Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/3230302e3232392e3232342e302f32322d3232203d3e203238313635.roa
File:                     3230302e3232392e3232342e302f32322d3232203d3e203238313635.roa (raw, json)
Hash identifier:          2xzSlDsxjgs57bqNkS7QvUexwTLsiI8ds83YwRp9f/E=
Subject key identifier:   79:EC:96:77:6B:E1:20:20:D0:B6:DF:D3:5A:E7:D6:3E:57:36:D1:33
Certificate issuer:       /CN=80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77
Certificate serial:       7D7BD66019217A8FF29E3A9A3CAC9BF8B706A988
Authority key identifier: 80:D1:2B:8D:1F:C4:93:DC:78:D6:A6:D2:3E:94:B6:8D:9D:AC:6A:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/3230302e3232392e3232342e302f32322d3232203d3e203238313635.roa
Signing time:             Tue 29 Jul 2025 14:08:12 +0000
ROA not before:           Tue 29 Jul 2025 14:03:12 +0000
ROA not after:            Tue 28 Jul 2026 14:08:12 +0000
asID:                     28165
IP address blocks:        200.229.224.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.crl
                          rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 09 Aug 2025 15:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:7b:d6:60:19:21:7a:8f:f2:9e:3a:9a:3c:ac:9b:f8:b7:06:a9:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77
        Validity
            Not Before: Jul 29 14:03:12 2025 GMT
            Not After : Jul 28 14:08:12 2026 GMT
        Subject: CN=79EC96776BE12020D0B6DFD35AE7D63E5736D133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fa:96:e4:8e:2d:c2:86:5b:de:ba:4d:9d:45:
                    db:62:d1:14:93:59:43:c5:5a:b5:c2:8f:10:6d:fa:
                    f6:64:d9:bf:7b:25:43:d2:aa:d1:4f:14:10:55:b0:
                    f9:22:20:7b:90:e0:97:6e:92:68:57:2c:33:d5:f5:
                    22:e2:1b:55:14:04:82:29:31:b8:ba:20:44:65:69:
                    70:bc:b1:b6:61:50:cd:70:c1:d4:26:2d:47:e2:fd:
                    b9:27:bc:5b:7f:db:b8:44:f3:a9:8b:25:3e:f2:1b:
                    7d:30:cc:17:c6:6c:cc:ce:61:3a:ef:8b:c7:d4:d1:
                    35:fe:5d:53:12:89:d6:25:8e:a2:cd:aa:82:cc:91:
                    f1:a3:bf:f3:60:ec:42:02:96:78:b8:e6:20:11:76:
                    b9:22:d8:1b:3d:19:ff:6d:d8:de:6c:83:08:a6:7b:
                    d0:14:9b:d4:4f:ee:0a:cf:63:8d:12:da:ef:71:49:
                    82:a0:45:3f:5b:b4:8f:81:b6:fa:b8:0b:90:27:1e:
                    7e:a8:5f:9a:3c:ba:b8:33:fe:6d:d0:2a:11:3d:be:
                    97:6b:4a:db:49:33:ff:39:4e:bb:2e:52:47:1c:c9:
                    8b:a6:75:73:78:57:6c:73:f4:01:26:4f:35:6f:05:
                    d2:10:d6:29:34:3b:8a:d3:52:18:80:4f:3e:eb:f3:
                    73:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:EC:96:77:6B:E1:20:20:D0:B6:DF:D3:5A:E7:D6:3E:57:36:D1:33
            X509v3 Authority Key Identifier:
                keyid:80:D1:2B:8D:1F:C4:93:DC:78:D6:A6:D2:3E:94:B6:8D:9D:AC:6A:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/3230302e3232392e3232342e302f32322d3232203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:eb:cb:4a:a9:4e:09:47:0e:a1:ea:75:b1:49:cd:eb:86:57:
         d1:a4:6e:92:cc:70:74:82:89:f0:a0:11:ae:85:36:e5:16:51:
         38:32:a6:81:0c:41:fd:72:2a:b9:1a:00:c3:21:7e:4f:28:a5:
         4a:68:59:4b:61:e5:17:66:32:5a:de:b7:60:58:29:00:d3:f8:
         14:75:3c:2a:04:f7:c1:78:40:cd:ee:40:b3:43:b3:f7:0b:98:
         ba:f6:1d:fd:b5:ea:c3:b6:7b:ba:0c:9d:63:86:f0:c4:7d:bb:
         fe:e8:85:42:d4:86:10:26:0f:96:50:d4:cb:7e:77:14:da:e9:
         b3:3c:a4:4c:6f:9a:d2:19:c1:ef:50:ae:12:34:1b:f0:06:ef:
         5c:c6:20:20:70:ba:d9:23:2f:37:76:3d:43:e0:be:17:9d:36:
         8e:b0:71:b3:3f:6f:a1:ff:0c:19:39:8a:fe:30:85:3f:6b:75:
         1d:e6:ac:5c:0f:85:9d:27:eb:35:09:eb:f8:ed:5e:33:6f:d5:
         4d:6d:a9:03:88:28:94:2f:af:43:3c:5c:b7:40:34:14:5a:d5:
         a6:50:b4:1c:06:db:8a:5a:f5:f3:7b:d5:1f:e1:5f:36:57:70:
         da:72:16:c4:88:28:ee:be:78:d5:db:7c:49:f1:2a:3e:be:1a:
         44:16:b6:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:21:01 2025 by rpki-client