Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3m69njKPmDVzoqWNJse1XMmuaqcFM8F5xqMGR8BZr4fo/1/3230302e392e3132332e302f32342d3234203d3e20323633353136.roa
File:                     3230302e392e3132332e302f32342d3234203d3e20323633353136.roa (raw, json)
Hash identifier:          DKN2JGdX7cSetzoeLCTIR74I/hbswzmppmSPlP4c0pE=
Subject key identifier:   27:EB:60:EF:9D:C6:E1:72:CD:9B:7E:48:7A:6D:19:2E:3F:DA:19:88
Certificate issuer:       /CN=6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1
Certificate serial:       757C94EC99121E575F267F48A991764B12A43B49
Authority key identifier: 6A:0F:81:CD:4B:DD:AA:53:C1:B0:93:1E:51:E8:B1:59:E0:2A:5C:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3m69njKPmDVzoqWNJse1XMmuaqcFM8F5xqMGR8BZr4fo/1/3230302e392e3132332e302f32342d3234203d3e20323633353136.roa
Signing time:             Thu 06 Mar 2025 12:00:07 +0000
ROA not before:           Thu 06 Mar 2025 11:55:07 +0000
ROA not after:            Thu 05 Mar 2026 12:00:07 +0000
asID:                     263516
IP address blocks:        200.9.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3m69njKPmDVzoqWNJse1XMmuaqcFM8F5xqMGR8BZr4fo/1/6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.crl
                          rsync://rpki-repo.registro.br/repo/3m69njKPmDVzoqWNJse1XMmuaqcFM8F5xqMGR8BZr4fo/1/6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 21:31:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:7c:94:ec:99:12:1e:57:5f:26:7f:48:a9:91:76:4b:12:a4:3b:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1
        Validity
            Not Before: Mar  6 11:55:07 2025 GMT
            Not After : Mar  5 12:00:07 2026 GMT
        Subject: CN=27EB60EF9DC6E172CD9B7E487A6D192E3FDA1988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:03:c6:75:2a:a4:b1:df:5d:d5:8b:39:12:02:
                    4d:9f:2c:3a:bd:48:29:9a:17:17:ea:17:82:bd:4b:
                    4b:bf:4f:a9:7a:0c:24:1c:af:70:ca:ed:d3:41:0c:
                    45:cf:86:24:9d:db:ea:e7:86:6c:e3:78:16:b2:75:
                    13:72:68:d3:9d:95:f6:be:89:9f:50:96:64:d3:62:
                    db:ee:cc:c6:62:3c:e2:57:d0:3f:e0:95:38:c4:f9:
                    b3:a8:6b:54:e5:c1:44:b5:58:f0:85:2b:7a:35:24:
                    dd:33:da:ad:69:e0:8f:be:5d:f4:d0:16:6b:b5:fc:
                    26:54:4b:66:88:38:a7:a6:a6:0d:44:00:0f:5a:f9:
                    b1:eb:c6:8a:bd:cf:ec:09:1e:f8:5a:76:86:d6:c6:
                    12:c6:7c:4b:47:89:c1:c8:9a:ee:75:55:75:04:55:
                    15:f3:f3:f4:52:55:8b:c9:5d:6d:15:41:e0:c2:13:
                    89:be:34:e6:8b:2c:f7:d2:ed:db:9e:23:52:cf:5e:
                    8e:5f:79:cc:99:20:3b:b4:16:c4:97:04:b8:81:1c:
                    a8:9e:31:a0:49:48:34:98:bd:30:c7:54:9b:55:61:
                    fd:d3:d6:92:82:da:64:c2:19:0c:a1:36:70:ad:c3:
                    16:8f:ab:4c:7a:ef:92:54:7f:c1:1f:2f:ed:a2:9b:
                    e2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:EB:60:EF:9D:C6:E1:72:CD:9B:7E:48:7A:6D:19:2E:3F:DA:19:88
            X509v3 Authority Key Identifier:
                keyid:6A:0F:81:CD:4B:DD:AA:53:C1:B0:93:1E:51:E8:B1:59:E0:2A:5C:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3m69njKPmDVzoqWNJse1XMmuaqcFM8F5xqMGR8BZr4fo/1/6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3m69njKPmDVzoqWNJse1XMmuaqcFM8F5xqMGR8BZr4fo/1/3230302e392e3132332e302f32342d3234203d3e20323633353136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:bd:68:94:41:f2:f5:15:4e:1f:e3:07:10:0e:7e:33:b2:f0:
         cb:71:14:b2:0d:2b:bd:73:7b:c6:6e:f6:c6:c9:70:83:1b:0c:
         1a:01:2f:3b:39:96:9e:38:60:e6:a0:4b:a7:e0:b7:c9:54:fb:
         9e:2e:fb:38:a0:ae:aa:ff:a5:81:78:5b:2b:5d:f2:d2:ee:53:
         60:d5:1b:62:a9:d0:10:0d:1c:30:85:b0:90:2b:9e:70:2d:c7:
         68:33:4b:3e:2f:24:84:1f:64:f5:3e:cf:96:10:84:51:95:b5:
         89:03:ba:14:f1:0a:30:75:7d:7c:0f:0a:6b:24:a4:24:78:19:
         8c:8f:9f:c4:d7:f0:7f:e4:ff:95:f4:ec:a2:e2:92:a7:e5:d1:
         c8:ed:fd:7c:cd:37:e9:b4:21:a0:89:39:2f:d5:1d:74:6d:ff:
         86:3a:7b:2b:c7:1a:66:05:58:da:61:8d:a4:36:e0:86:c3:91:
         98:a1:71:ec:c9:2b:60:eb:ea:18:31:2f:c2:32:fd:75:ac:a8:
         45:4a:5e:fc:52:b5:96:5b:bd:81:8e:65:36:dc:93:3d:7b:9b:
         d6:69:59:28:1c:d6:35:c6:ee:6e:f0:83:81:ab:c6:56:21:76:
         59:2e:cd:a9:5c:bb:eb:ba:54:a3:a7:c8:74:15:b3:51:c2:b3:
         60:99:d3:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 06:13:44 2025 by rpki-client