Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/3230302e33392e3134352e302f32342d3234203d3e20323730373538.roa
File:                     3230302e33392e3134352e302f32342d3234203d3e20323730373538.roa (raw, json)
Hash identifier:          zfqjJcXYgvPw2REMAcBA4TkFyAWC717mikpPNxOp6Ts=
Subject key identifier:   59:FD:DD:82:FE:1B:8C:3E:DD:FC:F8:37:3B:62:10:1E:EA:9B:36:CA
Certificate issuer:       /CN=FDC3ABD576F0A132A9B041C7B6E6997785CBCD4A
Certificate serial:       7BA886257E839D5A097B8604F90FBD7DA433346A
Authority key identifier: FD:C3:AB:D5:76:F0:A1:32:A9:B0:41:C7:B6:E6:99:77:85:CB:CD:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDC3ABD576F0A132A9B041C7B6E6997785CBCD4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/3230302e33392e3134352e302f32342d3234203d3e20323730373538.roa
Signing time:             Fri 04 Jul 2025 14:08:04 +0000
ROA not before:           Fri 04 Jul 2025 14:03:04 +0000
ROA not after:            Fri 03 Jul 2026 14:08:04 +0000
asID:                     270758
IP address blocks:        200.39.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/FDC3ABD576F0A132A9B041C7B6E6997785CBCD4A.crl
                          rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/FDC3ABD576F0A132A9B041C7B6E6997785CBCD4A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDC3ABD576F0A132A9B041C7B6E6997785CBCD4A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 17:25:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:a8:86:25:7e:83:9d:5a:09:7b:86:04:f9:0f:bd:7d:a4:33:34:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDC3ABD576F0A132A9B041C7B6E6997785CBCD4A
        Validity
            Not Before: Jul  4 14:03:04 2025 GMT
            Not After : Jul  3 14:08:04 2026 GMT
        Subject: CN=59FDDD82FE1B8C3EDDFCF8373B62101EEA9B36CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e4:57:0f:e4:08:0a:e5:ac:9a:68:eb:7c:77:
                    08:23:4b:2b:57:f3:2d:0d:69:40:40:45:6f:40:04:
                    4f:d4:a7:0a:c4:25:95:60:c0:eb:47:83:55:a8:52:
                    d5:00:84:d3:99:5f:ea:53:68:41:66:af:b8:3d:e2:
                    d4:57:e5:1e:38:eb:0a:a1:76:6d:fc:26:13:72:53:
                    a6:54:03:9e:f3:b5:31:7d:90:c5:0f:27:c6:38:c1:
                    0f:ef:14:f9:bd:79:54:7c:19:cc:6c:ad:5e:fd:a7:
                    f0:6e:a3:0d:48:a1:74:08:b4:0f:a6:b3:6c:fb:d8:
                    37:77:31:f5:95:6a:41:a6:13:f8:28:d0:fa:96:ca:
                    1b:78:17:9b:13:7d:1d:04:55:e1:5c:d0:b5:b7:bf:
                    e7:3c:72:9d:af:79:38:3a:fc:b3:f7:25:58:3a:b4:
                    fb:e5:49:da:ad:f9:4c:fa:f1:d9:11:de:af:23:56:
                    83:00:8d:24:e8:90:90:30:5f:81:d7:9b:2a:71:fc:
                    44:fb:81:01:b8:43:fe:53:b4:62:34:cf:7d:6d:cd:
                    c5:96:61:39:ee:c9:a9:d0:63:e0:15:ad:70:ab:e4:
                    2e:e7:a2:49:13:f6:7c:56:9e:e5:e3:03:b6:09:5f:
                    6c:30:8a:da:7f:9d:ce:d7:94:44:5d:a9:ce:d9:3d:
                    42:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:FD:DD:82:FE:1B:8C:3E:DD:FC:F8:37:3B:62:10:1E:EA:9B:36:CA
            X509v3 Authority Key Identifier:
