Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/0/3230302e33332e38382e302f32312d3234203d3e20323632353330.roa
File:                     3230302e33332e38382e302f32312d3234203d3e20323632353330.roa (raw, json)
Hash identifier:          0Ddl237lVfZhvoQgfYRVacNlxsaNkzA7aAfSS0JTUPw=
Subject key identifier:   6E:38:16:C6:20:59:56:D8:61:B3:D1:11:E0:D2:B7:30:C7:AB:05:17
Certificate issuer:       /CN=B410AE9221B712152EE021F11F6C4A32F7D29278
Certificate serial:       62126B93498ECFED29CC983045B18D239BBDF9CB
Authority key identifier: B4:10:AE:92:21:B7:12:15:2E:E0:21:F1:1F:6C:4A:32:F7:D2:92:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B410AE9221B712152EE021F11F6C4A32F7D29278.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/0/3230302e33332e38382e302f32312d3234203d3e20323632353330.roa
Signing time:             Thu 19 Dec 2024 18:18:32 +0000
ROA not before:           Thu 19 Dec 2024 18:13:32 +0000
ROA not after:            Thu 18 Dec 2025 18:18:32 +0000
asID:                     262530
IP address blocks:        200.33.88.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/0/B410AE9221B712152EE021F11F6C4A32F7D29278.crl
                          rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/0/B410AE9221B712152EE021F11F6C4A32F7D29278.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B410AE9221B712152EE021F11F6C4A32F7D29278.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 14:52:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:12:6b:93:49:8e:cf:ed:29:cc:98:30:45:b1:8d:23:9b:bd:f9:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B410AE9221B712152EE021F11F6C4A32F7D29278
        Validity
            Not Before: Dec 19 18:13:32 2024 GMT
            Not After : Dec 18 18:18:32 2025 GMT
        Subject: CN=6E3816C6205956D861B3D111E0D2B730C7AB0517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:7d:13:d5:d9:ae:77:7c:3c:fa:5e:c1:0b:45:
                    c3:fe:84:a7:ed:fe:04:21:f3:05:9d:5f:29:bd:e3:
                    25:46:ad:d8:fb:a4:d8:88:2a:c6:df:00:2d:08:df:
                    51:18:7b:c8:9b:1c:54:6e:36:9f:32:59:ab:1c:8a:
                    d2:76:54:19:a9:ff:e9:8d:5f:04:db:e9:70:6c:26:
                    3e:46:ee:52:5f:e7:f0:c1:00:df:8f:68:d4:2d:ba:
                    42:2e:25:c3:25:98:70:7d:0e:12:d4:c1:1e:eb:7b:
                    dc:71:53:45:83:2b:ff:7b:65:0d:7d:64:c5:5f:3a:
                    1e:fb:3e:d1:fb:dc:5c:5b:85:9c:d2:d3:2b:45:ca:
                    65:e5:b6:e1:82:0d:8c:29:88:9d:43:d6:d0:24:ea:
                    cf:37:a2:09:4a:1a:fc:fd:e0:27:85:cc:9c:53:ab:
                    8c:3f:50:fc:22:f7:e6:f8:ce:50:9d:eb:61:e0:db:
                    4a:cf:c6:e7:12:36:da:d1:fa:1f:36:13:c6:1e:c4:
                    30:d9:56:5a:40:55:41:21:e8:49:64:26:c0:e5:bc:
                    35:6a:ee:b4:d3:1d:74:ab:c6:b8:99:01:3e:f3:ed:
                    1e:c4:c1:8f:80:8a:f1:5c:36:0d:89:95:de:32:ae:
                    5c:8d:84:e0:a9:00:73:68:41:0c:9e:30:79:fa:e2:
                    17:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:38:16:C6:20:59:56:D8:61:B3:D1:11:E0:D2:B7:30:C7:AB:05:17
            X509v3 Authority Key Identifier:
                keyid:B4:10:AE:92:21:B7:12:15:2E:E0:21:F1:1F:6C:4A:32:F7:D2:92:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/0/B410AE9221B712152EE021F11F6C4A32F7D29278.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B410AE9221B712152EE021F11F6C4A32F7D29278.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzvGYe8tUSg5gGeWnRgeCx1DtJtbiu8QoA9Fn8FRstFg/0/3230302e33332e38382e302f32312d3234203d3e20323632353330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1b:7e:ec:5e:f2:9b:ed:4d:2c:cf:18:00:14:77:9c:3d:3c:1c:
         60:ff:68:08:6c:a1:f1:ec:52:d1:a5:3a:51:8a:45:60:d8:f4:
         ac:fe:77:a7:ed:1d:a6:10:18:3e:47:f4:da:a9:da:3b:89:a9:
         0a:2f:44:19:af:2f:24:ae:6a:4b:a2:52:65:63:3a:e5:05:b9:
         b7:cb:0f:fa:95:05:ee:16:48:35:18:af:00:5c:79:32:74:94:
         e6:28:f8:be:22:c0:69:39:6c:e9:bf:29:f2:16:9f:57:dc:cc:
         34:ae:3f:3b:b3:db:70:81:a1:fb:e9:44:1e:f9:11:db:09:1e:
         93:67:c7:b0:a7:34:09:c2:ab:4c:ec:56:66:52:e6:99:85:42:
         52:8b:00:6c:89:fb:70:08:59:4d:c1:01:5b:7f:c8:5e:75:1e:
         67:bd:88:4b:3c:44:6c:ce:f4:c7:3b:56:c4:1f:ed:f1:c5:15:
         d9:99:30:0d:d1:42:16:f1:5b:42:c2:6a:1b:93:49:30:2b:06:
         49:9e:be:47:06:18:32:ed:6a:ca:1a:82:1b:9c:ea:1e:b4:e1:
         c7:04:c3:b1:a0:03:b9:cf:fb:94:7b:40:2b:9d:3c:7e:97:45:
         18:b4:a8:73:77:d5:3f:56:88:2c:aa:ac:e8:13:b0:39:e6:d0:
         f9:6e:c8:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:47:26 2025 by rpki-client