Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/3230302e3232392e3232342e302f32342d3234203d3e203238313635.roa
File:                     3230302e3232392e3232342e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          xhM5AHU1fBsZV7bBxgTl7SFbzYeYN2LuSaTASzk9RT4=
Subject key identifier:   5A:E1:0B:FF:F6:DD:1F:D2:E3:03:52:B6:EB:ED:06:1B:AE:A5:68:75
Certificate issuer:       /CN=80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77
Certificate serial:       62A9113033DDDBCD6DE2855F2062E0DDCF92FC8B
Authority key identifier: 80:D1:2B:8D:1F:C4:93:DC:78:D6:A6:D2:3E:94:B6:8D:9D:AC:6A:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/3230302e3232392e3232342e302f32342d3234203d3e203238313635.roa
Signing time:             Tue 29 Jul 2025 14:08:16 +0000
ROA not before:           Tue 29 Jul 2025 14:03:16 +0000
ROA not after:            Tue 28 Jul 2026 14:08:16 +0000
asID:                     28165
IP address blocks:        200.229.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.crl
                          rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:a9:11:30:33:dd:db:cd:6d:e2:85:5f:20:62:e0:dd:cf:92:fc:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77
        Validity
            Not Before: Jul 29 14:03:16 2025 GMT
            Not After : Jul 28 14:08:16 2026 GMT
        Subject: CN=5AE10BFFF6DD1FD2E30352B6EBED061BAEA56875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8f:61:e5:56:4f:2f:dd:95:29:23:33:8e:7d:
                    a5:63:d8:63:a3:52:f9:47:c4:71:c3:75:8d:be:64:
                    b0:ec:19:97:91:04:71:bf:0d:83:0b:99:21:0e:75:
                    2e:bb:47:d8:77:74:0c:e5:40:d4:11:58:f3:10:45:
                    9f:d4:60:c6:7e:8d:81:87:af:91:e9:aa:71:e2:20:
                    71:01:fb:90:a5:aa:45:f5:5b:a2:ec:80:f9:9a:db:
                    ee:29:35:d7:21:8d:84:90:06:04:6d:3f:19:2d:b7:
                    65:09:1b:e5:a9:05:ed:ca:81:ec:77:b3:30:c8:1c:
                    f1:b4:ec:30:f3:34:06:68:9a:ac:81:12:e4:17:8a:
                    4d:89:83:84:b5:7b:c2:72:a5:4f:0d:b5:4f:03:77:
                    66:b0:c0:b5:56:6d:38:52:06:0c:64:f2:37:28:01:
                    21:45:07:05:ce:02:47:80:84:b0:4d:b4:f9:eb:1a:
                    0b:dd:12:a1:53:67:c1:db:45:7b:69:5e:bd:66:ab:
                    37:07:fe:78:ff:f5:0f:77:32:d5:28:af:69:71:20:
                    8c:6a:e7:08:0c:d9:24:99:bf:04:0e:e3:23:82:03:
                    f1:ba:22:2c:d2:b9:55:d1:7f:fd:1d:e7:64:50:ac:
                    5c:cc:bb:9a:22:2b:46:b1:54:81:b5:44:01:83:65:
                    70:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:E1:0B:FF:F6:DD:1F:D2:E3:03:52:B6:EB:ED:06:1B:AE:A5:68:75
            X509v3 Authority Key Identifier:
                keyid:80:D1:2B:8D:1F:C4:93:DC:78:D6:A6:D2:3E:94:B6:8D:9D:AC:6A:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/3230302e3232392e3232342e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:30:07:67:a3:80:f5:23:37:cc:03:e3:b6:4c:52:31:d6:de:
         2f:74:f5:30:88:82:e1:95:fb:09:36:2f:e4:54:cf:f4:df:ec:
         0b:02:5f:bd:8d:c2:b9:51:ad:a9:01:9d:5c:1e:57:6a:fa:37:
         62:57:21:25:27:44:b3:24:82:d4:73:65:6b:94:bb:4a:15:a4:
         fe:d5:32:e8:b0:c9:f1:53:09:a0:8c:6b:8f:27:74:69:2f:59:
         af:55:d3:de:8f:7d:6b:d6:ca:49:9b:a0:37:64:58:ad:1c:a5:
         3a:fd:fc:78:10:3c:98:70:f3:e2:f8:ba:a2:40:45:20:0e:8b:
         75:6a:31:87:4a:ba:dc:b6:6b:cf:46:3c:10:21:f9:f3:a3:c3:
         0d:97:74:d7:ac:a0:11:77:a6:32:a5:05:ee:d0:58:68:23:5b:
         8b:49:3f:ed:9b:4d:b9:22:2a:1e:39:41:16:61:83:02:f7:9a:
         60:94:db:1a:ec:0d:cb:19:f9:46:83:8b:8c:97:12:30:86:1a:
         f3:d8:22:7c:ea:3d:d4:16:ad:cb:58:f5:54:47:e6:d8:6a:1b:
         39:46:76:78:64:64:1a:3a:f6:47:79:f1:90:c4:1f:b0:ab:67:
         36:73:ce:c0:81:c6:d7:6d:6c:86:d8:67:66:5f:82:d0:b4:f5:
         08:d5:33:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:50:57 2025 by rpki-client