Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/3230302e3233332e33362e302f32322d3332203d3e20323633303835.roa
File:                     3230302e3233332e33362e302f32322d3332203d3e20323633303835.roa (raw, json)
Hash identifier:          BGbb/zOEduZEwJ5taF3w2NYPUpXFQ6mSEafjuDNKgOU=
Subject key identifier:   7C:23:90:96:08:EF:E1:E3:F4:E2:53:C9:EE:65:83:21:DF:26:43:28
Certificate issuer:       /CN=1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822
Certificate serial:       49A26FDFA18DCD6A86EF73B7FCA5C4BA4703E3B5
Authority key identifier: 1A:9F:A3:7F:39:AE:1F:F5:54:22:CD:1E:A4:DD:C2:2C:7B:D3:A8:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/3230302e3233332e33362e302f32322d3332203d3e20323633303835.roa
Signing time:             Tue 02 Sep 2025 13:17:06 +0000
ROA not before:           Tue 02 Sep 2025 13:12:06 +0000
ROA not after:            Tue 01 Sep 2026 13:17:06 +0000
asID:                     263085
IP address blocks:        200.233.36.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.crl
                          rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 06:15:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:a2:6f:df:a1:8d:cd:6a:86:ef:73:b7:fc:a5:c4:ba:47:03:e3:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822
        Validity
            Not Before: Sep  2 13:12:06 2025 GMT
            Not After : Sep  1 13:17:06 2026 GMT
        Subject: CN=7C23909608EFE1E3F4E253C9EE658321DF264328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:4c:ec:13:d5:ba:e9:51:e1:2d:d6:8f:22:79:
                    25:77:c1:43:9f:5c:13:0b:18:f5:3c:e7:e2:61:34:
                    c2:62:41:e5:f0:8c:45:34:4c:30:5d:5d:e6:43:38:
                    bc:c8:d2:ee:ee:71:21:4c:b3:98:75:7c:0d:8e:d0:
                    21:45:1c:e3:61:49:0a:ee:71:34:5f:56:0f:e0:91:
                    b6:82:e7:ce:7a:fc:92:9f:d7:9e:fc:38:c1:9f:4c:
                    e2:a5:12:fd:38:22:c6:03:2d:24:2a:0d:a0:12:ec:
                    0e:14:50:7f:01:90:fb:fb:4c:85:d9:d9:0a:f9:c3:
                    5e:05:9d:26:8c:9f:9f:f9:28:44:e6:12:a6:cf:0e:
                    a4:8c:84:5d:d6:b2:93:29:04:4b:bc:8d:28:7a:00:
                    0d:54:6f:38:58:c1:14:34:db:23:69:e1:e3:a8:dc:
                    23:11:20:1b:8b:47:c6:a4:37:c4:37:04:72:f6:c6:
                    71:12:f1:56:4a:08:e9:26:f0:b9:7a:9e:47:cd:43:
                    43:ca:28:01:41:fa:de:f8:4c:94:78:26:a8:40:c7:
                    16:8a:89:44:d1:a6:76:6d:59:1d:70:55:2b:95:7b:
                    f4:b6:80:98:a2:36:8a:c1:05:48:8d:b0:fc:ea:6c:
                    68:30:9c:7a:04:86:e3:95:a6:81:d1:c0:26:cf:96:
                    14:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:23:90:96:08:EF:E1:E3:F4:E2:53:C9:EE:65:83:21:DF:26:43:28
            X509v3 Authority Key Identifier:
