Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/3230302e342e3131312e302f32342d3234203d3e20323731343739.roa
File:                     3230302e342e3131312e302f32342d3234203d3e20323731343739.roa (raw, json)
Hash identifier:          AgOT5txVykcfJn9o6kFMY8XU0WUav1zXZoGI0BjwVSw=
Subject key identifier:   84:B6:E2:BC:76:61:78:64:68:59:91:4D:2A:4B:26:1B:73:59:D5:AC
Certificate issuer:       /CN=5CFBEAE8ED6B099801F3BCC4847C1CFB3FE609DF
Certificate serial:       06755CC062E8256E1A0FB5736BB8B4E69691297E
Authority key identifier: 5C:FB:EA:E8:ED:6B:09:98:01:F3:BC:C4:84:7C:1C:FB:3F:E6:09:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CFBEAE8ED6B099801F3BCC4847C1CFB3FE609DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/3230302e342e3131312e302f32342d3234203d3e20323731343739.roa
Signing time:             Fri 17 Oct 2025 17:43:42 +0000
ROA not before:           Fri 17 Oct 2025 17:38:42 +0000
ROA not after:            Fri 16 Oct 2026 17:43:42 +0000
asID:                     271479
IP address blocks:        200.4.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/5CFBEAE8ED6B099801F3BCC4847C1CFB3FE609DF.crl
                          rsync://rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/5CFBEAE8ED6B099801F3BCC4847C1CFB3FE609DF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CFBEAE8ED6B099801F3BCC4847C1CFB3FE609DF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 05:22:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:75:5c:c0:62:e8:25:6e:1a:0f:b5:73:6b:b8:b4:e6:96:91:29:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CFBEAE8ED6B099801F3BCC4847C1CFB3FE609DF
        Validity
            Not Before: Oct 17 17:38:42 2025 GMT
            Not After : Oct 16 17:43:42 2026 GMT
        Subject: CN=84B6E2BC766178646859914D2A4B261B7359D5AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9f:91:bb:30:55:98:1f:6b:46:df:61:81:9e:
                    47:48:d7:1b:d8:a9:2a:9f:e4:ba:8d:4c:ee:60:a5:
                    1d:94:5d:da:7b:42:61:1c:60:9f:22:9c:25:df:05:
                    b0:7e:76:5b:a3:50:7a:b3:b5:77:91:8c:4d:9c:16:
                    24:21:ae:f2:01:82:8d:aa:6d:6f:b3:e8:e4:fc:ac:
                    92:7b:63:77:5f:72:ae:36:48:ee:b8:62:be:97:37:
                    29:74:50:83:b9:ec:c0:da:83:41:52:dd:7d:b1:6f:
                    20:82:19:dc:39:a8:91:86:fa:6e:26:fd:1a:82:5e:
                    c5:0f:20:1b:48:b0:29:26:12:a2:f9:a3:0c:2e:3d:
                    f4:04:f8:8b:12:38:50:71:55:c3:c5:0d:af:48:8a:
                    d2:92:4e:bb:a1:87:0c:5e:87:80:7d:ef:3c:5c:c6:
                    51:bd:79:0c:61:b3:00:60:17:55:73:76:3f:8f:32:
                    d5:10:b2:2c:97:e7:3f:aa:20:15:9a:13:e2:5c:a5:
                    61:22:de:b0:39:b2:55:32:07:69:59:0f:a0:51:ee:
                    24:6f:af:ad:72:36:87:44:c7:aa:42:7d:db:af:81:
                    3f:19:f7:54:3a:ba:80:ab:ea:ae:02:84:17:0e:c7:
                    7b:2e:03:79:86:db:b3:bd:d0:32:2c:7b:53:36:15:
                    18:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:B6:E2:BC:76:61:78:64:68:59:91:4D:2A:4B:26:1B:73:59:D5:AC
            X509v3 Authority Key Identifier:
