Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HVrM4TdEFgakWEjDsa6sjBmFgzjXNayfKRwJPEvcUqiW/0/3230302e3233392e3139322e302f32322d3232203d3e203130373034.roa
File:                     3230302e3233392e3139322e302f32322d3232203d3e203130373034.roa (raw, json)
Hash identifier:          GR+3LcHx8Ai8tZgfz6J63xMkb7u35h2JzusIwx0vSZY=
Subject key identifier:   C7:BD:CD:1E:77:6A:B2:D3:8C:81:14:01:8E:9D:28:BE:03:F4:25:81
Certificate issuer:       /CN=0F22F0E315749E4417293F3772830DCD92044CE8
Certificate serial:       05ECEE643E37A046796B91F05079AE02591A17F2
Authority key identifier: 0F:22:F0:E3:15:74:9E:44:17:29:3F:37:72:83:0D:CD:92:04:4C:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F22F0E315749E4417293F3772830DCD92044CE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HVrM4TdEFgakWEjDsa6sjBmFgzjXNayfKRwJPEvcUqiW/0/3230302e3233392e3139322e302f32322d3232203d3e203130373034.roa
Signing time:             Mon 22 Sep 2025 00:05:21 +0000
ROA not before:           Mon 22 Sep 2025 00:00:21 +0000
ROA not after:            Mon 21 Sep 2026 00:05:21 +0000
asID:                     10704
IP address blocks:        200.239.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HVrM4TdEFgakWEjDsa6sjBmFgzjXNayfKRwJPEvcUqiW/0/0F22F0E315749E4417293F3772830DCD92044CE8.crl
                          rsync://rpki-repo.registro.br/repo/HVrM4TdEFgakWEjDsa6sjBmFgzjXNayfKRwJPEvcUqiW/0/0F22F0E315749E4417293F3772830DCD92044CE8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F22F0E315749E4417293F3772830DCD92044CE8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 14:48:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:ec:ee:64:3e:37:a0:46:79:6b:91:f0:50:79:ae:02:59:1a:17:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F22F0E315749E4417293F3772830DCD92044CE8
        Validity
            Not Before: Sep 22 00:00:21 2025 GMT
            Not After : Sep 21 00:05:21 2026 GMT
        Subject: CN=C7BDCD1E776AB2D38C8114018E9D28BE03F42581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5a:71:bd:19:1c:d4:c0:51:ee:c8:80:08:80:
                    d6:dd:0f:30:ec:f5:35:ae:4a:4c:de:f2:8a:b3:a0:
                    a1:93:92:45:c8:d6:6a:3d:bf:bf:3a:21:b3:71:9a:
                    87:fa:3b:2a:93:a3:3c:0a:a6:71:7c:0b:9e:bd:7e:
                    8f:a5:90:1c:31:55:00:f9:5c:e3:98:03:4a:01:ac:
                    ec:7e:3c:7b:e2:2e:98:4a:3d:b2:0e:0c:9d:77:f0:
                    57:15:be:a3:73:0c:01:b2:35:be:f0:35:e6:c7:18:
                    9d:65:aa:34:5e:0f:c7:a0:d0:82:95:38:aa:63:61:
                    e7:47:65:dd:90:cd:06:71:20:ce:30:1c:e0:c6:f5:
                    c7:d4:22:42:3f:9a:82:07:96:b5:28:54:44:0f:fb:
                    47:6c:77:bc:4e:2d:f0:af:ba:b3:39:2d:ef:41:fd:
                    aa:38:3c:63:67:b2:f3:b1:1e:c6:77:db:36:61:51:
                    be:fd:18:8e:a9:46:14:bb:7a:c3:87:b0:32:9c:f3:
                    34:22:84:98:da:41:8a:5d:b2:df:38:ae:18:28:4e:
                    76:ae:49:2b:43:21:6c:1b:cc:47:9e:02:d0:ee:c2:
                    ff:58:f6:3f:a9:d3:e4:1f:9c:86:06:0d:18:7c:84:
                    40:ca:25:d8:33:36:0b:a7:70:b6:46:92:b2:21:0b:
                    1c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:BD:CD:1E:77:6A:B2:D3:8C:81:14:01:8E:9D:28:BE:03:F4:25:81
            X509v3 Authority Key Identifier:
                keyid:0F:22:F0:E3:15:74:9E:44:17:29:3F:37:72:83:0D:CD:92:04:4C:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HVrM4TdEFgakWEjDsa6sjBmFgzjXNayfKRwJPEvcUqiW/0/0F22F0E315749E4417293F3772830DCD92044CE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F22F0E315749E4417293F3772830DCD92044CE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVrM4TdEFgakWEjDsa6sjBmFgzjXNayfKRwJPEvcUqiW/0/3230302e3233392e3139322e302f32322d3232203d3e203130373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.239.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:45:5f:25:3d:f4:d8:d3:70:07:25:6e:a7:0a:a5:47:fd:ce:
         b4:73:41:3c:e9:35:59:08:24:57:e0:c8:75:de:93:d1:55:13:
         75:85:45:3b:4d:94:80:25:47:75:b5:d3:ac:15:6d:a5:d9:ca:
         80:16:e4:d8:65:20:83:a1:6a:e3:74:b9:01:f5:b0:a6:40:05:
         c5:6f:63:21:dd:5c:44:6d:f5:9d:b3:31:2f:af:a5:b0:fc:de:
         4b:8f:a1:7b:10:e3:88:f7:77:d2:69:79:ff:96:7e:bb:c5:43:
         db:ac:43:62:48:55:02:82:b4:98:c2:d4:31:db:6d:bc:32:cf:
         6a:bf:24:dd:78:56:20:c3:30:40:7d:f1:fb:d3:e6:e0:6e:13:
         88:71:43:2e:d1:7e:4e:ed:70:a9:d4:dd:b2:cd:e4:ae:99:25:
         ee:99:0e:ff:da:bc:d6:4a:50:c6:3d:eb:9c:cf:80:68:06:88:
         8c:e5:75:fc:3f:21:55:4d:bd:49:33:5a:20:bc:34:2b:1a:92:
         b2:43:a1:7c:87:ce:43:fb:f5:2a:5d:89:7c:4a:da:56:1c:5b:
         09:10:64:5e:a8:f1:8d:bb:1e:37:77:0f:a7:43:a1:aa:a6:03:
         14:67:ea:de:f2:3a:53:36:1b:46:6d:41:11:cd:63:92:63:89:
         bb:95:97:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:52:08 2025 by rpki-client