Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HVrM4TdEFgakWEjDsa6sjBmFgzjXNayfKRwJPEvcUqiW/0/3230302e3233392e3231362e302f32322d3234203d3e203130373034.roa
File:                     3230302e3233392e3231362e302f32322d3234203d3e203130373034.roa (raw, json)
Hash identifier:          zlGAe/jtCE1/w6KaXcqTYcX6dna1WUaLKw96gdQLvW0=
Subject key identifier:   29:71:C1:9C:E2:83:B8:5A:C8:CC:3D:F8:63:22:40:DF:3F:D1:CB:19
Certificate issuer:       /CN=0F22F0E315749E4417293F3772830DCD92044CE8
Certificate serial:       0C2D4DE9A6D2F5EE5145FB781291DE97FBBAE190
Authority key identifier: 0F:22:F0:E3:15:74:9E:44:17:29:3F:37:72:83:0D:CD:92:04:4C:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F22F0E315749E4417293F3772830DCD92044CE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HVrM4TdEFgakWEjDsa6sjBmFgzjXNayfKRwJPEvcUqiW/0/3230302e3233392e3231362e302f32322d3234203d3e203130373034.roa
Signing time:             Mon 22 Sep 2025 00:06:36 +0000
ROA not before:           Mon 22 Sep 2025 00:01:36 +0000
ROA not after:            Mon 21 Sep 2026 00:06:36 +0000
asID:                     10704
IP address blocks:        200.239.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HVrM4TdEFgakWEjDsa6sjBmFgzjXNayfKRwJPEvcUqiW/0/0F22F0E315749E4417293F3772830DCD92044CE8.crl
                          rsync://rpki-repo.registro.br/repo/HVrM4TdEFgakWEjDsa6sjBmFgzjXNayfKRwJPEvcUqiW/0/0F22F0E315749E4417293F3772830DCD92044CE8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F22F0E315749E4417293F3772830DCD92044CE8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 14:48:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:2d:4d:e9:a6:d2:f5:ee:51:45:fb:78:12:91:de:97:fb:ba:e1:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F22F0E315749E4417293F3772830DCD92044CE8
        Validity
            Not Before: Sep 22 00:01:36 2025 GMT
            Not After : Sep 21 00:06:36 2026 GMT
        Subject: CN=2971C19CE283B85AC8CC3DF8632240DF3FD1CB19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:af:d5:00:9e:9e:66:d6:33:f8:44:3b:12:46:
                    c6:12:69:aa:f2:6c:75:58:a3:57:d2:45:77:f7:44:
                    6b:c1:40:c2:78:9c:3c:c7:e1:66:fa:e3:47:98:0b:
                    16:70:10:b7:d1:18:e2:49:01:25:45:71:05:ba:71:
                    db:a3:0f:ac:30:1b:e0:0b:b3:c1:44:73:ed:16:64:
                    05:3d:f1:37:d2:d5:df:5e:2f:42:2d:38:4c:3b:89:
                    17:f3:2b:10:99:8b:31:56:9b:ce:ec:60:73:9d:0f:
                    d3:2e:f0:ec:bf:09:e7:7a:2c:70:3a:c8:8a:6d:fb:
                    0c:eb:f7:d0:b0:b4:db:fa:6e:8e:95:50:f5:27:df:
                    eb:7f:5a:eb:b2:c0:ea:af:39:12:fb:5a:57:b9:9b:
                    0d:64:00:c1:db:fc:62:3e:f9:6a:e4:25:8c:13:66:
                    bf:db:c4:ff:51:ba:22:01:96:60:a2:88:a0:fc:96:
                    48:46:04:ba:4b:92:52:8b:fa:a4:33:7d:af:1d:26:
                    9a:fe:85:8f:d4:4c:c1:54:03:11:ac:f5:4f:b6:bd:
                    f7:59:a0:c2:95:c1:eb:40:1f:76:e0:2a:1b:b9:e6:
                    7c:29:3a:02:9f:81:24:b7:15:94:d8:b9:80:0e:8a:
                    4c:64:1c:8f:75:c2:29:ec:55:26:9f:d9:34:11:07:
                    cb:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:71:C1:9C:E2:83:B8:5A:C8:CC:3D:F8:63:22:40:DF:3F:D1:CB:19
            X509v3 Authority Key Identifier:
                keyid:0F:22:F0:E3:15:74:9E:44:17:29:3F:37:72:83:0D:CD:92:04:4C:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HVrM4TdEFgakWEjDsa6sjBmFgzjXNayfKRwJPEvcUqiW/0/0F22F0E315749E4417293F3772830DCD92044CE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F22F0E315749E4417293F3772830DCD92044CE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVrM4TdEFgakWEjDsa6sjBmFgzjXNayfKRwJPEvcUqiW/0/3230302e3233392e3231362e302f32322d3234203d3e203130373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.239.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:ca:96:50:16:8a:a5:51:4f:f9:62:e3:23:c3:d6:c7:85:14:
         18:4e:f8:87:41:a4:cc:1e:3b:cf:d1:d1:15:3f:85:2c:df:4a:
         f6:44:33:9b:74:96:69:eb:dd:c3:b6:46:7b:12:30:56:8a:c0:
         1a:4b:67:a5:89:5a:88:07:e3:de:76:39:a1:6d:aa:ea:1b:9f:
         38:27:ea:af:37:f9:36:24:72:3e:72:63:ad:25:41:3a:d6:89:
         63:7a:9c:e4:26:53:1d:69:bf:18:97:20:e5:62:33:cc:96:51:
         59:91:45:19:75:e6:92:a8:75:f3:e1:0c:af:25:02:d9:1d:aa:
         19:7b:47:c2:34:16:0d:d8:94:ff:38:5e:0e:ff:24:e8:43:0b:
         9b:fe:fc:ac:84:5f:51:f9:81:c3:38:4b:29:88:63:a2:93:4f:
         e6:8c:f9:7b:4a:61:86:7d:0b:a2:d4:31:8e:4c:dc:66:c4:45:
         0f:fb:e1:9e:63:e7:f4:b7:12:7b:ba:18:0e:41:c9:3b:4d:97:
         34:92:bc:60:c4:6e:fb:c2:1f:da:94:8c:9f:05:8b:c7:2d:b8:
         82:ad:dc:e0:ac:c7:b3:90:e0:eb:67:77:fe:82:10:71:97:94:
         2c:c5:c9:cb:3c:cc:40:1b:08:05:e4:c4:e5:1d:18:83:8d:6f:
         60:a2:1d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:52:01 2025 by rpki-client