Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HHPETmcfR2hPaougfQMxyLGSpKXehX35jxAp4yd4dQ5i/0/3230302e32342e38302e302f32332d3233203d3e203631373930.roa
File:                     3230302e32342e38302e302f32332d3233203d3e203631373930.roa (raw, json)
Hash identifier:          cYJs7QAim6kB1qC6dYuG13gpnkmty4R2RcwN8SpZG/k=
Subject key identifier:   F2:9C:2B:49:5E:14:45:6E:6F:2A:ED:18:F1:7E:E7:70:3F:F6:35:5F
Certificate issuer:       /CN=D45EE207E811FF7831A3054740F4FC376DE9C473
Certificate serial:       1E656AB5C13577EDA7420CF8B2F4CBCC2332E106
Authority key identifier: D4:5E:E2:07:E8:11:FF:78:31:A3:05:47:40:F4:FC:37:6D:E9:C4:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D45EE207E811FF7831A3054740F4FC376DE9C473.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HHPETmcfR2hPaougfQMxyLGSpKXehX35jxAp4yd4dQ5i/0/3230302e32342e38302e302f32332d3233203d3e203631373930.roa
Signing time:             Mon 15 Sep 2025 12:28:05 +0000
ROA not before:           Mon 15 Sep 2025 12:23:05 +0000
ROA not after:            Mon 14 Sep 2026 12:28:05 +0000
asID:                     61790
IP address blocks:        200.24.80.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HHPETmcfR2hPaougfQMxyLGSpKXehX35jxAp4yd4dQ5i/0/D45EE207E811FF7831A3054740F4FC376DE9C473.crl
                          rsync://rpki-repo.registro.br/repo/HHPETmcfR2hPaougfQMxyLGSpKXehX35jxAp4yd4dQ5i/0/D45EE207E811FF7831A3054740F4FC376DE9C473.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D45EE207E811FF7831A3054740F4FC376DE9C473.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 09:11:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:65:6a:b5:c1:35:77:ed:a7:42:0c:f8:b2:f4:cb:cc:23:32:e1:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D45EE207E811FF7831A3054740F4FC376DE9C473
        Validity
            Not Before: Sep 15 12:23:05 2025 GMT
            Not After : Sep 14 12:28:05 2026 GMT
        Subject: CN=F29C2B495E14456E6F2AED18F17EE7703FF6355F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:15:7b:54:b3:58:30:ec:ce:d9:b3:f8:4c:f6:
                    00:45:c7:a6:70:3a:ac:5f:ee:a4:11:01:ca:d9:8c:
                    62:4d:ff:bc:bc:10:57:5d:41:f7:55:b6:9a:13:1b:
                    82:73:f3:b7:0e:46:6c:69:3a:98:13:46:cc:ff:da:
                    3b:58:01:74:f3:d2:36:34:bc:b8:3b:ef:8b:f2:73:
                    ea:f0:ca:bc:88:39:84:92:f2:41:64:8c:84:70:fa:
                    5c:44:33:fe:d8:65:a5:8d:1b:f5:98:96:3c:34:c5:
                    dc:66:b8:8f:e9:e1:8c:ed:b2:cc:9d:9f:8d:86:66:
                    d0:03:57:14:9f:31:b7:dc:b3:12:79:e1:17:13:9b:
                    45:82:8c:91:0f:0d:ef:a3:c2:1e:13:e1:e7:cf:76:
                    ac:73:4d:e8:f7:18:92:ac:5a:a4:9e:b0:31:16:8e:
                    7d:96:f2:64:16:51:ac:a8:91:4f:c6:1a:c1:3e:8f:
                    7d:75:60:b5:66:64:43:1b:f9:62:f3:58:66:5d:f6:
                    fb:95:2b:6e:9b:3e:e6:28:d5:45:b2:53:e2:59:e4:
                    98:af:c0:e5:27:fa:c5:80:12:2d:8a:3c:13:f7:9f:
                    6d:47:39:a1:83:e8:b9:d1:01:ee:6e:22:2f:9f:e1:
                    f2:a3:7b:df:2a:f4:2e:10:26:bb:2f:4b:39:f3:86:
                    fd:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:9C:2B:49:5E:14:45:6E:6F:2A:ED:18:F1:7E:E7:70:3F:F6:35:5F
            X509v3 Authority Key Identifier:
                keyid:D4:5E:E2:07:E8:11:FF:78:31:A3:05:47:40:F4:FC:37:6D:E9:C4:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HHPETmcfR2hPaougfQMxyLGSpKXehX35jxAp4yd4dQ5i/0/D45EE207E811FF7831A3054740F4FC376DE9C473.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D45EE207E811FF7831A3054740F4FC376DE9C473.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HHPETmcfR2hPaougfQMxyLGSpKXehX35jxAp4yd4dQ5i/0/3230302e32342e38302e302f32332d3233203d3e203631373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.24.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:b4:81:d3:c0:23:51:3a:a1:93:f3:05:66:96:0c:94:c6:4f:
         e5:27:41:6f:76:59:97:a1:be:de:a6:3b:92:33:35:9f:36:ee:
         ac:02:8a:a6:6b:70:c1:8b:85:92:17:b4:7f:ae:13:80:45:4f:
         eb:e8:fe:78:5b:50:9d:93:37:e2:cb:bb:18:5a:24:d6:1e:66:
         53:28:b5:f2:f9:69:27:e0:d9:2c:de:a6:39:3a:e6:c1:82:3b:
         1a:f5:fb:45:c4:84:9e:b4:ed:26:cb:5e:53:99:6e:c3:24:b1:
         08:36:0e:6f:aa:25:13:6f:36:2e:9b:9a:eb:63:e7:65:c8:56:
         68:ca:cd:72:f1:d7:d9:be:56:84:e7:fd:0b:41:39:da:64:f0:
         34:8e:61:7f:43:64:77:75:01:d3:5f:10:e2:44:72:b3:b7:3e:
         88:b4:c7:da:7e:30:29:21:90:29:89:66:10:0e:3d:b8:11:a6:
         db:09:1b:0f:3e:28:c2:f6:a2:f6:6e:b4:f1:39:e9:7a:07:b0:
         01:16:b1:60:a7:6c:0a:2d:95:8b:c1:19:cc:f8:37:1a:fe:68:
         cd:2c:38:d3:ce:d9:16:79:bd:b9:86:13:0b:b4:05:ba:6e:03:
         1a:94:a0:a5:89:03:3a:35:f4:e7:96:78:b2:31:97:08:82:c5:
         30:13:b2:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:40:19 2025 by rpki-client