Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D657bXPCT1rs5scmeJ57CSV712Bf6Lgm7BY3FrvytfbG/1/3230302e3233382e302e302f32342d3234203d3e203130383735.roa
File:                     3230302e3233382e302e302f32342d3234203d3e203130383735.roa (raw, json)
Hash identifier:          9poGiHrhpAURVcVnsMxGiM4cCxIKhEOK/sgjhQCP8zA=
Subject key identifier:   11:7A:09:2D:15:14:02:EE:13:6F:56:90:5F:B7:D5:05:7B:34:C5:0A
Certificate issuer:       /CN=FE00A0246E047910F52B97F063352EE5D22A71CC
Certificate serial:       0662F3C702CBD82EF812E179180B08AF16AA0C4B
Authority key identifier: FE:00:A0:24:6E:04:79:10:F5:2B:97:F0:63:35:2E:E5:D2:2A:71:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE00A0246E047910F52B97F063352EE5D22A71CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D657bXPCT1rs5scmeJ57CSV712Bf6Lgm7BY3FrvytfbG/1/3230302e3233382e302e302f32342d3234203d3e203130383735.roa
Signing time:             Tue 22 Jul 2025 15:09:01 +0000
ROA not before:           Tue 22 Jul 2025 15:04:01 +0000
ROA not after:            Tue 21 Jul 2026 15:09:01 +0000
asID:                     10875
IP address blocks:        200.238.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D657bXPCT1rs5scmeJ57CSV712Bf6Lgm7BY3FrvytfbG/1/FE00A0246E047910F52B97F063352EE5D22A71CC.crl
                          rsync://rpki-repo.registro.br/repo/D657bXPCT1rs5scmeJ57CSV712Bf6Lgm7BY3FrvytfbG/1/FE00A0246E047910F52B97F063352EE5D22A71CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE00A0246E047910F52B97F063352EE5D22A71CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Jul 2025 04:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:62:f3:c7:02:cb:d8:2e:f8:12:e1:79:18:0b:08:af:16:aa:0c:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE00A0246E047910F52B97F063352EE5D22A71CC
        Validity
            Not Before: Jul 22 15:04:01 2025 GMT
            Not After : Jul 21 15:09:01 2026 GMT
        Subject: CN=117A092D151402EE136F56905FB7D5057B34C50A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:4d:60:34:5f:b7:24:39:40:64:6e:7d:68:4b:
                    03:4d:e5:5e:21:39:05:62:6b:20:0f:ac:ff:f3:10:
                    3d:33:41:da:9b:79:bd:be:85:42:68:59:43:57:c4:
                    d4:ce:43:03:31:ad:a8:cc:8f:bb:9e:fc:b3:f6:b3:
                    79:dd:fb:b6:a9:3a:bb:54:e4:58:ae:53:a0:57:61:
                    7d:bc:b7:7e:8a:3b:20:3c:e4:4e:71:a2:92:4a:55:
                    84:30:d2:aa:ab:c2:ac:fb:c7:64:bd:af:51:54:82:
                    32:f5:3e:7b:6e:e5:16:bd:c6:b3:49:43:fe:fa:ec:
                    56:1b:bf:4d:fd:1a:40:8a:0c:a1:6c:f9:ef:d3:e3:
                    ec:14:93:ff:34:77:12:49:67:34:42:70:8e:eb:f0:
                    6f:9f:e9:a1:69:c8:f7:c5:e1:73:32:98:44:9a:db:
                    c4:32:c3:27:19:1d:16:99:6d:1e:14:31:85:b8:5c:
                    05:25:e4:4d:49:01:f9:8f:38:f3:8d:c7:95:af:cf:
                    75:b2:25:75:c2:76:28:e0:c5:a8:12:aa:46:6d:15:
                    11:1a:eb:60:0f:da:99:7c:35:e4:34:f7:e7:b8:af:
                    1c:ae:e2:0e:eb:56:44:b0:d8:64:95:d2:a8:fd:95:
                    ed:37:14:81:dd:7f:c3:37:b1:0f:96:24:c7:06:ba:
                    75:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:7A:09:2D:15:14:02:EE:13:6F:56:90:5F:B7:D5:05:7B:34:C5:0A
            X509v3 Authority Key Identifier:
                keyid:FE:00:A0:24:6E:04:79:10:F5:2B:97:F0:63:35:2E:E5:D2:2A:71:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D657bXPCT1rs5scmeJ57CSV712Bf6Lgm7BY3FrvytfbG/1/FE00A0246E047910F52B97F063352EE5D22A71CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE00A0246E047910F52B97F063352EE5D22A71CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D657bXPCT1rs5scmeJ57CSV712Bf6Lgm7BY3FrvytfbG/1/3230302e3233382e302e302f32342d3234203d3e203130383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.238.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:1f:ee:ce:b0:ef:df:6c:3a:12:c0:63:ba:83:65:44:6c:f4:
         e4:36:c8:e3:6d:43:4a:3e:bd:d5:28:03:b6:0d:44:7f:54:35:
         cb:7f:b8:0c:cc:5e:2b:f8:b4:db:66:51:be:2c:ed:4e:2a:2f:
         03:d8:5c:3b:9f:47:36:84:55:44:4c:3f:9c:0c:38:8c:45:33:
         33:f2:7a:c1:6d:57:63:02:13:5d:3d:5e:dd:e5:54:27:94:9b:
         ab:30:8b:d7:ac:3e:d5:59:db:97:ff:1c:6b:74:4e:85:61:57:
         23:ed:c7:1e:d9:a6:d2:b9:a3:bc:81:a0:8b:5a:e8:8d:f8:7b:
         9e:59:bc:7e:cd:23:10:d0:a1:f6:89:c7:b3:ae:cb:b1:78:b9:
         2f:4e:e2:44:e7:34:da:b1:3d:ac:a2:25:f2:a9:fc:6b:0c:39:
         ae:f3:11:73:01:94:74:50:e5:1f:4a:47:c8:aa:8e:4b:59:1c:
         9f:82:87:da:76:68:3b:ab:c8:55:66:d5:57:c1:6a:6c:38:9a:
         50:4f:01:ea:c1:92:61:1e:41:65:19:c4:ad:2b:7d:06:ca:42:
         e4:b8:af:c8:fd:a5:39:96:bf:26:c0:b6:92:09:02:43:d7:c8:
         0f:90:df:e7:82:73:64:d0:9e:81:0b:6c:37:47:5a:1b:b6:36:
         39:bb:b8:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:53:45 2025 by rpki-client