Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/3230302e342e3131362e302f32322d3234203d3e20323633353639.roa
File:                     3230302e342e3131362e302f32322d3234203d3e20323633353639.roa (raw, json)
Hash identifier:          Q/sngcNV45TntEW7OIdDbCo1z/F/ifkELmVvK4H9D3w=
Subject key identifier:   70:69:32:4C:F4:87:D6:D0:49:AE:4B:43:BC:2F:79:A9:55:E8:90:89
Certificate issuer:       /CN=B48698C1C13EA3C66442C7F77BC37509C48A1BAE
Certificate serial:       45F340C47D3F4F852CF746EE3CBE4464E2F5B2A4
Authority key identifier: B4:86:98:C1:C1:3E:A3:C6:64:42:C7:F7:7B:C3:75:09:C4:8A:1B:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/3230302e342e3131362e302f32322d3234203d3e20323633353639.roa
Signing time:             Mon 08 Sep 2025 14:16:52 +0000
ROA not before:           Mon 08 Sep 2025 14:11:52 +0000
ROA not after:            Mon 07 Sep 2026 14:16:52 +0000
asID:                     263569
IP address blocks:        200.4.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.crl
                          rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 18 Sep 2025 22:29:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:f3:40:c4:7d:3f:4f:85:2c:f7:46:ee:3c:be:44:64:e2:f5:b2:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B48698C1C13EA3C66442C7F77BC37509C48A1BAE
        Validity
            Not Before: Sep  8 14:11:52 2025 GMT
            Not After : Sep  7 14:16:52 2026 GMT
        Subject: CN=7069324CF487D6D049AE4B43BC2F79A955E89089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c2:aa:3a:5f:4c:26:6e:96:84:50:69:b4:d0:
                    ac:77:0e:a6:69:7a:16:3d:67:1c:ae:46:49:23:b6:
                    ea:2e:f2:96:67:10:78:2b:b5:9e:44:52:b9:b0:50:
                    1c:33:95:c0:9e:9b:c2:3d:f9:69:db:80:50:76:09:
                    52:c0:26:d3:ea:87:08:c2:c5:5d:a2:5d:da:50:d7:
                    8d:11:6a:97:0c:05:2d:6a:60:8d:e0:75:a7:be:a8:
                    14:07:ce:3c:3d:5e:c6:5e:6f:03:9d:98:c9:eb:87:
                    f4:28:79:81:e3:e6:ca:53:73:fc:d6:ef:ed:62:83:
                    b0:d7:0a:98:4d:d2:41:b6:b0:0a:c6:ca:46:78:ea:
                    29:68:a9:59:00:fb:a0:65:de:a6:44:b2:35:91:91:
                    2f:0b:7d:36:46:10:46:f5:08:12:d1:8d:2c:b8:72:
                    e7:13:b8:4e:26:a0:a1:b4:96:e4:40:40:a3:10:00:
                    a4:21:bd:d6:7e:89:d7:d5:03:a7:d4:43:0c:03:46:
                    53:85:c7:38:15:75:f7:5a:28:99:fe:9a:30:ce:26:
                    d2:51:4e:f2:ed:87:a8:bb:11:99:3b:32:23:6e:ab:
                    3b:dd:64:ac:c0:b4:c7:8d:30:3e:1b:2e:e4:d0:7a:
                    5d:44:56:b5:cb:5b:7c:a8:ac:f4:77:6f:b9:69:db:
                    4b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:69:32:4C:F4:87:D6:D0:49:AE:4B:43:BC:2F:79:A9:55:E8:90:89
            X509v3 Authority Key Identifier:
