Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/1/3230302e3133352e302e302f31362d3234203d3e203130373135.roa
File:                     3230302e3133352e302e302f31362d3234203d3e203130373135.roa (raw, json)
Hash identifier:          Vg8f2NiM5iI/kUE9pHmyib7M4pkU8uhwb/9yrNweaKE=
Subject key identifier:   51:9F:B0:6D:E6:5E:4F:9C:3D:66:CA:3B:08:12:B7:9D:2A:EB:4E:AE
Certificate issuer:       /CN=E566AB13DF19F2E8935CAFB119E40308D0A08146
Certificate serial:       5220AFEAA8212C942876FB9DFD8C5A6F57995817
Authority key identifier: E5:66:AB:13:DF:19:F2:E8:93:5C:AF:B1:19:E4:03:08:D0:A0:81:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E566AB13DF19F2E8935CAFB119E40308D0A08146.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/1/3230302e3133352e302e302f31362d3234203d3e203130373135.roa
Signing time:             Wed 05 Mar 2025 20:25:51 +0000
ROA not before:           Wed 05 Mar 2025 20:20:51 +0000
ROA not after:            Wed 04 Mar 2026 20:25:51 +0000
asID:                     10715
IP address blocks:        200.135.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/1/E566AB13DF19F2E8935CAFB119E40308D0A08146.crl
                          rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/1/E566AB13DF19F2E8935CAFB119E40308D0A08146.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E566AB13DF19F2E8935CAFB119E40308D0A08146.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 20:09:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:20:af:ea:a8:21:2c:94:28:76:fb:9d:fd:8c:5a:6f:57:99:58:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E566AB13DF19F2E8935CAFB119E40308D0A08146
        Validity
            Not Before: Mar  5 20:20:51 2025 GMT
            Not After : Mar  4 20:25:51 2026 GMT
        Subject: CN=519FB06DE65E4F9C3D66CA3B0812B79D2AEB4EAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:08:7e:80:13:cb:26:56:73:cc:10:64:48:92:
                    22:8d:eb:06:2e:7c:60:76:04:71:23:5f:0c:dc:8e:
                    52:b4:07:36:30:94:c9:f2:72:fc:33:a3:0b:9b:fd:
                    d1:61:d3:86:86:17:8f:46:3a:8a:fd:c2:c6:b4:7a:
                    06:b6:f1:4c:df:d5:d9:a0:75:58:c5:41:ed:41:36:
                    b3:51:86:e7:cf:1f:fa:15:3d:c3:c5:c2:5c:d7:6f:
                    ce:a2:88:b1:a8:cf:0a:76:e1:58:03:29:85:59:27:
                    11:93:e6:ea:6f:67:02:48:53:09:15:ca:24:1e:ef:
                    c5:42:88:fe:b8:1d:7b:75:08:2e:14:56:8f:3b:25:
                    3a:3d:f7:3b:bc:a5:f1:99:53:09:56:53:0c:d0:7a:
                    86:a5:e8:95:d7:59:a3:1e:28:96:e7:ee:60:f9:f0:
                    67:05:38:fc:37:aa:57:8f:6f:58:89:17:da:6e:4f:
                    ef:97:9c:23:9c:43:cc:b4:a8:23:60:6f:c8:65:16:
                    9c:16:92:6a:45:c2:fb:11:1e:42:06:f8:2c:ad:ee:
                    e2:63:0a:8a:2c:37:4d:dc:43:fd:ea:cd:ac:96:5e:
                    e0:51:42:07:4e:6c:6b:47:53:38:ec:3b:48:14:1b:
                    b8:06:52:28:38:c2:6f:46:2a:4f:2d:2b:3a:69:fd:
                    25:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:9F:B0:6D:E6:5E:4F:9C:3D:66:CA:3B:08:12:B7:9D:2A:EB:4E:AE
            X509v3 Authority Key Identifier:
                keyid:E5:66:AB:13:DF:19:F2:E8:93:5C:AF:B1:19:E4:03:08:D0:A0:81:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/1/E566AB13DF19F2E8935CAFB119E40308D0A08146.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E566AB13DF19F2E8935CAFB119E40308D0A08146.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/1/3230302e3133352e302e302f31362d3234203d3e203130373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.135.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         45:f7:37:4d:15:ac:90:e4:b8:01:1d:eb:93:4c:be:39:40:d5:
         a9:a4:e5:8a:64:73:8d:47:43:cd:6a:84:1b:ce:45:18:2d:d5:
         d4:94:ce:7c:d4:a0:82:89:be:92:d9:63:f8:27:99:7f:ad:e3:
         23:ff:29:33:0b:6a:b2:5e:06:f3:d8:ae:a9:1d:7c:0e:4b:15:
         5b:88:18:cf:e6:0b:73:58:f6:0a:8f:52:de:09:f5:cf:57:09:
         8f:82:e5:d4:c2:74:c1:c5:1c:7d:c1:0d:c8:1f:a7:36:d4:5f:
         23:fb:c1:31:9d:1e:cd:0e:bb:c3:ac:c0:a3:c0:5a:09:22:37:
         09:c1:3d:8a:ce:ad:cc:21:ee:c6:bb:bd:c5:bb:ad:47:64:1b:
         51:86:3b:11:1e:16:ca:a7:b0:e2:29:c8:15:52:cb:11:3f:08:
         97:b8:0a:57:10:b9:d1:0c:bb:6a:db:b7:ae:a9:69:bc:5c:d4:
         6a:13:86:19:62:f0:3e:bb:3f:9f:75:44:87:05:39:e9:49:07:
         c5:73:7e:5d:76:e1:ff:9e:0e:9a:de:29:61:42:ad:a4:0c:d0:
         18:50:82:8f:c1:b0:24:2c:0a:a3:92:4c:08:2e:f8:a6:98:b4:
         97:11:68:3c:0d:61:78:78:f3:b4:53:2c:5b:9d:60:75:97:e2:
         36:c9:85:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:43:18 2025 by rpki-client