Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/3134332e302e3230302e302f32322d3332203d3e20323634303031.roa
File:                     3134332e302e3230302e302f32322d3332203d3e20323634303031.roa (raw, json)
Hash identifier:          43ICVSQEFpWQIbSqoT6HcEHdmXC6bh8akuhNAT+7MAc=
Subject key identifier:   50:50:2D:2A:40:73:AD:C7:95:3D:CD:39:8B:75:E1:DC:B8:94:61:E7
Certificate issuer:       /CN=847841B2315E0F72742EF9258D692AD085C734A9
Certificate serial:       3A8F72BEEC11DB720158E7E707874F714830A375
Authority key identifier: 84:78:41:B2:31:5E:0F:72:74:2E:F9:25:8D:69:2A:D0:85:C7:34:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/847841B2315E0F72742EF9258D692AD085C734A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/3134332e302e3230302e302f32322d3332203d3e20323634303031.roa
Signing time:             Wed 08 Oct 2025 13:48:26 +0000
ROA not before:           Wed 08 Oct 2025 13:43:26 +0000
ROA not after:            Wed 07 Oct 2026 13:48:26 +0000
asID:                     264001
IP address blocks:        143.0.200.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/847841B2315E0F72742EF9258D692AD085C734A9.crl
                          rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/847841B2315E0F72742EF9258D692AD085C734A9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/847841B2315E0F72742EF9258D692AD085C734A9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 01:19:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:8f:72:be:ec:11:db:72:01:58:e7:e7:07:87:4f:71:48:30:a3:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=847841B2315E0F72742EF9258D692AD085C734A9
        Validity
            Not Before: Oct  8 13:43:26 2025 GMT
            Not After : Oct  7 13:48:26 2026 GMT
        Subject: CN=50502D2A4073ADC7953DCD398B75E1DCB89461E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e4:8b:a1:0a:91:a9:23:af:1d:c0:57:40:5b:
                    54:16:92:17:26:2a:87:23:11:40:06:cf:c3:46:61:
                    77:97:b5:50:bc:d6:28:b8:73:3a:af:48:ae:c2:a1:
                    cc:53:3a:86:61:97:3b:82:32:fa:1a:b2:ca:48:d0:
                    c8:9d:15:20:bb:71:f9:49:96:21:ca:19:84:03:e5:
                    87:0e:55:f8:cd:06:9d:6a:59:1b:96:6f:f7:01:76:
                    6f:e9:d1:d3:50:b7:78:71:27:60:46:89:9a:f3:b5:
                    1a:1a:dc:cf:0a:b3:ed:25:0d:d2:a6:a1:34:51:ce:
                    c5:5d:3c:77:df:46:c5:86:93:ae:40:b4:37:1e:1e:
                    1c:0d:d9:44:be:6c:c9:1a:0a:55:46:62:28:3a:ce:
                    08:4b:c1:3b:38:d3:a2:6d:c2:0b:4f:b7:b8:82:0a:
                    65:13:89:ba:2a:b4:38:f8:11:f5:58:0d:7c:5f:d6:
                    d2:5b:e5:0e:ac:7c:a0:e0:df:d2:9e:60:48:0b:90:
                    f1:a9:79:e7:f3:de:53:f8:19:b2:53:4c:76:cf:34:
                    b5:f3:14:61:d5:37:94:f0:7c:07:d6:ae:3d:88:a0:
                    99:7a:4b:0d:8f:e8:96:97:57:14:fc:37:d1:10:17:
                    fd:4a:13:91:32:c7:9a:d0:ee:d2:20:9b:12:30:43:
                    b8:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:50:2D:2A:40:73:AD:C7:95:3D:CD:39:8B:75:E1:DC:B8:94:61:E7
            X509v3 Authority Key Identifier:
                keyid:84:78:41:B2:31:5E:0F:72:74:2E:F9:25:8D:69:2A:D0:85:C7:34:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/847841B2315E0F72742EF9258D692AD085C734A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/847841B2315E0F72742EF9258D692AD085C734A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/0/3134332e302e3230302e302f32322d3332203d3e20323634303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:13:0b:62:fd:35:45:8a:83:33:50:f8:b0:03:e5:48:7d:9d:
         9e:27:56:92:6d:2b:37:c2:fb:92:2f:94:16:e8:91:7f:13:32:
         b9:b0:85:d3:be:37:79:9c:a5:27:67:31:ee:e6:d0:32:6e:3c:
         6f:b3:be:bf:95:29:b4:fb:17:9f:74:ba:21:fc:16:79:20:62:
         b0:7e:38:87:31:af:be:8e:19:fe:48:b9:30:e7:fc:74:6b:d5:
         cd:72:93:dc:36:ed:96:24:a4:9a:ba:0a:c3:f8:bb:e4:e7:57:
         aa:df:67:df:fd:75:fc:07:e4:c4:c6:cd:b1:d1:71:86:d3:ab:
         0d:42:01:f2:31:22:cf:cd:07:bb:75:d5:7e:29:3e:c9:ed:ff:
         94:8f:88:dd:40:53:15:ee:f7:a2:9d:6c:97:e3:34:ad:8f:b0:
         a4:05:48:e7:51:54:30:45:f5:b1:5f:4b:ca:24:a3:0a:c2:fd:
         75:07:87:d2:8b:cf:45:3f:c6:6f:40:d0:09:fe:6f:29:0c:ef:
         04:b0:2e:6b:6d:27:3b:c6:87:ab:48:95:05:c9:93:b5:38:53:
         2e:f8:b5:e7:28:70:68:07:71:9d:8c:f4:54:18:eb:58:a3:5d:
         d4:de:bf:ba:37:49:e3:e7:d9:99:80:57:23:47:e8:3e:64:01:
         ba:9f:83:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:31:13 2025 by rpki-client