Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7VbCDEQm2iJHzppKzyCYYvz8puq9SEsPJtsaigEbhcgv/0/3230302e3231382e3233392e302f32342d3234203d3e20323732373836.roa
File:                     3230302e3231382e3233392e302f32342d3234203d3e20323732373836.roa (raw, json)
Hash identifier:          f30dpFi52g2G5HWtlZCsRIxnMu41DIStTf0xC0+NkeM=
Subject key identifier:   ED:CA:FA:4E:12:70:E8:A6:7F:DD:FA:A4:95:1C:83:A3:1F:81:AB:B3
Certificate issuer:       /CN=58E384DDFA548D7DE9FEADE014582B8E6BE1D550
Certificate serial:       67EE501F2A314AB33530050D9F00F5F0E48E43C4
Authority key identifier: 58:E3:84:DD:FA:54:8D:7D:E9:FE:AD:E0:14:58:2B:8E:6B:E1:D5:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58E384DDFA548D7DE9FEADE014582B8E6BE1D550.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7VbCDEQm2iJHzppKzyCYYvz8puq9SEsPJtsaigEbhcgv/0/3230302e3231382e3233392e302f32342d3234203d3e20323732373836.roa
Signing time:             Thu 14 Aug 2025 12:47:51 +0000
ROA not before:           Thu 14 Aug 2025 12:42:51 +0000
ROA not after:            Thu 13 Aug 2026 12:47:51 +0000
asID:                     272786
IP address blocks:        200.218.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7VbCDEQm2iJHzppKzyCYYvz8puq9SEsPJtsaigEbhcgv/0/58E384DDFA548D7DE9FEADE014582B8E6BE1D550.crl
                          rsync://rpki-repo.registro.br/repo/7VbCDEQm2iJHzppKzyCYYvz8puq9SEsPJtsaigEbhcgv/0/58E384DDFA548D7DE9FEADE014582B8E6BE1D550.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58E384DDFA548D7DE9FEADE014582B8E6BE1D550.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 12:57:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:ee:50:1f:2a:31:4a:b3:35:30:05:0d:9f:00:f5:f0:e4:8e:43:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58E384DDFA548D7DE9FEADE014582B8E6BE1D550
        Validity
            Not Before: Aug 14 12:42:51 2025 GMT
            Not After : Aug 13 12:47:51 2026 GMT
        Subject: CN=EDCAFA4E1270E8A67FDDFAA4951C83A31F81ABB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7d:38:f8:31:1e:9a:9f:46:93:a5:67:a6:3f:
                    c4:55:1b:8b:4f:c3:c2:7d:72:b0:00:57:08:f8:c1:
                    bf:e2:f4:37:01:ad:29:d3:2f:a8:4a:1d:0b:42:1a:
                    7e:f3:3c:9d:65:ec:a1:6d:04:b0:fc:12:89:e2:bb:
                    9b:2a:79:87:1a:de:ba:4b:a5:4f:14:78:67:04:2d:
                    7c:c3:49:c1:75:c0:10:82:c2:41:8b:8e:50:c7:c0:
                    96:3b:89:3f:9f:4e:5a:72:8b:7f:d4:cd:8b:fc:81:
                    d2:71:fd:48:49:92:bd:f4:27:87:66:e3:47:fb:b5:
                    b1:28:00:99:60:c8:bd:90:b3:36:73:e0:93:e3:37:
                    f3:25:c2:bf:12:a2:a8:27:83:67:ae:f6:21:8a:94:
                    7d:62:20:8c:b7:af:1a:6f:a6:8f:c0:60:23:9b:30:
                    54:c7:64:3d:33:ff:39:7b:89:42:71:15:0d:88:67:
                    8e:fa:33:94:ec:ef:cd:97:0f:f7:07:8c:e2:f2:44:
                    cd:12:d3:ed:ec:f1:1c:1d:0c:1d:c3:e2:4c:6b:96:
                    1f:8c:52:86:af:46:15:00:74:2d:b6:9e:36:82:84:
                    d2:fa:c8:70:cd:5e:57:13:95:b8:8f:72:af:a7:e9:
                    81:9e:16:c5:05:f4:57:30:dd:35:51:5e:e9:6a:eb:
                    3b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:CA:FA:4E:12:70:E8:A6:7F:DD:FA:A4:95:1C:83:A3:1F:81:AB:B3
            X509v3 Authority Key Identifier:
                keyid:58:E3:84:DD:FA:54:8D:7D:E9:FE:AD:E0:14:58:2B:8E:6B:E1:D5:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7VbCDEQm2iJHzppKzyCYYvz8puq9SEsPJtsaigEbhcgv/0/58E384DDFA548D7DE9FEADE014582B8E6BE1D550.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58E384DDFA548D7DE9FEADE014582B8E6BE1D550.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7VbCDEQm2iJHzppKzyCYYvz8puq9SEsPJtsaigEbhcgv/0/3230302e3231382e3233392e302f32342d3234203d3e20323732373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.218.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:7c:3d:54:77:f7:1b:5f:ab:ed:f5:7a:8f:96:6c:d7:98:27:
         9b:51:41:c1:92:48:aa:93:76:31:b9:32:de:5b:e1:43:f3:9e:
         c2:4b:39:cb:16:a9:7b:de:1e:63:94:3b:89:f2:31:93:55:f8:
         6a:58:95:e9:07:89:1b:8d:37:ac:25:f3:ec:0f:a6:31:e1:d2:
         5b:7a:a1:88:79:df:97:80:e6:58:20:fe:e4:f4:68:36:7b:c1:
         ee:c8:94:88:5a:c0:c2:a1:e9:17:02:01:2c:81:4a:03:e2:3a:
         1c:a4:6f:47:01:d2:a0:40:40:3d:39:4d:23:e0:73:dc:6b:b8:
         d0:b9:49:59:d4:13:c7:d7:2a:35:71:40:d3:90:7c:58:d5:a0:
         af:50:07:f0:d4:f4:02:5b:8b:42:c9:11:b5:2a:3b:cc:d2:d9:
         e2:89:65:45:ac:44:93:1c:18:4f:04:6a:72:7f:be:4a:41:91:
         c6:92:20:36:9a:b7:bf:aa:9a:6d:d3:3c:4c:1e:7c:51:b6:ab:
         42:29:dd:26:18:54:c9:c9:cc:77:fb:6e:be:28:2e:10:e4:9f:
         6f:e5:c7:04:8b:d9:68:c3:8c:e5:b6:c3:26:9d:71:ea:6c:c2:
         a7:7d:6e:3f:b2:c8:0d:5c:f0:fc:7e:26:82:75:93:26:57:1a:
         1a:b8:06:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 20:48:55 2025 by rpki-client