Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8gzEn8NVkNzYoPjPySGayx3LQ3rN6RdhRDVKvDEkAQ84/0/3230302e3232352e35382e302f32332d3332203d3e20323734373334.roa
File:                     3230302e3232352e35382e302f32332d3332203d3e20323734373334.roa (raw, json)
Hash identifier:          S/gHXelyAF+zW+rOt7SlN0iWrLeyiq4ve2vZw5/0sW8=
Subject key identifier:   D7:DA:82:4A:F1:72:B0:3A:82:52:CE:81:EA:A8:01:3B:71:8F:89:E2
Certificate issuer:       /CN=006590398F4D26A9E4F3110825291E8032AAF2BB
Certificate serial:       256114727826DC2CEB4B0E09386E35DFF3C800B0
Authority key identifier: 00:65:90:39:8F:4D:26:A9:E4:F3:11:08:25:29:1E:80:32:AA:F2:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/006590398F4D26A9E4F3110825291E8032AAF2BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8gzEn8NVkNzYoPjPySGayx3LQ3rN6RdhRDVKvDEkAQ84/0/3230302e3232352e35382e302f32332d3332203d3e20323734373334.roa
Signing time:             Mon 17 Feb 2025 19:50:12 +0000
ROA not before:           Mon 17 Feb 2025 19:45:12 +0000
ROA not after:            Mon 16 Feb 2026 19:50:12 +0000
asID:                     274734
IP address blocks:        200.225.58.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8gzEn8NVkNzYoPjPySGayx3LQ3rN6RdhRDVKvDEkAQ84/0/006590398F4D26A9E4F3110825291E8032AAF2BB.crl
                          rsync://rpki-repo.registro.br/repo/8gzEn8NVkNzYoPjPySGayx3LQ3rN6RdhRDVKvDEkAQ84/0/006590398F4D26A9E4F3110825291E8032AAF2BB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/006590398F4D26A9E4F3110825291E8032AAF2BB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 06:22:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:61:14:72:78:26:dc:2c:eb:4b:0e:09:38:6e:35:df:f3:c8:00:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=006590398F4D26A9E4F3110825291E8032AAF2BB
        Validity
            Not Before: Feb 17 19:45:12 2025 GMT
            Not After : Feb 16 19:50:12 2026 GMT
        Subject: CN=D7DA824AF172B03A8252CE81EAA8013B718F89E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c8:77:e9:13:64:34:0d:8c:f0:38:03:58:01:
                    e4:38:65:31:5f:21:b9:26:95:a2:65:bc:f8:99:96:
                    74:c4:e8:af:e0:4a:9b:f0:98:e7:7c:12:11:c6:f0:
                    88:ae:8d:8b:19:74:1b:71:74:b6:2c:e6:97:cb:e4:
                    5e:41:37:fb:0f:06:66:0a:56:62:9f:13:2e:b5:f6:
                    14:b4:b5:db:fa:a2:e5:88:ad:16:e7:92:18:e3:73:
                    2b:d8:3a:81:93:9f:ab:e0:a4:57:5b:6a:6e:98:1f:
                    e0:b1:d7:6a:7b:9c:e5:d1:c5:cd:5f:e9:14:d0:4a:
                    89:4c:a9:50:a6:81:64:bc:a7:7f:1a:df:eb:0c:84:
                    23:cf:3f:ef:22:b9:09:b2:c4:75:76:42:65:d5:9d:
                    75:01:47:11:72:04:a8:53:9b:d2:ec:57:7a:b3:2c:
                    d8:9d:33:67:fd:af:b9:6c:1b:5e:42:8c:71:d0:02:
                    28:46:ea:15:72:b3:35:f6:d8:ba:eb:5e:a9:6a:58:
                    b6:7b:49:b4:90:76:27:c7:1a:57:ff:1b:82:bf:9d:
                    0b:3c:16:24:26:9b:8b:a7:fc:0f:52:06:8d:a7:50:
                    95:4d:23:e4:12:24:19:cc:c3:a3:68:7b:ff:e5:c7:
                    45:fd:7a:16:ce:99:93:90:c1:be:52:b1:fb:a2:34:
                    c6:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:DA:82:4A:F1:72:B0:3A:82:52:CE:81:EA:A8:01:3B:71:8F:89:E2
            X509v3 Authority Key Identifier:
                keyid:00:65:90:39:8F:4D:26:A9:E4:F3:11:08:25:29:1E:80:32:AA:F2:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8gzEn8NVkNzYoPjPySGayx3LQ3rN6RdhRDVKvDEkAQ84/0/006590398F4D26A9E4F3110825291E8032AAF2BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/006590398F4D26A9E4F3110825291E8032AAF2BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8gzEn8NVkNzYoPjPySGayx3LQ3rN6RdhRDVKvDEkAQ84/0/3230302e3232352e35382e302f32332d3332203d3e20323734373334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.225.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:4a:2a:66:02:2b:37:aa:3e:d5:61:70:fe:e8:50:5f:e9:74:
         dd:1d:22:75:d7:8b:6c:da:29:33:f3:90:0e:ac:aa:f6:7b:7a:
         d7:de:1d:67:b5:51:28:1c:43:8f:67:61:8a:88:07:93:d1:c8:
         06:29:ca:97:62:46:e2:53:68:fb:a8:a5:a9:f6:e5:18:03:19:
         ab:92:d5:64:6d:d0:5c:20:d7:09:32:96:ba:cc:f3:88:e1:6b:
         37:55:47:f6:d6:d5:a7:a5:21:95:5b:60:f0:f0:7e:28:b4:d0:
         9a:e7:58:94:b5:75:c5:9f:df:ba:10:ac:07:6d:08:de:c8:13:
         2d:77:a5:a8:f2:73:9d:97:21:de:8e:4f:9e:8b:08:dc:f4:05:
         cb:63:36:ec:f3:ad:6c:9c:ad:14:d9:8f:a2:8b:2e:3e:04:48:
         83:f4:9d:6e:ad:d5:b8:9e:cf:71:ae:d3:c5:42:29:0b:d4:72:
         c0:b7:29:1c:62:da:7e:d6:60:2f:9a:83:93:f4:b4:18:56:fe:
         78:22:0b:bc:bd:8f:5d:2f:7a:c9:a5:1c:56:be:0f:ba:79:cf:
         3e:bf:bc:01:92:12:52:5b:53:a5:ae:03:dc:be:d1:bf:ec:73:
         dc:37:39:69:20:43:ec:bc:88:6f:d6:60:fe:ae:5c:4e:28:80:
         9a:00:f8:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 14:21:34 2025 by rpki-client