Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D657bXPCT1rs5scmeJ57CSV712Bf6Lgm7BY3FrvytfbG/1/3230302e3233362e33322e302f31392d3139203d3e2032373136.roa
File:                     3230302e3233362e33322e302f31392d3139203d3e2032373136.roa (raw, json)
Hash identifier:          ex8U6FXvAs9U+PhApeTqC77tN4S9SIG8aIfjDYaB78o=
Subject key identifier:   EA:75:08:DB:10:7C:47:89:71:7A:85:33:CE:00:32:74:64:13:69:D7
Certificate issuer:       /CN=FE00A0246E047910F52B97F063352EE5D22A71CC
Certificate serial:       5C924CC29217E2CCF085039E6F0AF87ED1074D47
Authority key identifier: FE:00:A0:24:6E:04:79:10:F5:2B:97:F0:63:35:2E:E5:D2:2A:71:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE00A0246E047910F52B97F063352EE5D22A71CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D657bXPCT1rs5scmeJ57CSV712Bf6Lgm7BY3FrvytfbG/1/3230302e3233362e33322e302f31392d3139203d3e2032373136.roa
Signing time:             Tue 22 Jul 2025 15:09:01 +0000
ROA not before:           Tue 22 Jul 2025 15:04:01 +0000
ROA not after:            Tue 21 Jul 2026 15:09:01 +0000
asID:                     2716
IP address blocks:        200.236.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D657bXPCT1rs5scmeJ57CSV712Bf6Lgm7BY3FrvytfbG/1/FE00A0246E047910F52B97F063352EE5D22A71CC.crl
                          rsync://rpki-repo.registro.br/repo/D657bXPCT1rs5scmeJ57CSV712Bf6Lgm7BY3FrvytfbG/1/FE00A0246E047910F52B97F063352EE5D22A71CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE00A0246E047910F52B97F063352EE5D22A71CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 11:43:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:92:4c:c2:92:17:e2:cc:f0:85:03:9e:6f:0a:f8:7e:d1:07:4d:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE00A0246E047910F52B97F063352EE5D22A71CC
        Validity
            Not Before: Jul 22 15:04:01 2025 GMT
            Not After : Jul 21 15:09:01 2026 GMT
        Subject: CN=EA7508DB107C4789717A8533CE003274641369D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a5:6c:79:de:31:fd:5f:0f:13:96:95:21:ea:
                    51:26:d3:aa:85:28:32:eb:75:86:1f:55:46:5e:2b:
                    7b:18:fb:fa:e5:51:6d:73:fa:80:61:11:33:18:98:
                    c3:1b:14:9f:d8:0d:55:5c:58:03:98:2a:83:f2:5b:
                    9e:dd:fd:bb:ea:e8:f5:47:fb:0a:97:c8:d0:bc:ac:
                    8e:b4:d3:1a:3b:e6:88:14:f3:d7:bf:6e:1e:d1:a5:
                    84:5d:aa:b7:f0:3d:45:c3:3b:5f:9e:79:32:7e:44:
                    99:a9:f5:58:6e:7a:5b:0f:fe:e3:85:8f:37:49:4f:
                    61:07:9c:70:09:84:73:e1:2d:4c:13:96:b3:80:73:
                    cd:1f:a3:01:ac:db:26:59:53:c2:09:5c:23:05:4e:
                    2f:c1:93:1a:fd:8d:a9:a6:a2:ba:7d:c0:b0:be:8b:
                    ed:62:b1:40:31:c3:f2:e0:ef:46:e2:f5:85:db:5e:
                    18:e3:e6:89:95:14:c1:4a:6a:ea:81:70:24:96:5d:
                    14:ef:60:7b:f6:b1:ff:60:e8:c7:3d:16:65:cb:11:
                    ea:eb:eb:ce:da:8a:e8:ca:09:e0:90:94:42:08:e9:
                    23:a2:6c:55:1a:ef:0e:cd:2a:c5:7b:b2:44:32:8c:
                    df:54:f4:73:32:22:df:af:73:25:f7:fb:22:29:8e:
                    90:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:75:08:DB:10:7C:47:89:71:7A:85:33:CE:00:32:74:64:13:69:D7
            X509v3 Authority Key Identifier:
