Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e3133322e3234302e302f32312d3231203d3e2032373136.roa
File:                     3230302e3133322e3234302e302f32312d3231203d3e2032373136.roa (raw, json)
Hash identifier:          82TGTbK7O7oKzwiLXOYQMTwiPFCzMwtN6Twu454n4BM=
Subject key identifier:   5F:9B:A4:BE:E6:B4:98:36:3B:93:E6:82:36:A1:97:AA:D7:27:A1:39
Certificate issuer:       /CN=D54C376960A26972A0B767BDA084048DFFE3673E
Certificate serial:       1DE269ED9035CC5070D81316E2A73AEE9C4C744A
Authority key identifier: D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e3133322e3234302e302f32312d3231203d3e2032373136.roa
Signing time:             Wed 05 Mar 2025 19:00:03 +0000
ROA not before:           Wed 05 Mar 2025 18:55:03 +0000
ROA not after:            Wed 04 Mar 2026 19:00:03 +0000
asID:                     2716
IP address blocks:        200.132.240.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl
                          rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 19:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:e2:69:ed:90:35:cc:50:70:d8:13:16:e2:a7:3a:ee:9c:4c:74:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D54C376960A26972A0B767BDA084048DFFE3673E
        Validity
            Not Before: Mar  5 18:55:03 2025 GMT
            Not After : Mar  4 19:00:03 2026 GMT
        Subject: CN=3082010A0282010100C35F2A4E2DFEFB25BABE197CCE5F7E61D76EA823AFAE264E63740156808649BCADD6831CB0A8CC6E0E1E848762AECD9B28B0682E672B0126420B9E07420749ADD7D565BF5824DDF3093F932A53B3565B96E3B054108A55AC8E0CFFC04F0473459E06CFC63AC6D6F76A2AA44932912551DFFE98C6A258F7CF0DEB25DDA7EE0C7434F39CD9288447E709A8A2813456A6B573EB66EA36CE1804FCDBE6A732A5B24D8BEF95C6759C18503ACD5B63637A66A3572D9D9ED0C6BB6BBD1A7E4969090D369D4DB10F111B188CD0E5D5BB1944F49EA0F1F1F62B7B3974D3328B03DD260EAB34438AE56170291CC4B30FC17C9B8AEBF873775D34E04781D77AB8AA5CD291410203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5f:2a:4e:2d:fe:fb:25:ba:be:19:7c:ce:5f:
                    7e:61:d7:6e:a8:23:af:ae:26:4e:63:74:01:56:80:
                    86:49:bc:ad:d6:83:1c:b0:a8:cc:6e:0e:1e:84:87:
                    62:ae:cd:9b:28:b0:68:2e:67:2b:01:26:42:0b:9e:
                    07:42:07:49:ad:d7:d5:65:bf:58:24:dd:f3:09:3f:
                    93:2a:53:b3:56:5b:96:e3:b0:54:10:8a:55:ac:8e:
                    0c:ff:c0:4f:04:73:45:9e:06:cf:c6:3a:c6:d6:f7:
                    6a:2a:a4:49:32:91:25:51:df:fe:98:c6:a2:58:f7:
                    cf:0d:eb:25:dd:a7:ee:0c:74:34:f3:9c:d9:28:84:
                    47:e7:09:a8:a2:81:34:56:a6:b5:73:eb:66:ea:36:
                    ce:18:04:fc:db:e6:a7:32:a5:b2:4d:8b:ef:95:c6:
                    75:9c:18:50:3a:cd:5b:63:63:7a:66:a3:57:2d:9d:
                    9e:d0:c6:bb:6b:bd:1a:7e:49:69:09:0d:36:9d:4d:
                    b1:0f:11:1b:18:8c:d0:e5:d5:bb:19:44:f4:9e:a0:
                    f1:f1:f6:2b:7b:39:74:d3:32:8b:03:dd:26:0e:ab:
                    34:43:8a:e5:61:70:29:1c:c4:b3:0f:c1:7c:9b:8a:
                    eb:f8:73:77:5d:34:e0:47:81:d7:7a:b8:aa:5c:d2:
                    91:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:9B:A4:BE:E6:B4:98:36:3B:93:E6:82:36:A1:97:AA:D7:27:A1:39
            X509v3 Authority Key Identifier:
                keyid:D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e3133322e3234302e302f32312d3231203d3e2032373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.132.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         30:93:e8:8d:e3:80:00:af:5b:a4:b0:f3:6c:5c:55:d8:37:24:
         7f:9a:d2:58:db:28:e2:54:fb:22:7b:2c:c5:b2:33:32:d7:d7:
         7f:69:67:61:d9:d7:a7:7a:6f:d8:a5:ab:52:99:6c:04:da:b2:
         e1:6f:dc:9e:2c:88:76:dd:95:fb:64:7f:04:d2:02:ee:9e:86:
         25:21:0b:c2:3c:60:bb:18:98:24:2f:ac:bd:25:dd:e9:ec:19:
         8d:ea:52:f6:5e:1c:04:3b:c7:d4:70:a5:0d:0b:a1:16:3d:5d:
         78:1d:3c:2b:65:1b:68:b6:9e:83:5b:15:90:53:0d:13:85:f3:
         d1:86:d7:9e:68:57:39:5a:54:61:b9:8f:e1:d6:c5:50:a6:10:
         2e:7f:d6:cf:68:87:a1:39:9b:66:05:44:2d:4a:86:58:db:ee:
         da:46:ca:dc:01:30:c6:14:a5:ec:1b:9b:4d:3a:eb:d4:b7:94:
         33:e0:31:83:0a:c7:f9:5d:64:ea:92:ca:f0:d1:1e:ac:da:4e:
         24:8a:58:3e:94:57:79:b5:b8:cf:0e:69:90:3a:4f:05:bb:0c:
         13:a5:7d:84:db:10:09:b1:59:24:e4:3f:2f:d0:6c:56:96:96:
         8c:80:bf:89:e5:e9:84:7a:00:76:00:83:15:cb:d3:11:ff:1d:
         c2:15:b0:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:57:50 2025 by rpki-client