Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/3230302e3233332e39362e302f31392d3234203d3e203232363839.roa
File:                     3230302e3233332e39362e302f31392d3234203d3e203232363839.roa (raw, json)
Hash identifier:          CWxXCizT/sGGFyRdmzMd6l1uxPwS5W3vy8fArrmwFAI=
Subject key identifier:   7F:07:D9:1D:91:18:16:8E:30:A0:89:F0:07:DF:72:59:C5:FD:BB:B2
Certificate issuer:       /CN=B6DD0286E17B756E91475332E495995F85C36F08
Certificate serial:       1AB488134CC9F3DE86E48F4764FAF5C2D4E2356B
Authority key identifier: B6:DD:02:86:E1:7B:75:6E:91:47:53:32:E4:95:99:5F:85:C3:6F:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DD0286E17B756E91475332E495995F85C36F08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/3230302e3233332e39362e302f31392d3234203d3e203232363839.roa
Signing time:             Fri 07 Mar 2025 02:18:07 +0000
ROA not before:           Fri 07 Mar 2025 02:13:07 +0000
ROA not after:            Fri 06 Mar 2026 02:18:07 +0000
asID:                     22689
IP address blocks:        200.233.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/B6DD0286E17B756E91475332E495995F85C36F08.crl
                          rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/B6DD0286E17B756E91475332E495995F85C36F08.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DD0286E17B756E91475332E495995F85C36F08.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 01:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:b4:88:13:4c:c9:f3:de:86:e4:8f:47:64:fa:f5:c2:d4:e2:35:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6DD0286E17B756E91475332E495995F85C36F08
        Validity
            Not Before: Mar  7 02:13:07 2025 GMT
            Not After : Mar  6 02:18:07 2026 GMT
        Subject: CN=7F07D91D9118168E30A089F007DF7259C5FDBBB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d2:d8:30:d9:a3:38:00:5e:77:6e:53:db:fd:
                    dc:f2:b7:b3:3d:d1:41:f1:bb:b6:84:84:bb:db:0a:
                    d4:5c:05:95:24:c4:fc:d0:61:b2:9e:fd:77:06:44:
                    77:73:c9:97:ef:a8:cc:56:e9:e1:78:9c:5c:6c:ed:
                    05:e8:cc:eb:bc:14:de:59:1c:e6:5a:a1:71:99:34:
                    78:0a:38:3e:2e:81:c2:94:86:aa:79:92:9b:cf:f4:
                    f9:6b:74:ef:ed:31:0a:6b:40:83:67:7c:63:85:64:
                    a1:37:20:c9:26:b0:c6:f4:7a:0c:40:cc:a2:ed:6a:
                    3f:13:fc:b2:37:c2:de:7d:ce:b5:00:14:99:1d:ae:
                    9c:cc:3b:35:24:b2:f6:a1:87:1e:a3:49:67:84:65:
                    b3:76:05:f1:22:53:16:b6:b0:5e:0e:5a:f9:6c:f4:
                    1c:65:cb:0e:84:ee:84:47:c7:2b:cc:22:74:e5:5e:
                    62:b0:d5:dc:b4:7e:2e:33:43:e7:a5:d2:9a:0b:38:
                    1c:b1:28:5c:00:f0:57:79:c3:97:97:7a:e2:2a:e6:
                    20:9b:17:7a:08:3e:04:48:c0:47:5c:bf:7a:70:40:
                    91:b7:7c:74:73:e1:a8:3e:3a:7f:69:35:24:6b:23:
                    4e:ff:11:48:33:88:b0:8f:9c:e3:50:e1:22:4e:b1:
                    9f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:07:D9:1D:91:18:16:8E:30:A0:89:F0:07:DF:72:59:C5:FD:BB:B2
            X509v3 Authority Key Identifier:
                keyid:B6:DD:02:86:E1:7B:75:6E:91:47:53:32:E4:95:99:5F:85:C3:6F:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/B6DD0286E17B756E91475332E495995F85C36F08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DD0286E17B756E91475332E495995F85C36F08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/3230302e3233332e39362e302f31392d3234203d3e203232363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.233.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         98:3b:f9:9a:fd:e2:c6:c7:54:89:4a:3e:c3:e0:7c:5b:a7:6e:
         31:c6:f8:ea:33:0b:44:f1:60:1a:4a:3c:ba:59:16:0f:6c:64:
         0f:23:f6:02:7c:d8:ae:95:9f:8c:82:be:71:51:8f:62:44:68:
         37:58:58:84:d2:cd:6f:21:3f:00:fa:37:58:10:a3:e8:1c:29:
         9c:bb:e0:5e:d7:6e:b4:de:51:5e:29:81:63:22:e6:e1:f8:09:
         7b:7e:51:5e:4f:2b:86:a0:99:fb:c8:5d:54:80:75:58:4f:da:
         19:7e:69:9a:5c:88:cc:4c:30:12:35:b4:4f:63:9c:0c:6d:ed:
         fa:01:7d:a4:75:fe:bb:7e:c1:81:ed:2e:c4:3e:42:da:ce:c9:
         28:66:0e:ed:e9:51:28:93:d2:71:4b:15:dd:41:f0:e3:2c:e2:
         9a:24:11:ae:ea:52:6f:5b:aa:93:22:b1:f1:36:44:5d:8f:17:
         85:75:c4:cb:0d:ac:8b:b1:89:0d:b1:8c:6d:ac:84:a4:09:3c:
         65:12:59:1b:b4:e9:99:52:97:a5:40:a4:58:bb:ca:2c:99:85:
         5b:1f:ca:f0:b9:87:d8:fd:70:44:93:59:8b:df:2e:51:5f:77:
         3e:3b:83:88:0d:f0:47:aa:56:ee:6e:a6:d6:68:09:33:42:b6:
         47:a4:fd:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:52:20 2025 by rpki-client