                keyid:FE:00:A0:24:6E:04:79:10:F5:2B:97:F0:63:35:2E:E5:D2:2A:71:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D657bXPCT1rs5scmeJ57CSV712Bf6Lgm7BY3FrvytfbG/1/FE00A0246E047910F52B97F063352EE5D22A71CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE00A0246E047910F52B97F063352EE5D22A71CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D657bXPCT1rs5scmeJ57CSV712Bf6Lgm7BY3FrvytfbG/1/3230302e3233362e33322e302f31392d3139203d3e2032373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.236.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4e:95:f1:9f:2e:13:25:b2:1b:ac:98:36:b8:a3:b0:9b:28:cf:
         e0:cb:1d:11:b3:9f:9a:a0:e6:6b:3d:e5:d6:09:11:30:ef:f6:
         b6:bf:79:f8:3f:f7:d7:25:68:43:21:08:e1:6e:1d:30:d6:c1:
         46:55:39:f8:be:5e:26:2d:72:3d:75:eb:9f:c0:68:e7:01:f2:
         85:48:f6:34:14:b5:21:b2:0e:4f:4e:6d:b1:08:49:c5:0e:0c:
         c3:05:c4:b3:4a:36:b4:6e:51:b7:fc:aa:a0:3f:62:f8:b0:47:
         c0:e6:25:3c:ed:dc:e0:90:95:42:f3:95:26:f8:b3:ad:2d:5c:
         a0:47:a7:c2:3a:cd:42:c5:9d:b8:f7:ca:e1:88:df:2c:58:09:
         f2:48:b8:ae:2b:7a:8a:42:27:21:8e:2d:ad:fd:19:95:2e:e8:
         fc:ed:fc:e1:27:db:4a:e5:11:1e:c7:7c:3d:5a:57:45:2f:24:
         6e:d2:55:70:31:e2:de:0e:c6:d1:a6:c4:fe:41:d9:f0:34:06:
         31:c1:2e:69:81:ee:b4:bc:5a:3c:1a:7b:e4:f7:e7:6f:71:b6:
         4f:57:e0:9f:55:89:cc:12:e4:41:0c:e4:08:7a:b3:74:e3:18:
         a5:83:ed:73:f5:e9:ef:a0:ce:57:90:26:49:df:a6:a8:81:b9:
         4b:c9:63:d6
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUXJJMwpIX4szwhQOebwr4ftEHTUcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkUwMEEwMjQ2RTA0NzkxMEY1MkI5N0YwNjMzNTJFRTVE
MjJBNzFDQzAeFw0yNTA3MjIxNTA0MDFaFw0yNjA3MjExNTA5MDFaMDMxMTAvBgNV
BAMTKEVBNzUwOERCMTA3QzQ3ODk3MTdBODUzM0NFMDAzMjc0NjQxMzY5RDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChpWx53jH9Xw8TlpUh6lEm06qF
KDLrdYYfVUZeK3sY+/rlUW1z+oBhETMYmMMbFJ/YDVVcWAOYKoPyW57d/bvq6PVH
+wqXyNC8rI600xo75ogU89e/bh7RpYRdqrfwPUXDO1+eeTJ+RJmp9VhuelsP/uOF
jzdJT2EHnHAJhHPhLUwTlrOAc80fowGs2yZZU8IJXCMFTi/Bkxr9jammorp9wLC+
i+1isUAxw/Lg70bi9YXbXhjj5omVFMFKauqBcCSWXRTvYHv2sf9g6Mc9FmXLEerr
687aiujKCeCQlEII6SOibFUa7w7NKsV7skQyjN9U9HMyIt+vcyX3+yIpjpBXAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU6nUI2xB8R4lxeoUzzgAydGQTadcwHwYDVR0j
BBgwFoAU/gCgJG4EeRD1K5fwYzUu5dIqccwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDY1N2JYUENUMXJzNXNjbWVKNTdDU1Y3MTJCZjZMZ203QlkzRnJ2eXRm
YkcvMS9GRTAwQTAyNDZFMDQ3OTEwRjUyQjk3RjA2MzM1MkVFNUQyMkE3MUNDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZFMDBBMDI0NkUwNDc5MTBG
NTJCOTdGMDYzMzUyRUU1RDIyQTcxQ0MuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q2NTdiWFBDVDFyczVzY21lSjU3Q1NWNzEyQmY2TGdtN0JZM0Zydnl0ZmJHLzEv
MzIzMDMwMmUzMjMzMzYyZTMzMzIyZTMwMmYzMTM5MmQzMTM5MjAzZDNlMjAzMjM3
MzEzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEBcjsIDANBgkqhkiG9w0BAQsFAAOCAQEATpXxny4TJbIb
rJg2uKOwmyjP4MsdEbOfmqDmaz3l1gkRMO/2tr95+D/31yVoQyEI4W4dMNbBRlU5
+L5eJi1yPXXrn8Bo5wHyhUj2NBS1IbIOT05tsQhJxQ4MwwXEs0o2tG5Rt/yqoD9i
+LBHwOYlPO3c4JCVQvOVJvizrS1coEenwjrNQsWduPfK4YjfLFgJ8ki4rit6ikIn
IY4trf0ZlS7o/O384SfbSuURHsd8PVpXRS8kbtJVcDHi3g7G0abE/kHZ8DQGMcEu
aYHutLxaPBp75Pfnb3G2T1fgn1WJzBLkQQzkCHqzdOMYpYPtc/Xp76DOV5AmSd+m
qIG5S8lj1g==
-----END CERTIFICATE-----
Generated at Sun Jul 27 00:55:51 2025 by rpki-client