Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9uwvfcSqnyJdiSniapQq5CqEvyEBMvDrVMQW3w6ob2m/0/3230302e32362e3235322e302f32332d3332203d3e20323730343434.roa
File:                     3230302e32362e3235322e302f32332d3332203d3e20323730343434.roa (raw, json)
Hash identifier:          R4CpyvYDX5wlepwdpuINHs/O2telQMW0JPk5DM4r6U0=
Subject key identifier:   A5:28:D8:54:F0:3D:28:0A:8F:96:95:3D:9E:A6:0A:31:C3:BE:57:7A
Certificate issuer:       /CN=4F6E3A9EAA52D623EE5F5FC3609B1FF9961FA769
Certificate serial:       4B01A807FF1001F78EB62F63F013306BEBC62890
Authority key identifier: 4F:6E:3A:9E:AA:52:D6:23:EE:5F:5F:C3:60:9B:1F:F9:96:1F:A7:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F6E3A9EAA52D623EE5F5FC3609B1FF9961FA769.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9uwvfcSqnyJdiSniapQq5CqEvyEBMvDrVMQW3w6ob2m/0/3230302e32362e3235322e302f32332d3332203d3e20323730343434.roa
Signing time:             Mon 23 Sep 2024 13:43:09 +0000
ROA not before:           Mon 23 Sep 2024 13:38:09 +0000
ROA not after:            Mon 22 Sep 2025 13:43:09 +0000
asID:                     270444
IP address blocks:        200.26.252.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9uwvfcSqnyJdiSniapQq5CqEvyEBMvDrVMQW3w6ob2m/0/4F6E3A9EAA52D623EE5F5FC3609B1FF9961FA769.crl
                          rsync://rpki-repo.registro.br/repo/A9uwvfcSqnyJdiSniapQq5CqEvyEBMvDrVMQW3w6ob2m/0/4F6E3A9EAA52D623EE5F5FC3609B1FF9961FA769.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F6E3A9EAA52D623EE5F5FC3609B1FF9961FA769.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Mar 2025 11:34:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:01:a8:07:ff:10:01:f7:8e:b6:2f:63:f0:13:30:6b:eb:c6:28:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F6E3A9EAA52D623EE5F5FC3609B1FF9961FA769
        Validity
            Not Before: Sep 23 13:38:09 2024 GMT
            Not After : Sep 22 13:43:09 2025 GMT
        Subject: CN=A528D854F03D280A8F96953D9EA60A31C3BE577A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:42:5b:7d:91:f3:6f:92:a0:e3:9f:33:48:77:
                    42:7f:7a:dc:65:d0:df:0b:cc:1d:63:9f:37:10:a2:
                    46:b9:3a:da:89:0d:ba:f7:a2:7e:96:74:bb:36:16:
                    5a:33:c0:f2:58:67:ab:8d:ad:70:fa:97:1c:33:b3:
                    92:18:67:d1:fa:3f:bc:82:94:71:d8:83:40:4a:f8:
                    0f:37:ea:c2:ef:72:50:b1:ce:60:14:f6:cc:61:2e:
                    9e:80:ce:6b:46:c8:b7:20:c1:bc:33:96:35:4d:73:
                    11:48:60:41:6e:48:96:ad:e5:c3:b2:8e:fd:fa:7a:
                    4a:fb:33:f9:7b:d0:6b:a1:2b:87:73:38:81:b8:80:
                    98:23:52:47:4e:a4:bb:43:0e:86:bf:de:cf:6b:34:
                    b7:2c:4f:32:e2:f1:48:0d:48:b2:d9:13:2e:88:96:
                    d8:38:3f:14:8e:21:53:da:1b:73:28:0d:37:59:0e:
                    1a:6d:13:33:79:c8:38:41:9e:03:a6:98:05:1b:bb:
                    85:fa:93:75:08:32:73:28:ab:02:47:0d:31:32:48:
                    c7:e7:ed:55:67:52:4e:37:86:1f:7f:59:fe:48:66:
                    ba:87:73:7b:72:c0:76:78:7f:5c:35:d2:d8:b5:78:
                    2f:e2:1a:9b:74:19:9d:b1:52:79:de:19:d5:02:1e:
                    d9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:28:D8:54:F0:3D:28:0A:8F:96:95:3D:9E:A6:0A:31:C3:BE:57:7A
            X509v3 Authority Key Identifier:
                keyid:4F:6E:3A:9E:AA:52:D6:23:EE:5F:5F:C3:60:9B:1F:F9:96:1F:A7:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9uwvfcSqnyJdiSniapQq5CqEvyEBMvDrVMQW3w6ob2m/0/4F6E3A9EAA52D623EE5F5FC3609B1FF9961FA769.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F6E3A9EAA52D623EE5F5FC3609B1FF9961FA769.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9uwvfcSqnyJdiSniapQq5CqEvyEBMvDrVMQW3w6ob2m/0/3230302e32362e3235322e302f32332d3332203d3e20323730343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:38:a2:57:67:2d:8c:79:fe:83:dc:ff:87:27:b8:ae:a9:aa:
         b6:4c:e1:d4:86:ed:92:5f:aa:72:25:69:b9:b9:f0:62:da:c2:
         66:3b:c0:bf:24:fa:13:fb:61:e4:0e:f2:2f:66:a2:32:b8:6c:
         14:08:46:90:cc:52:87:8a:f3:80:18:9c:3b:88:f0:8d:e1:31:
         48:c8:02:7b:be:ca:3a:ab:9e:e4:58:49:d7:13:cc:03:ad:44:
         1f:c6:1b:8a:18:b3:05:eb:08:7e:0a:d5:7e:3e:d5:4c:4c:f6:
         00:d4:e5:8b:52:9d:09:ee:e3:f8:76:75:52:a0:13:00:77:8d:
         b8:cc:ed:bb:3f:bd:d1:61:0e:e4:5f:88:f3:b7:f4:ad:25:21:
         41:1e:5a:2e:32:d5:ef:16:e8:98:ad:2c:0d:96:41:b2:3d:93:
         19:21:9e:df:c9:39:41:ec:58:ab:2b:74:80:56:5e:29:fe:b7:
         71:81:de:1b:b8:8d:83:f1:d8:e7:d1:de:5f:80:74:27:de:d9:
         85:0d:a6:fd:95:ea:63:11:92:32:ea:33:f3:83:83:a4:72:13:
         a2:6f:4d:f6:b8:35:08:48:8b:e6:e5:f3:c5:09:e3:a2:9f:c0:
         b0:27:c2:c6:8e:65:0d:54:e8:fb:26:cf:d4:a0:ce:28:93:a0:
         a6:6a:e1:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:53:13 2025 by rpki-client