Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3230302e37392e3138342e302f32312d3231203d3e20323632343434.roa
File:                     3230302e37392e3138342e302f32312d3231203d3e20323632343434.roa (raw, json)
Hash identifier:          dIAgV7Wx62qnkMO7e7mzl1oNnN94mqORtxl4k0M1btM=
Subject key identifier:   C3:F4:47:7B:E1:78:D8:DA:69:46:38:73:0B:0B:70:1C:26:6C:49:8C
Certificate issuer:       /CN=B883529218840F471E398CF8F585B71D007A2B35
Certificate serial:       10E8E12D68E694FE0364C608816D582A23FD98A2
Authority key identifier: B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3230302e37392e3138342e302f32312d3231203d3e20323632343434.roa
Signing time:             Wed 09 Jul 2025 14:04:41 +0000
ROA not before:           Wed 09 Jul 2025 13:59:41 +0000
ROA not after:            Wed 08 Jul 2026 14:04:41 +0000
asID:                     262444
IP address blocks:        200.79.184.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl
                          rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 09:03:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:e8:e1:2d:68:e6:94:fe:03:64:c6:08:81:6d:58:2a:23:fd:98:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B883529218840F471E398CF8F585B71D007A2B35
        Validity
            Not Before: Jul  9 13:59:41 2025 GMT
            Not After : Jul  8 14:04:41 2026 GMT
        Subject: CN=C3F4477BE178D8DA694638730B0B701C266C498C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:4f:65:ce:ea:ef:95:3b:b0:91:d2:d7:49:1f:
                    b0:4c:96:d5:0e:b1:08:f2:63:9b:a8:ba:ef:22:2a:
                    cf:fd:6f:cf:17:e6:ef:8e:17:9d:39:71:9d:84:5f:
                    2d:9a:0a:0d:c9:e6:23:ed:7c:e0:e9:9c:ab:bb:65:
                    62:2a:ee:75:f2:b2:d5:7f:ec:9d:d1:c1:0d:1b:38:
                    6d:29:ae:06:00:33:f2:00:33:bc:28:ad:f4:94:0c:
                    b9:21:78:ab:a0:05:2f:c6:49:76:1d:dd:cb:e3:ee:
                    60:5a:b4:ea:3b:6a:0f:fe:e2:13:fb:09:a7:db:5f:
                    75:d7:71:1b:a4:13:9b:7b:ee:e4:69:6a:d2:b2:ee:
                    82:67:61:06:c8:03:ca:52:ac:dd:ad:6e:89:75:d3:
                    39:33:69:e8:e9:66:37:e1:fe:77:c9:6e:70:ef:7d:
                    da:79:e8:2b:b6:9f:70:94:ba:c5:5b:ea:b5:06:7c:
                    28:72:2f:4e:f0:1f:41:c7:fe:cf:99:ba:60:6d:3b:
                    51:eb:18:23:1c:a5:5f:65:cc:a2:e8:5b:68:ce:22:
                    20:93:b8:56:20:4f:b7:f3:77:8e:19:72:58:f0:bb:
                    de:d3:b9:5c:a2:7a:88:5c:18:ce:15:38:57:94:b7:
                    7c:5b:b4:f9:b8:fb:36:e9:a4:46:e2:84:c1:90:f9:
                    11:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F4:47:7B:E1:78:D8:DA:69:46:38:73:0B:0B:70:1C:26:6C:49:8C
            X509v3 Authority Key Identifier:
                keyid:B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3230302e37392e3138342e302f32312d3231203d3e20323632343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.79.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         97:b9:4c:8a:e9:9c:0e:63:da:25:39:5d:72:54:c7:f8:11:ea:
         54:80:b7:24:8a:f6:3d:d9:ef:70:e7:b5:bd:c3:e4:5a:b7:db:
         ab:aa:0d:e7:70:d9:21:91:27:ad:20:c1:20:4c:25:4b:33:90:
         dd:75:c2:15:61:68:56:67:8a:3d:e7:7b:17:17:3f:f9:25:31:
         5c:db:a4:17:fe:9e:10:2e:16:cd:35:3b:5d:39:f9:b9:af:2b:
         d5:15:8e:fc:11:ab:97:e8:60:28:28:9b:c0:fa:f7:bf:cb:58:
         7b:83:24:70:b7:e9:18:38:a3:d1:7c:50:c2:1e:70:da:eb:60:
         31:c3:80:b7:69:cf:34:0a:07:b9:ab:8e:68:38:71:db:c1:ce:
         31:43:02:54:0d:8f:a2:0f:45:06:65:14:b1:a8:b5:47:de:ed:
         21:b3:de:07:42:48:b6:a7:b5:93:4a:da:ce:5b:11:29:b9:38:
         cc:6b:7e:d5:6a:9c:60:94:e0:8e:20:de:02:f1:aa:14:fe:e2:
         e8:42:98:79:26:d1:0b:3e:6d:fb:9a:4e:70:a1:eb:d6:52:55:
         c5:85:ee:c0:df:41:43:6c:03:8f:84:4f:ba:94:21:16:07:08:
         e5:a9:13:47:81:0e:89:57:90:4a:cd:bc:00:6a:cf:ad:2c:0a:
         4e:8c:ff:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:36:13 2025 by rpki-client