Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/3230312e3135302e3132352e302f32342d3234203d3e203631383736.roa
File:                     3230312e3135302e3132352e302f32342d3234203d3e203631383736.roa (raw, json)
Hash identifier:          olfmdUmhJC1CaZ7MofhJNQmuDctq8XDZmX9em4IJdnE=
Subject key identifier:   C7:A4:1F:89:90:77:08:77:20:32:53:39:D1:53:A0:08:7F:19:C0:BD
Certificate issuer:       /CN=4FD2257689EE83DB094839D2005FC336CC9380AC
Certificate serial:       6FE8D0F9298EF286CF28995BE452478FF0B1E2C7
Authority key identifier: 4F:D2:25:76:89:EE:83:DB:09:48:39:D2:00:5F:C3:36:CC:93:80:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FD2257689EE83DB094839D2005FC336CC9380AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/3230312e3135302e3132352e302f32342d3234203d3e203631383736.roa
Signing time:             Tue 21 Jan 2025 16:49:57 +0000
ROA not before:           Tue 21 Jan 2025 16:44:57 +0000
ROA not after:            Tue 20 Jan 2026 16:49:57 +0000
asID:                     61876
IP address blocks:        201.150.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/4FD2257689EE83DB094839D2005FC336CC9380AC.crl
                          rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/4FD2257689EE83DB094839D2005FC336CC9380AC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FD2257689EE83DB094839D2005FC336CC9380AC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 09:03:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:e8:d0:f9:29:8e:f2:86:cf:28:99:5b:e4:52:47:8f:f0:b1:e2:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FD2257689EE83DB094839D2005FC336CC9380AC
        Validity
            Not Before: Jan 21 16:44:57 2025 GMT
            Not After : Jan 20 16:49:57 2026 GMT
        Subject: CN=C7A41F899077087720325339D153A0087F19C0BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1c:45:01:ff:ee:25:24:4a:1a:63:ab:70:db:
                    ad:f3:63:0d:91:0f:0f:51:7a:d6:34:2c:77:4c:cb:
                    6d:72:f0:13:b5:00:13:18:79:4e:9c:62:ef:d1:5a:
                    99:4d:aa:42:53:1a:fb:f3:69:bb:95:d5:ca:0e:c3:
                    b9:2e:86:c2:10:e7:e9:33:57:f6:fd:52:fd:f5:63:
                    b8:20:e3:ca:25:7a:1b:18:3c:39:f4:db:58:f8:7f:
                    2b:18:5d:fc:05:8b:ce:04:6b:30:1d:b9:44:a5:8f:
                    9e:8c:24:e6:42:04:e3:0b:24:a4:3b:f4:d3:d7:9b:
                    47:ce:0c:88:64:9f:1a:74:ec:eb:04:5d:b6:b5:5e:
                    fe:ef:ed:bb:d4:66:9d:06:90:7f:8e:31:e8:67:12:
                    c2:51:bb:e8:c7:e9:e9:4a:1c:3e:b9:db:ad:fb:da:
                    62:f8:5f:a5:78:63:7a:97:2f:26:15:2c:e9:93:c1:
                    3c:38:f7:da:2f:6f:43:29:ae:33:4b:65:88:fb:0c:
                    d3:42:6c:7d:6d:ed:0f:42:4d:b0:84:e8:b7:ba:09:
                    87:9b:2d:07:a7:7f:2c:82:3e:d3:ea:f3:d2:d1:31:
                    91:1e:b6:89:ae:46:47:86:1f:5c:0f:9b:11:1e:e2:
                    2a:e0:41:41:4b:a4:c1:17:6f:a0:47:50:03:c0:a1:
                    79:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:A4:1F:89:90:77:08:77:20:32:53:39:D1:53:A0:08:7F:19:C0:BD
            X509v3 Authority Key Identifier:
                keyid:4F:D2:25:76:89:EE:83:DB:09:48:39:D2:00:5F:C3:36:CC:93:80:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/4FD2257689EE83DB094839D2005FC336CC9380AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FD2257689EE83DB094839D2005FC336CC9380AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/3230312e3135302e3132352e302f32342d3234203d3e203631383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.150.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:c4:1b:c3:93:c4:c5:9f:d2:01:8a:a7:ac:8f:3b:c6:77:f0:
         76:4e:18:30:37:fb:a4:2b:d6:f3:a7:81:80:e0:46:31:49:10:
         0b:84:42:e7:84:fe:89:b7:55:76:b7:84:65:ba:50:f8:19:d7:
         98:82:de:db:03:29:3b:19:51:c8:3e:58:80:f5:c5:67:7e:24:
         46:37:24:2a:2d:6a:dd:29:1d:0b:4e:f5:5d:17:e0:a9:ff:8d:
         bb:5c:71:12:72:42:33:06:a1:25:40:b2:b2:d3:07:30:39:11:
         a1:2a:16:10:68:bd:c1:5d:0a:1c:cd:ae:bd:c6:0a:1c:65:ff:
         a5:f3:45:6b:57:65:98:7f:91:0d:f5:16:37:b3:76:73:b9:60:
         a8:2c:c2:3d:3e:62:3f:76:7d:c7:d4:65:8a:5c:cc:f8:fd:e8:
         8e:f1:f4:c2:ec:47:74:fa:53:3c:23:0f:6a:7b:49:f1:91:ca:
         e1:fa:27:c7:ce:71:4a:a5:a7:ef:1b:47:85:7a:5c:f8:49:a6:
         aa:a3:93:05:bd:b3:fa:8f:c5:bb:24:8e:fc:9d:78:c5:9e:b0:
         ea:41:50:f1:ea:7d:e2:2e:62:52:1f:7f:b9:a7:74:9f:5a:f3:
         8b:ae:aa:2a:7b:74:d6:f4:94:6b:8f:fc:ca:de:d6:3d:37:2b:
         96:2f:8f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:53:04 2025 by rpki-client