Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D657bXPCT1rs5scmeJ57CSV712Bf6Lgm7BY3FrvytfbG/1/3230302e3233382e342e302f32332d3234203d3e203130383735.roa
File:                     3230302e3233382e342e302f32332d3234203d3e203130383735.roa (raw, json)
Hash identifier:          Qq/6Du07ImZTxyfs7sskvy+EB+Bf2XbtclWV5Blxi3w=
Subject key identifier:   8B:78:48:20:D2:FD:E6:8B:EB:8D:71:47:4A:67:04:0E:1D:38:FC:0F
Certificate issuer:       /CN=FE00A0246E047910F52B97F063352EE5D22A71CC
Certificate serial:       16DFA05F2F676146243DD7DD501F9DD05A2E380D
Authority key identifier: FE:00:A0:24:6E:04:79:10:F5:2B:97:F0:63:35:2E:E5:D2:2A:71:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE00A0246E047910F52B97F063352EE5D22A71CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D657bXPCT1rs5scmeJ57CSV712Bf6Lgm7BY3FrvytfbG/1/3230302e3233382e342e302f32332d3234203d3e203130383735.roa
Signing time:             Fri 05 Sep 2025 19:16:23 +0000
ROA not before:           Fri 05 Sep 2025 19:11:23 +0000
ROA not after:            Fri 04 Sep 2026 19:16:23 +0000
asID:                     10875
IP address blocks:        200.238.4.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D657bXPCT1rs5scmeJ57CSV712Bf6Lgm7BY3FrvytfbG/1/FE00A0246E047910F52B97F063352EE5D22A71CC.crl
                          rsync://rpki-repo.registro.br/repo/D657bXPCT1rs5scmeJ57CSV712Bf6Lgm7BY3FrvytfbG/1/FE00A0246E047910F52B97F063352EE5D22A71CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE00A0246E047910F52B97F063352EE5D22A71CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 17:14:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:df:a0:5f:2f:67:61:46:24:3d:d7:dd:50:1f:9d:d0:5a:2e:38:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE00A0246E047910F52B97F063352EE5D22A71CC
        Validity
            Not Before: Sep  5 19:11:23 2025 GMT
            Not After : Sep  4 19:16:23 2026 GMT
        Subject: CN=8B784820D2FDE68BEB8D71474A67040E1D38FC0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ab:9f:38:f5:f0:7a:4b:dc:d8:bf:22:c3:70:
                    90:4c:52:8f:95:3c:a1:d0:f7:87:b1:79:45:a7:69:
                    a5:90:73:05:85:39:17:a4:de:73:34:a0:88:76:39:
                    dd:8a:3c:dd:38:91:5a:64:69:9c:0e:71:4e:5d:1d:
                    cf:12:69:d2:2a:3a:a3:82:f3:c7:c2:4f:b7:7d:1f:
                    f2:97:b4:35:16:e3:8f:f8:92:8c:56:fd:66:74:a8:
                    87:4b:23:39:52:21:2d:88:31:df:83:0b:22:e4:36:
                    ae:59:77:01:aa:d2:6d:bf:62:c7:77:d3:18:a1:c3:
                    c8:bc:40:98:e2:34:2b:45:5d:e4:da:9d:d9:91:47:
                    f9:29:c5:54:2e:7f:5c:fe:64:02:18:b3:86:29:f0:
                    24:ce:93:4c:14:e4:41:6a:f7:1f:1e:c0:c0:93:93:
                    b4:af:f3:8a:00:2e:f3:95:92:35:01:d2:f8:38:63:
                    dd:98:b5:3c:a8:a7:13:05:d6:e0:4d:80:59:ec:04:
                    0d:99:fc:98:dd:55:8c:53:5f:f7:cb:03:8d:5e:33:
                    08:a2:cf:9a:54:ce:9e:ae:ca:3f:1d:f4:3a:79:62:
                    b3:55:78:35:39:dc:cd:12:27:2e:c4:0c:03:70:e2:
                    fe:91:c3:a8:a1:53:48:8a:6d:e2:26:91:c9:a4:bb:
                    66:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:78:48:20:D2:FD:E6:8B:EB:8D:71:47:4A:67:04:0E:1D:38:FC:0F
            X509v3 Authority Key Identifier:
