Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/2/3230302e35332e38362e302f32342d3234203d3e20323731323938.roa
File:                     3230302e35332e38362e302f32342d3234203d3e20323731323938.roa (raw, json)
Hash identifier:          3Xq4PcDxgYgCVHCpZ8L7emznYDwOuGHQ2dYoEV9fwaQ=
Subject key identifier:   8A:4F:E2:55:A4:4A:77:E2:03:5F:46:69:84:46:E9:99:5A:27:EF:60
Certificate issuer:       /CN=315DDEA82F4151678E22C7DE6D37282137387EEA
Certificate serial:       55FFEE3D4A04CF7D10150894CA5A353BAC7B4D3C
Authority key identifier: 31:5D:DE:A8:2F:41:51:67:8E:22:C7:DE:6D:37:28:21:37:38:7E:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/315DDEA82F4151678E22C7DE6D37282137387EEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/2/3230302e35332e38362e302f32342d3234203d3e20323731323938.roa
Signing time:             Wed 28 May 2025 16:05:31 +0000
ROA not before:           Wed 28 May 2025 16:00:31 +0000
ROA not after:            Wed 27 May 2026 16:05:31 +0000
asID:                     271298
IP address blocks:        200.53.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/2/315DDEA82F4151678E22C7DE6D37282137387EEA.crl
                          rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/2/315DDEA82F4151678E22C7DE6D37282137387EEA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/315DDEA82F4151678E22C7DE6D37282137387EEA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 12:56:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:ff:ee:3d:4a:04:cf:7d:10:15:08:94:ca:5a:35:3b:ac:7b:4d:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=315DDEA82F4151678E22C7DE6D37282137387EEA
        Validity
            Not Before: May 28 16:00:31 2025 GMT
            Not After : May 27 16:05:31 2026 GMT
        Subject: CN=8A4FE255A44A77E2035F46698446E9995A27EF60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:55:a3:8d:72:68:b8:53:a6:9f:7c:2e:b2:98:
                    78:ff:a2:8a:98:c4:ce:51:19:15:a4:a2:f9:0f:1d:
                    0e:84:a6:8a:40:58:24:ac:f9:b0:b1:4a:d7:bc:d7:
                    94:f6:a2:8c:82:11:d7:32:75:87:ee:61:7c:6d:9f:
                    85:b6:55:d9:c5:e3:b5:28:54:b1:a6:e7:02:b9:99:
                    8f:1e:0a:ae:6f:94:4e:71:57:0d:28:00:eb:d4:e9:
                    a3:05:4a:b7:5f:2a:cf:07:4a:c3:d2:4c:ba:8e:32:
                    5d:fd:44:ab:bf:ea:d6:98:a5:f8:3c:0f:8d:cd:33:
                    68:2e:50:50:bc:98:93:3d:22:0e:dd:56:df:81:3b:
                    12:4b:a5:8f:a0:aa:78:2f:c9:b4:0f:37:ff:d7:90:
                    7f:70:a1:7d:af:41:ee:6a:85:83:d1:f7:7e:4d:c0:
                    25:0d:ac:0b:79:4d:d8:96:c3:c9:9d:b7:87:f5:d5:
                    fd:fe:dd:93:34:75:15:18:74:88:aa:65:ae:7c:07:
                    90:6f:2f:8a:76:aa:cb:26:16:c9:cb:5a:3a:27:7c:
                    40:b8:bb:b2:1a:47:7f:52:35:58:a6:6a:12:5d:4c:
                    5e:db:5a:23:8a:fa:04:60:d1:6a:b6:75:0b:a9:41:
                    5a:33:a0:be:ca:92:84:4b:d1:1d:dd:03:1f:d8:db:
                    75:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:4F:E2:55:A4:4A:77:E2:03:5F:46:69:84:46:E9:99:5A:27:EF:60
            X509v3 Authority Key Identifier:
                keyid:31:5D:DE:A8:2F:41:51:67:8E:22:C7:DE:6D:37:28:21:37:38:7E:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/2/315DDEA82F4151678E22C7DE6D37282137387EEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/315DDEA82F4151678E22C7DE6D37282137387EEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/2/3230302e35332e38362e302f32342d3234203d3e20323731323938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:8a:47:84:5c:cb:c3:cd:c5:4d:2c:27:d6:81:0a:41:d1:e0:
         67:de:20:39:69:7b:d7:e5:b6:a7:9e:6f:97:91:bc:0a:8f:ba:
         01:ac:03:ac:62:7a:83:4d:4d:e5:4b:3d:d0:d1:4a:a1:d4:77:
         3f:c1:6f:5d:a5:60:37:f3:a4:17:82:ba:bb:b9:a7:d6:cb:46:
         e0:9a:f4:59:2b:1c:29:28:0c:00:c2:68:7d:91:68:4b:4d:3f:
         4e:30:9c:6b:e8:4d:59:c6:3a:95:15:d5:70:1b:08:cf:1b:17:
         60:f3:41:a9:c8:c4:d9:00:9f:91:ce:2b:f8:54:f7:6c:97:5d:
         23:f1:82:37:a3:ac:b8:c7:b9:36:9a:24:22:40:3d:4e:a9:2a:
         48:5f:8f:08:3e:53:a2:b4:56:96:0b:f9:bb:b4:97:bf:4f:d3:
         0b:27:c6:f2:e5:ac:cc:d9:e7:12:88:1b:10:20:29:a8:a4:d2:
         e1:7c:af:0a:af:71:e8:4f:bb:5d:0a:e9:71:8b:c0:f7:ee:ed:
         a7:78:6a:14:a5:c1:0e:45:97:54:db:46:67:e8:56:20:77:eb:
         45:af:10:a6:10:dc:ff:c9:38:57:0a:d8:f4:5b:5b:1e:09:23:
         7c:45:f9:70:7f:1e:60:25:73:be:78:79:59:9c:16:b0:4e:5d:
         cc:f8:33:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 20:21:34 2025 by rpki-client