                keyid:B4:86:98:C1:C1:3E:A3:C6:64:42:C7:F7:7B:C3:75:09:C4:8A:1B:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/3230302e342e3131362e302f32322d3234203d3e20323633353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.4.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:31:ec:4d:4a:3f:a7:37:87:99:c9:11:64:35:9b:57:45:8b:
         c0:83:a7:71:4c:45:04:55:ed:3b:6e:59:7b:3a:15:0c:82:07:
         e6:df:75:00:8e:27:53:de:02:48:cc:6f:77:0d:b2:bf:2f:42:
         55:3f:13:be:64:78:28:93:b7:07:6c:ad:cb:57:f7:16:2c:1a:
         fb:f9:77:c5:22:01:94:d1:82:01:17:23:26:52:53:d2:8b:db:
         22:a8:54:1e:4e:9a:e1:f8:99:e1:1b:35:a0:ea:9b:ac:ae:a8:
         21:18:c6:d0:ad:1a:69:51:19:97:0d:51:c6:72:50:88:68:0d:
         7c:2b:13:6c:ed:7a:72:76:1f:6e:7a:b6:4e:59:e7:94:6a:09:
         1a:23:37:11:8f:da:64:24:b6:9d:78:69:41:f4:92:6d:75:f3:
         3e:96:e0:45:f4:40:8c:70:24:dc:89:49:1d:e7:f1:89:be:ae:
         01:33:29:1c:cf:2a:f7:3d:e0:67:f2:ae:9a:ed:dd:f1:59:71:
         5c:7a:3f:a9:cb:86:c3:e7:96:85:8d:e0:c9:9f:39:1b:7a:9c:
         16:e9:cd:17:3e:71:5e:ab:60:0c:80:e4:3a:e6:8e:2f:cc:dc:
         cb:0b:a1:bf:f6:64:f9:b0:82:0e:bf:7a:52:ac:fc:ec:5d:8c:
         a4:33:4f:ed
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIURfNAxH0/T4Us90buPL5EZOL1sqQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQ4Njk4QzFDMTNFQTNDNjY0NDJDN0Y3N0JDMzc1MDlD
NDhBMUJBRTAeFw0yNTA5MDgxNDExNTJaFw0yNjA5MDcxNDE2NTJaMDMxMTAvBgNV
BAMTKDcwNjkzMjRDRjQ4N0Q2RDA0OUFFNEI0M0JDMkY3OUE5NTVFODkwODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAwqo6X0wmbpaEUGm00Kx3DqZp
ehY9ZxyuRkkjtuou8pZnEHgrtZ5EUrmwUBwzlcCem8I9+WnbgFB2CVLAJtPqhwjC
xV2iXdpQ140RapcMBS1qYI3gdae+qBQHzjw9XsZebwOdmMnrh/QoeYHj5spTc/zW
7+1ig7DXCphN0kG2sArGykZ46iloqVkA+6Bl3qZEsjWRkS8LfTZGEEb1CBLRjSy4
cucTuE4moKG0luRAQKMQAKQhvdZ+idfVA6fUQwwDRlOFxzgVdfdaKJn+mjDOJtJR
TvLth6i7EZk7MiNuqzvdZKzAtMeNMD4bLuTQel1EVrXLW3yorPR3b7lp20vbAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUcGkyTPSH1tBJrktDvC95qVXokIkwHwYDVR0j
BBgwFoAUtIaYwcE+o8ZkQsf3e8N1CcSKG64wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGNmTGhrcXU3d3dRYzRGRlNXaVNkcjJKZmI1bkNiWHVtb2ZoZkRYUEVM
WHgvMC9CNDg2OThDMUMxM0VBM0M2NjQ0MkM3Rjc3QkMzNzUwOUM0OEExQkFFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I0ODY5OEMxQzEzRUEzQzY2
NDQyQzdGNzdCQzM3NTA5QzQ4QTFCQUUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hjZkxoa3F1N3d3UWM0RkZTV2lTZHIySmZiNW5DYlh1bW9maGZEWFBFTFh4LzAv
MzIzMDMwMmUzNDJlMzEzMTM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMz
MzUzNjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCyAR0MA0GCSqGSIb3DQEBCwUAA4IBAQAHMexNSj+n
N4eZyRFkNZtXRYvAg6dxTEUEVe07bll7OhUMggfm33UAjidT3gJIzG93DbK/L0JV
PxO+ZHgok7cHbK3LV/cWLBr7+XfFIgGU0YIBFyMmUlPSi9siqFQeTprh+JnhGzWg
6pusrqghGMbQrRppURmXDVHGclCIaA18KxNs7Xpydh9uerZOWeeUagkaIzcRj9pk
JLadeGlB9JJtdfM+luBF9ECMcCTciUkd5/GJvq4BMykczyr3PeBn8q6a7d3xWXFc
ej+py4bD55aFjeDJnzkbepwW6c0XPnFeq2AMgOQ65o4vzNzLC6G/9mT5sIIOv3pS
rPzsXYykM0/t
-----END CERTIFICATE-----
Generated at Thu Sep 18 14:49:53 2025 by rpki-client