Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HVrM4TdEFgakWEjDsa6sjBmFgzjXNayfKRwJPEvcUqiW/0/3230302e3233392e3232302e302f32322d3234203d3e203130373034.roa
File:                     3230302e3233392e3232302e302f32322d3234203d3e203130373034.roa (raw, json)
Hash identifier:          /zAGbHJfLevaua5ahzY4pHwkJi4hsfm9CuAgoO/ZNV0=
Subject key identifier:   35:1D:BC:87:12:E6:B8:C7:79:7B:51:C2:74:7F:91:22:F6:5C:6F:2E
Certificate issuer:       /CN=0F22F0E315749E4417293F3772830DCD92044CE8
Certificate serial:       1AE659A3E64CF0D027D755745941CBA5A73A10A7
Authority key identifier: 0F:22:F0:E3:15:74:9E:44:17:29:3F:37:72:83:0D:CD:92:04:4C:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F22F0E315749E4417293F3772830DCD92044CE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HVrM4TdEFgakWEjDsa6sjBmFgzjXNayfKRwJPEvcUqiW/0/3230302e3233392e3232302e302f32322d3234203d3e203130373034.roa
Signing time:             Mon 22 Sep 2025 00:06:45 +0000
ROA not before:           Mon 22 Sep 2025 00:01:45 +0000
ROA not after:            Mon 21 Sep 2026 00:06:45 +0000
asID:                     10704
IP address blocks:        200.239.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HVrM4TdEFgakWEjDsa6sjBmFgzjXNayfKRwJPEvcUqiW/0/0F22F0E315749E4417293F3772830DCD92044CE8.crl
                          rsync://rpki-repo.registro.br/repo/HVrM4TdEFgakWEjDsa6sjBmFgzjXNayfKRwJPEvcUqiW/0/0F22F0E315749E4417293F3772830DCD92044CE8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F22F0E315749E4417293F3772830DCD92044CE8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 14:48:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:e6:59:a3:e6:4c:f0:d0:27:d7:55:74:59:41:cb:a5:a7:3a:10:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F22F0E315749E4417293F3772830DCD92044CE8
        Validity
            Not Before: Sep 22 00:01:45 2025 GMT
            Not After : Sep 21 00:06:45 2026 GMT
        Subject: CN=351DBC8712E6B8C7797B51C2747F9122F65C6F2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:41:ad:f1:c4:e3:38:73:52:9e:6f:c2:a2:37:
                    41:b8:68:d7:c7:90:09:f4:96:a7:cd:53:32:1d:fc:
                    14:1a:b2:d6:a3:76:d9:09:3e:e3:03:b9:0e:dc:2a:
                    64:1f:4e:95:50:70:bc:97:4b:dc:89:31:7e:d1:1d:
                    6f:10:9f:3e:bf:43:15:d4:95:7c:00:95:57:9c:59:
                    e6:ab:d1:8c:97:4e:10:64:0e:f0:40:46:00:2d:67:
                    80:59:39:aa:97:81:3e:06:8a:a9:ad:14:65:34:d4:
                    18:c5:b2:d7:12:26:15:56:9c:ff:ee:15:51:df:4a:
                    9d:cd:a1:e2:6f:9d:68:af:99:2b:28:e1:0f:0e:6a:
                    9f:be:9d:6c:c7:f1:39:d0:38:27:c8:18:0b:0f:e1:
                    ef:44:c6:44:39:61:23:32:ab:ee:29:fd:f0:ce:78:
                    a8:21:03:9c:f6:1e:79:a3:1a:bb:27:07:91:fd:a4:
                    e7:4c:e0:9a:35:36:81:c9:25:38:ab:81:68:37:07:
                    01:08:9e:4b:a6:b1:42:4f:78:ab:6e:02:40:b3:7e:
                    b0:6a:67:9e:70:41:c7:a6:1c:a1:b5:92:ce:e0:b6:
                    60:26:a6:d9:7e:c9:00:08:9f:2e:92:1e:e5:51:8b:
                    af:9a:96:64:b3:d2:55:29:a8:1b:ef:72:d7:76:2e:
                    64:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:1D:BC:87:12:E6:B8:C7:79:7B:51:C2:74:7F:91:22:F6:5C:6F:2E
            X509v3 Authority Key Identifier:
                keyid:0F:22:F0:E3:15:74:9E:44:17:29:3F:37:72:83:0D:CD:92:04:4C:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HVrM4TdEFgakWEjDsa6sjBmFgzjXNayfKRwJPEvcUqiW/0/0F22F0E315749E4417293F3772830DCD92044CE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F22F0E315749E4417293F3772830DCD92044CE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVrM4TdEFgakWEjDsa6sjBmFgzjXNayfKRwJPEvcUqiW/0/3230302e3233392e3232302e302f32322d3234203d3e203130373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.239.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:f4:cf:b2:71:0c:d0:fd:e9:ef:ee:b4:ce:6c:bc:c0:57:2b:
         4d:98:af:88:f2:91:1d:06:75:4a:24:d0:b1:e2:8d:e8:0e:51:
         21:59:4a:b8:c8:cb:9f:55:af:af:79:d3:2f:2b:37:d8:35:07:
         d7:08:54:43:80:1b:af:d1:4c:c1:8d:a6:78:1b:e9:6e:44:86:
         94:9e:44:12:61:00:91:e6:c5:c4:82:70:df:3e:4e:93:97:65:
         43:73:fe:97:97:9d:22:8e:a2:40:37:a9:a3:7b:69:23:ed:58:
         1c:d0:95:17:9c:b5:76:ff:86:f5:37:53:82:f2:bb:42:72:e2:
         22:c0:13:35:09:93:60:a5:54:50:5c:51:bb:da:b1:f8:0c:4f:
         f2:c6:2b:70:91:c5:75:91:a9:9a:ea:da:0d:85:ff:e9:07:cb:
         27:a2:99:d3:64:a3:1d:69:ec:65:02:8b:72:64:8a:43:59:6f:
         19:df:4c:b6:63:22:87:65:8c:c2:2b:61:f5:b8:ff:d2:ac:fc:
         53:ff:3c:83:ce:95:04:e3:3f:4f:8c:b4:3a:53:35:69:af:79:
         cf:99:91:82:b6:f7:99:7e:fe:df:2a:e0:86:ac:99:ee:a4:30:
         b4:62:24:70:6d:2f:16:cc:86:d7:11:fb:e8:2b:25:fd:55:58:
         75:bd:b5:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:52:04 2025 by rpki-client