Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2axSP73kUmd1cohYAE13joA35qXwKzds4tQ5DMGmbTmz/0/3230302e37312e3130302e302f32322d3332203d3e20323730343737.roa
File:                     3230302e37312e3130302e302f32322d3332203d3e20323730343737.roa (raw, json)
Hash identifier:          elpCMCEqL9iS9FXe1IiQGDMS70q6LUCJAg69heBNyic=
Subject key identifier:   45:4F:FA:17:BF:79:A4:F7:63:F2:28:F1:03:53:76:E7:25:58:6E:D1
Certificate issuer:       /CN=7CDD05FC0EA627777B05AE53580ECDF16BF176A2
Certificate serial:       3764337B66C653F3629AA8B938D1423733C8620E
Authority key identifier: 7C:DD:05:FC:0E:A6:27:77:7B:05:AE:53:58:0E:CD:F1:6B:F1:76:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CDD05FC0EA627777B05AE53580ECDF16BF176A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2axSP73kUmd1cohYAE13joA35qXwKzds4tQ5DMGmbTmz/0/3230302e37312e3130302e302f32322d3332203d3e20323730343737.roa
Signing time:             Mon 15 Sep 2025 18:08:11 +0000
ROA not before:           Mon 15 Sep 2025 18:03:11 +0000
ROA not after:            Mon 14 Sep 2026 18:08:11 +0000
asID:                     270477
IP address blocks:        200.71.100.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2axSP73kUmd1cohYAE13joA35qXwKzds4tQ5DMGmbTmz/0/7CDD05FC0EA627777B05AE53580ECDF16BF176A2.crl
                          rsync://rpki-repo.registro.br/repo/2axSP73kUmd1cohYAE13joA35qXwKzds4tQ5DMGmbTmz/0/7CDD05FC0EA627777B05AE53580ECDF16BF176A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CDD05FC0EA627777B05AE53580ECDF16BF176A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 00:07:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:64:33:7b:66:c6:53:f3:62:9a:a8:b9:38:d1:42:37:33:c8:62:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CDD05FC0EA627777B05AE53580ECDF16BF176A2
        Validity
            Not Before: Sep 15 18:03:11 2025 GMT
            Not After : Sep 14 18:08:11 2026 GMT
        Subject: CN=454FFA17BF79A4F763F228F1035376E725586ED1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d3:e3:1c:1c:f4:9b:a1:e5:bb:59:5b:90:61:
                    de:78:5a:a2:0a:7d:07:7a:60:c3:3f:10:48:b0:06:
                    8e:a5:ca:7b:af:37:7a:45:71:27:62:b8:f5:7d:d4:
                    f7:60:59:d1:cc:e4:3a:09:ae:9d:4d:c5:76:e1:0a:
                    1c:fe:ee:a6:fd:8c:7b:0d:1f:87:b6:d7:02:fc:ec:
                    fc:6b:32:82:81:4a:bf:87:11:d8:17:db:ce:5f:c1:
                    c8:39:a5:95:f9:21:a8:90:e8:72:17:45:be:3c:ae:
                    ef:bd:64:7f:c4:d1:be:f8:13:bc:94:cc:53:80:aa:
                    64:cb:f5:e3:1c:9f:ac:6e:c8:b7:f9:39:75:1b:ad:
                    0d:f6:9c:ff:26:79:50:3b:1a:c9:2d:1f:ec:6b:45:
                    33:b4:0e:27:f9:62:91:e3:4a:05:32:eb:b5:79:88:
                    c8:bf:ce:ed:e4:ea:80:d3:cb:09:0d:0b:e6:d5:9f:
                    60:ff:6b:b2:54:96:2b:9f:b9:54:f3:93:9c:8e:ff:
                    10:62:65:cc:14:de:cd:b5:f1:14:31:6d:3c:70:53:
                    04:60:c5:8c:37:01:a1:01:28:6d:37:26:6f:f4:d0:
                    ce:c8:09:e8:eb:c8:30:7c:2c:bc:ba:ae:bf:f6:c2:
                    e4:06:71:55:d9:a2:16:20:36:a0:39:3a:5f:21:fa:
                    60:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:4F:FA:17:BF:79:A4:F7:63:F2:28:F1:03:53:76:E7:25:58:6E:D1
            X509v3 Authority Key Identifier:
                keyid:7C:DD:05:FC:0E:A6:27:77:7B:05:AE:53:58:0E:CD:F1:6B:F1:76:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2axSP73kUmd1cohYAE13joA35qXwKzds4tQ5DMGmbTmz/0/7CDD05FC0EA627777B05AE53580ECDF16BF176A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CDD05FC0EA627777B05AE53580ECDF16BF176A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2axSP73kUmd1cohYAE13joA35qXwKzds4tQ5DMGmbTmz/0/3230302e37312e3130302e302f32322d3332203d3e20323730343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:9f:95:52:f2:93:c6:38:a3:7f:26:e7:42:eb:fd:25:ec:b2:
         e5:e8:1c:35:e8:f1:bb:2c:30:74:dc:76:d3:66:85:34:c4:87:
         22:10:10:99:b9:15:cd:9d:ad:b8:f4:27:a2:1c:35:1e:b1:f8:
         7e:02:9c:dc:bc:a6:63:72:47:18:93:4f:13:00:18:9a:26:c7:
         37:c2:b0:7e:d5:20:5c:be:56:b4:5a:74:51:87:3f:36:da:64:
         7b:3a:33:74:e0:97:c4:d4:47:15:f4:a6:95:7c:b0:aa:ce:01:
         57:1e:22:ab:12:c8:15:69:3f:d5:cf:9f:21:48:5d:d6:05:ac:
         30:38:4f:dd:8b:38:2a:85:49:cc:09:25:a6:0a:94:bc:20:22:
         56:c2:2c:64:4d:9f:14:4d:35:57:fd:f6:81:76:24:a5:92:9b:
         d1:3a:99:2c:fd:79:04:79:70:9e:10:fb:ac:d7:03:ef:0a:ab:
         c6:47:93:0a:c3:e9:14:b9:fa:87:55:e3:c6:6f:da:02:25:69:
         2d:14:27:c7:81:b4:5f:34:9d:79:ce:1f:f6:fd:60:bc:64:53:
         b3:3f:fd:ab:8b:6b:60:f1:50:f1:a8:e5:2c:e1:1f:24:35:1b:
         ed:5f:73:97:7a:c2:00:79:98:7f:c6:aa:04:99:7d:99:1b:d5:
         a7:ab:c2:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 10:24:39 2025 by rpki-client