Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7sXNWVBBdYk7vZrBcBoTQ71ZAKGoiNsdJ9Y6tpGSA8PU/0/3230302e3132342e38302e302f32322d3234203d3e20323730323839.roa
File:                     3230302e3132342e38302e302f32322d3234203d3e20323730323839.roa (raw, json)
Hash identifier:          ghx6W3Rln864jjRrmE6EFYzYZLhgU3dFo/PGtUAYNwE=
Subject key identifier:   A6:03:E6:7D:FF:73:D2:42:14:35:C9:B7:C4:8E:8A:D3:3D:8E:F2:58
Certificate issuer:       /CN=EBB17130920CEE19020C0AB106B5591EC5B5060B
Certificate serial:       1ABF43A648CC8012A233659FB8E74AB9039A717D
Authority key identifier: EB:B1:71:30:92:0C:EE:19:02:0C:0A:B1:06:B5:59:1E:C5:B5:06:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBB17130920CEE19020C0AB106B5591EC5B5060B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7sXNWVBBdYk7vZrBcBoTQ71ZAKGoiNsdJ9Y6tpGSA8PU/0/3230302e3132342e38302e302f32322d3234203d3e20323730323839.roa
Signing time:             Fri 27 Dec 2024 21:37:43 +0000
ROA not before:           Fri 27 Dec 2024 21:32:43 +0000
ROA not after:            Fri 26 Dec 2025 21:37:43 +0000
asID:                     270289
IP address blocks:        200.124.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7sXNWVBBdYk7vZrBcBoTQ71ZAKGoiNsdJ9Y6tpGSA8PU/0/EBB17130920CEE19020C0AB106B5591EC5B5060B.crl
                          rsync://rpki-repo.registro.br/repo/7sXNWVBBdYk7vZrBcBoTQ71ZAKGoiNsdJ9Y6tpGSA8PU/0/EBB17130920CEE19020C0AB106B5591EC5B5060B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBB17130920CEE19020C0AB106B5591EC5B5060B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 01:19:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:bf:43:a6:48:cc:80:12:a2:33:65:9f:b8:e7:4a:b9:03:9a:71:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBB17130920CEE19020C0AB106B5591EC5B5060B
        Validity
            Not Before: Dec 27 21:32:43 2024 GMT
            Not After : Dec 26 21:37:43 2025 GMT
        Subject: CN=A603E67DFF73D2421435C9B7C48E8AD33D8EF258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:31:f9:eb:27:16:62:bb:ff:66:f5:1a:27:8c:
                    44:1e:8a:fc:dd:ae:b6:da:d6:3b:2d:01:10:15:a1:
                    1a:b2:75:ad:52:46:81:6b:39:22:c2:f2:ef:11:71:
                    4b:5f:1c:67:4a:a4:2c:94:d2:0b:da:e7:47:00:23:
                    2c:b5:b6:70:f5:7f:60:f9:d4:53:c4:f6:fa:cd:c4:
                    cd:c7:b5:2a:3e:d6:d5:e2:6b:dc:63:56:fd:8b:d9:
                    54:68:00:27:c8:df:ff:a3:3b:6d:73:8d:3f:55:48:
                    e7:a1:19:36:c1:f0:bd:92:bc:f6:2f:9b:17:11:14:
                    d1:f1:87:24:5a:bd:48:87:08:4a:5e:13:00:b5:4e:
                    7d:49:21:03:db:fe:c1:ee:5a:19:7b:3d:ab:26:51:
                    e2:52:97:20:48:b8:22:04:f3:a3:4f:75:17:6f:5b:
                    d3:3c:a8:13:06:03:a5:83:4a:91:55:e2:85:67:2f:
                    da:3e:92:9c:42:77:18:28:d2:68:b4:62:a8:4e:56:
                    22:a6:09:bd:e3:0a:38:7f:69:c2:4c:30:d8:cc:be:
                    3e:50:01:09:af:aa:04:fc:12:61:24:35:fb:a2:02:
                    dd:c9:75:fa:45:9c:08:25:e8:a0:0d:f8:f3:8a:ff:
                    35:9e:a6:05:c3:15:fb:f6:a8:eb:d0:4c:de:a1:52:
                    ef:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:03:E6:7D:FF:73:D2:42:14:35:C9:B7:C4:8E:8A:D3:3D:8E:F2:58
            X509v3 Authority Key Identifier:
                keyid:EB:B1:71:30:92:0C:EE:19:02:0C:0A:B1:06:B5:59:1E:C5:B5:06:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7sXNWVBBdYk7vZrBcBoTQ71ZAKGoiNsdJ9Y6tpGSA8PU/0/EBB17130920CEE19020C0AB106B5591EC5B5060B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBB17130920CEE19020C0AB106B5591EC5B5060B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7sXNWVBBdYk7vZrBcBoTQ71ZAKGoiNsdJ9Y6tpGSA8PU/0/3230302e3132342e38302e302f32322d3234203d3e20323730323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:99:5c:35:ba:ac:a9:d2:b0:3d:e9:91:de:a7:48:14:b6:c0:
         62:b5:a6:35:8b:5a:07:8c:ce:47:f2:4c:90:a8:74:9d:f0:40:
         3a:e6:46:62:a0:c9:91:c8:ea:e5:19:4a:b0:f1:eb:cb:75:03:
         06:e6:0c:d9:09:09:59:53:93:05:a0:bd:66:9b:49:74:a7:4a:
         42:08:4a:f9:ed:b6:2e:cf:5a:38:78:9e:a5:44:67:e1:64:56:
         eb:ed:04:65:00:9f:89:15:b7:d2:00:18:42:c1:0e:66:29:e0:
         8b:b0:42:38:5f:32:b8:36:87:0e:29:46:9a:9d:29:58:c9:c8:
         ed:41:72:77:1e:97:b7:92:9e:c6:a2:d2:b6:1b:6a:43:b4:9c:
         12:2d:fc:40:65:a1:a1:6b:63:7e:ee:59:f8:0d:6e:2a:be:89:
         0c:dd:8f:1b:cd:9a:9f:57:20:f3:d6:f8:7c:e8:fe:a1:96:92:
         c6:d6:1b:f2:61:fa:03:ee:b2:a4:0d:6f:ef:91:a8:3e:ed:0d:
         06:64:72:a4:3c:89:60:24:48:7d:57:dc:ee:f7:58:8a:fb:69:
         57:57:c1:87:ca:fa:70:8b:d8:e6:23:d3:12:09:b8:c8:2d:98:
         a6:6c:0e:e4:ed:7d:16:d3:0a:76:9e:b0:f9:77:8f:8d:02:80:
         27:03:ea:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:39:47 2025 by rpki-client