Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/89YA5URBwzcfU7YpR6MXYz7UEWdJFmcqQFJJaMW5BSUg/0/3230302e33392e3133322e302f32322d3332203d3e20323730373537.roa
File:                     3230302e33392e3133322e302f32322d3332203d3e20323730373537.roa (raw, json)
Hash identifier:          gJP3oTUWiqnMddxf1H/NOKu8kxcjt4wNlCjPtjIfG0o=
Subject key identifier:   6B:B2:9A:C7:0F:1F:66:7A:CF:4B:85:0D:99:1C:5C:4C:30:82:C5:09
Certificate issuer:       /CN=E8B8CDA5314C0516CAAAB451F88C47B629DC4500
Certificate serial:       04473717FE66DF350C1B6281FF066AAC40CFB75E
Authority key identifier: E8:B8:CD:A5:31:4C:05:16:CA:AA:B4:51:F8:8C:47:B6:29:DC:45:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8B8CDA5314C0516CAAAB451F88C47B629DC4500.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/89YA5URBwzcfU7YpR6MXYz7UEWdJFmcqQFJJaMW5BSUg/0/3230302e33392e3133322e302f32322d3332203d3e20323730373537.roa
Signing time:             Fri 24 May 2024 13:12:38 +0000
ROA not before:           Fri 24 May 2024 13:07:38 +0000
ROA not after:            Fri 23 May 2025 13:12:38 +0000
asID:                     270757
IP address blocks:        200.39.132.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/89YA5URBwzcfU7YpR6MXYz7UEWdJFmcqQFJJaMW5BSUg/0/E8B8CDA5314C0516CAAAB451F88C47B629DC4500.crl
                          rsync://rpki-repo.registro.br/repo/89YA5URBwzcfU7YpR6MXYz7UEWdJFmcqQFJJaMW5BSUg/0/E8B8CDA5314C0516CAAAB451F88C47B629DC4500.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8B8CDA5314C0516CAAAB451F88C47B629DC4500.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 18 Feb 2025 15:48:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:47:37:17:fe:66:df:35:0c:1b:62:81:ff:06:6a:ac:40:cf:b7:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8B8CDA5314C0516CAAAB451F88C47B629DC4500
        Validity
            Not Before: May 24 13:07:38 2024 GMT
            Not After : May 23 13:12:38 2025 GMT
        Subject: CN=6BB29AC70F1F667ACF4B850D991C5C4C3082C509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d9:d9:08:18:77:dc:35:99:aa:ee:50:6d:03:
                    5d:70:c4:c0:c9:4d:61:69:d3:e8:c4:aa:9e:86:75:
                    71:4b:a1:1b:6a:b0:e3:e6:73:64:e1:1d:06:f0:44:
                    c9:ad:42:d5:16:5e:70:76:73:ef:24:61:d0:52:4f:
                    80:8f:fb:12:24:9d:5e:1d:1e:ec:ea:74:ea:f3:42:
                    f1:9f:a7:83:b3:03:17:02:95:6c:68:d3:c2:ef:83:
                    fe:30:83:f4:13:6e:1b:2c:8c:ea:d4:c3:8d:c5:67:
                    a9:fd:a8:81:e1:0b:a2:0a:79:9d:12:f9:57:e7:07:
                    af:f0:ad:7d:ae:4f:ec:45:3a:82:9c:d8:01:eb:22:
                    2e:94:18:43:51:94:e9:10:71:7a:d5:15:d9:16:96:
                    f9:13:e4:8a:56:d5:64:9c:8c:9d:b2:68:03:3a:32:
                    77:7b:93:fc:2e:3b:c4:c5:26:87:ff:55:df:9a:3b:
                    25:72:ee:d1:46:23:0f:02:18:60:33:79:92:ac:a1:
                    29:81:60:06:97:4a:1b:8e:67:4f:3c:2b:ff:dd:8f:
                    53:3e:fc:79:a3:37:eb:a4:87:de:7b:15:aa:fc:d8:
                    85:4a:31:11:31:09:dd:ba:32:2f:87:d1:c7:45:ec:
                    80:12:0a:e9:f8:5e:f7:91:41:8d:40:51:79:19:96:
                    3d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:B2:9A:C7:0F:1F:66:7A:CF:4B:85:0D:99:1C:5C:4C:30:82:C5:09
            X509v3 Authority Key Identifier:
                keyid:E8:B8:CD:A5:31:4C:05:16:CA:AA:B4:51:F8:8C:47:B6:29:DC:45:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/89YA5URBwzcfU7YpR6MXYz7UEWdJFmcqQFJJaMW5BSUg/0/E8B8CDA5314C0516CAAAB451F88C47B629DC4500.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8B8CDA5314C0516CAAAB451F88C47B629DC4500.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/89YA5URBwzcfU7YpR6MXYz7UEWdJFmcqQFJJaMW5BSUg/0/3230302e33392e3133322e302f32322d3332203d3e20323730373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:d3:d6:92:45:ec:a9:b5:b3:ee:82:b2:0a:66:44:f3:f1:fd:
         f3:8f:e4:08:56:a7:fa:89:12:21:29:0e:49:07:a6:ca:b3:ce:
         51:37:50:a5:eb:d2:8b:ae:54:66:10:44:14:8a:31:09:9d:35:
         28:ec:df:15:cc:99:19:8b:54:8f:d9:4e:6b:6d:7b:d4:e4:ec:
         a6:87:cb:98:5e:06:10:a5:95:f5:67:49:a0:b9:aa:06:08:d1:
         ca:5d:20:46:51:f2:ab:b5:02:19:d1:42:c0:bb:3a:25:d1:3f:
         59:a2:77:e4:6c:c5:f6:f8:e4:50:d6:30:e0:90:9b:08:3d:94:
         65:45:a6:e9:d5:95:9a:25:b1:19:85:ee:4e:73:e6:f9:36:fb:
         ae:0e:b3:28:bf:d9:10:e8:4e:6e:ab:9f:92:a3:a7:d4:55:66:
         14:c2:6b:ec:89:31:77:0d:51:4b:97:f0:7b:bb:60:6a:6b:9b:
         7d:0d:1c:74:89:3e:5b:f3:de:7f:a2:31:79:d7:20:ff:fc:2c:
         6d:70:06:c4:98:c7:05:05:38:3b:d3:91:3f:c8:0c:f3:18:21:
         1c:ea:8c:c1:cb:54:4b:29:e3:52:9b:75:dc:72:f8:55:45:5b:
         d8:c0:a1:5b:24:fc:e8:e0:c3:dd:a2:c6:4a:f9:20:e2:02:20:
         e6:ee:fc:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:43:16 2025 by rpki-client