Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HHPETmcfR2hPaougfQMxyLGSpKXehX35jxAp4yd4dQ5i/0/3230302e32342e38302e302f32322d3232203d3e203631373930.roa
File:                     3230302e32342e38302e302f32322d3232203d3e203631373930.roa (raw, json)
Hash identifier:          VMbVnLrJuP7L/kLRjfG18Pa9UOEcqTPlB7+opF27J0s=
Subject key identifier:   82:8F:2F:85:4E:DF:94:01:BF:2B:0C:A0:91:E8:64:69:46:7F:81:36
Certificate issuer:       /CN=D45EE207E811FF7831A3054740F4FC376DE9C473
Certificate serial:       1985875F362A010EEDB17BB38F2C9B6165EB0578
Authority key identifier: D4:5E:E2:07:E8:11:FF:78:31:A3:05:47:40:F4:FC:37:6D:E9:C4:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D45EE207E811FF7831A3054740F4FC376DE9C473.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HHPETmcfR2hPaougfQMxyLGSpKXehX35jxAp4yd4dQ5i/0/3230302e32342e38302e302f32322d3232203d3e203631373930.roa
Signing time:             Mon 15 Sep 2025 12:23:00 +0000
ROA not before:           Mon 15 Sep 2025 12:18:00 +0000
ROA not after:            Mon 14 Sep 2026 12:23:00 +0000
asID:                     61790
IP address blocks:        200.24.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HHPETmcfR2hPaougfQMxyLGSpKXehX35jxAp4yd4dQ5i/0/D45EE207E811FF7831A3054740F4FC376DE9C473.crl
                          rsync://rpki-repo.registro.br/repo/HHPETmcfR2hPaougfQMxyLGSpKXehX35jxAp4yd4dQ5i/0/D45EE207E811FF7831A3054740F4FC376DE9C473.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D45EE207E811FF7831A3054740F4FC376DE9C473.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 09:11:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:85:87:5f:36:2a:01:0e:ed:b1:7b:b3:8f:2c:9b:61:65:eb:05:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D45EE207E811FF7831A3054740F4FC376DE9C473
        Validity
            Not Before: Sep 15 12:18:00 2025 GMT
            Not After : Sep 14 12:23:00 2026 GMT
        Subject: CN=828F2F854EDF9401BF2B0CA091E86469467F8136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:9e:53:30:c6:74:a1:d3:4c:4a:63:04:45:eb:
                    c0:af:26:b3:52:91:4d:49:16:de:6f:5f:f1:89:11:
                    d6:77:e5:f8:b9:6c:95:ed:38:59:9b:59:ed:6f:ed:
                    43:d3:63:de:7a:58:ba:e5:66:0a:d0:bf:76:1f:eb:
                    b3:15:76:2f:29:d2:17:b5:aa:47:05:ba:b6:92:5a:
                    56:ba:f5:df:fa:a0:45:22:c0:dd:ea:30:9a:e8:cc:
                    ba:f5:de:bc:fd:03:5f:9a:be:54:b1:de:00:7e:01:
                    86:5e:7b:18:af:ac:0d:0c:c4:0b:53:b0:57:18:dc:
                    48:6a:1b:7a:c8:ec:c4:10:a7:9e:92:72:19:fc:bd:
                    7d:5f:8a:dd:72:c3:66:3a:d0:f3:5e:99:0a:dd:2d:
                    25:0e:08:85:04:a4:47:33:ce:21:1e:79:d6:6a:81:
                    8a:f3:1c:eb:39:01:6b:45:05:69:06:8e:56:e0:b3:
                    6b:dc:c9:0b:62:8d:6c:b7:19:3f:01:83:61:71:1b:
                    6d:34:e4:cb:33:d5:c2:de:62:a2:4f:3e:6d:6c:de:
                    a5:47:c1:23:aa:47:fe:f1:a0:a5:ab:46:dd:1a:44:
                    88:68:30:e8:de:e4:d1:19:f1:de:fc:c3:69:89:7b:
                    8c:82:39:81:f6:89:ce:8b:df:bf:f1:4d:c4:ca:95:
                    7e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:8F:2F:85:4E:DF:94:01:BF:2B:0C:A0:91:E8:64:69:46:7F:81:36
            X509v3 Authority Key Identifier:
                keyid:D4:5E:E2:07:E8:11:FF:78:31:A3:05:47:40:F4:FC:37:6D:E9:C4:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HHPETmcfR2hPaougfQMxyLGSpKXehX35jxAp4yd4dQ5i/0/D45EE207E811FF7831A3054740F4FC376DE9C473.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D45EE207E811FF7831A3054740F4FC376DE9C473.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HHPETmcfR2hPaougfQMxyLGSpKXehX35jxAp4yd4dQ5i/0/3230302e32342e38302e302f32322d3232203d3e203631373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.24.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:06:0c:29:24:ce:0d:4c:55:ee:44:31:34:03:cf:7c:0e:99:
         10:c3:22:02:f0:c4:cc:91:63:3b:82:31:b6:cd:d1:8d:9c:18:
         aa:2b:24:bb:47:ac:84:67:09:ed:0e:a5:97:34:0d:3f:ad:41:
         3a:8f:c5:23:0f:bb:d3:e4:88:ec:72:ba:29:1a:08:39:6f:62:
         e6:e2:e3:e7:c6:1e:bb:f2:3e:21:92:c6:17:41:32:aa:0d:5e:
         14:c8:38:1e:c4:cb:4b:a0:c7:b0:38:5f:9e:ce:3d:d1:50:7e:
         8d:b4:da:35:1b:26:5d:04:f9:7d:c4:21:44:6d:e5:8a:a6:76:
         04:ef:10:08:7b:fd:46:1b:89:38:62:b2:56:26:82:8d:ca:f3:
         32:17:28:73:ce:4d:b6:81:e9:95:79:91:07:7e:4f:1d:4e:08:
         1b:62:15:f7:e0:6c:bc:3d:fa:12:33:03:cd:c1:6a:85:85:c9:
         60:1b:6a:b1:4e:d9:5e:df:90:11:6c:9c:1f:91:ca:50:1a:1c:
         34:18:33:11:60:dd:70:b2:ef:78:9d:90:d9:b0:96:5a:fc:8e:
         cc:77:60:68:1f:6c:a5:a5:a1:d6:08:0b:8c:10:39:09:06:12:
         10:11:a8:71:86:db:4b:80:99:56:05:5e:53:ea:65:db:61:aa:
         08:38:fd:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:44:02 2025 by rpki-client