Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/3230302e37352e3137372e302f32342d3234203d3e203631393339.roa
File:                     3230302e37352e3137372e302f32342d3234203d3e203631393339.roa (raw, json)
Hash identifier:          TskT+T4frGoY7WFCD+EdWQWPoTXm8JEl9SGoPn3Y6Pk=
Subject key identifier:   8C:8D:AE:69:A9:97:29:42:12:C0:71:9B:BC:50:98:C4:69:74:3C:50
Certificate issuer:       /CN=30FB6754FA3D2DA24713B6A9CDE61347E95C320D
Certificate serial:       04E802EE49F436DFAC6D46C037A22ADC42170DB6
Authority key identifier: 30:FB:67:54:FA:3D:2D:A2:47:13:B6:A9:CD:E6:13:47:E9:5C:32:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30FB6754FA3D2DA24713B6A9CDE61347E95C320D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/3230302e37352e3137372e302f32342d3234203d3e203631393339.roa
Signing time:             Sun 04 Aug 2024 22:43:08 +0000
ROA not before:           Sun 04 Aug 2024 22:38:08 +0000
ROA not after:            Sun 03 Aug 2025 22:43:08 +0000
asID:                     61939
IP address blocks:        200.75.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/30FB6754FA3D2DA24713B6A9CDE61347E95C320D.crl
                          rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/30FB6754FA3D2DA24713B6A9CDE61347E95C320D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30FB6754FA3D2DA24713B6A9CDE61347E95C320D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Mar 2025 20:55:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:e8:02:ee:49:f4:36:df:ac:6d:46:c0:37:a2:2a:dc:42:17:0d:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30FB6754FA3D2DA24713B6A9CDE61347E95C320D
        Validity
            Not Before: Aug  4 22:38:08 2024 GMT
            Not After : Aug  3 22:43:08 2025 GMT
        Subject: CN=8C8DAE69A997294212C0719BBC5098C469743C50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:84:80:8e:6b:83:63:18:9f:42:22:71:2b:2c:
                    9c:a7:58:c0:c9:4c:7d:ce:f6:61:8e:55:0b:a0:6c:
                    4e:48:ec:79:7c:78:bd:d8:88:97:98:11:36:6a:78:
                    27:3a:3a:31:45:54:a2:b6:11:70:2c:7f:ff:91:81:
                    f9:73:6c:75:b3:0b:ec:59:32:dc:0c:c6:8b:7d:9a:
                    e1:67:c1:49:f3:bd:03:dd:54:b3:0f:1b:4e:97:c9:
                    85:07:54:e8:29:0d:18:e4:db:ba:71:a7:61:47:7b:
                    4c:da:fd:b3:f7:97:a6:85:77:a5:52:5b:a6:55:a9:
                    7b:b6:fc:fb:99:31:18:f2:cc:f8:bd:df:68:ea:c6:
                    bc:97:52:63:04:b7:b8:9f:95:d8:07:a7:d5:86:3f:
                    5c:96:b5:29:33:ea:99:69:58:a1:64:42:4f:19:ff:
                    e7:7e:e4:79:02:97:1a:3e:85:5f:81:63:c8:52:83:
                    17:02:a3:08:f2:03:c9:87:96:8d:20:a8:1d:d1:10:
                    ee:77:43:b9:fb:54:26:6e:83:4d:17:4b:01:9d:9f:
                    0a:9a:b3:80:a3:26:14:47:5f:e5:c3:a9:2a:ac:c3:
                    51:a8:ae:78:c8:cc:f8:f3:e5:d2:a6:ec:82:a7:ce:
                    96:4f:4e:ae:7f:41:0e:b9:c1:eb:62:c3:3f:a0:fa:
                    d1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:8D:AE:69:A9:97:29:42:12:C0:71:9B:BC:50:98:C4:69:74:3C:50
            X509v3 Authority Key Identifier:
                keyid:30:FB:67:54:FA:3D:2D:A2:47:13:B6:A9:CD:E6:13:47:E9:5C:32:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/30FB6754FA3D2DA24713B6A9CDE61347E95C320D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30FB6754FA3D2DA24713B6A9CDE61347E95C320D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/3230302e37352e3137372e302f32342d3234203d3e203631393339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.75.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:92:34:02:e3:25:15:a0:62:a9:3d:49:ce:75:fb:b4:c0:5a:
         a8:15:66:85:c9:ac:a6:81:9d:75:9e:93:0e:5e:22:62:6f:f0:
         71:a3:e7:36:e9:f6:e9:85:65:a4:49:6b:41:8d:9c:d4:15:a9:
         8d:e1:72:79:22:84:ad:4a:dd:53:f3:ac:12:89:49:97:6b:8d:
         36:62:5f:e5:81:97:35:9c:75:46:25:4a:26:28:2e:9b:59:00:
         86:6f:73:14:d4:80:1c:1a:ff:40:b4:9d:c0:b4:81:38:05:50:
         ee:b3:03:3f:0e:e3:85:b1:51:35:a1:82:fc:4f:9d:9e:1e:e0:
         a0:0a:77:a3:b6:61:67:ec:eb:ec:01:de:fe:46:90:ae:13:20:
         52:09:b2:d1:c0:31:97:fd:f8:1a:45:f1:0d:0b:1a:70:f6:96:
         f8:a3:8d:02:c8:69:c9:d7:5e:98:19:b9:0b:40:75:5f:5e:0f:
         e0:77:38:26:e6:d6:b9:08:d5:20:1d:56:04:6d:9c:e5:c4:58:
         05:4c:82:9d:b2:7a:f6:e7:ce:9b:b0:2a:a0:42:22:18:b1:b9:
         a2:a4:ec:c6:c5:14:c9:38:20:f8:2e:cc:3e:0e:7a:f4:90:24:
         9b:5c:34:28:61:0c:58:8f:d4:a9:68:d6:f4:06:11:57:87:30:
         19:a4:25:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:24:24 2025 by rpki-client