                keyid:FD:C3:AB:D5:76:F0:A1:32:A9:B0:41:C7:B6:E6:99:77:85:CB:CD:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/FDC3ABD576F0A132A9B041C7B6E6997785CBCD4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDC3ABD576F0A132A9B041C7B6E6997785CBCD4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/3230302e33392e3134352e302f32342d3234203d3e20323730373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:de:d1:0a:2d:24:f8:3f:d5:77:55:a6:e7:0d:8c:58:32:d7:
         89:ed:65:dc:2c:e4:7e:a5:fc:29:76:32:90:60:db:3e:4f:15:
         2e:ef:40:e9:67:21:34:4a:6f:ce:88:20:08:15:ee:9d:44:53:
         4b:0d:c4:49:09:ab:70:91:c3:d3:c7:9e:8e:66:94:ed:66:e9:
         02:b6:b2:33:e2:ce:0e:75:41:c8:51:19:e1:7f:d9:5a:34:80:
         d5:ab:d5:69:2b:a9:34:e4:9a:f4:9a:0a:17:b7:ef:86:b2:62:
         2a:c7:6a:72:e4:f1:fc:13:a9:10:e1:67:9f:c9:90:f8:c9:25:
         e5:07:44:82:07:43:e8:c0:b4:aa:36:0d:d8:eb:ae:bd:6f:ad:
         e2:d5:07:d5:6c:9e:53:8b:fa:75:ec:34:35:19:c6:51:9f:fb:
         b1:59:36:eb:e8:64:21:ce:ea:09:51:e4:2c:a8:20:44:7a:c3:
         a6:89:4c:ce:76:b8:92:ca:61:75:f7:c8:e3:f2:dd:d5:e2:f3:
         f2:3f:6c:93:50:b5:58:e1:52:07:fc:10:17:60:36:67:55:92:
         5d:d2:19:91:fd:07:ad:a1:cd:ab:09:07:13:89:49:e0:77:b4:
         cd:ad:5c:49:03:e8:0b:90:17:26:cf:c8:d6:6a:b6:a9:bd:31:
         b7:3a:72:44
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUe6iGJX6DnVoJe4YE+Q+9faQzNGowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkRDM0FCRDU3NkYwQTEzMkE5QjA0MUM3QjZFNjk5Nzc4
NUNCQ0Q0QTAeFw0yNTA3MDQxNDAzMDRaFw0yNjA3MDMxNDA4MDRaMDMxMTAvBgNV
BAMTKDU5RkRERDgyRkUxQjhDM0VEREZDRjgzNzNCNjIxMDFFRUE5QjM2Q0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB5FcP5AgK5ayaaOt8dwgjSytX
8y0NaUBARW9ABE/UpwrEJZVgwOtHg1WoUtUAhNOZX+pTaEFmr7g94tRX5R446wqh
dm38JhNyU6ZUA57ztTF9kMUPJ8Y4wQ/vFPm9eVR8GcxsrV79p/Buow1IoXQItA+m
s2z72Dd3MfWVakGmE/go0PqWyht4F5sTfR0EVeFc0LW3v+c8cp2veTg6/LP3JVg6
tPvlSdqt+Uz68dkR3q8jVoMAjSTokJAwX4HXmypx/ET7gQG4Q/5TtGI0z31tzcWW
YTnuyanQY+AVrXCr5C7nokkT9nxWnuXjA7YJX2wwitp/nc7XlERdqc7ZPULDAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUWf3dgv4bjD7d/Pg3O2IQHuqbNsowHwYDVR0j
BBgwFoAU/cOr1XbwoTKpsEHHtuaZd4XLzUowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0V4WnFiZzRzNWtucnNjNlZLS3piaGFmS1pEMWhlUkR1S2VmeGFqa3E0
cEUvMC9GREMzQUJENTc2RjBBMTMyQTlCMDQxQzdCNkU2OTk3Nzg1Q0JDRDRBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZEQzNBQkQ1NzZGMEExMzJB
OUIwNDFDN0I2RTY5OTc3ODVDQkNENEEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dFeFpxYmc0czVrbnJzYzZWS0t6YmhhZktaRDFoZVJEdUtlZnhhamtxNHBFLzAv
MzIzMDMwMmUzMzM5MmUzMTM0MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzAzNzM1Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADIJ5EwDQYJKoZIhvcNAQELBQADggEBAC3e0Qot
JPg/1XdVpucNjFgy14ntZdws5H6l/Cl2MpBg2z5PFS7vQOlnITRKb86IIAgV7p1E
U0sNxEkJq3CRw9PHno5mlO1m6QK2sjPizg51QchRGeF/2Vo0gNWr1WkrqTTkmvSa
Che374ayYirHanLk8fwTqRDhZ5/JkPjJJeUHRIIHQ+jAtKo2Ddjrrr1vreLVB9Vs
nlOL+nXsNDUZxlGf+7FZNuvoZCHO6glR5CyoIER6w6aJTM52uJLKYXX3yOPy3dXi
8/I/bJNQtVjhUgf8EBdgNmdVkl3SGZH9B62hzasJBxOJSeB3tM2tXEkD6AuQFybP
yNZqtqm9Mbc6ckQ=
-----END CERTIFICATE-----
Generated at Sat Jul 5 03:14:21 2025 by rpki-client