Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7VbCDEQm2iJHzppKzyCYYvz8puq9SEsPJtsaigEbhcgv/0/3230302e3231382e3233362e302f32332d3233203d3e20323732373836.roa
File:                     3230302e3231382e3233362e302f32332d3233203d3e20323732373836.roa (raw, json)
Hash identifier:          Hdm5IpJocVWBs0JFBB/LigAgq1lLKt0CY44ov0fwEwI=
Subject key identifier:   3E:04:32:A4:39:82:F2:F0:CA:3F:05:6E:4D:34:62:D1:00:23:45:A6
Certificate issuer:       /CN=58E384DDFA548D7DE9FEADE014582B8E6BE1D550
Certificate serial:       5A38C6D56DF9AA4D333953467539E7FB4E926982
Authority key identifier: 58:E3:84:DD:FA:54:8D:7D:E9:FE:AD:E0:14:58:2B:8E:6B:E1:D5:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58E384DDFA548D7DE9FEADE014582B8E6BE1D550.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7VbCDEQm2iJHzppKzyCYYvz8puq9SEsPJtsaigEbhcgv/0/3230302e3231382e3233362e302f32332d3233203d3e20323732373836.roa
Signing time:             Thu 14 Aug 2025 12:47:53 +0000
ROA not before:           Thu 14 Aug 2025 12:42:53 +0000
ROA not after:            Thu 13 Aug 2026 12:47:53 +0000
asID:                     272786
IP address blocks:        200.218.236.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7VbCDEQm2iJHzppKzyCYYvz8puq9SEsPJtsaigEbhcgv/0/58E384DDFA548D7DE9FEADE014582B8E6BE1D550.crl
                          rsync://rpki-repo.registro.br/repo/7VbCDEQm2iJHzppKzyCYYvz8puq9SEsPJtsaigEbhcgv/0/58E384DDFA548D7DE9FEADE014582B8E6BE1D550.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58E384DDFA548D7DE9FEADE014582B8E6BE1D550.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 12:57:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:38:c6:d5:6d:f9:aa:4d:33:39:53:46:75:39:e7:fb:4e:92:69:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58E384DDFA548D7DE9FEADE014582B8E6BE1D550
        Validity
            Not Before: Aug 14 12:42:53 2025 GMT
            Not After : Aug 13 12:47:53 2026 GMT
        Subject: CN=3E0432A43982F2F0CA3F056E4D3462D1002345A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:eb:40:3b:e3:b2:72:ca:76:04:84:2e:e4:d5:
                    e2:e8:08:e8:90:d2:78:a6:88:e9:1a:d9:34:81:84:
                    79:a9:24:88:ac:ca:80:7b:8e:20:c6:d1:9f:39:d6:
                    f8:f6:4f:cd:80:fa:24:72:fc:2b:b2:5d:1a:b7:68:
                    09:db:12:1b:05:1b:77:d1:23:47:8a:d4:4e:d2:92:
                    69:0b:79:e9:e5:8a:71:a2:23:2c:d7:f8:c3:61:06:
                    ff:05:09:cb:28:5c:b4:08:10:17:b7:fb:42:07:2a:
                    e5:10:ec:2c:10:13:bc:0c:0a:ae:e7:69:07:c8:e2:
                    67:bc:46:3e:6a:5d:93:f8:2a:b0:cc:58:3a:c0:4c:
                    5c:fb:99:fe:85:27:0b:1d:ef:e5:75:d4:85:ab:a6:
                    f4:bf:c7:1b:15:71:94:be:c6:fb:01:b1:eb:d7:85:
                    dd:c9:b4:89:39:56:b3:b5:10:a1:e1:7d:3e:aa:50:
                    02:c2:51:8e:b5:09:0c:60:ad:89:ea:77:ad:18:a4:
                    12:e7:f4:f7:6a:8d:82:cb:bf:ad:44:ee:9e:e8:0b:
                    09:0a:40:de:ae:fc:54:63:a0:ca:be:66:a5:f4:03:
                    54:d1:8f:9c:da:c1:a5:d7:c7:23:5c:ce:10:2f:3a:
                    23:42:95:f9:49:3c:4d:e0:db:2f:d6:38:ba:30:b7:
                    83:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:04:32:A4:39:82:F2:F0:CA:3F:05:6E:4D:34:62:D1:00:23:45:A6
            X509v3 Authority Key Identifier:
                keyid:58:E3:84:DD:FA:54:8D:7D:E9:FE:AD:E0:14:58:2B:8E:6B:E1:D5:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7VbCDEQm2iJHzppKzyCYYvz8puq9SEsPJtsaigEbhcgv/0/58E384DDFA548D7DE9FEADE014582B8E6BE1D550.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58E384DDFA548D7DE9FEADE014582B8E6BE1D550.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7VbCDEQm2iJHzppKzyCYYvz8puq9SEsPJtsaigEbhcgv/0/3230302e3231382e3233362e302f32332d3233203d3e20323732373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.218.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         aa:07:0e:ce:c4:15:3b:2f:e2:c0:4d:b8:27:79:0d:78:1d:3a:
         b9:df:93:fa:c9:0a:98:ea:f5:49:7d:a3:cd:05:6b:76:78:ec:
         2a:55:0e:6c:5b:d3:f0:ce:88:09:a6:4b:a9:8b:4f:d9:23:ac:
         df:63:18:89:75:7f:98:99:d8:f0:48:01:22:fa:36:c8:1c:66:
         d9:87:ab:34:3f:05:d2:39:02:de:3e:c5:46:71:37:ae:4b:7f:
         6e:f8:33:f8:cb:e3:04:d3:df:f8:32:9c:cd:dd:10:76:a5:58:
         3a:3c:73:01:6a:b2:55:a5:34:cc:7a:2f:4c:be:96:67:03:56:
         e9:dc:c7:99:5c:4f:da:b4:58:ff:d8:ce:1a:98:e4:32:13:6e:
         b8:e1:ba:00:05:64:51:a3:3a:0a:fe:1b:75:ef:7a:ef:cf:4b:
         39:ed:38:95:0b:70:68:65:06:ee:3d:ce:53:f3:5d:9b:21:db:
         33:e2:67:27:ec:0d:b0:88:7f:cb:ff:9c:2e:0d:3f:ea:ea:66:
         cd:36:96:b3:45:ac:17:24:60:25:af:10:e6:b5:be:a4:e3:c3:
         48:62:d8:d2:ff:13:f2:df:ba:d8:85:26:8e:e9:d9:33:7f:18:
         0f:27:aa:20:74:24:7a:f8:14:0c:2a:cd:da:f2:80:a5:7d:71:
         fe:43:90:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 20:56:08 2025 by rpki-client