Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3230302e35332e31322e302f32342d3234203d3e203532393737.roa
File:                     3230302e35332e31322e302f32342d3234203d3e203532393737.roa (raw, json)
Hash identifier:          yOknKQbs9SKPFnmL0NpN06Q4fSXdFFp4SivarB3sRU8=
Subject key identifier:   2F:A6:BE:B9:5C:6D:D7:76:44:05:A2:41:8B:CC:82:3F:65:97:39:C9
Certificate issuer:       /CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
Certificate serial:       6DB99888AF7770177A8FEBADF3DC442439062AD9
Authority key identifier: 9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3230302e35332e31322e302f32342d3234203d3e203532393737.roa
Signing time:             Wed 05 Mar 2025 19:00:08 +0000
ROA not before:           Wed 05 Mar 2025 18:55:08 +0000
ROA not after:            Wed 04 Mar 2026 19:00:08 +0000
asID:                     52977
IP address blocks:        200.53.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl
                          rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 06:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:b9:98:88:af:77:70:17:7a:8f:eb:ad:f3:dc:44:24:39:06:2a:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
        Validity
            Not Before: Mar  5 18:55:08 2025 GMT
            Not After : Mar  4 19:00:08 2026 GMT
        Subject: CN=2FA6BEB95C6DD7764405A2418BCC823F659739C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:79:15:7b:52:e6:0c:ac:57:b0:84:f4:f8:1a:
                    8c:7b:56:26:17:95:ad:59:29:4a:08:9a:62:68:19:
                    17:74:20:7b:e4:d3:54:85:0e:6d:ca:f1:1c:c7:90:
                    3a:06:09:09:df:b9:52:18:9a:a2:f4:7f:65:16:d7:
                    0b:94:ea:7f:7d:c1:4f:55:13:4d:61:a6:c1:ec:58:
                    e5:e1:bb:29:56:60:fb:04:03:99:1e:44:92:51:f2:
                    b1:c1:a7:cc:0a:61:57:e5:f4:a5:cf:0e:e6:01:1a:
                    20:93:4d:35:97:cf:91:f2:6b:2c:98:c9:d9:a9:66:
                    68:15:92:53:ba:d6:b6:a5:28:a3:f3:cb:56:91:d4:
                    98:b3:79:af:c2:b2:d3:9c:76:bf:50:23:d7:26:16:
                    20:88:78:54:70:36:15:dc:1a:be:95:27:1f:93:c1:
                    73:25:a0:1a:7e:f6:d2:0a:ed:c4:76:92:28:28:4c:
                    1d:bc:1b:e2:64:3e:2a:7f:28:f0:fc:d5:f6:70:87:
                    64:68:c1:d9:f8:04:27:f8:f0:d1:0f:0e:61:59:7f:
                    21:02:ac:00:a6:15:32:6e:14:58:bc:61:66:55:f4:
                    82:a5:d1:2e:0c:3b:c5:47:0c:d8:82:62:5e:f5:39:
                    63:15:c2:69:f5:55:61:68:5b:5b:42:d0:28:fc:db:
                    e3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:A6:BE:B9:5C:6D:D7:76:44:05:A2:41:8B:CC:82:3F:65:97:39:C9
            X509v3 Authority Key Identifier:
                keyid:9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3230302e35332e31322e302f32342d3234203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:72:bc:f2:ec:ad:b6:d1:ae:c6:ea:61:14:b4:1a:79:f3:83:
         04:a0:42:d7:96:eb:af:aa:11:b0:55:1b:81:b7:02:b7:96:3d:
         77:52:ce:33:26:1e:b4:fd:a7:e1:b2:e8:8f:b9:ef:c2:9e:e1:
         53:0d:60:a5:9c:ae:d3:0d:02:c0:a7:af:bb:fb:2f:bf:27:a1:
         28:4d:d2:8e:f8:56:5c:a4:77:8d:43:cf:4a:ed:e2:5b:70:2b:
         64:af:3d:a3:0c:bd:26:6d:d0:fe:7a:8e:a9:2e:48:34:2e:8b:
         65:ae:cc:09:98:d6:9d:76:1f:a7:8b:bd:e3:d5:85:b2:ae:bb:
         e0:81:9d:f8:e0:f4:bb:33:20:73:f3:d6:68:8c:f8:9c:b2:0d:
         5e:38:30:3a:aa:16:97:81:04:bc:84:ff:b5:d2:0b:0f:88:83:
         19:d3:0f:e4:bf:55:da:86:d8:2f:95:70:c5:c9:e2:0b:06:fb:
         67:03:91:72:e9:fc:f3:e7:c8:c9:1f:ed:9d:7f:02:5d:70:b1:
         10:c2:24:82:bf:ca:69:5f:78:0d:4b:ce:6b:9b:51:3a:34:77:
         13:c4:f1:94:dc:53:dd:f9:f1:0a:89:6f:6d:34:99:95:ef:12:
         fd:8a:d0:73:93:35:43:7d:a5:01:ab:f6:1a:09:80:af:e3:16:
         b8:4b:15:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:20:25 2025 by rpki-client