Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/3230302e3132342e37382e302f32342d3234203d3e20323733363633.roa
File:                     3230302e3132342e37382e302f32342d3234203d3e20323733363633.roa (raw, json)
Hash identifier:          WLkBW7CzdTFQJhaBOvD0DYj6mc/teYWNTAoajisOlPk=
Subject key identifier:   68:32:96:47:54:6E:C8:3D:97:1C:51:8A:32:92:37:7A:4C:E0:26:C3
Certificate issuer:       /CN=DB6439C65B7E8A3E95AE80C1F4BCFCBF86CB6C53
Certificate serial:       0114187BD2A3B6B55D4F1D6E6B94B6AA598A3D52
Authority key identifier: DB:64:39:C6:5B:7E:8A:3E:95:AE:80:C1:F4:BC:FC:BF:86:CB:6C:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB6439C65B7E8A3E95AE80C1F4BCFCBF86CB6C53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/3230302e3132342e37382e302f32342d3234203d3e20323733363633.roa
Signing time:             Fri 21 Mar 2025 19:04:26 +0000
ROA not before:           Fri 21 Mar 2025 18:59:26 +0000
ROA not after:            Fri 20 Mar 2026 19:04:26 +0000
asID:                     273663
IP address blocks:        200.124.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/DB6439C65B7E8A3E95AE80C1F4BCFCBF86CB6C53.crl
                          rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/DB6439C65B7E8A3E95AE80C1F4BCFCBF86CB6C53.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB6439C65B7E8A3E95AE80C1F4BCFCBF86CB6C53.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 23:10:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:14:18:7b:d2:a3:b6:b5:5d:4f:1d:6e:6b:94:b6:aa:59:8a:3d:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB6439C65B7E8A3E95AE80C1F4BCFCBF86CB6C53
        Validity
            Not Before: Mar 21 18:59:26 2025 GMT
            Not After : Mar 20 19:04:26 2026 GMT
        Subject: CN=68329647546EC83D971C518A3292377A4CE026C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:ac:ba:b9:cd:ec:b1:a0:26:c7:33:6a:11:c8:
                    b8:8b:36:24:15:1c:38:d4:02:cf:fe:fd:c8:5b:3d:
                    be:b5:36:51:d9:85:c1:b6:91:12:51:c3:c9:cd:e7:
                    5e:bd:12:37:ba:bf:d8:22:11:35:ab:c3:26:b9:21:
                    f8:24:97:ba:2d:e9:a3:89:10:5d:b2:20:9a:cf:9b:
                    45:11:94:f9:b0:f1:b7:9e:15:79:f6:68:9c:9b:e9:
                    fe:93:71:1e:98:b6:c0:de:df:ff:5f:7c:59:ac:b0:
                    49:24:74:7a:da:18:a7:69:01:6b:a5:dd:e8:7f:bf:
                    b3:3d:01:f1:d8:2d:ab:e7:4c:5d:e4:0a:ed:b1:38:
                    b7:4a:d7:ff:7b:14:0a:e8:b7:5c:e1:9f:d3:9a:86:
                    82:75:93:7a:2e:7e:db:9b:ee:21:e6:7a:28:04:55:
                    02:a0:04:bf:db:e6:4e:d4:1b:cf:72:42:3a:f2:47:
                    c5:51:8d:b8:52:81:a0:ac:24:a9:ca:6e:27:b5:0e:
                    27:58:16:72:87:eb:4d:ee:eb:3c:a4:37:a8:66:6b:
                    a6:1c:da:f5:a9:15:19:81:e2:05:68:fb:01:74:e9:
                    2c:bc:63:8e:d8:75:8a:9c:02:b5:08:67:55:b3:23:
                    4d:e9:42:6f:52:11:84:8a:cc:b5:7a:e2:44:d2:32:
                    e2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:32:96:47:54:6E:C8:3D:97:1C:51:8A:32:92:37:7A:4C:E0:26:C3
            X509v3 Authority Key Identifier:
                keyid:DB:64:39:C6:5B:7E:8A:3E:95:AE:80:C1:F4:BC:FC:BF:86:CB:6C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/DB6439C65B7E8A3E95AE80C1F4BCFCBF86CB6C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB6439C65B7E8A3E95AE80C1F4BCFCBF86CB6C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/3230302e3132342e37382e302f32342d3234203d3e20323733363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:4b:52:48:ad:62:d3:b0:09:6d:8b:e7:a4:c1:e1:ea:6e:c3:
         f6:e6:d7:8b:8c:21:69:e8:35:51:1f:fe:64:8c:70:a8:4f:9e:
         de:69:19:2c:50:70:17:46:dd:f7:03:10:b8:3e:3f:29:3e:aa:
         00:42:a8:b0:b0:11:15:ba:3a:c3:ba:6f:5a:ca:ad:1e:d1:87:
         19:4f:87:08:1b:0d:e4:3a:40:0f:73:30:1e:5e:2d:51:27:dc:
         2a:7f:59:1d:51:57:bd:21:8e:49:79:22:85:fe:98:00:cf:af:
         49:ac:15:9e:4a:f1:4a:5f:7e:ce:e5:94:e1:aa:15:0b:b2:62:
         bd:87:af:9f:a4:a5:a5:c2:26:03:84:c7:89:9b:6a:1f:b7:b0:
         79:fe:76:e0:9e:5f:94:a9:d3:c0:78:ab:22:47:29:99:51:97:
         de:12:08:4b:ea:56:72:f5:0c:55:d6:12:ec:f0:4d:40:61:87:
         b0:86:90:3f:ef:8a:10:0a:0d:66:15:6b:cb:e0:a1:f4:1a:5a:
         82:bb:d9:75:8c:9f:c6:f5:6a:57:ad:d7:06:b3:0a:3b:6f:19:
         0a:78:ab:1b:48:f5:4c:a3:6b:46:08:a6:07:74:ea:a5:40:4d:
         91:a3:cc:ae:39:57:a2:fa:98:b6:b3:f3:ca:0a:9a:72:3e:f9:
         c7:1e:9c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:42:26 2025 by rpki-client