233382e302e302f32322d3234203d3e203130383735.roa
File:                     3230302e3233382e302e302f32322d3234203d3e203130383735.roa (raw, json)
Hash identifier:          hukujn5bZMDYSbwT2yRnTt9kiAIfUyfuMtpJRwKFSak=
Subject key identifier:   ED:10:E8:83:C8:48:F6:FA:F1:EA:B1:88:19:AF:B2:7B:A4:E7:6C:45
Certificate issuer:       /CN=FE00A0246E047910F52B97F063352EE5D22A71CC
Certificate serial:       373C9AE7897C7ECCFE5816CC4FA5CEC6178CB480
Authority key identifier: FE:00:A0:24:6E:04:79:10:F5:2B:97:F0:63:35:2E:E5:D2:2A:71:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE00A0246E047910F52B97F063352EE5D22A71CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D657bXPCT1rs5scmeJ57CSV712Bf6Lgm7BY3FrvytfbG/1/3230302e3233382e302e302f32322d3234203d3e203130383735.roa
Signing time:             Tue 14 Oct 2025 15:06:52 +0000
ROA not before:           Tue 14 Oct 2025 15:01:52 +0000
ROA not after:            Tue 13 Oct 2026 15:06:52 +0000
asID:                     10875
IP address blocks:        200.238.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D657bXPCT1rs5scmeJ57CSV712Bf6Lgm7BY3FrvytfbG/1/FE00A0246E047910F52B97F063352EE5D22A71CC.crl
                          rsync://rpki-repo.registro.br/repo/D657bXPCT1rs5scmeJ57CSV712Bf6Lgm7BY3FrvytfbG/1/FE00A0246E047910F52B97F063352EE5D22A71CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE00A0246E047910F52B97F063352EE5D22A71CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 15:10:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:3c:9a:e7:89:7c:7e:cc:fe:58:16:cc:4f:a5:ce:c6:17:8c:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE00A0246E047910F52B97F063352EE5D22A71CC
        Validity
            Not Before: Oct 14 15:01:52 2025 GMT
            Not After : Oct 13 15:06:52 2026 GMT
        Subject: CN=ED10E883C848F6FAF1EAB18819AFB27BA4E76C45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:52:39:5f:b4:25:ef:d5:ea:80:48:0b:0b:9a:
                    02:18:c5:53:93:8d:b2:8c:d3:da:87:c7:24:94:3d:
                    2b:ab:5c:a4:74:ad:d4:c4:b6:e2:d5:1a:19:d7:f5:
                    fb:77:ed:e4:2c:7e:51:40:97:43:fb:7a:5b:17:82:
                    2a:bf:33:28:77:67:4b:47:a9:6d:0c:61:4b:3e:a4:
                    35:ff:e1:24:da:75:96:14:bb:5f:6d:35:c2:c9:31:
                    77:7f:ad:b4:f6:6b:1e:f1:33:c9:fb:7d:c9:b0:72:
                    53:79:41:ff:34:64:83:42:2d:fa:a7:38:e3:c7:dc:
                    0d:af:7b:94:d7:9f:9b:fc:d2:1b:d4:90:e2:7f:d9:
                    e7:45:5f:ff:ec:da:6d:1d:95:4a:60:db:10:b5:1a:
                    2e:93:12:ba:b4:63:19:9a:82:e9:27:f5:dd:b6:2b:
                    85:c4:9b:bf:43:c6:c3:d6:f1:0d:e2:f0:64:99:ef:
                    e0:39:62:20:e7:1a:4e:5f:b9:a9:22:9f:82:bf:b7:
                    7b:51:ef:29:cc:1a:81:bd:c0:59:30:86:b3:fb:e1:
                    3f:f7:93:29:ac:54:7f:d5:9e:da:d5:31:9b:c2:6e:
                    b6:fa:bb:f5:65:3b:a5:76:f2:03:4e:91:09:2f:a6:
                    4a:25:d9:5e:98:c9:65:d2:c2:73:3c:03:86:10:00:
                    45:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:10:E8:83:C8:48:F6:FA:F1:EA:B1:88:19:AF:B2:7B:A4:E7:6C:45
            X509v3 Authority Key Identifier:
                keyid:FE:00:A0:24:6E:04:79:10:F5:2B:97:F0:63:35:2E:E5:D2:2A:71:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D657bXPCT1rs5scmeJ57CSV712Bf6Lgm7BY3FrvytfbG/1/FE00A0246E047910F52B97F063352EE5D22A71CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE00A0246E047910F52B97F063352EE5D22A71CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D657bXPCT1rs5scmeJ57CSV712Bf6Lgm7BY3FrvytfbG/1/3230302e3233382e302e302f32322d3234203d3e203130383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.238.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:e9:07:a5:89:1e:31:d4:9a:fd:c3:5f:e2:98:a8:1f:38:6d:
         e9:ee:3c:ce:da:7c:80:a9:32:aa:42:2d:81:06:fa:35:85:50:
         bf:ca:6e:3c:e6:53:6c:de:fe:5c:7f:09:14:99:84:e0:64:49:
         52:07:1f:c7:05:83:18:7e:27:c0:e7:e7:3a:d9:ed:a6:6e:c9:
         a4:bf:e4:04:a4:2e:59:8e:d8:46:e5:5f:8c:e6:e6:3a:89:1c:
         5f:77:78:b3:38:e6:f9:80:a7:24:ac:c8:ee:2e:b5:16:5e:da:
         18:69:5c:4c:94:3b:76:a9:df:06:8e:db:6e:d2:ab:88:a4:09:
         0f:01:1e:0b:e0:f9:6e:3b:6b:07:2a:53:4f:ad:57:42:45:b0:
         35:ad:52:56:f5:ee:8f:68:22:b6:15:c2:82:e7:99:4f:66:5c:
         8c:21:b7:5e:dd:8c:34:1f:96:e1:9e:83:3d:30:67:b9:f4:fd:
         5a:27:ee:fe:25:ab:7c:a7:f1:a4:3f:bf:00:55:42:bc:c1:92:
         22:72:2d:fb:ae:76:e3:32:c7:63:0c:8c:08:36:9e:05:a4:43:
         51:af:43:36:3b:9a:53:f0:90:0c:0f:45:be:e3:94:b3:ed:ab:
         14:8f:ef:bb:1a:ca:c3:a4:93:ef:fe:a3:39:41:4f:47:e4:35:
         e8:40:ee:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:41:52 2025 by rpki-client