                keyid:5C:FB:EA:E8:ED:6B:09:98:01:F3:BC:C4:84:7C:1C:FB:3F:E6:09:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/5CFBEAE8ED6B099801F3BCC4847C1CFB3FE609DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CFBEAE8ED6B099801F3BCC4847C1CFB3FE609DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/3230302e342e3131312e302f32342d3234203d3e20323731343739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.4.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:0f:b7:e2:6b:63:4f:89:3f:f9:85:4f:bc:aa:6f:6d:b0:bf:
         fb:fa:55:95:0d:61:3a:f4:84:51:37:79:86:50:21:6c:3f:53:
         e8:42:fd:2a:fb:80:96:e0:f0:57:03:f6:56:c8:b8:71:4a:ca:
         51:d8:08:f9:8d:61:75:1c:84:64:17:f0:45:f4:4b:de:44:07:
         d1:34:aa:28:eb:8f:ee:30:57:43:84:46:74:29:ad:c1:d7:1e:
         8a:dc:2a:b7:7c:07:7e:af:b5:cd:79:cd:6e:58:80:38:7e:94:
         a0:09:c1:33:19:11:35:38:d8:97:38:a9:b3:c6:16:57:0d:b8:
         82:c1:ca:42:bf:03:e8:bd:5c:4f:d4:ec:da:cd:4e:1b:b1:db:
         ab:88:4f:1c:c4:91:98:39:e6:f5:f7:b6:d3:4f:7e:1f:1f:ec:
         a0:eb:3a:3f:7d:fa:55:cf:f4:53:0b:b7:8e:c5:8a:c7:b0:de:
         bd:80:b5:30:2e:43:5a:91:69:e4:67:b8:80:92:0a:7c:95:39:
         e0:64:41:b4:23:4c:f0:85:52:b0:ef:75:0d:1f:b6:04:d9:70:
         73:b6:47:2f:a8:c3:8c:1e:85:b5:e5:31:54:5e:ef:31:40:90:
         74:6f:0e:b8:22:d6:a6:20:d7:db:ae:9c:3e:e0:e4:93:33:07:
         5d:47:f9:c1
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUBnVcwGLoJW4aD7Vza7i05paRKX4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUNGQkVBRThFRDZCMDk5ODAxRjNCQ0M0ODQ3QzFDRkIz
RkU2MDlERjAeFw0yNTEwMTcxNzM4NDJaFw0yNjEwMTYxNzQzNDJaMDMxMTAvBgNV
BAMTKDg0QjZFMkJDNzY2MTc4NjQ2ODU5OTE0RDJBNEIyNjFCNzM1OUQ1QUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCen5G7MFWYH2tG32GBnkdI1xvY
qSqf5LqNTO5gpR2UXdp7QmEcYJ8inCXfBbB+dlujUHqztXeRjE2cFiQhrvIBgo2q
bW+z6OT8rJJ7Y3dfcq42SO64Yr6XNyl0UIO57MDag0FS3X2xbyCCGdw5qJGG+m4m
/RqCXsUPIBtIsCkmEqL5owwuPfQE+IsSOFBxVcPFDa9IitKSTruhhwxeh4B97zxc
xlG9eQxhswBgF1Vzdj+PMtUQsiyX5z+qIBWaE+JcpWEi3rA5slUyB2lZD6BR7iRv
r61yNodEx6pCfduvgT8Z91Q6uoCr6q4ChBcOx3suA3mG27O90DIse1M2FRj5AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUhLbivHZheGRoWZFNKksmG3NZ1awwHwYDVR0j
BBgwFoAUXPvq6O1rCZgB87zEhHwc+z/mCd8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3AxVWRxQVRhcTNGbzlVVEpiNEdzMkNrSDVzem9wWU00THhhaHpvN2RZ
bW8vMC81Q0ZCRUFFOEVENkIwOTk4MDFGM0JDQzQ4NDdDMUNGQjNGRTYwOURGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVDRkJFQUU4RUQ2QjA5OTgw
MUYzQkNDNDg0N0MxQ0ZCM0ZFNjA5REYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dwMVVkcUFUYXEzRm85VVRKYjRHczJDa0g1c3pvcFlNNEx4YWh6bzdkWW1vLzAv
MzIzMDMwMmUzNDJlMzEzMTMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMx
MzQzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAyARvMA0GCSqGSIb3DQEBCwUAA4IBAQAVD7fia2NP
iT/5hU+8qm9tsL/7+lWVDWE69IRRN3mGUCFsP1PoQv0q+4CW4PBXA/ZWyLhxSspR
2Aj5jWF1HIRkF/BF9EveRAfRNKoo64/uMFdDhEZ0Ka3B1x6K3Cq3fAd+r7XNec1u
WIA4fpSgCcEzGRE1ONiXOKmzxhZXDbiCwcpCvwPovVxP1OzazU4bsduriE8cxJGY
Oeb197bTT34fH+yg6zo/ffpVz/RTC7eOxYrHsN69gLUwLkNakWnkZ7iAkgp8lTng
ZEG0I0zwhVKw73UNH7YE2XBztkcvqMOMHoW15TFUXu8xQJB0bw64ItamINfbrpw+
4OSTMwddR/nB
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:04:17 2025 by rpki-client