Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3230302e3232392e3137362e302f32302d3234203d3e20323632363838.roa
File:                     3230302e3232392e3137362e302f32302d3234203d3e20323632363838.roa (raw, json)
Hash identifier:          mnT+wU3pvEJeHPqogO2bW2xZ3kgrR94VAmhj5KRdNuM=
Subject key identifier:   B5:9E:2B:7A:79:20:6E:79:2A:97:7E:20:22:74:34:D7:21:15:1C:E6
Certificate issuer:       /CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
Certificate serial:       1B53D27B36AF6EA869A41576AC52AD0FAC8E78FA
Authority key identifier: 7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3230302e3232392e3137362e302f32302d3234203d3e20323632363838.roa
Signing time:             Mon 12 May 2025 13:01:44 +0000
ROA not before:           Mon 12 May 2025 12:56:44 +0000
ROA not after:            Mon 11 May 2026 13:01:44 +0000
asID:                     262688
IP address blocks:        200.229.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl
                          rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 03:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:53:d2:7b:36:af:6e:a8:69:a4:15:76:ac:52:ad:0f:ac:8e:78:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
        Validity
            Not Before: May 12 12:56:44 2025 GMT
            Not After : May 11 13:01:44 2026 GMT
        Subject: CN=B59E2B7A79206E792A977E20227434D721151CE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6c:d6:85:fb:ac:6f:1f:14:32:c6:ae:15:0c:
                    91:0c:69:5b:a8:cc:13:66:a9:6d:7f:7e:4e:72:42:
                    3d:80:f5:08:83:a4:71:d4:ba:7b:8a:ec:0f:2f:47:
                    df:1e:d7:87:7c:59:b2:72:22:7c:cd:13:af:58:03:
                    05:1c:0a:c7:78:9c:97:d4:5e:7d:61:31:2f:51:df:
                    54:49:b7:90:c2:7a:fc:fd:15:0e:e0:30:3f:8b:1e:
                    7a:63:1e:d6:bd:67:3b:a2:7e:2c:2a:ce:bf:9b:1c:
                    0c:40:47:f0:d3:9f:69:11:c0:7b:e2:7c:c5:cb:cc:
                    5e:d3:b5:5d:20:8b:a7:b2:22:6d:36:6d:39:2f:21:
                    f8:bb:17:bc:d9:da:04:ce:2f:e3:a4:c6:1a:58:0f:
                    25:eb:76:e4:fe:d8:e0:e9:cb:af:8b:ee:b8:49:1f:
                    66:7b:d4:c3:9e:d8:9d:a5:de:75:90:40:50:32:90:
                    73:1e:23:a0:3a:a3:95:a4:ec:91:3e:5f:95:e9:53:
                    86:66:06:95:dc:08:60:57:3a:aa:49:65:91:4c:c4:
                    f6:85:68:33:4b:44:e2:1d:60:7e:ef:f4:33:99:5d:
                    c4:5f:9a:3d:c0:1f:98:60:c3:36:99:89:68:a9:e1:
                    c5:4d:f4:e3:83:f3:c9:64:bb:07:1b:79:e8:80:1c:
                    d5:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:9E:2B:7A:79:20:6E:79:2A:97:7E:20:22:74:34:D7:21:15:1C:E6
            X509v3 Authority Key Identifier:
                keyid:7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3230302e3232392e3137362e302f32302d3234203d3e20323632363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0d:ed:a3:47:80:a4:d8:2f:d9:1c:c0:63:38:41:21:df:23:e2:
         62:82:cb:a4:05:52:27:71:34:77:0d:0b:8d:4d:31:0d:30:72:
         47:49:e8:66:87:12:a3:ad:4a:0a:f0:2b:9e:fa:17:29:d2:55:
         53:89:b9:90:38:76:f9:f0:83:ad:3e:dc:11:fe:c1:87:52:48:
         1a:a8:c3:cc:bd:7c:5b:ec:59:d7:2c:34:40:d4:eb:25:2c:18:
         22:02:c9:7e:35:35:ed:2b:ff:7f:29:c5:38:8f:21:6f:4a:1b:
         61:1f:94:61:72:ea:1f:f9:9a:46:b3:31:20:53:4f:50:91:65:
         59:8d:15:3e:98:6a:b1:a1:b7:26:3c:0c:30:a5:7b:7f:55:4f:
         a0:15:56:8f:a1:c3:e3:36:34:21:a3:11:5a:cd:97:6f:95:95:
         59:49:aa:b3:85:02:3a:a9:fe:3c:42:3d:0c:4e:d6:ca:0c:0f:
         70:8a:9a:53:33:9c:b7:73:af:cd:f3:c8:fb:93:c2:de:8f:3b:
         15:bc:7d:e1:06:ae:12:ec:ed:14:9b:d9:1c:7b:3d:01:20:1e:
         a5:e4:58:e9:83:8b:62:20:25:cf:2e:de:a7:2c:e3:6c:27:2c:
         c1:ce:09:34:01:23:8c:9b:64:48:78:00:1c:0d:c1:2e:01:28:
         7d:df:7c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:31:10 2025 by rpki-client