Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/3230302e3231392e36302e302f32342d3234203d3e20323730383034.roa
File:                     3230302e3231392e36302e302f32342d3234203d3e20323730383034.roa (raw, json)
Hash identifier:          UD3xyac73wcFrFu7JR7m3IWTquRPTrhmvxGIaeTK8WU=
Subject key identifier:   FC:B4:A4:24:0B:B0:EA:84:E4:25:2E:9E:71:57:51:CF:68:83:64:C9
Certificate issuer:       /CN=4DFE35C1095DFCE94247D8596FF0F1EE53F735FF
Certificate serial:       4CBAC1CFED60AEF7136E84D542E91E5805FB6B78
Authority key identifier: 4D:FE:35:C1:09:5D:FC:E9:42:47:D8:59:6F:F0:F1:EE:53:F7:35:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DFE35C1095DFCE94247D8596FF0F1EE53F735FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/3230302e3231392e36302e302f32342d3234203d3e20323730383034.roa
Signing time:             Tue 26 Aug 2025 14:05:28 +0000
ROA not before:           Tue 26 Aug 2025 14:00:28 +0000
ROA not after:            Tue 25 Aug 2026 14:05:28 +0000
asID:                     270804
IP address blocks:        200.219.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/4DFE35C1095DFCE94247D8596FF0F1EE53F735FF.crl
                          rsync://rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/4DFE35C1095DFCE94247D8596FF0F1EE53F735FF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DFE35C1095DFCE94247D8596FF0F1EE53F735FF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 17:22:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:ba:c1:cf:ed:60:ae:f7:13:6e:84:d5:42:e9:1e:58:05:fb:6b:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DFE35C1095DFCE94247D8596FF0F1EE53F735FF
        Validity
            Not Before: Aug 26 14:00:28 2025 GMT
            Not After : Aug 25 14:05:28 2026 GMT
        Subject: CN=FCB4A4240BB0EA84E4252E9E715751CF688364C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a4:1b:fc:1f:25:fe:a9:e4:37:46:f0:7f:17:
                    c1:ee:41:98:f4:e1:9f:57:ba:da:28:1d:0c:05:37:
                    13:ea:21:d5:77:8f:30:98:1e:56:ea:5c:05:83:31:
                    50:e2:de:98:01:d5:c2:10:d8:a7:08:cf:b5:ab:ff:
                    e6:4c:8c:13:91:51:07:73:e4:26:6d:de:26:99:1b:
                    a9:7f:2f:63:29:5f:3b:9f:8f:cf:60:89:51:c9:dc:
                    82:a8:84:f6:95:38:84:f1:9c:58:7a:ff:90:de:f1:
                    22:dc:92:70:c0:20:00:33:51:6e:39:d8:c4:6b:15:
                    cd:d4:3d:92:60:8e:20:2d:a2:36:7b:ad:ca:8f:da:
                    24:37:25:8f:03:ba:ec:29:81:28:52:c4:45:d1:2d:
                    16:32:db:3f:15:6b:1b:3b:e5:0a:b3:5e:5f:14:aa:
                    0f:68:b1:10:8e:77:1c:d0:91:04:c9:4d:bd:e2:f3:
                    9b:e3:ed:ec:b3:ee:aa:16:60:37:35:66:70:39:e7:
                    ca:bd:40:38:8f:5d:c7:05:f6:ca:a4:bc:b6:4b:0b:
                    d8:c2:f7:ca:fb:ae:d2:b8:86:c6:83:d1:2b:94:08:
                    f3:5b:b0:98:03:ff:66:08:d7:21:9a:03:cb:82:71:
                    13:be:86:89:96:0c:52:35:57:6b:61:f0:18:45:af:
                    f2:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:B4:A4:24:0B:B0:EA:84:E4:25:2E:9E:71:57:51:CF:68:83:64:C9
            X509v3 Authority Key Identifier:
                keyid:4D:FE:35:C1:09:5D:FC:E9:42:47:D8:59:6F:F0:F1:EE:53:F7:35:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/4DFE35C1095DFCE94247D8596FF0F1EE53F735FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DFE35C1095DFCE94247D8596FF0F1EE53F735FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/3230302e3231392e36302e302f32342d3234203d3e20323730383034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:f2:d3:3e:76:ba:e1:f7:ce:96:33:c8:ca:15:51:74:e2:f8:
         00:f3:7c:74:87:b7:28:1e:b4:2a:8e:2f:16:c9:a2:f3:84:4b:
         c4:f3:b8:35:47:bc:73:81:15:87:b1:79:16:d2:ee:70:14:61:
         4b:fb:dc:5d:b5:f4:27:1f:68:ea:c1:c3:98:b2:26:3d:4c:6d:
         4b:7b:93:4e:e1:07:3b:80:7c:0d:2f:c4:35:cd:89:03:4c:93:
         a4:84:c3:3c:75:f3:2e:8b:b2:b2:bf:86:f4:9e:6b:b4:46:f8:
         6b:28:81:92:5c:3a:7b:a1:2b:20:c4:29:7f:04:68:d0:cc:90:
         43:88:7a:e0:5f:0b:f6:22:ba:5a:5c:17:74:aa:b6:c6:04:17:
         d1:37:cb:d5:b9:12:ed:3b:44:a5:6a:48:1b:87:21:44:42:6f:
         2c:01:06:e4:7b:7e:77:d4:9f:3a:e2:57:38:fa:05:d1:9e:66:
         30:9c:ba:19:f8:c5:07:c9:31:fa:23:99:77:c9:9c:a0:28:c0:
         b1:9b:55:ed:7a:7a:a7:58:b5:f8:17:7e:2b:f8:01:bf:17:af:
         a6:47:3b:b5:28:15:66:2f:04:a6:f3:c6:65:22:60:98:78:47:
         11:f6:40:9b:1c:5c:39:09:24:ac:c6:3a:19:4e:c0:8d:68:bf:
         bd:c2:c0:9d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUTLrBz+1grvcTboTVQukeWAX7a3gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNERGRTM1QzEwOTVERkNFOTQyNDdEODU5NkZGMEYxRUU1
M0Y3MzVGRjAeFw0yNTA4MjYxNDAwMjhaFw0yNjA4MjUxNDA1MjhaMDMxMTAvBgNV
BAMTKEZDQjRBNDI0MEJCMEVBODRFNDI1MkU5RTcxNTc1MUNGNjg4MzY0QzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUpBv8HyX+qeQ3RvB/F8HuQZj0
4Z9XutooHQwFNxPqIdV3jzCYHlbqXAWDMVDi3pgB1cIQ2KcIz7Wr/+ZMjBORUQdz
5CZt3iaZG6l/L2MpXzufj89giVHJ3IKohPaVOITxnFh6/5De8SLcknDAIAAzUW45
2MRrFc3UPZJgjiAtojZ7rcqP2iQ3JY8DuuwpgShSxEXRLRYy2z8Vaxs75QqzXl8U
qg9osRCOdxzQkQTJTb3i85vj7eyz7qoWYDc1ZnA558q9QDiPXccF9sqkvLZLC9jC
98r7rtK4hsaD0SuUCPNbsJgD/2YI1yGaA8uCcRO+homWDFI1V2th8BhFr/KrAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU/LSkJAuw6oTkJS6ecVdRz2iDZMkwHwYDVR0j
BBgwFoAUTf41wQld/OlCR9hZb/Dx7lP3Nf8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTEycXJFVXFoMTlHMVRudGVLdEFYYzdSdjNZZGpMeVhwamlxcW1LeWth
RVkvMC80REZFMzVDMTA5NURGQ0U5NDI0N0Q4NTk2RkYwRjFFRTUzRjczNUZGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRERkUzNUMxMDk1REZDRTk0
MjQ3RDg1OTZGRjBGMUVFNTNGNzM1RkYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ExMnFyRVVxaDE5RzFUbnRlS3RBWGM3UnYzWWRqTHlYcGppcXFtS3lrYUVZLzAv
MzIzMDMwMmUzMjMxMzkyZTM2MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzAzODMwMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADI2zwwDQYJKoZIhvcNAQELBQADggEBAIvy0z52
uuH3zpYzyMoVUXTi+ADzfHSHtygetCqOLxbJovOES8TzuDVHvHOBFYexeRbS7nAU
YUv73F219CcfaOrBw5iyJj1MbUt7k07hBzuAfA0vxDXNiQNMk6SEwzx18y6LsrK/
hvSea7RG+GsogZJcOnuhKyDEKX8EaNDMkEOIeuBfC/YiulpcF3SqtsYEF9E3y9W5
Eu07RKVqSBuHIURCbywBBuR7fnfUnzriVzj6BdGeZjCcuhn4xQfJMfojmXfJnKAo
wLGbVe16eqdYtfgXfiv4Ab8Xr6ZHO7UoFWYvBKbzxmUiYJh4RxH2QJscXDkJJKzG
OhlOwI1ov73CwJ0=
-----END CERTIFICATE-----
Generated at Fri Sep 19 00:45:47 2025 by rpki-client