Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3230302e3232352e3134302e302f32332d3233203d3e203631373937.roa
File:                     3230302e3232352e3134302e302f32332d3233203d3e203631373937.roa (raw, json)
Hash identifier:          5sdv7Ed+O/hwuGkv4szrbTWZeKlQ/1W3qnDRfNAJmqY=
Subject key identifier:   BE:58:EF:A4:D4:F1:EA:56:EB:A7:BA:B2:2F:19:47:AC:5C:15:22:FA
Certificate issuer:       /CN=698DD058CC44A7087C5B128356D10FB024C7D778
Certificate serial:       4BBE9F45407B1615BC46BE0F726363E2E6D444E5
Authority key identifier: 69:8D:D0:58:CC:44:A7:08:7C:5B:12:83:56:D1:0F:B0:24:C7:D7:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/698DD058CC44A7087C5B128356D10FB024C7D778.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3230302e3232352e3134302e302f32332d3233203d3e203631373937.roa
Signing time:             Mon 03 Nov 2025 15:07:09 +0000
ROA not before:           Mon 03 Nov 2025 15:02:09 +0000
ROA not after:            Mon 02 Nov 2026 15:07:09 +0000
asID:                     61797
IP address blocks:        200.225.140.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/698DD058CC44A7087C5B128356D10FB024C7D778.crl
                          rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/698DD058CC44A7087C5B128356D10FB024C7D778.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/698DD058CC44A7087C5B128356D10FB024C7D778.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 05:41:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:be:9f:45:40:7b:16:15:bc:46:be:0f:72:63:63:e2:e6:d4:44:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=698DD058CC44A7087C5B128356D10FB024C7D778
        Validity
            Not Before: Nov  3 15:02:09 2025 GMT
            Not After : Nov  2 15:07:09 2026 GMT
        Subject: CN=BE58EFA4D4F1EA56EBA7BAB22F1947AC5C1522FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:1b:bd:94:c0:f1:0e:fc:b1:4c:3d:59:ce:50:
                    78:fb:55:e3:d2:f7:51:b8:2b:fc:35:35:1a:61:ed:
                    e4:b0:aa:d6:08:20:60:eb:61:dd:87:20:bb:ee:33:
                    db:28:a9:06:79:9c:0b:dc:08:29:11:1c:05:58:36:
                    2b:6a:d0:3a:e2:64:84:68:d2:d3:89:61:bf:09:53:
                    7c:f1:28:16:ff:d5:39:ac:6b:08:66:3c:cd:0d:56:
                    35:b0:b6:95:c4:0a:50:dc:72:17:ca:31:d0:c5:85:
                    7f:1f:33:00:cb:9b:1c:f6:1b:e0:53:8e:cd:42:62:
                    28:64:e6:f8:52:da:0a:78:30:d0:53:79:3e:77:7e:
                    45:1b:d1:de:9e:a2:41:01:79:5a:8e:7e:f4:35:c9:
                    9b:29:c8:21:76:ad:c2:ca:9b:76:06:09:13:2f:7e:
                    92:9c:de:24:25:b3:ec:c9:b0:57:2f:dd:03:67:7b:
                    96:bc:aa:ff:af:44:a3:16:51:c9:e7:d6:54:d7:b3:
                    cc:fe:1c:45:e2:96:23:36:0f:07:24:a9:af:b9:85:
                    e8:a6:6d:a4:a2:3f:4f:92:a9:13:79:ad:30:d1:57:
                    ea:53:af:83:3b:be:17:5e:48:b4:ba:88:64:a7:31:
                    1e:3b:11:54:d5:42:d2:1b:8e:03:54:7e:60:a6:e1:
                    be:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:58:EF:A4:D4:F1:EA:56:EB:A7:BA:B2:2F:19:47:AC:5C:15:22:FA
            X509v3 Authority Key Identifier:
                keyid:69:8D:D0:58:CC:44:A7:08:7C:5B:12:83:56:D1:0F:B0:24:C7:D7:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/698DD058CC44A7087C5B128356D10FB024C7D778.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/698DD058CC44A7087C5B128356D10FB024C7D778.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3230302e3232352e3134302e302f32332d3233203d3e203631373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.225.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:1d:43:7f:9a:30:5e:01:85:2b:45:dc:b4:32:f2:6c:b5:cf:
         31:d8:4b:aa:83:99:19:72:c0:48:2b:81:87:f8:77:d5:9d:3a:
         3f:22:5b:9d:5a:12:45:92:04:78:ea:f8:62:6e:c5:e4:5a:93:
         73:35:8f:33:34:c7:5f:f5:73:be:db:76:f4:28:fd:e6:dc:e1:
         d5:0f:ee:70:6e:63:16:b6:d7:49:09:fb:52:14:ce:dc:0e:11:
         fb:68:1b:99:43:5b:36:d1:c9:9b:d1:a0:37:47:11:1d:e8:6b:
         f5:be:50:0d:ba:d3:3f:a5:3f:62:f5:1c:b0:a3:82:fc:91:75:
         17:2b:4e:68:7f:ef:b9:38:e1:a6:f0:5e:09:64:e1:eb:dc:65:
         15:67:bb:1a:dd:4e:f2:af:35:9a:47:d7:4b:87:d3:8f:ac:7e:
         80:db:f8:8b:c1:81:9e:9d:ba:e4:4f:46:63:ef:dd:89:cb:d6:
         f1:ff:59:b3:47:39:37:0f:c3:f4:b1:5d:e9:d4:06:6a:c0:cc:
         44:9f:e5:4c:5c:58:79:72:e6:8e:53:bd:78:68:0b:f4:f1:b9:
         14:d0:30:7c:84:45:1d:ae:77:3e:e6:20:87:4b:24:29:51:02:
         25:1b:5c:44:3d:83:f2:d2:ed:71:90:08:30:66:3c:25:4f:7c:
         ec:a6:8f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:03:36 2025 by rpki-client