Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/3230302e3232392e3232372e302f32342d3234203d3e203238313635.roa
File:                     3230302e3232392e3232372e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          wQIwwggmEaMEXG0h7RGB4CBEr+/LlnX6HdNo6KQAUig=
Subject key identifier:   62:8B:FD:7A:3A:84:A0:58:EA:76:88:BA:0F:5C:A1:EE:36:99:99:55
Certificate issuer:       /CN=80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77
Certificate serial:       06D0866565EEC7F806605746B4C5FB91A1C9ECBC
Authority key identifier: 80:D1:2B:8D:1F:C4:93:DC:78:D6:A6:D2:3E:94:B6:8D:9D:AC:6A:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/3230302e3232392e3232372e302f32342d3234203d3e203238313635.roa
Signing time:             Tue 29 Jul 2025 14:08:12 +0000
ROA not before:           Tue 29 Jul 2025 14:03:12 +0000
ROA not after:            Tue 28 Jul 2026 14:08:12 +0000
asID:                     28165
IP address blocks:        200.229.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.crl
                          rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 09 Aug 2025 15:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:d0:86:65:65:ee:c7:f8:06:60:57:46:b4:c5:fb:91:a1:c9:ec:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77
        Validity
            Not Before: Jul 29 14:03:12 2025 GMT
            Not After : Jul 28 14:08:12 2026 GMT
        Subject: CN=628BFD7A3A84A058EA7688BA0F5CA1EE36999955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ea:21:be:67:be:cb:0c:00:47:47:0b:20:41:
                    64:59:89:bf:af:47:2e:54:0a:18:c2:32:27:96:d9:
                    d2:d8:a3:78:73:4a:90:5a:13:54:3b:38:e7:4e:ee:
                    48:6b:46:75:56:f3:8e:b0:33:23:c2:9f:d0:31:e9:
                    72:57:81:cc:8c:7b:d8:4c:7e:2a:23:98:52:6c:72:
                    7a:ef:51:b8:87:1d:b3:22:1a:73:8d:fb:be:b5:72:
                    20:98:06:9d:86:62:13:65:bc:07:74:5f:c4:3d:cf:
                    e9:42:b1:41:be:b3:0e:5e:59:bc:35:3c:31:bb:0a:
                    76:1c:87:11:eb:ec:c0:b8:7d:6d:d7:11:b9:cd:00:
                    52:35:2a:0b:0a:f9:da:07:7e:5f:82:01:7a:c2:93:
                    8e:9c:8f:c6:ce:cd:2d:f3:ba:a3:7f:d1:df:1c:7d:
                    d4:61:26:93:c2:c8:d1:af:fb:93:28:1c:9a:84:09:
                    25:90:da:2d:17:1a:98:41:58:77:00:14:8d:84:cc:
                    ae:f2:87:28:5f:62:66:8d:f2:44:c2:d5:db:53:32:
                    06:25:fe:a5:60:2c:0e:e7:a4:ab:9b:cc:b7:d5:91:
                    bc:48:90:e1:0c:4c:1c:ad:8b:bc:70:26:03:a2:7c:
                    bf:c9:4b:b5:c8:c7:ac:48:00:5c:b7:ab:08:fa:ec:
                    2e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:8B:FD:7A:3A:84:A0:58:EA:76:88:BA:0F:5C:A1:EE:36:99:99:55
            X509v3 Authority Key Identifier:
