Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e31372e38332e302f32342d3234203d3e20323638373434.roa
File:                     3230302e31372e38332e302f32342d3234203d3e20323638373434.roa (raw, json)
Hash identifier:          TNEuO437kWwG7bv1zCMaWzOK+fpAehvhJPsJaDo6l1I=
Subject key identifier:   AF:67:B3:C9:4F:74:6B:BB:95:5B:7A:A5:62:90:A2:E5:3D:35:C5:B4
Certificate issuer:       /CN=D54C376960A26972A0B767BDA084048DFFE3673E
Certificate serial:       6F6D92D396AF0E6CEF670BC9E7542B8BAB80120C
Authority key identifier: D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e31372e38332e302f32342d3234203d3e20323638373434.roa
Signing time:             Wed 05 Mar 2025 19:00:01 +0000
ROA not before:           Wed 05 Mar 2025 18:55:01 +0000
ROA not after:            Wed 04 Mar 2026 19:00:01 +0000
asID:                     268744
IP address blocks:        200.17.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl
                          rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 11:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:6d:92:d3:96:af:0e:6c:ef:67:0b:c9:e7:54:2b:8b:ab:80:12:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D54C376960A26972A0B767BDA084048DFFE3673E
        Validity
            Not Before: Mar  5 18:55:01 2025 GMT
            Not After : Mar  4 19:00:01 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0a:7c:a6:d8:4d:e1:4b:53:62:16:52:aa:87:
                    b9:12:a6:b4:07:33:bf:eb:9f:ba:f5:4f:c2:48:b8:
                    ad:eb:c9:83:3e:7f:cb:5a:1c:db:3e:76:34:35:83:
                    ea:2a:79:fc:0e:8c:36:01:2c:ba:c1:f5:10:2e:bd:
                    f6:44:33:d3:13:92:11:aa:b2:ff:28:f8:21:8e:00:
                    76:db:fd:11:f4:73:ce:e5:87:9c:4a:a4:c5:c0:1d:
                    a2:ab:99:4b:76:43:ca:de:19:d9:1f:02:4b:ce:47:
                    ac:0c:44:97:ee:f4:c1:80:db:d8:17:0f:0b:6d:f9:
                    67:81:2a:8a:ab:61:b0:de:4e:5a:af:60:78:34:9e:
                    d9:0f:69:4a:a9:a6:cd:9c:e7:14:72:c6:95:16:f1:
                    ce:52:96:0b:2b:ce:fc:b3:af:76:79:c5:3a:7d:1d:
                    bd:0a:b0:00:2b:a9:f1:09:07:3b:96:4b:d3:2b:91:
                    ef:30:42:c1:a1:1d:29:85:4f:6b:ea:f0:c3:59:52:
                    d7:70:61:82:9b:0a:90:44:b7:30:39:73:6c:fb:cc:
                    6f:de:30:3a:59:8f:1c:65:13:19:aa:b2:59:f3:90:
                    62:94:f7:5f:58:ab:fd:57:a0:61:e6:2b:03:e1:48:
                    a2:6f:5a:76:d5:b9:46:8f:ad:a5:97:db:f5:eb:a6:
                    80:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:67:B3:C9:4F:74:6B:BB:95:5B:7A:A5:62:90:A2:E5:3D:35:C5:B4
            X509v3 Authority Key Identifier:
                keyid:D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e31372e38332e302f32342d3234203d3e20323638373434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.17.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:53:f7:15:57:c9:69:ff:d9:0a:c3:f2:c7:23:7a:54:16:77:
         78:f9:6a:a4:87:e8:b6:e0:70:02:46:80:ab:36:50:06:c3:32:
         c0:8f:ad:52:2f:42:06:93:59:16:f0:07:87:c5:df:ad:02:e4:
         a0:c6:62:bc:d7:49:f8:47:23:35:d2:a0:a4:79:53:57:97:c5:
         c1:22:ec:23:5a:42:bc:11:a1:b3:22:4d:dc:53:bc:1e:88:b5:
         7c:13:48:85:a6:52:3f:b7:39:85:d3:42:35:1e:3b:89:0c:11:
         78:f3:e1:e5:82:dc:42:92:ef:62:be:29:10:84:08:d1:56:c9:
         bb:82:6d:6e:dc:23:61:ca:b4:bd:ff:d1:d6:7a:e7:95:43:bd:
         71:35:c5:fc:ea:77:60:6f:14:27:2f:18:e1:1f:86:31:83:26:
         f8:c7:a1:4d:82:71:f9:ca:f1:94:d5:7d:b5:f2:d5:a7:d0:6f:
         f3:ea:12:a9:d0:3e:8b:e8:6b:77:9d:ee:eb:d9:21:28:2b:98:
         6b:35:aa:06:64:bb:4c:c2:f8:83:4c:c5:ce:15:36:30:dc:e5:
         e7:bb:fb:30:7f:0d:3d:53:92:90:78:08:52:5d:8e:d7:48:ee:
         d1:2b:a2:ab:3c:ae:4a:22:ec:0e:9d:16:42:a4:d6:f7:bb:cb:
         ae:c4:2f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:56:03 2025 by rpki-client