Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D657bXPCT1rs5scmeJ57CSV712Bf6Lgm7BY3FrvytfbG/1/3230302e3233382e302e302f31382d3138203d3e2032373136.roa
File:                     3230302e3233382e302e302f31382d3138203d3e2032373136.roa (raw, json)
Hash identifier:          CgPUdKInJfHXI16TO0YLU2/z4rHbhS+Fp2Gf/Pwv4tM=
Subject key identifier:   CD:15:EA:CD:58:4C:0C:59:53:60:CE:50:CC:11:CF:D6:26:4B:9B:E9
Certificate issuer:       /CN=FE00A0246E047910F52B97F063352EE5D22A71CC
Certificate serial:       39750E8E54C46D85C6A92673D0121E4DEA3B15E7
Authority key identifier: FE:00:A0:24:6E:04:79:10:F5:2B:97:F0:63:35:2E:E5:D2:2A:71:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE00A0246E047910F52B97F063352EE5D22A71CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D657bXPCT1rs5scmeJ57CSV712Bf6Lgm7BY3FrvytfbG/1/3230302e3233382e302e302f31382d3138203d3e2032373136.roa
Signing time:             Tue 22 Jul 2025 15:09:01 +0000
ROA not before:           Tue 22 Jul 2025 15:04:01 +0000
ROA not after:            Tue 21 Jul 2026 15:09:01 +0000
asID:                     2716
IP address blocks:        200.238.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D657bXPCT1rs5scmeJ57CSV712Bf6Lgm7BY3FrvytfbG/1/FE00A0246E047910F52B97F063352EE5D22A71CC.crl
                          rsync://rpki-repo.registro.br/repo/D657bXPCT1rs5scmeJ57CSV712Bf6Lgm7BY3FrvytfbG/1/FE00A0246E047910F52B97F063352EE5D22A71CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE00A0246E047910F52B97F063352EE5D22A71CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 11:43:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:75:0e:8e:54:c4:6d:85:c6:a9:26:73:d0:12:1e:4d:ea:3b:15:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE00A0246E047910F52B97F063352EE5D22A71CC
        Validity
            Not Before: Jul 22 15:04:01 2025 GMT
            Not After : Jul 21 15:09:01 2026 GMT
        Subject: CN=CD15EACD584C0C595360CE50CC11CFD6264B9BE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:35:08:6b:62:c4:a1:27:7c:e3:45:4e:3e:2e:
                    f4:95:70:6f:a8:b3:01:bf:1a:fe:f6:32:aa:19:4e:
                    51:66:1b:53:72:c6:91:e2:7b:ab:85:0e:6d:29:03:
                    f9:9c:4f:b1:3b:02:3f:7e:17:2d:c6:58:63:3b:8f:
                    fd:8f:77:a3:5f:b6:82:09:40:1f:3f:ea:9e:81:ff:
                    7d:05:96:6b:6b:8c:b9:2b:0c:d2:8a:10:d6:dc:5d:
                    64:2d:90:e2:2d:ee:7c:3c:02:c9:b5:01:d2:b9:08:
                    48:4c:5a:c5:29:14:ce:49:1d:40:3e:04:6c:db:0f:
                    9c:97:03:22:da:6e:e2:81:53:a5:96:3d:a8:ff:97:
                    55:1f:d4:ea:ce:14:f5:f6:b6:ff:7a:1e:75:d1:40:
                    a9:a6:f1:4c:6d:23:08:d4:d2:bc:e1:36:01:1a:25:
                    3f:3c:23:02:fd:70:dd:92:20:84:a2:32:a7:89:a1:
                    ae:ed:1a:54:e6:cc:7d:78:bd:30:e1:1e:91:55:25:
                    fc:29:fd:72:dc:d5:f2:1b:77:a6:1f:8e:75:aa:30:
                    22:e0:a8:a1:4d:e1:46:c6:d9:f7:20:00:d4:73:3b:
                    00:7d:68:af:9c:ce:2d:33:1b:b4:14:04:92:71:28:
                    f1:7c:24:da:8c:5c:99:79:42:4b:33:45:49:6d:70:
                    db:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:15:EA:CD:58:4C:0C:59:53:60:CE:50:CC:11:CF:D6:26:4B:9B:E9
            X509v3 Authority Key Identifier:
                keyid:FE:00:A0:24:6E:04:79:10:F5:2B:97:F0:63:35:2E:E5:D2:2A:71:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D657bXPCT1rs5scmeJ57CSV712Bf6Lgm7BY3FrvytfbG/1/FE00A0246E047910F52B97F063352EE5D22A71CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE00A0246E047910F52B97F063352EE5D22A71CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D657bXPCT1rs5scmeJ57CSV712Bf6Lgm7BY3FrvytfbG/1/3230302e3233382e302e302f31382d3138203d3e2032373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.238.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         02:05:c3:e7:7e:1a:1a:0e:97:71:09:64:ce:75:bb:ab:3c:6d:
         7f:cb:06:51:be:cd:e7:1e:72:01:3b:d5:43:39:7c:1d:b8:bf:
         1d:37:24:c5:69:3f:ed:ce:80:85:96:55:e8:05:2e:db:06:b7:
         26:08:40:3d:d9:33:34:7b:48:86:93:54:3e:3f:50:ac:a0:a8:
         30:79:f5:38:85:8c:cb:28:33:cc:29:d9:0c:c0:92:e6:bc:8c:
         a8:00:be:a6:b7:be:f2:de:4f:80:c9:b6:26:87:8b:48:25:77:
         fb:70:af:c1:63:27:2d:13:c1:68:9d:db:e7:09:6c:ea:f5:b1:
         14:7c:d2:3c:87:7d:0c:95:23:84:4b:81:7d:9d:a0:ac:a2:e7:
         a9:ee:72:42:a4:24:b4:cc:3d:76:3b:1b:a8:70:40:fa:b4:7a:
         76:59:90:07:09:a2:d3:be:e4:97:5f:a6:ac:a6:e7:6c:ee:0c:
         d0:81:53:9b:4d:a4:33:c7:f5:9a:6e:ea:20:c6:0c:ad:d3:84:
         50:90:b9:71:1f:cf:29:a5:23:b1:cb:ef:38:e0:94:18:91:cb:
         ab:cc:29:ac:bf:95:fa:38:4c:52:f6:11:cd:e0:a2:f8:cb:d3:
         a9:bc:ba:45:40:83:3a:04:a0:0e:e5:a9:26:04:94:af:1f:e0:
         28:43:25:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:57:24 2025 by rpki-client