Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/HVrM4TdEFgakWEjDsa6sjBmFgzjXNayfKRwJPEvcUqiW/0/3230302e3233392e3230302e302f32322d3234203d3e203130373034.roa
File:                     3230302e3233392e3230302e302f32322d3234203d3e203130373034.roa (raw, json)
Hash identifier:          YT3jzaKo9WDIYS7fhVdqOY7sygc+xbRCLdgUhd/ylWc=
Subject key identifier:   1F:CD:D2:E3:33:BB:86:66:21:B5:D1:F8:57:FC:C5:A0:31:17:46:24
Certificate issuer:       /CN=0F22F0E315749E4417293F3772830DCD92044CE8
Certificate serial:       58E1F1F94B3BCE1F6E8613F3B3AB12B9CDE66069
Authority key identifier: 0F:22:F0:E3:15:74:9E:44:17:29:3F:37:72:83:0D:CD:92:04:4C:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F22F0E315749E4417293F3772830DCD92044CE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HVrM4TdEFgakWEjDsa6sjBmFgzjXNayfKRwJPEvcUqiW/0/3230302e3233392e3230302e302f32322d3234203d3e203130373034.roa
Signing time:             Mon 24 Aug 2026 00:30:41 +0000
ROA not before:           Mon 24 Aug 2026 00:25:41 +0000
ROA not after:            Mon 23 Aug 2027 00:30:41 +0000
asID:                     10704
IP address blocks:        200.239.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HVrM4TdEFgakWEjDsa6sjBmFgzjXNayfKRwJPEvcUqiW/0/0F22F0E315749E4417293F3772830DCD92044CE8.crl
                          rsync://rpki-repo.registro.br/repo/HVrM4TdEFgakWEjDsa6sjBmFgzjXNayfKRwJPEvcUqiW/0/0F22F0E315749E4417293F3772830DCD92044CE8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F22F0E315749E4417293F3772830DCD92044CE8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 15:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:e1:f1:f9:4b:3b:ce:1f:6e:86:13:f3:b3:ab:12:b9:cd:e6:60:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F22F0E315749E4417293F3772830DCD92044CE8
        Validity
            Not Before: Aug 24 00:25:41 2026 GMT
            Not After : Aug 23 00:30:41 2027 GMT
        Subject: CN=1FCDD2E333BB866621B5D1F857FCC5A031174624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:75:3a:c8:fc:99:3d:d6:33:e6:a1:22:05:d5:
                    6e:a2:c4:93:57:41:6a:26:ee:e3:44:9e:c3:33:52:
                    0b:08:99:16:75:32:1a:b9:f9:3a:e2:19:59:9a:e2:
                    e4:9f:20:82:6b:b1:0d:ab:c9:8a:ec:ac:5b:d2:4e:
                    e6:2e:a6:68:cc:4a:04:9c:a2:94:0c:f9:84:6c:f8:
                    5f:40:41:25:a2:1a:40:ad:af:1e:96:8b:15:15:7a:
                    9d:af:01:80:ea:52:15:a9:28:a4:aa:8e:b3:0b:9b:
                    55:c9:6c:ae:dd:f1:37:53:0a:bf:c1:09:3e:38:16:
                    42:47:d4:df:de:e2:5a:e9:59:61:ba:00:8f:52:a8:
                    8e:19:d5:b1:8f:ae:a4:2f:35:94:87:89:d1:7e:18:
                    e1:4e:36:09:47:71:8b:42:a3:d9:f9:b6:17:51:e7:
                    1c:1f:98:b8:28:ee:c1:88:fd:43:25:8f:fa:67:7e:
                    1b:81:e9:18:50:8a:4b:49:16:fa:c3:6a:54:3d:d5:
                    1f:06:34:c5:d9:dd:c0:50:ff:b7:4d:96:d3:1a:04:
                    3a:d5:35:25:4c:3c:23:61:e0:d7:52:59:53:85:8c:
                    eb:da:8a:bf:8f:bd:0a:9c:99:e6:14:66:64:b3:1d:
                    52:ee:b3:78:b9:2d:b5:ac:0f:e1:0f:4c:40:22:eb:
                    8c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:CD:D2:E3:33:BB:86:66:21:B5:D1:F8:57:FC:C5:A0:31:17:46:24
            X509v3 Authority Key Identifier:
                keyid:0F:22:F0:E3:15:74:9E:44:17:29:3F:37:72:83:0D:CD:92:04:4C:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HVrM4TdEFgakWEjDsa6sjBmFgzjXNayfKRwJPEvcUqiW/0/0F22F0E315749E4417293F3772830DCD92044CE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F22F0E315749E4417293F3772830DCD92044CE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVrM4TdEFgakWEjDsa6sjBmFgzjXNayfKRwJPEvcUqiW/0/3230302e3233392e3230302e302f32322d3234203d3e203130373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.239.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:51:87:3f:14:20:7f:8e:d8:a5:b7:f6:fc:be:26:d5:b0:0e:
         c6:d6:a6:51:b1:31:e0:9b:63:3a:8f:1e:81:84:a4:6b:01:ad:
         9b:2c:d6:3c:ef:a3:43:fa:f2:18:2e:ed:7f:a9:12:cc:8e:e7:
         44:10:a2:80:1c:b1:f9:aa:80:01:12:86:4e:66:47:df:89:41:
         61:27:6c:ad:f5:20:4b:4b:c5:36:12:2b:49:31:46:5b:2e:9f:
         da:6b:3e:5e:0f:d4:10:82:8a:0f:d4:74:08:6f:34:46:7f:52:
         00:39:95:31:71:02:ce:13:0e:e1:3e:8a:a2:ab:2a:67:60:eb:
         39:c5:b0:44:27:b3:9c:58:6e:24:9e:58:14:ff:a4:d6:ae:df:
         a7:66:0c:95:f0:d5:02:df:dd:1a:f4:6a:22:cb:b6:60:25:b8:
         92:cd:05:2b:b6:79:46:87:fa:b1:a1:a0:06:f8:14:cb:17:07:
         c9:9b:0b:de:ff:4f:12:da:16:f4:3a:89:d3:dc:79:a5:be:02:
         2b:a2:af:59:ac:13:d0:7a:2a:d6:64:69:d0:a1:76:44:78:79:
         d4:02:f6:a6:9c:85:14:7a:45:34:97:a2:80:fd:cf:e4:0e:2f:
         91:3e:a0:be:2a:89:7a:8a:89:e2:ac:95:33:45:2b:b2:a2:53:
         34:41:79:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 19:26:37 2026 by rpki-client