Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/3230302e3138372e3130322e302f32342d3234203d3e20323730363833.roa
File:                     3230302e3138372e3130322e302f32342d3234203d3e20323730363833.roa (raw, json)
Hash identifier:          +Z0ru9BsWPOHlK8tWb0IGKgXDXi0PyLC2vV8M76GVfU=
Subject key identifier:   F1:2A:13:8A:9D:B2:F9:54:7C:4F:94:7C:31:7C:23:75:3B:CC:72:96
Certificate issuer:       /CN=8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505
Certificate serial:       76267D19A9DC0881A77DA16B7C53DEC522C1B3E1
Authority key identifier: 8E:A2:14:99:D9:F7:6D:A8:5E:EC:8D:8B:1A:8E:3B:06:9D:4C:75:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/3230302e3138372e3130322e302f32342d3234203d3e20323730363833.roa
Signing time:             Thu 06 Mar 2025 03:59:06 +0000
ROA not before:           Thu 06 Mar 2025 03:54:06 +0000
ROA not after:            Thu 05 Mar 2026 03:59:06 +0000
asID:                     270683
IP address blocks:        200.187.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.crl
                          rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 21:07:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:26:7d:19:a9:dc:08:81:a7:7d:a1:6b:7c:53:de:c5:22:c1:b3:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505
        Validity
            Not Before: Mar  6 03:54:06 2025 GMT
            Not After : Mar  5 03:59:06 2026 GMT
        Subject: CN=F12A138A9DB2F9547C4F947C317C23753BCC7296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:77:84:83:5d:36:12:cc:47:32:4b:6d:bc:83:
                    5f:a5:7a:42:21:93:5e:d8:8a:4f:58:2c:98:cf:ab:
                    b5:74:5f:ef:7b:4b:68:e0:55:cb:d6:1b:d3:f8:50:
                    97:bc:22:9d:17:61:9e:09:9e:fd:37:ef:6e:d4:68:
                    88:5d:96:5d:52:97:d8:a4:39:3e:ea:67:bb:a2:0c:
                    6c:84:88:dc:a9:d7:ae:25:8b:9e:35:5f:24:11:2d:
                    db:8d:c7:2a:f2:fa:67:0a:9c:6c:cd:dc:b7:cd:4d:
                    2e:dc:b7:ff:38:e0:a6:41:36:c3:31:d1:57:90:00:
                    f5:29:9e:35:fd:74:22:33:2d:cc:56:ba:44:f2:6d:
                    90:d6:8c:9f:95:db:a4:10:5b:ac:ae:f5:3a:4e:54:
                    da:ab:e5:c8:1c:5c:f0:0c:67:7e:9d:fb:3d:a8:2b:
                    6f:62:89:4c:ba:a2:a5:5d:b2:44:ce:7d:c2:d9:b2:
                    5e:0c:57:21:e1:68:b4:a5:af:8c:74:38:9f:38:f4:
                    d7:d6:61:b4:14:0d:7c:ca:e0:ad:d3:92:a8:09:bf:
                    c6:02:2b:a5:30:c2:1e:9c:45:e1:0d:38:54:ba:39:
                    70:e2:58:96:1f:eb:37:db:98:7b:94:ef:f4:52:75:
                    29:a9:17:34:78:4e:47:f3:41:ed:90:a4:e3:66:7b:
                    f2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:2A:13:8A:9D:B2:F9:54:7C:4F:94:7C:31:7C:23:75:3B:CC:72:96
            X509v3 Authority Key Identifier:
                keyid:8E:A2:14:99:D9:F7:6D:A8:5E:EC:8D:8B:1A:8E:3B:06:9D:4C:75:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/3230302e3138372e3130322e302f32342d3234203d3e20323730363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.187.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:f1:48:a0:6c:44:ba:e4:5d:46:19:fd:2d:d2:78:e8:66:72:
         7e:6a:8d:3d:b2:ee:5b:1b:45:50:48:b0:d5:6c:bd:56:f1:ee:
         e1:48:fe:63:5b:68:a3:6c:f3:10:da:eb:1e:68:0a:65:d7:62:
         54:74:c2:a1:96:54:62:41:c6:09:67:78:b9:72:b3:41:58:81:
         11:98:3e:4a:09:96:ba:8a:15:a0:7e:80:08:4d:a5:f8:8d:0e:
         62:a7:43:49:4e:5a:a7:0e:df:fc:7c:7c:e7:37:b3:4a:62:ad:
         1e:8b:f6:59:7d:d1:10:f9:b0:ae:ba:fb:84:ab:e5:35:2d:59:
         25:98:43:3d:2b:1d:f7:26:66:24:06:65:1b:fe:b4:2a:b7:fe:
         ee:d7:90:b0:aa:45:99:f8:74:01:34:32:d7:1d:5f:53:ea:17:
         1f:66:d6:19:84:53:46:6b:c7:05:b4:a4:9c:63:7a:66:8a:fb:
         3b:08:72:f5:85:3b:1d:57:98:cf:b4:97:28:ca:83:a1:4f:c1:
         19:c4:09:95:60:56:bf:70:a5:fa:93:b9:61:10:d3:87:be:6e:
         8a:d2:3d:88:35:12:fa:2e:e2:d5:24:c6:fd:f2:03:ad:53:da:
         87:95:db:f5:d8:37:aa:db:2b:f0:3d:ae:e9:53:24:67:0e:85:
         8b:ee:89:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:11:49 2025 by rpki-client