Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5rPnxZKYhRqLixy6HaCw1PnFnNCHHDvqas77NzbRajJS/1/3230302e38302e3130342e302f32322d3234203d3e20323731323835.roa
File:                     3230302e38302e3130342e302f32322d3234203d3e20323731323835.roa (raw, json)
Hash identifier:          Urz/wdbHILR1f/MOA+bOHI7wYWyHCIoi+pb+vzL+0yU=
Subject key identifier:   19:DD:91:33:40:9A:7A:4E:83:EC:7A:7B:CD:35:18:9A:9C:6D:BB:3B
Certificate issuer:       /CN=D477F47EB674BB270E21D1DF467090789AFE23F1
Certificate serial:       62F0E64731140E7DC6E91DB7F58D30C132BC029F
Authority key identifier: D4:77:F4:7E:B6:74:BB:27:0E:21:D1:DF:46:70:90:78:9A:FE:23:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D477F47EB674BB270E21D1DF467090789AFE23F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5rPnxZKYhRqLixy6HaCw1PnFnNCHHDvqas77NzbRajJS/1/3230302e38302e3130342e302f32322d3234203d3e20323731323835.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     271285
IP address blocks:        200.80.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5rPnxZKYhRqLixy6HaCw1PnFnNCHHDvqas77NzbRajJS/1/D477F47EB674BB270E21D1DF467090789AFE23F1.crl
                          rsync://rpki-repo.registro.br/repo/5rPnxZKYhRqLixy6HaCw1PnFnNCHHDvqas77NzbRajJS/1/D477F47EB674BB270E21D1DF467090789AFE23F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D477F47EB674BB270E21D1DF467090789AFE23F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 03:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:f0:e6:47:31:14:0e:7d:c6:e9:1d:b7:f5:8d:30:c1:32:bc:02:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D477F47EB674BB270E21D1DF467090789AFE23F1
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=3082010A0282010100D4DC4F2695F79F02484E5D37F95C7300F97A0301E7BEFA60B8691CE4DB4C9181214D8934F074591C7C40C1825622B2A8335C07A6182AC8BBE49476686955DDB3EC7DFE1B566A346860EB95988F1AB07865F1360081CC47D1A99AEECFCEF5BB22269717658267E9FAB4D4C4D32596BEBB76EDFD1D4EFE5A30BCA134239497F9549EA00366B4FAC08F8B07B60222CAAB16B520BC6D75B580C183254CB550925154846C646118F006FB6300A6CB4C2CA6A6F5ED7AA28EE200839EDEE5C0D8B8560048149D47E71DEE1A34417BF0E9B4BB0A71A47F8F30F47D11F3E707919501C36DB347B1FD77265762964DFB0CAA78073883D1357242A5188086519D1F092A64910203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:dc:4f:26:95:f7:9f:02:48:4e:5d:37:f9:5c:
                    73:00:f9:7a:03:01:e7:be:fa:60:b8:69:1c:e4:db:
                    4c:91:81:21:4d:89:34:f0:74:59:1c:7c:40:c1:82:
                    56:22:b2:a8:33:5c:07:a6:18:2a:c8:bb:e4:94:76:
                    68:69:55:dd:b3:ec:7d:fe:1b:56:6a:34:68:60:eb:
                    95:98:8f:1a:b0:78:65:f1:36:00:81:cc:47:d1:a9:
                    9a:ee:cf:ce:f5:bb:22:26:97:17:65:82:67:e9:fa:
                    b4:d4:c4:d3:25:96:be:bb:76:ed:fd:1d:4e:fe:5a:
                    30:bc:a1:34:23:94:97:f9:54:9e:a0:03:66:b4:fa:
                    c0:8f:8b:07:b6:02:22:ca:ab:16:b5:20:bc:6d:75:
                    b5:80:c1:83:25:4c:b5:50:92:51:54:84:6c:64:61:
                    18:f0:06:fb:63:00:a6:cb:4c:2c:a6:a6:f5:ed:7a:
                    a2:8e:e2:00:83:9e:de:e5:c0:d8:b8:56:00:48:14:
                    9d:47:e7:1d:ee:1a:34:41:7b:f0:e9:b4:bb:0a:71:
                    a4:7f:8f:30:f4:7d:11:f3:e7:07:91:95:01:c3:6d:
                    b3:47:b1:fd:77:26:57:62:96:4d:fb:0c:aa:78:07:
                    38:83:d1:35:72:42:a5:18:80:86:51:9d:1f:09:2a:
                    64:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:DD:91:33:40:9A:7A:4E:83:EC:7A:7B:CD:35:18:9A:9C:6D:BB:3B
            X509v3 Authority Key Identifier:
                keyid:D4:77:F4:7E:B6:74:BB:27:0E:21:D1:DF:46:70:90:78:9A:FE:23:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5rPnxZKYhRqLixy6HaCw1PnFnNCHHDvqas77NzbRajJS/1/D477F47EB674BB270E21D1DF467090789AFE23F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D477F47EB674BB270E21D1DF467090789AFE23F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5rPnxZKYhRqLixy6HaCw1PnFnNCHHDvqas77NzbRajJS/1/3230302e38302e3130342e302f32322d3234203d3e20323731323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.80.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a8:90:6a:14:1a:2b:ec:30:7d:2e:d6:de:c2:53:00:36:b9:f6:
         0b:e9:6c:b3:29:d4:9d:6a:0a:df:0c:4f:86:0a:0e:ad:86:50:
         ed:c6:4b:66:8b:d3:39:c8:b2:33:fc:2c:84:60:8a:7e:40:e4:
         f5:1e:7f:15:9e:51:3f:a7:5b:d0:a6:0e:bb:22:54:0e:3f:df:
         65:1c:88:07:92:21:43:45:d6:f9:2c:02:48:72:05:0d:b9:7f:
         8d:8f:77:b3:59:52:ac:79:8c:b3:26:9f:c8:e6:a5:e6:3a:31:
         1a:c2:f3:d2:29:63:40:1f:9f:5c:16:e6:9e:7b:90:d8:0a:6d:
         8c:59:ac:2b:a7:33:00:e0:9a:8e:37:78:2d:31:a5:22:84:ce:
         0a:54:b4:6e:50:52:58:de:30:88:0c:51:57:55:8b:39:e4:49:
         44:aa:f1:26:9e:fe:66:09:e4:f7:7b:29:20:6c:76:5d:0f:23:
         a9:d8:c0:c6:40:63:36:2a:9f:d5:d7:0a:be:7a:1d:2b:6a:93:
         48:07:7f:6b:af:5a:b2:e0:f7:11:b4:c9:f7:c7:d2:a3:93:35:
         fb:3e:51:cd:bc:9c:52:b9:81:92:74:c1:31:41:99:4f:b2:53:
         9d:c6:d4:c6:34:26:66:93:ef:14:6c:7b:42:a5:cd:56:51:75:
         c1:2c:1b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:04:00 2025 by rpki-client