Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/3230302e3231382e3234382e302f32342d3234203d3e203238353934.roa
File:                     3230302e3231382e3234382e302f32342d3234203d3e203238353934.roa (raw, json)
Hash identifier:          TuwMXJCyUKPAudVyli1/dQs9GLPS5IOSc5RoHoRECyw=
Subject key identifier:   CD:34:45:46:D5:1B:BD:90:B6:C4:F0:8A:61:A6:18:C8:99:3D:62:1B
Certificate issuer:       /CN=9C0B0F9C917C39C4E0A392991B6A86E0D4917406
Certificate serial:       349A8FEA2C569704A949764084D86292E712BA39
Authority key identifier: 9C:0B:0F:9C:91:7C:39:C4:E0:A3:92:99:1B:6A:86:E0:D4:91:74:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/3230302e3231382e3234382e302f32342d3234203d3e203238353934.roa
Signing time:             Thu 06 Mar 2025 01:39:20 +0000
ROA not before:           Thu 06 Mar 2025 01:34:20 +0000
ROA not after:            Thu 05 Mar 2026 01:39:20 +0000
asID:                     28594
IP address blocks:        200.218.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.crl
                          rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 16:59:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:9a:8f:ea:2c:56:97:04:a9:49:76:40:84:d8:62:92:e7:12:ba:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C0B0F9C917C39C4E0A392991B6A86E0D4917406
        Validity
            Not Before: Mar  6 01:34:20 2025 GMT
            Not After : Mar  5 01:39:20 2026 GMT
        Subject: CN=CD344546D51BBD90B6C4F08A61A618C8993D621B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:50:ff:55:5f:28:27:9d:99:be:5e:39:e6:29:
                    15:a1:a4:c6:08:a2:1b:6e:b4:d2:cd:7a:10:b1:ff:
                    91:b7:92:09:0d:8f:3c:1e:4c:ba:c4:3e:3f:4b:62:
                    79:dd:c9:d9:6e:9b:b6:ff:72:84:6d:70:54:b7:a2:
                    9c:ed:c3:3e:79:08:fd:99:08:c6:e7:ac:f0:0d:fa:
                    26:12:39:7f:cd:cd:cc:14:6d:3b:99:7c:db:8b:91:
                    5d:71:5c:39:74:2e:23:23:35:b4:03:ce:73:15:68:
                    f3:fb:82:7d:0f:6e:2a:1e:cd:ba:ee:b0:60:03:b4:
                    72:9c:ba:e9:ae:48:b8:d4:1c:bb:ca:f3:5d:35:b7:
                    01:b3:92:3f:8c:4a:ec:52:d8:a0:57:3f:a0:df:51:
                    ae:e3:9a:9f:01:06:be:a9:c8:7d:76:9c:b8:17:11:
                    8a:7d:91:4a:2e:9b:92:cb:7f:3c:ae:f4:18:80:d5:
                    5e:8d:a6:2d:a0:06:d5:f0:3c:31:89:c3:58:eb:1b:
                    26:62:8c:5e:ed:91:14:96:48:3c:27:b1:f2:43:b9:
                    b9:5e:7d:8b:c3:f2:bf:bb:c7:72:1e:db:d4:5e:6d:
                    61:10:02:af:39:82:a5:58:fe:28:b5:f4:e6:0c:c3:
                    1f:5b:f8:8b:f4:19:de:71:a8:99:3a:b6:e7:4b:65:
                    05:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:34:45:46:D5:1B:BD:90:B6:C4:F0:8A:61:A6:18:C8:99:3D:62:1B
            X509v3 Authority Key Identifier:
                keyid:9C:0B:0F:9C:91:7C:39:C4:E0:A3:92:99:1B:6A:86:E0:D4:91:74:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/3230302e3231382e3234382e302f32342d3234203d3e203238353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.218.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:7c:82:3d:70:13:68:14:74:f9:03:c9:3f:69:99:5b:b5:b2:
         35:11:ec:71:b0:28:fa:97:23:bd:69:e9:ba:da:02:17:ce:19:
         8f:02:54:77:18:32:63:00:d8:57:aa:1f:91:63:ee:20:2a:6a:
         42:eb:2e:65:dc:27:a3:fb:c0:e5:6c:d1:d9:f9:81:1f:bd:f0:
         6b:96:99:eb:32:f0:07:70:10:ab:bf:62:9e:5f:1f:1f:97:9a:
         1a:a2:98:11:21:43:fa:17:0c:7d:02:0d:33:f1:96:10:45:e7:
         63:ab:ca:26:8c:da:c7:7c:04:15:49:cb:bb:ef:6f:c6:27:31:
         f8:a9:f4:e6:42:4c:91:7e:87:5d:81:64:a0:4e:07:18:9e:8c:
         79:c1:7d:47:b5:25:66:59:71:51:93:40:e5:d8:f5:7a:58:67:
         5b:7f:71:6b:2a:0a:c8:b8:03:e0:bc:e0:fe:f0:6c:aa:ab:cf:
         af:a1:3d:98:09:8f:ae:e3:90:4f:a0:87:be:f7:14:16:09:b2:
         be:ef:00:fb:a0:55:b7:82:3e:9f:dc:1a:eb:b6:04:7e:f6:3e:
         c9:9b:97:81:b5:b4:88:0d:5d:a5:51:c4:3c:64:45:6c:a7:90:
         c5:5e:9d:3b:42:73:7b:73:3a:cc:4a:24:e6:47:59:67:ec:75:
         59:96:11:1a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNJqP6ixWlwSpSXZAhNhikucSujkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUMwQjBGOUM5MTdDMzlDNEUwQTM5Mjk5MUI2QTg2RTBE
NDkxNzQwNjAeFw0yNTAzMDYwMTM0MjBaFw0yNjAzMDUwMTM5MjBaMDMxMTAvBgNV
BAMTKENEMzQ0NTQ2RDUxQkJEOTBCNkM0RjA4QTYxQTYxOEM4OTkzRDYyMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpUP9VXygnnZm+XjnmKRWhpMYI
ohtutNLNehCx/5G3kgkNjzweTLrEPj9LYnndydlum7b/coRtcFS3opztwz55CP2Z
CMbnrPAN+iYSOX/NzcwUbTuZfNuLkV1xXDl0LiMjNbQDznMVaPP7gn0Pbioezbru
sGADtHKcuumuSLjUHLvK8101twGzkj+MSuxS2KBXP6DfUa7jmp8BBr6pyH12nLgX
EYp9kUoum5LLfzyu9BiA1V6Npi2gBtXwPDGJw1jrGyZijF7tkRSWSDwnsfJDuble
fYvD8r+7x3Ie29RebWEQAq85gqVY/ii19OYMwx9b+Iv0Gd5xqJk6tudLZQUnAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUzTRFRtUbvZC2xPCKYaYYyJk9YhswHwYDVR0j
BBgwFoAUnAsPnJF8OcTgo5KZG2qG4NSRdAYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTNqampURGZVQWVSQ3FSd1lKNkZNcjlCb3l5dWNVOGNpd25QSzRNaEx5
d3ovMi85QzBCMEY5QzkxN0MzOUM0RTBBMzkyOTkxQjZBODZFMEQ0OTE3NDA2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlDMEIwRjlDOTE3QzM5QzRF
MEEzOTI5OTFCNkE4NkUwRDQ5MTc0MDYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzUzampqVERmVUFlUkNxUndZSjZGTXI5Qm95eXVjVThjaXduUEs0TWhMeXd6LzIv
MzIzMDMwMmUzMjMxMzgyZTMyMzQzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzgzNTM5MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADI2vgwDQYJKoZIhvcNAQELBQADggEBAIN8gj1w
E2gUdPkDyT9pmVu1sjUR7HGwKPqXI71p6braAhfOGY8CVHcYMmMA2FeqH5Fj7iAq
akLrLmXcJ6P7wOVs0dn5gR+98GuWmesy8AdwEKu/Yp5fHx+XmhqimBEhQ/oXDH0C
DTPxlhBF52OryiaM2sd8BBVJy7vvb8YnMfip9OZCTJF+h12BZKBOBxiejHnBfUe1
JWZZcVGTQOXY9XpYZ1t/cWsqCsi4A+C84P7wbKqrz6+hPZgJj67jkE+gh773FBYJ
sr7vAPugVbeCPp/cGuu2BH72Psmbl4G1tIgNXaVRxDxkRWynkMVenTtCc3tzOsxK
JOZHWWfsdVmWERo=
-----END CERTIFICATE-----
Generated at Wed Apr 16 22:24:11 2025 by rpki-client