Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/3230302e3139342e3234382e302f32312d3234203d3e203131343332.roa
File:                     3230302e3139342e3234382e302f32312d3234203d3e203131343332.roa (raw, json)
Hash identifier:          l0h4FhFco68e0IPGuP6PoWb4ljUkiLDw6cg5yswVQo8=
Subject key identifier:   18:DD:91:DB:95:0C:91:30:48:95:38:0E:0F:2A:8E:55:3E:7D:FE:A5
Certificate issuer:       /CN=1AB54A4F054E3BFD788BDC45FF1B6C7739BB9D76
Certificate serial:       0469497B044A656CA7E68F69C0E3056DF8865C3B
Authority key identifier: 1A:B5:4A:4F:05:4E:3B:FD:78:8B:DC:45:FF:1B:6C:77:39:BB:9D:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AB54A4F054E3BFD788BDC45FF1B6C7739BB9D76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/3230302e3139342e3234382e302f32312d3234203d3e203131343332.roa
Signing time:             Tue 21 Jan 2025 20:53:57 +0000
ROA not before:           Tue 21 Jan 2025 20:48:57 +0000
ROA not after:            Tue 20 Jan 2026 20:53:57 +0000
asID:                     11432
IP address blocks:        200.194.248.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/1AB54A4F054E3BFD788BDC45FF1B6C7739BB9D76.crl
                          rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/1AB54A4F054E3BFD788BDC45FF1B6C7739BB9D76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AB54A4F054E3BFD788BDC45FF1B6C7739BB9D76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 06:29:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:69:49:7b:04:4a:65:6c:a7:e6:8f:69:c0:e3:05:6d:f8:86:5c:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AB54A4F054E3BFD788BDC45FF1B6C7739BB9D76
        Validity
            Not Before: Jan 21 20:48:57 2025 GMT
            Not After : Jan 20 20:53:57 2026 GMT
        Subject: CN=18DD91DB950C91304895380E0F2A8E553E7DFEA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:1c:a8:33:1d:56:e6:f9:08:36:d1:2e:c0:9e:
                    70:0c:06:3b:d2:3c:14:57:81:89:e6:f3:bc:2f:13:
                    90:bb:8b:d9:f8:5d:ef:82:c3:f6:89:ce:92:e9:52:
                    bb:1a:76:f1:49:fa:2e:09:30:16:b2:fd:dc:f5:f6:
                    1f:fb:bc:6d:81:46:78:13:3e:e6:27:9e:e8:5f:66:
                    8c:f6:22:e4:c2:71:3e:2e:2a:9f:8e:2d:f8:a0:9d:
                    84:77:cf:0a:a5:b2:1c:7c:c1:24:d0:34:5c:8e:35:
                    f7:a3:9b:4a:5b:21:72:3e:b2:59:70:99:b2:6f:83:
                    28:14:49:36:7c:a1:6a:aa:f3:6c:32:b6:79:90:f2:
                    e5:6f:a1:11:0c:32:37:5d:29:1c:64:ff:d9:b5:37:
                    fc:9f:1f:34:88:d4:8b:6e:e1:12:7c:14:14:12:88:
                    3f:0f:5e:5e:23:36:48:0f:32:a8:0b:c3:e7:11:35:
                    52:ce:ac:0a:5d:18:5a:8a:13:89:bb:d2:f4:6f:c0:
                    e7:70:55:a8:e7:72:20:fc:50:49:95:cf:f6:36:9e:
                    32:0b:c0:35:7d:61:da:d2:4f:c4:a8:fb:60:0a:c8:
                    7f:3c:c8:38:1c:10:53:59:d4:3f:3f:2a:f5:e1:f9:
                    96:9d:f7:f7:47:56:f3:c2:bb:41:6c:46:5e:b8:1c:
                    f5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:DD:91:DB:95:0C:91:30:48:95:38:0E:0F:2A:8E:55:3E:7D:FE:A5
            X509v3 Authority Key Identifier:
                keyid:1A:B5:4A:4F:05:4E:3B:FD:78:8B:DC:45:FF:1B:6C:77:39:BB:9D:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/1AB54A4F054E3BFD788BDC45FF1B6C7739BB9D76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AB54A4F054E3BFD788BDC45FF1B6C7739BB9D76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/3230302e3139342e3234382e302f32312d3234203d3e203131343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.194.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         51:e2:0e:1d:34:19:c1:2c:61:d5:e4:17:61:89:37:0d:f0:1d:
         52:88:41:f1:5f:12:38:9d:de:23:48:44:46:ba:e9:ce:1e:1b:
         c6:ba:c6:c1:c3:b4:a9:91:48:5f:b3:4a:c0:e0:64:e1:57:af:
         10:19:77:6a:1f:af:9f:ed:7a:86:d3:2e:17:8c:c7:13:ff:c6:
         d9:23:d1:11:96:3e:8b:75:d4:82:48:94:c6:db:e6:9c:56:05:
         33:e9:6d:3a:51:19:f0:c3:d3:9d:2d:ec:72:00:25:b0:aa:f1:
         a0:1d:22:f9:5c:83:8f:19:9b:89:ba:d8:3e:5c:a9:37:3b:52:
         e3:d1:94:e7:cf:b3:1b:f2:88:02:9b:7d:e7:6c:4a:6b:db:45:
         4d:10:bd:9a:9a:40:42:f6:71:bb:ef:0f:02:d9:06:e1:fe:73:
         29:6f:c5:26:ca:1d:6e:5d:4b:b1:ef:56:1b:e0:25:25:b4:f5:
         1d:a5:12:f9:c0:d8:24:52:92:82:8b:80:21:6b:92:c5:e1:ea:
         b5:8d:09:0f:c6:49:e4:fc:43:65:fa:44:25:db:8c:d1:cd:96:
         e2:5c:2b:c3:78:3c:70:ac:b1:ae:37:de:63:80:52:c6:1f:7f:
         98:cf:e7:9d:96:ab:88:01:97:0e:6e:7b:c5:b1:9b:e6:82:ed:
         ac:e8:98:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:13:09 2025 by rpki-client