Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4CZrGZg4WdsWfCoNEMXwxQiimacnNKWyKiioH95x4fxD/0/3230302e3130362e3230302e302f32322d3234203d3e20323731323730.roa
File:                     3230302e3130362e3230302e302f32322d3234203d3e20323731323730.roa (raw, json)
Hash identifier:          GiKQqL7ujKBnzXeDzJt5XuiVEDPcPKkd9A+3aM+gVuc=
Subject key identifier:   5B:B0:69:B7:87:D1:69:EA:31:11:3C:DE:6D:07:B2:0A:F8:D3:E2:25
Certificate issuer:       /CN=E093E43EFCF4F6FBF1E53F145BC0B5A34A395773
Certificate serial:       6DBF91EF3770A9D8F73DF507ADCB6187CAE07E07
Authority key identifier: E0:93:E4:3E:FC:F4:F6:FB:F1:E5:3F:14:5B:C0:B5:A3:4A:39:57:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E093E43EFCF4F6FBF1E53F145BC0B5A34A395773.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4CZrGZg4WdsWfCoNEMXwxQiimacnNKWyKiioH95x4fxD/0/3230302e3130362e3230302e302f32322d3234203d3e20323731323730.roa
Signing time:             Fri 20 Dec 2024 22:12:14 +0000
ROA not before:           Fri 20 Dec 2024 22:07:14 +0000
ROA not after:            Fri 19 Dec 2025 22:12:14 +0000
asID:                     271270
IP address blocks:        200.106.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4CZrGZg4WdsWfCoNEMXwxQiimacnNKWyKiioH95x4fxD/0/E093E43EFCF4F6FBF1E53F145BC0B5A34A395773.crl
                          rsync://rpki-repo.registro.br/repo/4CZrGZg4WdsWfCoNEMXwxQiimacnNKWyKiioH95x4fxD/0/E093E43EFCF4F6FBF1E53F145BC0B5A34A395773.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E093E43EFCF4F6FBF1E53F145BC0B5A34A395773.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 14:43:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:bf:91:ef:37:70:a9:d8:f7:3d:f5:07:ad:cb:61:87:ca:e0:7e:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E093E43EFCF4F6FBF1E53F145BC0B5A34A395773
        Validity
            Not Before: Dec 20 22:07:14 2024 GMT
            Not After : Dec 19 22:12:14 2025 GMT
        Subject: CN=5BB069B787D169EA31113CDE6D07B20AF8D3E225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:2e:4c:4e:70:13:d1:2e:5e:6a:f0:19:fe:c9:
                    78:38:80:99:e4:e8:25:3b:03:46:b6:1f:4e:04:06:
                    55:46:16:b6:03:3c:73:bd:6b:04:6b:b3:2f:6f:e7:
                    35:93:28:47:65:80:8c:c9:2a:70:7b:fa:64:f8:30:
                    3b:0e:44:dc:30:f9:db:b4:f1:94:94:3e:21:e9:e4:
                    01:2d:66:08:6e:00:5d:03:d8:e5:f3:09:91:2d:05:
                    0e:4e:e9:c4:5a:c1:38:88:4d:01:95:b1:09:f2:27:
                    1a:85:04:ca:9e:3d:09:c6:74:14:4f:0b:8f:1d:48:
                    83:7d:b6:0f:41:b8:96:d1:e0:cb:d1:28:2e:c7:2b:
                    db:53:0f:53:f5:6d:84:04:3d:20:12:89:84:0f:a1:
                    78:59:1d:6b:55:ea:5c:14:27:7f:6e:ab:78:73:e9:
                    26:f4:16:10:66:ec:33:7b:e9:f5:31:15:c7:29:75:
                    f9:71:5c:c0:1a:6c:47:54:7f:9e:a1:8b:9f:63:f8:
                    1f:ba:1a:73:05:56:09:f2:5f:19:45:6e:ae:76:8a:
                    16:44:08:cc:dd:a6:b8:7e:c6:b8:93:ef:9b:d5:f8:
                    3f:38:73:14:1f:17:e6:ad:5e:0b:c4:bd:d4:31:1c:
                    cb:ec:28:8b:d8:4f:f7:f8:a0:ab:fc:a6:f2:47:91:
                    25:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:B0:69:B7:87:D1:69:EA:31:11:3C:DE:6D:07:B2:0A:F8:D3:E2:25
            X509v3 Authority Key Identifier:
                keyid:E0:93:E4:3E:FC:F4:F6:FB:F1:E5:3F:14:5B:C0:B5:A3:4A:39:57:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4CZrGZg4WdsWfCoNEMXwxQiimacnNKWyKiioH95x4fxD/0/E093E43EFCF4F6FBF1E53F145BC0B5A34A395773.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E093E43EFCF4F6FBF1E53F145BC0B5A34A395773.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4CZrGZg4WdsWfCoNEMXwxQiimacnNKWyKiioH95x4fxD/0/3230302e3130362e3230302e302f32322d3234203d3e20323731323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.106.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:05:00:33:b2:4d:65:23:89:d6:97:e6:06:e7:5b:9c:70:c0:
         64:f0:0c:81:ad:75:33:9c:24:07:7b:67:02:fb:ac:e5:37:b7:
         ec:df:37:9f:7d:37:ae:04:07:29:a4:c2:09:a8:e3:51:a2:07:
         48:93:c6:e8:86:b3:22:72:4c:15:64:f0:bf:b7:d1:7c:d7:e5:
         78:20:62:ac:14:ad:62:f7:28:73:75:3d:20:11:1c:64:5a:68:
         3b:55:cd:db:e5:ec:41:66:eb:75:79:9f:1e:40:f5:76:a4:01:
         bf:a1:1b:ee:d9:6e:60:ba:42:c6:e5:b0:cf:c3:68:64:dc:bc:
         7a:58:bf:a0:b1:f8:62:c0:5b:76:fb:62:a4:b8:69:4e:c9:0f:
         7b:83:7f:15:fe:73:cc:8b:5f:10:7e:0c:be:fb:cc:24:01:81:
         2f:ee:3f:09:c5:31:d4:65:90:41:22:18:1e:8d:1b:a3:f1:80:
         cf:37:3c:d7:27:f8:bb:56:54:99:66:aa:32:0d:5b:a0:43:e0:
         04:78:6e:93:b6:99:76:cf:86:3c:b0:f6:9c:c3:28:f8:8d:13:
         5f:c7:f7:d9:b8:9d:1a:6c:e7:5d:6e:86:e4:d0:c5:69:32:b2:
         4b:81:28:5c:a5:f6:49:a6:d9:39:4b:40:15:5c:09:5d:45:2d:
         87:fe:e6:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:11:13 2025 by rpki-client