Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/3230302e3135302e3136382e302f32342d3332203d3e203232333831.roa
File:                     3230302e3135302e3136382e302f32342d3332203d3e203232333831.roa (raw, json)
Hash identifier:          JdS6tnXAvccsnk8yM/LPlEMqZgfAr7uJP3R5Cv7NVQw=
Subject key identifier:   A0:7F:C5:61:A8:B7:AB:EA:F1:5D:43:BD:E7:F6:5D:65:52:75:AB:47
Certificate issuer:       /CN=F949F903F8964372F27E60FEC4C03EDEC0B47A2C
Certificate serial:       626570F90F7546C75B41C2BF6EA957095AB69524
Authority key identifier: F9:49:F9:03:F8:96:43:72:F2:7E:60:FE:C4:C0:3E:DE:C0:B4:7A:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/3230302e3135302e3136382e302f32342d3332203d3e203232333831.roa
Signing time:             Thu 28 Aug 2025 14:55:23 +0000
ROA not before:           Thu 28 Aug 2025 14:50:23 +0000
ROA not after:            Thu 27 Aug 2026 14:55:23 +0000
asID:                     22381
IP address blocks:        200.150.168.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.crl
                          rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 16 Sep 2025 14:36:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:65:70:f9:0f:75:46:c7:5b:41:c2:bf:6e:a9:57:09:5a:b6:95:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F949F903F8964372F27E60FEC4C03EDEC0B47A2C
        Validity
            Not Before: Aug 28 14:50:23 2025 GMT
            Not After : Aug 27 14:55:23 2026 GMT
        Subject: CN=A07FC561A8B7ABEAF15D43BDE7F65D655275AB47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e7:41:83:a1:43:55:64:55:07:00:63:e3:76:
                    8d:28:24:7f:cd:08:66:29:ad:2c:8b:80:85:b1:cf:
                    6c:db:98:5c:91:6b:ae:31:88:27:75:38:3e:ef:2c:
                    c3:83:8b:eb:45:79:b1:56:3b:5b:b4:65:d4:6d:af:
                    a9:6c:f4:6d:9e:34:3b:96:08:9c:06:91:2e:f0:31:
                    7c:58:df:d1:c7:17:d2:c2:f3:66:06:1b:a4:8c:2d:
                    b9:85:15:27:0d:a3:a1:18:bf:e1:f5:b4:9b:17:d7:
                    d2:28:2e:8e:ae:7e:2c:64:5a:ff:11:d0:dc:29:29:
                    c6:ab:f1:25:c4:d7:54:50:5d:dd:86:5d:be:ad:45:
                    c6:f9:8c:40:03:a9:2d:8b:a9:a2:9c:64:41:00:42:
                    b1:c0:60:6f:5f:a6:27:25:10:0a:c2:94:8f:11:99:
                    8a:42:d0:e6:84:2d:46:56:1f:1b:1c:4e:a9:28:32:
                    75:e3:e0:c1:da:7a:98:8f:52:ea:73:15:e2:c7:95:
                    6f:f6:2e:9f:f6:0e:e9:e2:b7:a2:3a:6b:e1:f7:59:
                    57:a3:60:3b:c2:ee:a1:03:b6:7e:75:ad:55:70:5b:
                    fe:67:6a:e7:85:22:ee:c3:0a:fb:4a:d9:46:32:bb:
                    4c:3c:45:0f:ce:3f:82:14:4c:be:b1:f7:67:1d:bd:
                    dc:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:7F:C5:61:A8:B7:AB:EA:F1:5D:43:BD:E7:F6:5D:65:52:75:AB:47
            X509v3 Authority Key Identifier:
                keyid:F9:49:F9:03:F8:96:43:72:F2:7E:60:FE:C4:C0:3E:DE:C0:B4:7A:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F949F903F8964372F27E60FEC4C03EDEC0B47A2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/1/3230302e3135302e3136382e302f32342d3332203d3e203232333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.150.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:79:a0:31:ee:5a:a5:5a:e9:f7:da:2e:40:0c:c3:0c:8d:8b:
         d1:7a:32:c9:0c:87:5b:9b:85:2b:f0:bc:f3:af:90:c0:e0:7f:
         f6:0c:5c:8d:c8:d4:24:bc:87:fc:3f:3f:79:81:dc:71:4a:a8:
         6d:03:f2:3f:cc:3b:a7:7f:1c:fc:7a:b0:65:63:13:eb:84:0d:
         09:81:61:e9:30:1f:68:a3:c2:70:e0:32:6a:3a:fd:b4:3b:67:
         22:42:d9:3d:11:64:3c:98:e3:96:4b:4a:f0:a3:c3:16:c9:bd:
         aa:d6:f1:f1:10:9e:33:d6:48:05:2d:53:3b:35:e2:97:26:db:
         f2:9d:16:66:14:b4:51:fb:aa:cb:52:95:a9:36:09:ab:a5:b0:
         f2:52:ef:85:e4:3c:9b:8c:61:10:f4:ac:93:6c:ea:c1:ef:b0:
         41:23:d2:d5:d0:43:24:b7:fb:97:cf:00:1c:b7:d3:f4:f4:04:
         e7:2e:8b:42:a1:73:06:3c:ef:71:b3:96:f4:14:73:7d:b9:65:
         c6:b0:ee:c1:b0:eb:eb:70:06:04:c9:54:c0:3f:a7:ca:b5:74:
         6b:f0:0a:7b:97:6c:70:68:be:d6:78:bf:75:b9:87:ad:eb:6a:
         9a:05:bc:51:d6:4d:f8:1a:7c:7c:24:fd:ab:65:85:00:e6:78:
         85:19:12:02
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYmVw+Q91RsdbQcK/bqlXCVq2lSQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjk0OUY5MDNGODk2NDM3MkYyN0U2MEZFQzRDMDNFREVD
MEI0N0EyQzAeFw0yNTA4MjgxNDUwMjNaFw0yNjA4MjcxNDU1MjNaMDMxMTAvBgNV
BAMTKEEwN0ZDNTYxQThCN0FCRUFGMTVENDNCREU3RjY1RDY1NTI3NUFCNDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg50GDoUNVZFUHAGPjdo0oJH/N
CGYprSyLgIWxz2zbmFyRa64xiCd1OD7vLMODi+tFebFWO1u0ZdRtr6ls9G2eNDuW
CJwGkS7wMXxY39HHF9LC82YGG6SMLbmFFScNo6EYv+H1tJsX19IoLo6ufixkWv8R
0NwpKcar8SXE11RQXd2GXb6tRcb5jEADqS2LqaKcZEEAQrHAYG9fpiclEArClI8R
mYpC0OaELUZWHxscTqkoMnXj4MHaepiPUupzFeLHlW/2Lp/2Dunit6I6a+H3WVej
YDvC7qEDtn51rVVwW/5naueFIu7DCvtK2UYyu0w8RQ/OP4IUTL6x92cdvdxFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUoH/FYai3q+rxXUO95/ZdZVJ1q0cwHwYDVR0j
BBgwFoAU+Un5A/iWQ3LyfmD+xMA+3sC0eiwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWJCZzF2ckZOWkVaQWtxcGNlZVU3ZVlXdDJmMkRQN1hvajc0RUtoRDVy
VHgvMS9GOTQ5RjkwM0Y4OTY0MzcyRjI3RTYwRkVDNEMwM0VERUMwQjQ3QTJDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y5NDlGOTAzRjg5NjQzNzJG
MjdFNjBGRUM0QzAzRURFQzBCNDdBMkMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzliQmcxdnJGTlpFWkFrcXBjZWVVN2VZV3QyZjJEUDdYb2o3NEVLaEQ1clR4LzEv
MzIzMDMwMmUzMTM1MzAyZTMxMzYzODJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDMy
MzIzMzM4MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADIlqgwDQYJKoZIhvcNAQELBQADggEBACV5oDHu
WqVa6ffaLkAMwwyNi9F6MskMh1ubhSvwvPOvkMDgf/YMXI3I1CS8h/w/P3mB3HFK
qG0D8j/MO6d/HPx6sGVjE+uEDQmBYekwH2ijwnDgMmo6/bQ7ZyJC2T0RZDyY45ZL
SvCjwxbJvarW8fEQnjPWSAUtUzs14pcm2/KdFmYUtFH7qstSlak2CaulsPJS74Xk
PJuMYRD0rJNs6sHvsEEj0tXQQyS3+5fPABy30/T0BOcui0KhcwY873GzlvQUc325
Zcaw7sGw6+twBgTJVMA/p8q1dGvwCnuXbHBovtZ4v3W5h63rapoFvFHWTfgafHwk
/atlhQDmeIUZEgI=
-----END CERTIFICATE-----
Generated at Mon Sep 15 16:14:02 2025 by rpki-client