Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7VbCDEQm2iJHzppKzyCYYvz8puq9SEsPJtsaigEbhcgv/0/3230302e3231382e3233382e302f32342d3234203d3e20323732373836.roa
File:                     3230302e3231382e3233382e302f32342d3234203d3e20323732373836.roa (raw, json)
Hash identifier:          PAow3gAJVX1MyF5ooizw3uxoEfs/HEkmuoCcAIF6/CU=
Subject key identifier:   84:7A:A8:01:2E:EF:12:38:4A:94:20:59:38:44:38:9B:FD:BF:82:21
Certificate issuer:       /CN=58E384DDFA548D7DE9FEADE014582B8E6BE1D550
Certificate serial:       3E2AFEEDB4AFCC5A9EFF94666298C792F9B99145
Authority key identifier: 58:E3:84:DD:FA:54:8D:7D:E9:FE:AD:E0:14:58:2B:8E:6B:E1:D5:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58E384DDFA548D7DE9FEADE014582B8E6BE1D550.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7VbCDEQm2iJHzppKzyCYYvz8puq9SEsPJtsaigEbhcgv/0/3230302e3231382e3233382e302f32342d3234203d3e20323732373836.roa
Signing time:             Thu 14 Aug 2025 12:47:51 +0000
ROA not before:           Thu 14 Aug 2025 12:42:51 +0000
ROA not after:            Thu 13 Aug 2026 12:47:51 +0000
asID:                     272786
IP address blocks:        200.218.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7VbCDEQm2iJHzppKzyCYYvz8puq9SEsPJtsaigEbhcgv/0/58E384DDFA548D7DE9FEADE014582B8E6BE1D550.crl
                          rsync://rpki-repo.registro.br/repo/7VbCDEQm2iJHzppKzyCYYvz8puq9SEsPJtsaigEbhcgv/0/58E384DDFA548D7DE9FEADE014582B8E6BE1D550.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58E384DDFA548D7DE9FEADE014582B8E6BE1D550.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 12:57:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:2a:fe:ed:b4:af:cc:5a:9e:ff:94:66:62:98:c7:92:f9:b9:91:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58E384DDFA548D7DE9FEADE014582B8E6BE1D550
        Validity
            Not Before: Aug 14 12:42:51 2025 GMT
            Not After : Aug 13 12:47:51 2026 GMT
        Subject: CN=847AA8012EEF12384A9420593844389BFDBF8221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2a:38:ba:6b:8d:46:c7:fd:c5:60:a3:4d:3e:
                    9c:3b:8e:1d:f2:fb:41:fd:c4:5d:20:30:6e:ca:81:
                    2e:7a:f7:88:ac:0e:e8:d9:a5:44:18:ba:d0:db:df:
                    e8:ac:35:91:5e:ca:a9:6c:73:bc:b2:2f:73:13:10:
                    43:7e:b9:53:db:d4:9c:81:9b:4e:4a:04:ff:b1:b5:
                    9a:6a:8b:6a:94:ed:60:34:b3:06:b8:99:a8:51:0b:
                    b8:b9:95:b9:18:88:22:33:66:59:01:d3:cf:79:b1:
                    f3:1b:b5:c0:c9:f8:74:d7:90:ca:68:25:e1:eb:24:
                    82:1d:10:b6:5d:04:dd:af:42:3f:4e:1a:34:63:13:
                    e0:cb:7b:a5:0e:ae:8f:84:1a:88:97:b1:1f:2b:5d:
                    f4:68:b4:8d:e1:0b:06:14:3c:48:a7:42:47:77:68:
                    f2:2a:64:73:ee:6c:7d:de:08:05:b7:1d:b9:c8:54:
                    e9:ed:d1:8c:06:59:df:b0:15:02:73:6f:62:6b:11:
                    45:15:f6:af:2a:f5:3c:fc:de:33:17:93:63:6f:a5:
                    66:29:b5:96:cb:c2:f2:5b:e5:5f:ad:f1:7e:45:55:
                    a0:fd:06:60:44:65:18:27:c9:72:47:8b:43:61:33:
                    c5:52:0c:36:28:ba:e6:10:70:e8:90:d6:de:b2:b4:
                    86:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:7A:A8:01:2E:EF:12:38:4A:94:20:59:38:44:38:9B:FD:BF:82:21
            X509v3 Authority Key Identifier:
                keyid:58:E3:84:DD:FA:54:8D:7D:E9:FE:AD:E0:14:58:2B:8E:6B:E1:D5:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7VbCDEQm2iJHzppKzyCYYvz8puq9SEsPJtsaigEbhcgv/0/58E384DDFA548D7DE9FEADE014582B8E6BE1D550.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58E384DDFA548D7DE9FEADE014582B8E6BE1D550.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7VbCDEQm2iJHzppKzyCYYvz8puq9SEsPJtsaigEbhcgv/0/3230302e3231382e3233382e302f32342d3234203d3e20323732373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.218.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:ed:57:03:84:50:83:ff:7d:5d:af:98:78:fc:bc:3b:9b:61:
         de:94:94:38:53:56:0a:98:fe:23:2c:86:ad:56:77:70:86:0f:
         9f:b2:91:4f:de:d6:4e:0d:bb:8a:0b:16:40:1d:d3:04:17:39:
         35:9b:5b:f2:04:66:ef:f5:1d:07:98:4c:e8:69:d0:a8:d4:fb:
         cd:09:11:c4:37:0e:35:1c:7b:d2:a6:cf:3c:a0:68:e6:2b:4e:
         c0:d4:f9:85:5f:2c:86:5c:39:5b:1c:26:ef:bf:a8:24:bf:81:
         0e:64:6e:24:49:cd:1d:aa:70:fb:9e:c0:eb:c5:be:41:9b:d6:
         9d:e3:6d:61:d6:1c:7a:6f:9c:b4:89:da:a8:b8:39:52:7a:a1:
         e3:04:f3:d0:66:5e:6a:4e:f7:a6:c2:85:16:d1:2e:c6:2e:cf:
         7f:95:60:79:8f:fc:72:a4:20:63:10:c0:dd:84:4b:52:f1:56:
         55:88:67:79:0d:c9:13:3d:5a:0d:68:f7:45:37:0d:f5:f5:da:
         70:46:9d:5a:42:90:57:ee:b0:dc:3c:a3:5c:4e:4d:c9:c5:0e:
         7b:99:54:8e:00:a1:2f:b3:65:f6:44:f9:00:6b:11:d2:04:8b:
         77:c7:4d:2d:30:33:a5:10:20:00:c7:85:3c:7d:49:24:c6:cd:
         fb:a6:5f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 20:49:32 2025 by rpki-client