                keyid:80:D1:2B:8D:1F:C4:93:DC:78:D6:A6:D2:3E:94:B6:8D:9D:AC:6A:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/3230302e3232392e3232372e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:36:78:f0:93:fb:48:83:cf:e2:b4:33:a3:c2:7a:ad:7e:c8:
         43:9c:46:c5:66:e0:ff:36:74:6c:18:c9:a2:fd:a1:8e:56:e9:
         35:37:75:c6:fc:4b:73:22:e2:78:7c:7e:3e:41:13:96:0d:33:
         6f:de:1c:08:94:c4:dc:2a:61:c2:cf:09:81:1a:6a:ba:52:a7:
         eb:91:2a:44:a7:16:cb:eb:b0:0b:77:f0:ac:fd:d5:e6:5c:68:
         d1:bc:f6:98:b3:d4:1e:cd:55:9e:db:dc:11:60:32:24:d5:67:
         3d:1c:ab:38:58:ed:c4:0c:13:74:47:69:f3:ac:02:ea:fe:bb:
         07:a4:27:eb:d3:2a:02:12:12:45:f6:da:9a:2d:4a:1d:f2:5e:
         aa:f6:10:90:f0:46:bc:30:28:08:ed:80:26:af:ec:0c:d9:a4:
         4a:b6:4b:da:10:2c:13:e8:eb:b1:54:18:ba:ee:1e:26:d4:17:
         e4:fb:a7:13:2d:c9:37:4e:21:b1:8e:e5:91:6d:33:7c:63:e1:
         75:1c:da:5f:49:34:1f:b1:6f:49:3f:e8:61:c1:7f:45:7b:90:
         00:b9:de:54:72:ea:8b:17:89:f0:43:67:5e:3c:2e:d3:99:75:
         5f:3b:85:b2:82:64:75:c5:d1:dd:dd:7a:04:d9:69:6e:9a:13:
         ed:8a:a7:e7
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUBtCGZWXux/gGYFdGtMX7kaHJ7LwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODBEMTJCOEQxRkM0OTNEQzc4RDZBNkQyM0U5NEI2OEQ5
REFDNkE3NzAeFw0yNTA3MjkxNDAzMTJaFw0yNjA3MjgxNDA4MTJaMDMxMTAvBgNV
BAMTKDYyOEJGRDdBM0E4NEEwNThFQTc2ODhCQTBGNUNBMUVFMzY5OTk5NTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI6iG+Z77LDABHRwsgQWRZib+v
Ry5UChjCMieW2dLYo3hzSpBaE1Q7OOdO7khrRnVW846wMyPCn9Ax6XJXgcyMe9hM
fiojmFJscnrvUbiHHbMiGnON+761ciCYBp2GYhNlvAd0X8Q9z+lCsUG+sw5eWbw1
PDG7CnYchxHr7MC4fW3XEbnNAFI1KgsK+doHfl+CAXrCk46cj8bOzS3zuqN/0d8c
fdRhJpPCyNGv+5MoHJqECSWQ2i0XGphBWHcAFI2EzK7yhyhfYmaN8kTC1dtTMgYl
/qVgLA7npKubzLfVkbxIkOEMTByti7xwJgOifL/JS7XIx6xIAFy3qwj67C4pAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUYov9ejqEoFjqdoi6D1yh7jaZmVUwHwYDVR0j
BBgwFoAUgNErjR/Ek9x41qbSPpS2jZ2sancwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDJNUlZWOFd3SkVEYUROcFR6bTlqckg2N050dDNIQ0xHM1Yyd1dmRXpr
b0QvMy84MEQxMkI4RDFGQzQ5M0RDNzhENkE2RDIzRTk0QjY4RDlEQUM2QTc3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgwRDEyQjhEMUZDNDkzREM3
OEQ2QTZEMjNFOTRCNjhEOURBQzZBNzcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QyTVJWVjhXd0pFRGFETnBUem05anJINjdOdHQzSENMRzNWMndXZkV6a29ELzMv
MzIzMDMwMmUzMjMyMzkyZTMyMzIzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzgzMTM2MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADI5eMwDQYJKoZIhvcNAQELBQADggEBAAQ2ePCT
+0iDz+K0M6PCeq1+yEOcRsVm4P82dGwYyaL9oY5W6TU3dcb8S3Mi4nh8fj5BE5YN
M2/eHAiUxNwqYcLPCYEaarpSp+uRKkSnFsvrsAt38Kz91eZcaNG89piz1B7NVZ7b
3BFgMiTVZz0cqzhY7cQME3RHafOsAur+uwekJ+vTKgISEkX22potSh3yXqr2EJDw
RrwwKAjtgCav7AzZpEq2S9oQLBPo67FUGLruHibUF+T7pxMtyTdOIbGO5ZFtM3xj
4XUc2l9JNB+xb0k/6GHBf0V7kAC53lRy6osXifBDZ148LtOZdV87hbKCZHXF0d3d
egTZaW6aE+2Kp+c=
-----END CERTIFICATE-----
Generated at Sat Aug 9 05:46:05 2025 by rpki-client