Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7VbCDEQm2iJHzppKzyCYYvz8puq9SEsPJtsaigEbhcgv/0/3230302e3231382e3233372e302f32342d3234203d3e20323732373836.roa
File:                     3230302e3231382e3233372e302f32342d3234203d3e20323732373836.roa (raw, json)
Hash identifier:          A/G0YNCBc4i4S4xMd8qjice5nmDtjEUPeXd4xdCq4o4=
Subject key identifier:   D4:8B:2F:7E:F5:94:F5:9D:8D:0D:2F:A1:61:E6:2F:B1:BC:D1:4A:90
Certificate issuer:       /CN=58E384DDFA548D7DE9FEADE014582B8E6BE1D550
Certificate serial:       537EB8843602F4880AC99530D8CC843662B0ABE8
Authority key identifier: 58:E3:84:DD:FA:54:8D:7D:E9:FE:AD:E0:14:58:2B:8E:6B:E1:D5:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58E384DDFA548D7DE9FEADE014582B8E6BE1D550.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7VbCDEQm2iJHzppKzyCYYvz8puq9SEsPJtsaigEbhcgv/0/3230302e3231382e3233372e302f32342d3234203d3e20323732373836.roa
Signing time:             Thu 14 Aug 2025 12:47:51 +0000
ROA not before:           Thu 14 Aug 2025 12:42:51 +0000
ROA not after:            Thu 13 Aug 2026 12:47:51 +0000
asID:                     272786
IP address blocks:        200.218.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7VbCDEQm2iJHzppKzyCYYvz8puq9SEsPJtsaigEbhcgv/0/58E384DDFA548D7DE9FEADE014582B8E6BE1D550.crl
                          rsync://rpki-repo.registro.br/repo/7VbCDEQm2iJHzppKzyCYYvz8puq9SEsPJtsaigEbhcgv/0/58E384DDFA548D7DE9FEADE014582B8E6BE1D550.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58E384DDFA548D7DE9FEADE014582B8E6BE1D550.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 12:57:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:7e:b8:84:36:02:f4:88:0a:c9:95:30:d8:cc:84:36:62:b0:ab:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58E384DDFA548D7DE9FEADE014582B8E6BE1D550
        Validity
            Not Before: Aug 14 12:42:51 2025 GMT
            Not After : Aug 13 12:47:51 2026 GMT
        Subject: CN=D48B2F7EF594F59D8D0D2FA161E62FB1BCD14A90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ec:ee:29:f8:cd:a3:40:81:d1:c4:b2:4e:c3:
                    74:9e:e6:25:84:bc:14:8b:31:08:34:f5:32:e0:b7:
                    77:0a:10:d8:6f:f6:27:01:c3:68:ce:b8:11:e8:ca:
                    55:ca:16:e5:8c:f7:52:ec:0f:61:f2:6c:86:de:27:
                    c5:c5:be:c6:c5:a7:a6:4c:81:5e:4a:5f:7b:a8:ea:
                    51:d0:7e:13:ea:b7:1a:cd:77:75:b2:bb:98:be:d0:
                    ef:25:6b:c1:e2:72:19:fd:f8:e4:1e:18:c3:fe:4d:
                    66:a0:c5:70:b5:a7:60:7a:ee:ff:79:ec:2b:48:2f:
                    32:1c:c5:15:73:30:27:b7:28:4d:06:63:d2:9e:a2:
                    0a:dd:bd:73:69:07:7a:f0:6d:d2:58:95:72:86:5f:
                    c6:eb:9d:6a:12:bb:c1:2c:ca:cd:43:f0:31:df:86:
                    06:1d:bf:f3:bc:7b:35:83:2f:94:5d:58:4e:4e:7f:
                    4c:b2:cb:97:28:4d:16:03:c4:4d:ab:b9:2d:f7:52:
                    08:aa:09:78:58:12:d6:94:71:cc:18:46:7f:e8:9a:
                    18:d4:bc:bc:c7:d1:08:e9:13:91:58:98:ab:8e:e7:
                    d2:26:6f:d1:d6:25:c6:f0:bc:aa:65:13:0d:9b:67:
                    58:45:e1:f2:7e:1d:44:4f:32:7f:db:d5:d1:fe:d3:
                    6b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:8B:2F:7E:F5:94:F5:9D:8D:0D:2F:A1:61:E6:2F:B1:BC:D1:4A:90
            X509v3 Authority Key Identifier:
                keyid:58:E3:84:DD:FA:54:8D:7D:E9:FE:AD:E0:14:58:2B:8E:6B:E1:D5:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7VbCDEQm2iJHzppKzyCYYvz8puq9SEsPJtsaigEbhcgv/0/58E384DDFA548D7DE9FEADE014582B8E6BE1D550.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58E384DDFA548D7DE9FEADE014582B8E6BE1D550.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7VbCDEQm2iJHzppKzyCYYvz8puq9SEsPJtsaigEbhcgv/0/3230302e3231382e3233372e302f32342d3234203d3e20323732373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.218.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:d5:be:cb:32:fe:89:5f:cd:4a:c6:4f:98:38:9f:36:7d:94:
         43:8d:e1:73:83:ee:b3:c0:ae:80:12:22:87:54:b3:f3:7e:97:
         5c:31:ba:9b:ae:33:ff:d8:cd:32:a3:ae:55:5a:0f:9d:1c:3f:
         85:95:7d:6f:83:bc:13:01:ac:f6:19:e1:59:7e:91:30:cd:b9:
         e5:90:7b:b0:92:0d:bd:87:da:3b:31:59:db:1e:56:d8:48:ca:
         b4:90:22:9b:d1:02:bb:3b:0d:8a:0b:0f:6b:9c:d7:b5:6c:48:
         79:1b:f6:c4:fb:e0:23:eb:34:6f:3a:05:a8:1d:1d:0c:65:34:
         6a:06:b1:5d:f3:28:ac:fb:f7:60:d4:67:2a:ed:ed:8f:3e:27:
         89:2c:38:4b:7f:80:8b:d6:08:83:f1:5b:65:e5:74:f0:6f:e6:
         08:04:23:fb:b5:23:4d:4e:a7:7e:24:0d:80:f8:d8:5b:f8:2c:
         70:64:67:5e:b9:6d:a4:cd:3d:0d:d4:7f:6a:59:08:fc:8e:c3:
         d2:04:4a:b2:26:12:89:5c:98:0f:5b:c4:51:9b:15:58:ae:04:
         c6:dd:e6:0b:74:d0:19:bc:88:1e:bc:aa:72:5a:78:5b:1e:ca:
         4e:b0:f5:94:32:e8:6e:59:6d:d3:5f:84:bd:7d:9d:9d:03:dd:
         ff:22:07:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 20:49:01 2025 by rpki-client