Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9yXQpNmbPEc4yQWodGchjyTXZArA1v5PukSsz9SQVMfb/0/3230302e3232352e3132382e302f32322d3232203d3e203631373730.roa
File:                     3230302e3232352e3132382e302f32322d3232203d3e203631373730.roa (raw, json)
Hash identifier:          uQItI2trw7lIq36Ez9lNA1X4EgfTDT1IPK4t/LwpmiM=
Subject key identifier:   51:F1:39:6A:34:60:7B:F7:36:0D:BA:D3:D7:A5:E5:F8:48:FB:CF:A4
Certificate issuer:       /CN=13149E872076863268B5B7FFD3A618CAA69AAB08
Certificate serial:       0F8F45807A4BA771111731CC6771D8384F6D7EFE
Authority key identifier: 13:14:9E:87:20:76:86:32:68:B5:B7:FF:D3:A6:18:CA:A6:9A:AB:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13149E872076863268B5B7FFD3A618CAA69AAB08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9yXQpNmbPEc4yQWodGchjyTXZArA1v5PukSsz9SQVMfb/0/3230302e3232352e3132382e302f32322d3232203d3e203631373730.roa
Signing time:             Thu 19 Dec 2024 19:44:34 +0000
ROA not before:           Thu 19 Dec 2024 19:39:34 +0000
ROA not after:            Thu 18 Dec 2025 19:44:34 +0000
asID:                     61770
IP address blocks:        200.225.128.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9yXQpNmbPEc4yQWodGchjyTXZArA1v5PukSsz9SQVMfb/0/13149E872076863268B5B7FFD3A618CAA69AAB08.crl
                          rsync://rpki-repo.registro.br/repo/9yXQpNmbPEc4yQWodGchjyTXZArA1v5PukSsz9SQVMfb/0/13149E872076863268B5B7FFD3A618CAA69AAB08.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13149E872076863268B5B7FFD3A618CAA69AAB08.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 12:35:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:8f:45:80:7a:4b:a7:71:11:17:31:cc:67:71:d8:38:4f:6d:7e:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13149E872076863268B5B7FFD3A618CAA69AAB08
        Validity
            Not Before: Dec 19 19:39:34 2024 GMT
            Not After : Dec 18 19:44:34 2025 GMT
        Subject: CN=51F1396A34607BF7360DBAD3D7A5E5F848FBCFA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a2:78:d9:e3:9b:c1:0f:94:67:5d:a8:ee:b5:
                    5b:bb:e3:bd:48:7f:2a:ad:f9:17:c9:ea:69:d7:5d:
                    83:b4:e5:5a:2a:84:61:fd:d2:32:9d:d0:e2:35:a0:
                    21:56:89:0b:8d:37:e4:68:fb:53:d2:0a:b0:54:22:
                    de:5d:05:9f:99:fe:b2:90:9f:79:b4:09:78:96:12:
                    74:76:c2:10:1e:5e:8a:a0:bf:30:45:13:a0:4a:61:
                    5d:af:43:21:45:ea:96:dd:38:73:1c:64:48:51:e1:
                    fb:20:89:f9:c9:df:66:16:e8:d6:9a:b7:a6:93:b8:
                    2d:70:1a:29:76:14:01:a8:83:66:11:4c:f6:22:db:
                    ac:f7:46:80:2d:d8:9a:23:c6:d4:67:9d:b5:22:f1:
                    e3:1d:0d:e1:74:e7:2a:53:0b:f8:9e:c2:51:fa:54:
                    fd:b6:51:d6:f7:4c:ac:74:4c:05:3d:72:61:23:cd:
                    8a:15:16:79:b8:24:03:6f:f1:82:08:69:bf:7e:40:
                    a2:42:ec:dd:48:1c:ca:7d:b0:72:1b:12:87:7d:30:
                    6d:5e:38:88:ee:50:4b:ed:98:99:d4:a8:f4:a3:ab:
                    76:2d:67:27:6c:1d:ab:a3:7b:f8:ea:d9:34:36:65:
                    03:3c:04:70:b2:60:83:e1:ea:ab:3b:ca:ca:7e:23:
                    75:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:F1:39:6A:34:60:7B:F7:36:0D:BA:D3:D7:A5:E5:F8:48:FB:CF:A4
            X509v3 Authority Key Identifier:
                keyid:13:14:9E:87:20:76:86:32:68:B5:B7:FF:D3:A6:18:CA:A6:9A:AB:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9yXQpNmbPEc4yQWodGchjyTXZArA1v5PukSsz9SQVMfb/0/13149E872076863268B5B7FFD3A618CAA69AAB08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13149E872076863268B5B7FFD3A618CAA69AAB08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9yXQpNmbPEc4yQWodGchjyTXZArA1v5PukSsz9SQVMfb/0/3230302e3232352e3132382e302f32322d3232203d3e203631373730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.225.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:68:13:0a:32:eb:b3:ef:03:48:c8:f7:ab:d9:25:69:fa:7c:
         9f:4d:bf:f1:d6:3d:cc:76:9a:f9:8b:38:c3:32:46:d2:74:35:
         58:48:b6:94:f7:02:82:ca:1f:c3:d5:ef:c9:35:85:c5:06:cb:
         d6:d1:f3:11:cf:4e:0f:8b:52:c8:1f:f0:6e:ae:9a:6b:a7:4b:
         81:e0:5f:2d:b4:00:d1:62:84:19:a2:58:c5:89:50:19:dc:3f:
         fc:52:3f:c0:bd:ba:6c:a0:f7:53:05:d8:3e:57:4f:f5:40:fd:
         47:8c:d3:f3:b5:c9:48:71:38:65:19:13:bc:2f:40:cf:13:cd:
         55:a1:e6:83:ae:b8:79:d2:ce:2c:ff:68:bb:36:7a:a7:36:16:
         e3:f1:58:91:31:3c:68:a4:9e:5c:fc:4b:84:fb:0c:3e:af:82:
         dd:74:b7:4c:8c:1e:2d:1d:b4:f1:02:52:46:41:8e:16:3b:59:
         62:0f:0d:b2:ab:07:aa:1a:13:a4:51:e3:95:06:88:3c:be:f6:
         22:ee:08:43:ec:de:66:be:56:5c:05:62:a2:a6:5c:49:52:43:
         12:c1:b7:6c:70:96:a2:a9:a9:40:f7:d4:03:db:c3:cd:be:43:
         98:3b:b1:e3:6f:6d:e0:16:85:1f:a9:f7:66:43:4a:fa:6a:b0:
         cc:6c:89:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:57:16 2025 by rpki-client