Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5j2sxcqboioC1nVdd14d6Q887bPycniW9bve1RDwo8UG/1/3230302e3134322e3233322e302f32322d3234203d3e20323730363837.roa
File:                     3230302e3134322e3233322e302f32322d3234203d3e20323730363837.roa (raw, json)
Hash identifier:          nUPpKoItqpEyjinJBeeCzTNMCas5LcqGJ6N2j7L4vrU=
Subject key identifier:   4D:CB:02:16:D3:6B:D5:9A:2B:B5:C3:D6:32:1A:A1:EB:8B:4F:A0:8E
Certificate issuer:       /CN=F5BCA176884EEB5ECB0A2A512AAB32CA462590C9
Certificate serial:       52472B3296C94FC5BF881CF67A8510275FAA056E
Authority key identifier: F5:BC:A1:76:88:4E:EB:5E:CB:0A:2A:51:2A:AB:32:CA:46:25:90:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5BCA176884EEB5ECB0A2A512AAB32CA462590C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5j2sxcqboioC1nVdd14d6Q887bPycniW9bve1RDwo8UG/1/3230302e3134322e3233322e302f32322d3234203d3e20323730363837.roa
Signing time:             Thu 06 Mar 2025 11:13:57 +0000
ROA not before:           Thu 06 Mar 2025 11:08:57 +0000
ROA not after:            Thu 05 Mar 2026 11:13:57 +0000
asID:                     270687
IP address blocks:        200.142.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5j2sxcqboioC1nVdd14d6Q887bPycniW9bve1RDwo8UG/1/F5BCA176884EEB5ECB0A2A512AAB32CA462590C9.crl
                          rsync://rpki-repo.registro.br/repo/5j2sxcqboioC1nVdd14d6Q887bPycniW9bve1RDwo8UG/1/F5BCA176884EEB5ECB0A2A512AAB32CA462590C9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5BCA176884EEB5ECB0A2A512AAB32CA462590C9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 14 Jun 2025 11:21:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:47:2b:32:96:c9:4f:c5:bf:88:1c:f6:7a:85:10:27:5f:aa:05:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5BCA176884EEB5ECB0A2A512AAB32CA462590C9
        Validity
            Not Before: Mar  6 11:08:57 2025 GMT
            Not After : Mar  5 11:13:57 2026 GMT
        Subject: CN=4DCB0216D36BD59A2BB5C3D6321AA1EB8B4FA08E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:14:18:b3:25:12:10:68:d5:8c:1e:d5:5e:3c:
                    74:04:c0:a8:0e:1c:5f:87:27:d6:c1:a6:a9:3e:66:
                    ff:0e:69:01:34:21:98:ce:b0:62:92:8c:55:42:4b:
                    dc:d6:8b:54:94:85:3f:06:58:24:f1:43:fa:39:4f:
                    17:35:71:c7:c3:a3:6c:0a:5d:dd:2b:c0:2f:e1:70:
                    79:2a:49:d6:1d:16:65:21:a7:42:7e:e1:2a:96:c4:
                    f5:96:8e:d8:a9:d5:7a:80:fb:f2:f0:56:15:7d:3c:
                    7b:b3:b9:b0:b2:3b:e5:6d:b8:e2:b2:86:69:69:f8:
                    06:04:2c:d6:23:4b:fd:7d:dd:0b:69:8c:a8:3e:1d:
                    5b:09:05:87:67:38:cc:e6:3c:17:52:53:58:29:f2:
                    4c:4e:86:ee:be:5a:eb:b3:6e:c3:8a:52:e6:b8:4c:
                    31:e8:bd:f5:b3:2d:6f:8b:e7:87:9a:db:e2:c7:23:
                    5b:7b:13:06:bb:22:84:09:50:d2:23:41:90:b3:ff:
                    2b:61:88:4d:fd:cd:ae:b0:7f:40:17:47:41:1c:8a:
                    18:90:be:cc:84:aa:cc:46:49:1b:16:50:02:71:eb:
                    93:c6:ad:09:8c:27:5d:80:64:ac:62:de:08:49:b5:
                    dc:ae:18:b8:27:81:86:51:41:78:cd:3a:86:2a:6f:
                    f9:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:CB:02:16:D3:6B:D5:9A:2B:B5:C3:D6:32:1A:A1:EB:8B:4F:A0:8E
            X509v3 Authority Key Identifier:
                keyid:F5:BC:A1:76:88:4E:EB:5E:CB:0A:2A:51:2A:AB:32:CA:46:25:90:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5j2sxcqboioC1nVdd14d6Q887bPycniW9bve1RDwo8UG/1/F5BCA176884EEB5ECB0A2A512AAB32CA462590C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5BCA176884EEB5ECB0A2A512AAB32CA462590C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5j2sxcqboioC1nVdd14d6Q887bPycniW9bve1RDwo8UG/1/3230302e3134322e3233322e302f32322d3234203d3e20323730363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.142.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:31:72:1e:a9:e5:de:ae:fd:4e:a2:71:71:91:88:75:d1:82:
         4b:83:ce:b4:4f:58:f2:4c:28:b2:59:e6:18:41:b6:7b:2f:0f:
         90:ae:d0:f3:05:8f:30:f9:04:74:f2:af:60:df:f1:a9:09:53:
         80:94:bd:b8:2d:5e:67:b9:3a:75:cc:71:0f:e9:f0:43:6f:24:
         bc:d2:76:2a:d4:ad:58:f0:c1:f6:1e:3c:35:ed:07:53:b3:74:
         15:8a:88:dc:9d:1a:99:89:5f:a1:47:bd:e5:00:ee:50:87:51:
         f9:7a:b6:55:6a:0d:66:1c:7b:6e:68:34:47:ca:82:0e:25:bc:
         ef:de:6a:f7:79:e0:89:b9:83:e1:10:45:a5:1b:29:bc:92:40:
         87:dd:c5:ee:2f:57:71:b3:c6:43:1d:fc:5a:f1:23:97:fd:52:
         c9:42:b5:1d:42:ef:b0:22:3d:75:fb:e9:5e:63:e5:e4:83:b6:
         31:4c:2a:87:03:68:81:a5:1e:02:6a:67:78:5b:c0:14:50:d7:
         b0:58:87:62:8f:17:66:aa:96:a1:bf:ff:d4:2f:94:d9:0d:28:
         ea:b7:e8:d4:0e:d3:1a:04:73:e7:50:af:08:18:82:3f:7a:d6:
         34:8a:87:73:d4:2d:a2:35:24:fa:58:cb:1a:e9:48:2d:f7:bf:
         d6:8d:a9:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 14:54:26 2025 by rpki-client