Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/3230302e3231352e3232342e302f32322d3234203d3e20323731333837.roa
File:                     3230302e3231352e3232342e302f32322d3234203d3e20323731333837.roa (raw, json)
Hash identifier:          YTM1XAv/OD93SsILdnNzUKEpAbR74AZ07GJy8WCe/qU=
Subject key identifier:   41:F9:9F:64:49:81:72:FA:CD:9A:59:E7:D4:F2:E2:08:4B:E9:3A:9A
Certificate issuer:       /CN=E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C
Certificate serial:       14B3B99AFA3347FBC72C5DEA76F986931029CFA3
Authority key identifier: E1:BA:EE:8C:47:55:5E:78:CA:DE:1F:AE:AA:82:C1:18:6C:DF:C1:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/3230302e3231352e3232342e302f32322d3234203d3e20323731333837.roa
Signing time:             Tue 11 Feb 2025 15:40:27 +0000
ROA not before:           Tue 11 Feb 2025 15:35:27 +0000
ROA not after:            Tue 10 Feb 2026 15:40:27 +0000
asID:                     271387
IP address blocks:        200.215.224.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C.crl
                          rsync://rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 14:54:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:b3:b9:9a:fa:33:47:fb:c7:2c:5d:ea:76:f9:86:93:10:29:cf:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C
        Validity
            Not Before: Feb 11 15:35:27 2025 GMT
            Not After : Feb 10 15:40:27 2026 GMT
        Subject: CN=41F99F64498172FACD9A59E7D4F2E2084BE93A9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a9:39:f7:8a:3c:21:5e:97:00:90:5d:3f:22:
                    32:8a:4f:5b:1e:16:81:0b:1f:1e:95:c5:19:83:1b:
                    b5:9d:2b:c8:67:8c:e9:56:e1:7c:5d:b7:91:5b:16:
                    54:f6:45:f2:cf:cc:45:e9:0e:57:bb:5a:3c:ec:89:
                    a3:91:21:0b:cd:3e:dd:7c:13:05:5b:02:41:7a:5b:
                    8e:bf:5e:93:7a:e2:22:fe:fc:e0:cf:44:14:fa:74:
                    2f:b2:20:ae:c3:bc:94:ae:77:36:b7:b5:15:7b:25:
                    10:54:c6:12:46:af:1d:33:47:73:5e:c6:dc:79:42:
                    31:7e:34:2d:5f:55:c5:03:79:80:27:ba:12:a8:93:
                    51:a4:12:b8:60:c2:07:94:cb:22:45:13:df:e7:df:
                    68:c7:2f:c9:66:54:25:ac:ed:59:53:83:9c:fb:65:
                    54:d8:ee:7a:4c:71:e7:9a:1f:56:ae:21:90:9e:b8:
                    98:79:0d:c0:41:1f:59:9b:ac:9c:bc:eb:c1:b0:50:
                    4b:a9:65:c6:64:67:c3:14:0f:10:b4:49:b4:1c:ac:
                    96:dc:ea:66:cb:1e:4b:85:e4:c5:af:63:dd:a1:55:
                    32:7b:01:c2:2e:d3:0a:9a:f3:3e:99:58:84:a5:49:
                    13:08:58:2a:84:97:b7:8f:48:a4:f3:bb:6f:7b:6f:
                    2f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:F9:9F:64:49:81:72:FA:CD:9A:59:E7:D4:F2:E2:08:4B:E9:3A:9A
            X509v3 Authority Key Identifier:
                keyid:E1:BA:EE:8C:47:55:5E:78:CA:DE:1F:AE:AA:82:C1:18:6C:DF:C1:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/3230302e3231352e3232342e302f32322d3234203d3e20323731333837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.215.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:47:44:82:d1:5a:46:e9:27:78:bc:d7:fb:7b:22:84:17:19:
         7b:9e:d8:de:e7:19:35:31:23:8d:1c:b5:46:87:8a:c0:d5:d6:
         ea:fa:76:24:1b:1e:aa:c3:b7:9f:1e:01:61:d6:a7:12:b7:ed:
         ef:e1:c4:9c:32:d6:b1:1a:d9:21:36:1c:e3:25:1b:fb:ed:ab:
         ae:51:42:64:20:0a:f8:4f:ee:43:aa:a4:93:70:79:46:f2:92:
         3c:82:6f:9a:9f:9c:fc:ab:62:49:1a:38:8d:50:2d:b1:6e:34:
         db:03:42:d6:e8:28:d9:6a:0c:4b:ac:6c:33:ce:20:af:6c:ca:
         0d:0d:e6:59:39:d6:52:bc:67:4e:68:c4:27:6a:94:a2:59:9f:
         23:af:8d:92:43:25:64:cd:04:9b:cb:4e:61:e0:96:ff:55:20:
         62:bf:3e:ff:50:88:5e:5e:ca:d3:0c:8a:96:c3:47:8f:ac:f1:
         36:b6:61:50:0e:46:4d:6c:0b:f7:fb:c4:83:67:98:de:61:83:
         84:ce:70:47:17:c3:2e:e1:d2:5c:a9:8f:61:e3:e9:a0:c7:02:
         e4:e3:f9:12:ea:0b:75:50:3e:ae:2d:6e:a2:cf:62:0f:04:f1:
         d4:01:69:d6:e5:e1:e1:4c:e5:19:f8:d7:b0:b1:73:02:28:da:
         84:2a:fc:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:29:43 2025 by rpki-client