Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HVrM4TdEFgakWEjDsa6sjBmFgzjXNayfKRwJPEvcUqiW/0/3230302e3233392e3230382e302f32322d3234203d3e203130373034.roa
File:                     3230302e3233392e3230382e302f32322d3234203d3e203130373034.roa (raw, json)
Hash identifier:          qDsqXWjaCT06b2qS7nV/GCgSU8p8djz9U1FAZd1D0no=
Subject key identifier:   D0:39:8B:66:86:99:42:6B:11:10:4F:D5:F4:CA:8C:68:CE:D1:4C:61
Certificate issuer:       /CN=0F22F0E315749E4417293F3772830DCD92044CE8
Certificate serial:       4E8C8FF43FE6CE6C016CD6D2946B73B6868DA47E
Authority key identifier: 0F:22:F0:E3:15:74:9E:44:17:29:3F:37:72:83:0D:CD:92:04:4C:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F22F0E315749E4417293F3772830DCD92044CE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HVrM4TdEFgakWEjDsa6sjBmFgzjXNayfKRwJPEvcUqiW/0/3230302e3233392e3230382e302f32322d3234203d3e203130373034.roa
Signing time:             Mon 22 Sep 2025 00:06:22 +0000
ROA not before:           Mon 22 Sep 2025 00:01:22 +0000
ROA not after:            Mon 21 Sep 2026 00:06:22 +0000
asID:                     10704
IP address blocks:        200.239.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HVrM4TdEFgakWEjDsa6sjBmFgzjXNayfKRwJPEvcUqiW/0/0F22F0E315749E4417293F3772830DCD92044CE8.crl
                          rsync://rpki-repo.registro.br/repo/HVrM4TdEFgakWEjDsa6sjBmFgzjXNayfKRwJPEvcUqiW/0/0F22F0E315749E4417293F3772830DCD92044CE8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F22F0E315749E4417293F3772830DCD92044CE8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 14:48:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:8c:8f:f4:3f:e6:ce:6c:01:6c:d6:d2:94:6b:73:b6:86:8d:a4:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F22F0E315749E4417293F3772830DCD92044CE8
        Validity
            Not Before: Sep 22 00:01:22 2025 GMT
            Not After : Sep 21 00:06:22 2026 GMT
        Subject: CN=D0398B668699426B11104FD5F4CA8C68CED14C61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:af:a1:15:de:12:68:54:4f:dd:6a:5c:b6:ae:
                    71:8b:38:4f:8f:ee:3b:65:32:66:d5:b6:c1:46:4c:
                    73:ee:0b:2e:5f:63:4d:33:d6:f9:37:68:df:1e:67:
                    81:2c:9b:da:ed:99:9a:d8:ac:ef:53:8c:49:67:01:
                    a5:3a:a1:dc:33:49:a1:48:97:fe:37:e4:38:b5:6b:
                    e6:ec:fe:6d:27:24:66:b4:3c:c0:dc:65:89:51:16:
                    1d:71:78:6d:19:f4:6e:b5:c7:7f:83:50:3a:8c:65:
                    da:d8:a2:94:ff:f2:d7:18:9d:77:a8:9e:53:7a:51:
                    a5:d2:86:41:61:81:c2:d6:0d:57:ce:d2:9e:27:3e:
                    41:da:b1:58:3f:df:6e:aa:13:d6:c5:68:70:78:47:
                    aa:6b:9e:ef:e5:cd:ad:c3:0c:c6:94:86:0a:f2:03:
                    90:99:66:33:c6:47:c7:5d:5c:9d:fb:39:07:88:da:
                    fd:13:17:96:81:b6:a9:09:24:61:be:8d:e0:1c:50:
                    38:45:10:62:93:84:74:9a:f3:0f:b2:9d:b8:f0:05:
                    72:4a:6c:5a:b9:ed:bd:76:92:e1:cc:9d:d5:bf:80:
                    41:25:f4:c3:ce:07:c7:19:54:3c:be:23:61:6a:0f:
                    18:5f:49:fd:89:91:f3:46:64:97:27:ea:d1:13:cd:
                    d7:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:39:8B:66:86:99:42:6B:11:10:4F:D5:F4:CA:8C:68:CE:D1:4C:61
            X509v3 Authority Key Identifier:
                keyid:0F:22:F0:E3:15:74:9E:44:17:29:3F:37:72:83:0D:CD:92:04:4C:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HVrM4TdEFgakWEjDsa6sjBmFgzjXNayfKRwJPEvcUqiW/0/0F22F0E315749E4417293F3772830DCD92044CE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F22F0E315749E4417293F3772830DCD92044CE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVrM4TdEFgakWEjDsa6sjBmFgzjXNayfKRwJPEvcUqiW/0/3230302e3233392e3230382e302f32322d3234203d3e203130373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.239.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:a7:58:0e:2f:85:b7:07:23:30:2e:ad:32:e8:b8:92:69:e8:
         db:12:fa:94:31:13:9a:e4:2c:c2:cd:27:29:de:df:48:d4:67:
         9d:27:88:1c:c0:20:a4:2d:69:0c:bc:17:bf:9a:b9:1d:52:06:
         39:d2:81:e7:fb:7c:25:a1:cb:cc:8b:96:19:36:03:51:4b:ea:
         75:90:1d:4e:d4:cb:e0:fa:bf:5b:0b:d0:80:fa:4e:34:9a:98:
         47:ea:99:2b:a0:81:2a:21:c0:48:19:48:67:df:aa:21:90:3c:
         2a:e2:58:60:04:66:85:87:a9:f0:e1:56:5c:cb:7a:59:49:a3:
         9f:9d:bf:83:37:af:fa:19:bb:8f:01:74:ed:5e:c9:2f:af:dd:
         71:cd:cd:bd:39:7a:43:d4:5a:5f:3b:47:f0:d9:79:9d:8a:00:
         4e:bd:1e:10:53:03:1d:fe:48:ed:5d:1e:d0:9b:3e:f9:76:32:
         c4:bd:c1:7e:e4:f3:94:5c:d7:2a:78:f1:69:3b:65:f9:1e:65:
         47:1b:58:98:b8:42:06:07:e6:a0:fb:5f:ba:a2:8e:93:8a:f2:
         72:54:24:ec:63:b2:aa:77:b5:2f:46:55:fa:ed:ea:2b:d7:89:
         c0:1d:ef:6a:64:de:3a:90:ac:f6:1a:bc:2c:96:3a:9c:0e:0d:
         10:5e:7f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:51:56 2025 by rpki-client