                keyid:FE:00:A0:24:6E:04:79:10:F5:2B:97:F0:63:35:2E:E5:D2:2A:71:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D657bXPCT1rs5scmeJ57CSV712Bf6Lgm7BY3FrvytfbG/1/FE00A0246E047910F52B97F063352EE5D22A71CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE00A0246E047910F52B97F063352EE5D22A71CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D657bXPCT1rs5scmeJ57CSV712Bf6Lgm7BY3FrvytfbG/1/3230302e3233382e342e302f32332d3234203d3e203130383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.238.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:4b:f3:a2:62:9d:3d:2f:7d:1a:a6:88:95:00:b2:a1:22:f7:
         d9:44:4c:10:48:5b:bd:43:a4:15:c7:cf:4b:01:82:2a:f1:6b:
         0a:5b:e5:43:98:fc:1a:29:d3:49:15:dd:ec:4c:04:50:f6:93:
         dc:33:13:22:0e:d4:77:9c:4b:64:b0:3e:1f:22:95:5d:41:87:
         64:89:89:a8:51:3b:67:a9:1e:b8:0c:3c:9a:83:03:c0:2d:dd:
         7a:59:4d:e2:86:55:f2:93:7b:88:8d:9f:b0:06:81:c5:58:40:
         f9:1c:e7:3a:34:2f:c4:df:48:19:e9:6e:03:dc:6e:1a:5f:b1:
         47:fd:be:a7:73:ed:36:5c:35:97:aa:39:df:65:c3:00:6f:c9:
         fd:3c:1e:95:e3:73:87:2c:3d:83:fb:8d:ec:96:64:42:c2:52:
         d8:42:3c:c2:9e:3e:1b:41:6e:08:35:6e:cf:22:e5:aa:d6:b3:
         e3:88:85:31:36:55:2a:f0:5f:a0:f6:f0:7d:2a:e5:be:79:ca:
         23:13:d0:0c:fe:15:85:45:ce:60:de:8c:7b:13:f1:26:a1:93:
         c8:93:80:f3:88:8a:d3:4a:3c:2b:2c:e3:98:a0:10:5f:39:39:
         30:07:6f:2c:e7:ad:eb:1c:fc:a4:0b:ce:be:9d:40:f1:c0:37:
         61:2b:09:8e
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUFt+gXy9nYUYkPdfdUB+d0FouOA0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkUwMEEwMjQ2RTA0NzkxMEY1MkI5N0YwNjMzNTJFRTVE
MjJBNzFDQzAeFw0yNTA5MDUxOTExMjNaFw0yNjA5MDQxOTE2MjNaMDMxMTAvBgNV
BAMTKDhCNzg0ODIwRDJGREU2OEJFQjhENzE0NzRBNjcwNDBFMUQzOEZDMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4q5849fB6S9zYvyLDcJBMUo+V
PKHQ94exeUWnaaWQcwWFORek3nM0oIh2Od2KPN04kVpkaZwOcU5dHc8SadIqOqOC
88fCT7d9H/KXtDUW44/4koxW/WZ0qIdLIzlSIS2IMd+DCyLkNq5ZdwGq0m2/Ysd3
0xihw8i8QJjiNCtFXeTandmRR/kpxVQuf1z+ZAIYs4Yp8CTOk0wU5EFq9x8ewMCT
k7Sv84oALvOVkjUB0vg4Y92YtTyopxMF1uBNgFnsBA2Z/JjdVYxTX/fLA41eMwii
z5pUzp6uyj8d9Dp5YrNVeDU53M0SJy7EDANw4v6Rw6ihU0iKbeImkcmku2ZbAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUi3hIINL95ovrjXFHSmcEDh04/A8wHwYDVR0j
BBgwFoAU/gCgJG4EeRD1K5fwYzUu5dIqccwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDY1N2JYUENUMXJzNXNjbWVKNTdDU1Y3MTJCZjZMZ203QlkzRnJ2eXRm
YkcvMS9GRTAwQTAyNDZFMDQ3OTEwRjUyQjk3RjA2MzM1MkVFNUQyMkE3MUNDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZFMDBBMDI0NkUwNDc5MTBG
NTJCOTdGMDYzMzUyRUU1RDIyQTcxQ0MuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q2NTdiWFBDVDFyczVzY21lSjU3Q1NWNzEyQmY2TGdtN0JZM0Zydnl0ZmJHLzEv
MzIzMDMwMmUzMjMzMzgyZTM0MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzEzMDM4
MzczNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAcjuBDANBgkqhkiG9w0BAQsFAAOCAQEAj0vzomKdPS99
GqaIlQCyoSL32URMEEhbvUOkFcfPSwGCKvFrClvlQ5j8GinTSRXd7EwEUPaT3DMT
Ig7Ud5xLZLA+HyKVXUGHZImJqFE7Z6keuAw8moMDwC3dellN4oZV8pN7iI2fsAaB
xVhA+RznOjQvxN9IGeluA9xuGl+xR/2+p3PtNlw1l6o532XDAG/J/TweleNzhyw9
g/uN7JZkQsJS2EI8wp4+G0FuCDVuzyLlqtaz44iFMTZVKvBfoPbwfSrlvnnKIxPQ
DP4VhUXOYN6MexPxJqGTyJOA84iK00o8KyzjmKAQXzk5MAdvLOet6xz8pAvOvp1A
8cA3YSsJjg==
-----END CERTIFICATE-----
Generated at Thu Sep 18 21:03:13 2025 by rpki-client