Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3230302e3232302e3132382e302f32312d3231203d3e203237363933.roa
File:                     3230302e3232302e3132382e302f32312d3231203d3e203237363933.roa (raw, json)
Hash identifier:          btvY+XWm2z9C9iWYoEZMGpqFSyQv4kL8gI4fOPyMlks=
Subject key identifier:   DD:D8:8D:3F:E4:40:09:1C:41:04:1E:16:8E:41:C4:B4:19:B2:AE:12
Certificate issuer:       /CN=3345439099C79C13F583D2238E3BB7D0D60D6877
Certificate serial:       4A290C3A61AC4264F0B65809393DC8A1A31566A8
Authority key identifier: 33:45:43:90:99:C7:9C:13:F5:83:D2:23:8E:3B:B7:D0:D6:0D:68:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3230302e3232302e3132382e302f32312d3231203d3e203237363933.roa
Signing time:             Tue 22 Oct 2024 14:30:15 +0000
ROA not before:           Tue 22 Oct 2024 14:25:15 +0000
ROA not after:            Tue 21 Oct 2025 14:30:15 +0000
asID:                     27693
IP address blocks:        200.220.128.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.crl
                          rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 08:39:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:29:0c:3a:61:ac:42:64:f0:b6:58:09:39:3d:c8:a1:a3:15:66:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3345439099C79C13F583D2238E3BB7D0D60D6877
        Validity
            Not Before: Oct 22 14:25:15 2024 GMT
            Not After : Oct 21 14:30:15 2025 GMT
        Subject: CN=DDD88D3FE440091C41041E168E41C4B419B2AE12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:77:04:04:ff:f0:0f:12:e3:d5:df:69:3c:89:
                    3c:b1:22:7a:a3:30:75:cb:c1:c4:22:7e:c4:d1:ca:
                    c0:a3:10:22:b0:26:ee:a2:6b:4a:43:7f:0a:45:87:
                    22:1b:03:e7:94:66:4f:04:63:93:97:96:61:cf:8e:
                    b6:bb:82:2a:30:58:42:2e:2d:19:53:2b:eb:b7:4c:
                    c4:dd:61:b9:50:67:c3:c8:80:41:f6:19:f5:bc:39:
                    3d:24:02:e0:0a:12:29:4f:e7:6c:b0:b0:3e:ab:cc:
                    d4:4e:4f:d2:9b:3c:c0:dd:05:da:2f:01:27:df:47:
                    d7:d6:37:48:19:5e:b0:84:39:f0:6e:8f:7b:35:2f:
                    13:48:84:97:74:8a:bb:4f:51:4c:22:f2:6b:71:21:
                    cc:1f:42:3e:8d:d8:c3:d8:75:7e:19:aa:a6:7f:93:
                    24:d5:39:ab:48:71:fc:35:1c:4d:20:bf:bf:a2:ba:
                    ab:9c:01:12:82:be:e2:38:1c:22:a7:8f:27:08:e9:
                    1b:44:d6:2e:de:50:67:ee:15:65:71:c7:31:91:e5:
                    42:b6:63:22:f2:08:91:cc:e0:b4:9b:0b:c8:e8:b7:
                    3d:a4:8d:80:cf:3b:af:b1:4d:ef:64:a0:7b:2c:80:
                    7b:5c:1e:0b:e4:80:5c:26:e0:6f:2a:38:2f:bc:68:
                    21:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:D8:8D:3F:E4:40:09:1C:41:04:1E:16:8E:41:C4:B4:19:B2:AE:12
            X509v3 Authority Key Identifier:
                keyid:33:45:43:90:99:C7:9C:13:F5:83:D2:23:8E:3B:B7:D0:D6:0D:68:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3230302e3232302e3132382e302f32312d3231203d3e203237363933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.220.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         55:61:07:dc:f4:8e:30:9c:dc:06:0f:fa:88:00:7d:41:c9:4f:
         9c:10:a1:87:87:55:42:d7:fa:b9:3d:0a:56:bb:0d:d0:ed:af:
         d0:8e:c8:9e:20:b2:b3:42:79:51:7e:96:40:00:9a:de:db:3d:
         87:fc:7f:e3:de:85:a4:cb:7e:0c:e4:57:ac:9d:0c:55:4d:6d:
         3f:b4:cd:34:56:78:cd:3f:9d:05:3c:40:7e:39:3b:66:05:d4:
         de:d8:a0:4d:40:28:75:8b:2b:ba:24:19:b0:80:b9:25:40:ec:
         b4:bf:ee:46:75:50:f1:b5:ac:12:50:6c:37:3c:ae:c4:4d:da:
         b3:26:e4:ea:dc:f5:33:66:ba:61:e8:73:47:db:8b:7e:2a:48:
         67:c0:c7:5f:3b:05:da:99:fc:b5:35:f3:af:25:45:a2:03:9a:
         e5:e4:fd:f5:34:7c:2a:c9:ea:b4:31:a7:9c:ab:7e:30:f6:37:
         6a:ca:bb:36:ff:7f:73:3e:8e:6e:5d:13:b8:a9:98:cd:c3:90:
         a3:5e:a3:26:a4:67:ab:34:ee:3f:75:36:b2:22:88:3c:3e:47:
         d1:6f:1e:d1:8c:ad:b3:de:b4:84:65:81:4d:6c:23:7d:4a:cb:
         1f:9b:45:ec:72:53:13:0c:60:ee:bb:bd:5e:93:f7:e3:ed:91:
         1c:52:50:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:15 2025 by rpki-client