Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Fu1oSuxFbpWNebutrwk1rJ5stcyt4ZRfdSKttek7yEb/0/3230302e31312e3132322e302f32342d3234203d3e20323730343339.roa
File:                     3230302e31312e3132322e302f32342d3234203d3e20323730343339.roa (raw, json)
Hash identifier:          H8m6M6iqo27llTCNxbcG4SJR6xpvey+QpiZo5eYlD8o=
Subject key identifier:   7F:E7:77:A8:DF:A3:DE:3A:7B:B5:C9:37:52:A8:D7:3A:2C:97:B1:C8
Certificate issuer:       /CN=140350F9D3C4A05BA90C9FCF9A5C6D0FE2DC98BC
Certificate serial:       036F65C73276A7CA407514BD0A0AE5C720B17AFB
Authority key identifier: 14:03:50:F9:D3:C4:A0:5B:A9:0C:9F:CF:9A:5C:6D:0F:E2:DC:98:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/140350F9D3C4A05BA90C9FCF9A5C6D0FE2DC98BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Fu1oSuxFbpWNebutrwk1rJ5stcyt4ZRfdSKttek7yEb/0/3230302e31312e3132322e302f32342d3234203d3e20323730343339.roa
Signing time:             Tue 07 May 2024 14:04:52 +0000
ROA not before:           Tue 07 May 2024 13:59:52 +0000
ROA not after:            Tue 06 May 2025 14:04:52 +0000
asID:                     270439
IP address blocks:        200.11.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6Fu1oSuxFbpWNebutrwk1rJ5stcyt4ZRfdSKttek7yEb/0/140350F9D3C4A05BA90C9FCF9A5C6D0FE2DC98BC.crl
                          rsync://rpki-repo.registro.br/repo/6Fu1oSuxFbpWNebutrwk1rJ5stcyt4ZRfdSKttek7yEb/0/140350F9D3C4A05BA90C9FCF9A5C6D0FE2DC98BC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/140350F9D3C4A05BA90C9FCF9A5C6D0FE2DC98BC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 05:10:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:6f:65:c7:32:76:a7:ca:40:75:14:bd:0a:0a:e5:c7:20:b1:7a:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=140350F9D3C4A05BA90C9FCF9A5C6D0FE2DC98BC
        Validity
            Not Before: May  7 13:59:52 2024 GMT
            Not After : May  6 14:04:52 2025 GMT
        Subject: CN=7FE777A8DFA3DE3A7BB5C93752A8D73A2C97B1C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:eb:27:5b:21:5e:a6:c3:df:67:47:a4:39:7f:
                    89:72:7e:b6:2e:bd:78:82:b5:02:a7:1f:7e:48:ab:
                    60:09:00:af:99:77:cf:57:9b:5b:64:5e:e9:ce:d3:
                    b2:a0:7b:ab:13:bb:f9:cd:1b:42:e6:03:0d:23:a1:
                    fb:bb:5b:1c:45:9b:5c:fa:de:a2:a2:b3:c3:44:4b:
                    52:bf:08:f6:29:6d:a9:3b:3f:d5:b1:63:92:74:e1:
                    31:f3:d0:b0:f9:f3:5c:cc:63:b8:c6:b9:0b:31:40:
                    28:23:74:82:24:aa:0a:50:fa:02:1a:2d:45:6b:3b:
                    89:9e:42:63:1e:2a:a8:12:7a:f1:c8:29:01:f9:f6:
                    90:db:6e:f1:4c:ef:e3:c8:a5:07:c3:df:e4:78:5f:
                    ca:b2:e3:d8:d5:49:ca:31:a3:cb:66:85:eb:32:b6:
                    c5:bd:af:9b:f7:d5:1e:48:d7:a2:40:b7:5e:0a:fa:
                    39:5d:84:1e:32:80:b6:22:3d:92:c3:92:c3:c5:4b:
                    5b:9f:07:fb:44:b8:ab:48:03:f8:f2:37:99:76:11:
                    f3:c7:c8:79:02:3f:44:28:3a:b9:43:e7:dc:13:42:
                    df:4a:54:23:8a:14:cd:2e:da:0b:52:5e:f0:04:e3:
                    b7:18:4a:2e:36:de:3b:a5:71:40:ee:81:9b:3c:03:
                    0e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:E7:77:A8:DF:A3:DE:3A:7B:B5:C9:37:52:A8:D7:3A:2C:97:B1:C8
            X509v3 Authority Key Identifier:
                keyid:14:03:50:F9:D3:C4:A0:5B:A9:0C:9F:CF:9A:5C:6D:0F:E2:DC:98:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Fu1oSuxFbpWNebutrwk1rJ5stcyt4ZRfdSKttek7yEb/0/140350F9D3C4A05BA90C9FCF9A5C6D0FE2DC98BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/140350F9D3C4A05BA90C9FCF9A5C6D0FE2DC98BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Fu1oSuxFbpWNebutrwk1rJ5stcyt4ZRfdSKttek7yEb/0/3230302e31312e3132322e302f32342d3234203d3e20323730343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.11.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:85:79:be:00:1c:0e:a7:06:fc:49:a2:f2:e4:ce:44:31:ea:
         6d:dc:9b:f9:47:1d:2f:d4:2a:25:66:ab:b3:a4:1b:60:d2:18:
         43:d0:96:69:fe:d9:07:31:31:da:c8:39:f4:38:61:7a:71:ce:
         87:2e:e8:e3:5b:fe:8f:0a:92:a4:cb:0f:e4:67:f5:ee:67:a5:
         aa:4d:3e:45:32:eb:0e:7b:dd:49:24:1c:70:0d:8c:0d:9c:22:
         36:b2:55:22:0b:49:2a:13:d3:77:73:36:26:9a:12:f2:54:71:
         52:8c:9d:b2:ad:6a:29:c6:d9:b3:cc:7e:6f:da:35:9c:74:a2:
         d9:98:8a:c0:18:1f:9b:22:8e:24:b4:c4:82:6e:42:db:2f:5d:
         1a:a9:37:b9:e6:cc:5b:28:05:02:c6:e2:7a:17:7d:8d:e4:7c:
         c4:f1:ed:21:11:72:c8:e0:9c:79:64:df:5c:d8:da:28:c2:78:
         c5:dd:1a:d6:b3:de:8d:7c:ed:59:c9:20:88:b5:be:d0:d4:71:
         a3:e6:bd:2b:c9:d0:fa:42:09:9d:db:3d:cc:00:30:a1:9e:c3:
         45:f9:c9:7b:01:58:77:28:08:6e:5d:0b:10:0f:c7:76:24:bb:
         16:19:5f:f1:e1:ae:c6:9a:82:ec:72:69:17:12:05:14:cf:68:
         ce:2d:20:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:35:52 2025 by rpki-client