Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/3230302e3231382e3234302e302f32302d3230203d3e203238353934.roa
File:                     3230302e3231382e3234302e302f32302d3230203d3e203238353934.roa (raw, json)
Hash identifier:          sbZEzgN0XLx/QazNnIoCz0MlsUOaVQ8g2fFtKM+k5NM=
Subject key identifier:   FB:6B:CD:A5:35:4E:F9:EB:04:AA:63:71:70:31:F9:5D:B2:81:2C:3B
Certificate issuer:       /CN=9C0B0F9C917C39C4E0A392991B6A86E0D4917406
Certificate serial:       39CE4EF8E03AD666F4A833BC4DB551ABFE338AD0
Authority key identifier: 9C:0B:0F:9C:91:7C:39:C4:E0:A3:92:99:1B:6A:86:E0:D4:91:74:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/3230302e3231382e3234302e302f32302d3230203d3e203238353934.roa
Signing time:             Thu 06 Mar 2025 01:39:17 +0000
ROA not before:           Thu 06 Mar 2025 01:34:17 +0000
ROA not after:            Thu 05 Mar 2026 01:39:17 +0000
asID:                     28594
IP address blocks:        200.218.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.crl
                          rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 16:59:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:ce:4e:f8:e0:3a:d6:66:f4:a8:33:bc:4d:b5:51:ab:fe:33:8a:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C0B0F9C917C39C4E0A392991B6A86E0D4917406
        Validity
            Not Before: Mar  6 01:34:17 2025 GMT
            Not After : Mar  5 01:39:17 2026 GMT
        Subject: CN=FB6BCDA5354EF9EB04AA63717031F95DB2812C3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f6:1c:98:32:38:aa:b2:ee:12:4e:fa:42:09:
                    50:5a:f0:b5:7f:5b:cd:8e:c8:28:e5:98:64:84:84:
                    31:38:08:0b:73:a3:a3:69:19:a7:eb:10:f6:9f:30:
                    d8:43:af:34:b1:d9:86:92:7a:2e:13:90:09:44:1f:
                    e5:b3:b2:59:8f:8a:3f:8b:86:86:73:1d:21:76:6b:
                    ea:1a:c3:af:e3:8f:47:0b:f1:f6:e1:72:aa:b5:22:
                    a8:ed:65:81:aa:c5:2c:ac:9a:2a:6f:ab:ad:34:42:
                    d3:9e:73:ed:03:e4:39:d3:1b:85:7b:6d:24:1d:8e:
                    bf:2b:00:c8:4c:81:db:16:23:09:93:b5:97:14:80:
                    b5:96:16:0f:c7:07:92:db:9c:39:ad:83:64:96:c1:
                    d6:57:75:21:6b:70:32:42:f6:ae:d9:76:67:c2:32:
                    1a:8f:5d:d6:a3:36:e6:52:3a:38:c4:a0:5b:61:26:
                    d2:71:0b:f2:75:7d:c3:ef:b6:d3:92:e6:5e:8a:4e:
                    80:15:f1:d0:d7:b1:a7:9b:a3:04:1b:cd:40:44:86:
                    63:1c:19:1b:b6:ad:66:9f:44:6c:6b:e5:b5:b5:94:
                    65:67:4d:43:c6:68:8d:51:16:b1:a0:59:4b:03:ff:
                    7b:0b:15:88:e3:62:1e:b4:de:92:16:e7:ec:b3:d3:
                    03:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:6B:CD:A5:35:4E:F9:EB:04:AA:63:71:70:31:F9:5D:B2:81:2C:3B
            X509v3 Authority Key Identifier:
                keyid:9C:0B:0F:9C:91:7C:39:C4:E0:A3:92:99:1B:6A:86:E0:D4:91:74:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/3230302e3231382e3234302e302f32302d3230203d3e203238353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.218.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2d:4a:58:e6:39:66:49:cb:76:2c:f4:76:5f:22:45:75:be:68:
         df:6c:01:85:2e:77:45:de:a1:ad:ee:d1:79:96:da:15:e5:34:
         fa:35:1b:38:cf:59:8f:05:9e:1a:47:b0:78:f5:eb:50:8b:ed:
         97:d6:cb:54:f6:cf:1e:b1:84:f0:fa:1c:ff:f9:9f:27:ec:00:
         c3:5c:a4:dd:1a:1c:d1:31:8c:7f:92:59:79:b1:6f:00:d0:0b:
         cb:4d:9d:86:48:9b:ee:19:dd:32:bb:de:f3:28:e3:0b:32:89:
         a2:67:79:a6:48:3e:d5:03:d7:e8:df:f0:0a:3b:69:a0:f2:a3:
         18:86:3a:6a:9f:6b:8e:32:de:5b:7c:ae:99:04:23:e1:de:52:
         1a:2d:4d:72:a6:3e:28:9e:68:2b:e6:f0:0a:59:7b:68:75:9f:
         b6:f7:dc:72:c5:44:71:32:4a:5c:21:37:4a:99:a3:50:2b:f4:
         19:66:13:a0:8d:d9:37:81:8d:90:e7:5a:28:23:2a:bb:36:a6:
         7b:d0:bb:9a:16:34:ae:d6:a9:c6:f4:ea:8d:6e:3c:d4:cb:e3:
         a4:77:f5:52:ce:1f:2f:1b:3b:9d:b2:a0:01:57:41:0a:8e:03:
         db:b5:b8:16:49:24:50:b2:42:e9:28:78:b7:4d:45:e8:61:36:
         06:d6:3d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 22:24:11 2025 by rpki-client