                keyid:1A:9F:A3:7F:39:AE:1F:F5:54:22:CD:1E:A4:DD:C2:2C:7B:D3:A8:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/3230302e3233332e33362e302f32322d3332203d3e20323633303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.233.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:b6:d5:3f:8e:a0:21:e4:38:b8:c6:a9:83:b2:00:7c:d4:74:
         2b:12:8c:e6:8f:55:f4:bf:33:33:d3:ef:87:bb:66:bd:8c:f1:
         cb:b9:6a:11:ae:19:d3:2b:ea:37:31:d5:37:1f:2b:ba:50:95:
         fe:cf:cd:e6:99:e1:9c:79:22:02:c1:91:c5:c2:1f:84:10:23:
         14:a0:ce:1a:d0:f5:11:25:ad:a8:b1:22:ed:4b:ce:2e:13:d3:
         50:47:9f:c7:a7:69:ce:33:ba:7b:2f:79:c4:e2:54:fa:57:20:
         ad:b3:d7:96:8b:7a:46:e8:70:6f:ac:e2:05:b3:ff:0f:5b:a0:
         dd:fb:2f:2e:70:9f:76:39:39:11:03:02:fc:a3:ca:a8:85:bf:
         a6:98:ba:65:eb:e6:d8:37:d2:4f:a3:4d:e8:11:b3:0a:98:66:
         5e:d4:b5:56:ea:42:3a:35:86:e7:c8:61:57:e4:21:b9:29:2c:
         7a:c2:2a:8b:cd:80:6c:2d:0a:3f:dc:00:2a:4f:d0:48:4e:b2:
         84:d5:3b:83:8a:13:48:6a:5d:8a:86:33:46:68:ae:ca:39:dc:
         b8:0a:ca:0c:c5:a9:ff:6b:0e:7f:a4:36:b2:4f:9f:04:d5:43:
         4d:3d:53:7a:94:f2:c4:f7:46:37:ec:78:6c:02:5a:5c:4e:1a:
         61:f7:6d:78
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUSaJv36GNzWqG73O3/KXEukcD47UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUE5RkEzN0YzOUFFMUZGNTU0MjJDRDFFQTREREMyMkM3
QkQzQTgyMjAeFw0yNTA5MDIxMzEyMDZaFw0yNjA5MDExMzE3MDZaMDMxMTAvBgNV
BAMTKDdDMjM5MDk2MDhFRkUxRTNGNEUyNTNDOUVFNjU4MzIxREYyNjQzMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTTOwT1brpUeEt1o8ieSV3wUOf
XBMLGPU85+JhNMJiQeXwjEU0TDBdXeZDOLzI0u7ucSFMs5h1fA2O0CFFHONhSQru
cTRfVg/gkbaC5856/JKf1578OMGfTOKlEv04IsYDLSQqDaAS7A4UUH8BkPv7TIXZ
2Qr5w14FnSaMn5/5KETmEqbPDqSMhF3WspMpBEu8jSh6AA1UbzhYwRQ02yNp4eOo
3CMRIBuLR8akN8Q3BHL2xnES8VZKCOkm8Ll6nkfNQ0PKKAFB+t74TJR4JqhAxxaK
iUTRpnZtWR1wVSuVe/S2gJiiNorBBUiNsPzqbGgwnHoEhuOVpoHRwCbPlhRhAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUfCOQlgjv4eP04lPJ7mWDId8mQygwHwYDVR0j
BBgwFoAUGp+jfzmuH/VUIs0epN3CLHvTqCIwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9mU3VkTTRFTXdLSEV3OXc1aXVwcHlhbmlFNFVFZVRlM3pBaVByR3N4TENZ
LzAvMUE5RkEzN0YzOUFFMUZGNTU0MjJDRDFFQTREREMyMkM3QkQzQTgyMi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8xQTlGQTM3RjM5QUUxRkY1NTQy
MkNEMUVBNEREQzIyQzdCRDNBODIyLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9m
U3VkTTRFTXdLSEV3OXc1aXVwcHlhbmlFNFVFZVRlM3pBaVByR3N4TENZLzAvMzIz
MDMwMmUzMjMzMzMyZTMzMzYyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2MzMz
MDM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBALI6SQwDQYJKoZIhvcNAQELBQADggEBAFe21T+OoCHk
OLjGqYOyAHzUdCsSjOaPVfS/MzPT74e7Zr2M8cu5ahGuGdMr6jcx1TcfK7pQlf7P
zeaZ4Zx5IgLBkcXCH4QQIxSgzhrQ9RElraixIu1Lzi4T01BHn8enac4zunsvecTi
VPpXIK2z15aLekbocG+s4gWz/w9boN37Ly5wn3Y5OREDAvyjyqiFv6aYumXr5tg3
0k+jTegRswqYZl7UtVbqQjo1hufIYVfkIbkpLHrCKovNgGwtCj/cACpP0EhOsoTV
O4OKE0hqXYqGM0Zorso53LgKygzFqf9rDn+kNrJPnwTVQ009U3qU8sT3RjfseGwC
WlxOGmH3bXg=
-----END CERTIFICATE-----
Generated at Mon Oct 20 11:27:30 2025 by rpki-client