Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3230302e35332e31342e302f32342d3234203d3e203532393737.roa
File:                     3230302e35332e31342e302f32342d3234203d3e203532393737.roa (raw, json)
Hash identifier:          YbFTlXuveQKrXElA9ULyBxcU8yiTD8WCq8iqq6HnAbo=
Subject key identifier:   F1:B6:45:C1:54:56:41:3F:55:E2:A5:E5:B4:D5:A9:63:F6:F0:DB:A1
Certificate issuer:       /CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
Certificate serial:       31FB0EA0B792E08706F3B75E52CBFB9DDEF86E80
Authority key identifier: 9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3230302e35332e31342e302f32342d3234203d3e203532393737.roa
Signing time:             Wed 05 Mar 2025 19:00:01 +0000
ROA not before:           Wed 05 Mar 2025 18:55:01 +0000
ROA not after:            Wed 04 Mar 2026 19:00:01 +0000
asID:                     52977
IP address blocks:        200.53.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl
                          rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 06:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:fb:0e:a0:b7:92:e0:87:06:f3:b7:5e:52:cb:fb:9d:de:f8:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
        Validity
            Not Before: Mar  5 18:55:01 2025 GMT
            Not After : Mar  4 19:00:01 2026 GMT
        Subject: CN=F1B645C15456413F55E2A5E5B4D5A963F6F0DBA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6a:a9:98:6e:a0:8a:d2:71:e5:c6:d6:2e:e9:
                    8c:7e:4c:01:7e:5c:cf:96:8d:61:0c:33:cd:f7:da:
                    e0:aa:c5:cf:c6:a0:80:ac:93:83:d4:6d:d1:dd:d0:
                    9e:5d:c2:3d:72:83:38:9f:0f:8e:89:1c:6d:69:a7:
                    84:5c:b9:4e:4e:85:74:ca:2f:95:31:51:07:50:7d:
                    21:b1:54:4f:85:b2:80:8d:69:78:cd:75:47:78:9f:
                    ff:93:d9:09:90:cd:ac:56:4d:09:ca:94:a3:a6:9f:
                    48:b6:3f:87:3a:ed:9e:11:cb:e9:fe:00:12:dd:da:
                    b3:a1:ba:25:ef:c5:63:70:c4:22:ec:9e:e9:bb:3d:
                    5a:b3:94:3c:d0:e3:e1:71:42:df:3f:ce:21:fe:b8:
                    fe:65:ac:01:72:1a:27:99:a9:4e:b3:32:5f:31:eb:
                    af:71:b0:fa:e4:7c:32:44:f3:07:13:8b:ad:35:b9:
                    2f:f7:8d:24:3b:47:61:13:4c:1b:97:8b:98:f7:82:
                    b0:b0:9c:0a:d8:3a:8f:43:bf:06:b0:da:8c:96:21:
                    40:ff:01:af:43:7f:28:72:50:f9:56:41:9d:ad:cc:
                    22:89:be:43:9f:93:3d:60:b5:3d:a5:5c:98:7e:32:
                    88:d1:66:72:cd:60:f5:13:2d:f2:4b:b5:55:1b:1a:
                    f1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:B6:45:C1:54:56:41:3F:55:E2:A5:E5:B4:D5:A9:63:F6:F0:DB:A1
            X509v3 Authority Key Identifier:
                keyid:9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3230302e35332e31342e302f32342d3234203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:55:6f:59:dd:ef:87:d2:be:62:0b:74:40:fe:d3:a6:85:34:
         41:84:d1:95:c6:2f:91:07:e4:bf:ef:a3:1d:02:3c:0d:dd:01:
         32:17:9e:06:d8:f6:03:b6:dd:a9:34:f5:6b:1a:0c:37:32:45:
         27:2e:0b:96:3c:13:57:11:ea:83:3f:bb:61:76:4d:d4:ca:bf:
         15:54:36:fd:69:f3:89:60:81:dd:d6:3e:41:c2:5b:78:13:80:
         91:7d:6a:ae:9f:05:31:d2:e3:fe:46:8f:78:82:ec:79:7d:a0:
         e9:8d:fb:d4:a4:ea:8d:5d:9b:f5:9e:00:fc:f2:c3:83:87:09:
         70:8e:5d:02:21:16:97:2d:67:5b:8d:4c:c2:2a:6c:e5:09:29:
         82:f4:ed:8e:c6:d5:11:62:27:1c:a4:dd:03:26:11:c4:c6:2d:
         2b:c8:c5:fe:56:1f:47:38:b8:4b:55:a0:1b:69:c1:f5:9e:72:
         90:99:c7:96:8c:a2:ac:6d:9e:31:83:77:b9:24:53:8c:c8:3f:
         cd:a4:84:f9:e0:ab:86:56:56:9d:ea:1f:32:34:3e:76:28:57:
         c6:b5:9a:db:a3:af:a9:c3:11:67:94:eb:9a:85:67:75:1b:1e:
         34:22:53:b6:ba:4f:5a:2d:14:27:b3:09:4c:a7:1c:05:22:e9:
         dc:b2:24:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:17:43 2025 by rpki-client