Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/3230302e3231382e3234302e302f32342d3234203d3e203238353934.roa
File:                     3230302e3231382e3234302e302f32342d3234203d3e203238353934.roa (raw, json)
Hash identifier:          uj7xKWi0ikLz0ICk+QGsjDI5gJvpT/VqfceOaIDtRMg=
Subject key identifier:   FC:78:61:E1:C7:D2:9E:31:21:F7:26:78:36:A1:DC:ED:4A:14:83:CC
Certificate issuer:       /CN=9C0B0F9C917C39C4E0A392991B6A86E0D4917406
Certificate serial:       3896B9AD43941427BD1A8ACF5EE3142DD13241EE
Authority key identifier: 9C:0B:0F:9C:91:7C:39:C4:E0:A3:92:99:1B:6A:86:E0:D4:91:74:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/3230302e3231382e3234302e302f32342d3234203d3e203238353934.roa
Signing time:             Thu 06 Mar 2025 01:39:17 +0000
ROA not before:           Thu 06 Mar 2025 01:34:17 +0000
ROA not after:            Thu 05 Mar 2026 01:39:17 +0000
asID:                     28594
IP address blocks:        200.218.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.crl
                          rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 16:59:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:96:b9:ad:43:94:14:27:bd:1a:8a:cf:5e:e3:14:2d:d1:32:41:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C0B0F9C917C39C4E0A392991B6A86E0D4917406
        Validity
            Not Before: Mar  6 01:34:17 2025 GMT
            Not After : Mar  5 01:39:17 2026 GMT
        Subject: CN=FC7861E1C7D29E3121F7267836A1DCED4A1483CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f5:b3:bd:2a:84:c1:8f:68:f4:9d:74:74:7a:
                    33:6a:6f:65:82:47:19:c0:85:55:1d:54:58:0e:67:
                    e5:a2:bd:9f:06:aa:f3:5c:88:c9:24:3f:b7:f4:06:
                    c2:aa:5c:94:6e:9d:5e:e9:f0:fb:c9:20:d8:e2:f0:
                    b6:8e:10:dd:b3:61:5c:e1:c2:78:0f:07:b3:80:82:
                    73:13:5f:13:33:d9:45:61:49:de:25:a3:ca:36:a9:
                    f8:0d:4e:e5:c8:6c:2e:bb:81:79:be:b3:10:4e:56:
                    cc:d7:9a:cf:30:70:e9:10:18:4b:35:2a:a7:09:13:
                    e2:60:e4:bb:51:d6:1e:47:57:a7:6d:1e:d5:1e:3a:
                    db:aa:ee:1f:57:93:ba:93:5f:2c:07:5e:93:1d:5b:
                    ad:35:cc:f2:d6:d7:2a:32:c2:fe:87:0f:b3:09:a8:
                    a3:32:f0:c9:08:44:24:63:47:b9:7e:bb:b7:93:57:
                    a8:a9:f4:d6:33:eb:52:c7:43:f9:6c:d9:77:1a:ea:
                    d3:b1:ea:5c:5c:47:d8:eb:07:b7:84:1d:a7:50:56:
                    d2:f5:b9:b6:bf:f3:48:3d:c4:f8:e2:a4:d8:c9:18:
                    d8:b6:ef:a9:ab:55:fd:6f:b1:8a:6c:89:e4:db:8f:
                    96:8c:bb:9b:6d:c3:06:3d:11:58:59:97:48:5e:6c:
                    aa:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:78:61:E1:C7:D2:9E:31:21:F7:26:78:36:A1:DC:ED:4A:14:83:CC
            X509v3 Authority Key Identifier:
                keyid:9C:0B:0F:9C:91:7C:39:C4:E0:A3:92:99:1B:6A:86:E0:D4:91:74:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/3230302e3231382e3234302e302f32342d3234203d3e203238353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.218.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:ff:54:a0:9b:d6:25:28:a1:59:ea:71:3c:ba:af:fc:01:4d:
         77:65:48:b2:4d:af:36:2a:dc:24:9a:af:93:c9:11:c6:36:86:
         d5:d3:4a:e9:1b:41:44:0b:d9:11:30:6c:ed:93:29:54:c3:db:
         2e:73:f2:ea:0c:2a:9e:39:e5:7d:c6:77:95:b3:a6:78:06:02:
         39:ae:b7:7e:09:55:ac:2e:d2:14:f6:3c:ac:7e:7f:81:e7:2b:
         29:1b:a8:5f:36:e0:11:f1:d0:a9:c0:ef:d9:ca:c8:41:22:7b:
         49:36:d8:56:4b:d5:e5:a0:89:8b:ef:39:bf:58:74:f5:0b:cf:
         d2:53:c7:8a:f6:35:b0:03:d1:ea:e5:4d:59:80:8b:f1:05:1b:
         af:2a:74:56:5f:1d:07:89:7a:cc:af:c5:45:05:02:d0:e5:1a:
         11:9a:f4:a1:6c:1f:77:1d:18:72:36:d6:42:24:6e:32:4c:96:
         ff:0e:89:ce:9f:94:05:59:0a:eb:ee:55:51:57:4b:6b:de:28:
         06:3a:93:08:b4:22:32:74:32:f5:90:10:1b:05:44:78:cd:ba:
         8f:d6:ce:37:1e:d1:d5:82:d1:4c:8c:57:0e:cc:e1:c8:ab:83:
         1d:e7:a3:b2:11:a3:b6:e4:f2:41:c6:19:1e:4b:1d:1e:56:26:
         21:ee:78:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 22:21:32 2025 by rpki-client