Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3230302e3232352e3134302e302f32342d3234203d3e203631373937.roa
File:                     3230302e3232352e3134302e302f32342d3234203d3e203631373937.roa (raw, json)
Hash identifier:          7+IE5/cCepYQHaGPTSisBf0yHKpfkOIbsbcxF3Yysoc=
Subject key identifier:   2E:62:A9:3F:64:45:11:74:EA:43:BF:30:5F:EE:5B:10:4E:ED:7D:D9
Certificate issuer:       /CN=FE4DA27833757CF1F5DCB4799D9D238117F31532
Certificate serial:       0E7F8364FB6015513253ADEA7499E497CD22F3EF
Authority key identifier: FE:4D:A2:78:33:75:7C:F1:F5:DC:B4:79:9D:9D:23:81:17:F3:15:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE4DA27833757CF1F5DCB4799D9D238117F31532.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3230302e3232352e3134302e302f32342d3234203d3e203631373937.roa
Signing time:             Fri 06 Jun 2025 11:45:07 +0000
ROA not before:           Fri 06 Jun 2025 11:40:07 +0000
ROA not after:            Fri 05 Jun 2026 11:45:07 +0000
asID:                     61797
IP address blocks:        200.225.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/FE4DA27833757CF1F5DCB4799D9D238117F31532.crl
                          rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/FE4DA27833757CF1F5DCB4799D9D238117F31532.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE4DA27833757CF1F5DCB4799D9D238117F31532.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 14 Jun 2025 01:13:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:7f:83:64:fb:60:15:51:32:53:ad:ea:74:99:e4:97:cd:22:f3:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE4DA27833757CF1F5DCB4799D9D238117F31532
        Validity
            Not Before: Jun  6 11:40:07 2025 GMT
            Not After : Jun  5 11:45:07 2026 GMT
        Subject: CN=2E62A93F64451174EA43BF305FEE5B104EED7DD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f7:e1:5c:48:37:8b:60:e7:35:82:5e:c1:97:
                    9c:fe:2a:14:bf:66:d1:5f:8f:ee:66:4e:3d:f0:ea:
                    f0:c4:7d:38:36:f3:01:42:a1:f1:e7:c6:37:ec:7d:
                    32:44:fd:08:60:9a:8a:21:18:2b:5c:4f:5f:c1:c6:
                    d3:da:83:5f:1b:bf:7f:c8:b5:ac:97:31:23:83:d9:
                    71:1b:00:22:56:73:61:70:fb:19:6a:a1:60:3b:8a:
                    3d:be:86:62:ac:f0:55:43:3e:90:7c:8e:4e:fe:99:
                    eb:c7:4a:e3:36:48:5d:6f:a0:8b:fd:ee:53:c6:af:
                    6a:43:89:02:c1:3b:59:84:0a:c6:e7:f6:6b:fc:a0:
                    6e:1f:7e:b0:c0:af:31:80:7a:f4:4d:6b:79:5e:b2:
                    a2:1b:3a:70:77:33:35:4d:36:d3:6f:99:77:0a:8b:
                    b2:84:b5:b0:93:32:57:62:64:da:27:ca:ae:ed:00:
                    d4:22:b8:64:a6:e6:cb:2a:7b:f7:77:b1:52:11:70:
                    ea:d0:a0:5f:af:f8:1b:10:96:09:77:9b:07:3d:84:
                    f7:14:b9:9c:6e:4a:50:63:c9:83:23:87:8b:1e:06:
                    12:8a:8e:bb:27:fe:67:24:2d:b9:95:eb:8b:63:09:
                    82:c1:01:95:e6:33:dd:a8:49:af:c3:fe:9e:18:95:
                    21:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:62:A9:3F:64:45:11:74:EA:43:BF:30:5F:EE:5B:10:4E:ED:7D:D9
            X509v3 Authority Key Identifier:
                keyid:FE:4D:A2:78:33:75:7C:F1:F5:DC:B4:79:9D:9D:23:81:17:F3:15:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/FE4DA27833757CF1F5DCB4799D9D238117F31532.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE4DA27833757CF1F5DCB4799D9D238117F31532.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3230302e3232352e3134302e302f32342d3234203d3e203631373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.225.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:2b:62:58:f6:e0:77:4a:1a:68:7c:8c:d5:bd:c1:a6:38:bf:
         10:2c:7f:26:c9:d7:85:56:ff:48:41:cc:23:a1:0b:b4:66:91:
         96:9a:f0:31:61:5c:46:66:9c:aa:5e:62:2f:4c:b4:1e:42:47:
         12:85:dd:ba:7d:b9:e4:5e:31:2b:34:97:cb:17:20:ce:90:ef:
         9a:86:11:7c:31:be:16:c1:a5:75:6d:6a:dc:c9:8e:95:91:4e:
         fb:c0:b9:10:28:97:18:d7:7d:f6:fb:99:d6:ee:27:78:2e:ee:
         3a:85:02:29:24:7a:c1:c6:bf:45:99:b0:86:c2:63:2d:d1:c4:
         fa:8a:58:c1:50:7f:7a:3e:de:48:f8:cb:fe:cb:1e:d5:d5:25:
         b8:0b:f3:22:64:85:67:ab:55:46:80:f3:9d:bb:c1:96:21:24:
         85:a4:34:48:37:59:90:8c:a8:f1:fd:28:f6:49:1b:20:5a:e3:
         f2:df:1c:b0:3b:f1:12:57:9f:f4:0c:e0:7a:ff:53:d8:ea:c4:
         b3:81:c9:5a:4d:62:25:38:cb:32:73:f5:c8:c7:c8:27:e4:03:
         97:30:59:ac:ff:79:3c:2e:0c:a4:0b:8b:c7:36:5e:fc:45:35:
         b2:74:1d:bd:d9:b6:7f:59:09:e7:a4:4c:82:0f:ed:7d:40:51:
         f0:68:0e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 14:20:50 2025 by rpki-client