Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/3230302e37352e3138312e302f32342d3234203d3e203631393339.roa
File:                     3230302e37352e3138312e302f32342d3234203d3e203631393339.roa (raw, json)
Hash identifier:          S7X+KSJBwsurQ3wLqEqNENvMIgdYrLa5dcaLXnSAs5s=
Subject key identifier:   09:19:38:85:98:77:E7:4A:D5:F2:B7:40:F8:A5:1B:3C:67:E0:42:7F
Certificate issuer:       /CN=30FB6754FA3D2DA24713B6A9CDE61347E95C320D
Certificate serial:       7B3BFE7DEA5F1EBD9D6DB6804E00B536E9677CBC
Authority key identifier: 30:FB:67:54:FA:3D:2D:A2:47:13:B6:A9:CD:E6:13:47:E9:5C:32:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30FB6754FA3D2DA24713B6A9CDE61347E95C320D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/3230302e37352e3138312e302f32342d3234203d3e203631393339.roa
Signing time:             Sun 04 Aug 2024 22:43:10 +0000
ROA not before:           Sun 04 Aug 2024 22:38:10 +0000
ROA not after:            Sun 03 Aug 2025 22:43:10 +0000
asID:                     61939
IP address blocks:        200.75.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/30FB6754FA3D2DA24713B6A9CDE61347E95C320D.crl
                          rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/30FB6754FA3D2DA24713B6A9CDE61347E95C320D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30FB6754FA3D2DA24713B6A9CDE61347E95C320D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 08:26:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:3b:fe:7d:ea:5f:1e:bd:9d:6d:b6:80:4e:00:b5:36:e9:67:7c:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30FB6754FA3D2DA24713B6A9CDE61347E95C320D
        Validity
            Not Before: Aug  4 22:38:10 2024 GMT
            Not After : Aug  3 22:43:10 2025 GMT
        Subject: CN=091938859877E74AD5F2B740F8A51B3C67E0427F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5f:bf:0b:4f:68:18:38:72:7e:21:c4:91:d6:
                    9b:34:1c:be:bd:34:d7:d3:ac:ff:00:12:b7:80:03:
                    b5:1d:24:ea:1d:76:7b:1a:82:74:1a:43:36:67:8a:
                    1b:9e:8c:ad:db:16:e4:d6:86:a0:a2:52:94:62:ab:
                    3f:bb:9d:6a:8c:49:e9:00:c5:1d:d1:da:e7:37:08:
                    60:9c:1a:c7:8f:12:0b:e9:1e:a2:88:7a:ae:34:da:
                    95:63:88:df:f4:1c:0e:ef:20:0d:89:99:3f:0a:07:
                    94:db:ae:f7:35:12:36:d7:0a:47:96:9c:d3:4f:92:
                    b7:14:1d:48:c1:cd:06:ee:45:9a:7a:27:e1:b9:26:
                    ed:c4:b1:ab:10:b8:b7:e7:a3:4f:7d:31:57:f1:cb:
                    10:b7:49:26:cd:70:4e:8b:a7:b8:79:a4:bb:09:76:
                    6f:79:11:6f:23:61:94:67:a6:c5:1b:c8:de:6f:e8:
                    4c:e0:d0:28:dc:b1:ce:a7:bb:ab:24:03:1d:58:4b:
                    17:25:e8:e8:08:a6:fe:f8:f9:49:cf:37:c9:9e:c8:
                    21:ad:2a:c5:df:c2:51:4d:53:48:e7:bc:27:84:0d:
                    ea:25:10:c3:6a:ef:e7:54:17:9f:69:9d:10:81:05:
                    f1:76:1e:b8:0b:ce:5c:16:1c:f5:c4:86:af:47:d7:
                    ca:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:19:38:85:98:77:E7:4A:D5:F2:B7:40:F8:A5:1B:3C:67:E0:42:7F
            X509v3 Authority Key Identifier:
                keyid:30:FB:67:54:FA:3D:2D:A2:47:13:B6:A9:CD:E6:13:47:E9:5C:32:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/30FB6754FA3D2DA24713B6A9CDE61347E95C320D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30FB6754FA3D2DA24713B6A9CDE61347E95C320D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/3230302e37352e3138312e302f32342d3234203d3e203631393339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.75.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:aa:67:7e:0a:e6:2b:f7:55:5a:3a:4a:8b:96:c6:c4:e9:a0:
         31:a1:73:83:bc:43:28:81:25:b0:a7:7c:36:9b:1f:cc:90:17:
         fe:85:b8:a6:f2:61:11:3e:c7:c2:7f:be:a3:c3:eb:25:25:bf:
         ae:41:bb:e9:de:a8:ff:2a:04:7a:c8:e8:b7:03:9d:79:ef:f2:
         be:b1:22:07:a8:0c:0f:ec:d4:d2:41:58:59:b9:18:a9:0e:ce:
         f4:50:a5:70:ac:f0:12:28:6e:a9:f4:83:18:a4:f6:04:eb:2a:
         58:95:63:5d:c6:28:48:fd:da:4f:2e:61:3c:df:e5:de:23:a9:
         56:30:aa:bb:1e:0d:01:8d:89:f5:61:8a:71:fb:a6:91:ad:fb:
         9d:a9:e0:42:a4:71:ae:e8:08:dd:0b:1e:4e:e3:fb:5f:b2:d5:
         02:34:9f:64:56:d2:ca:f7:6e:18:88:d5:1c:8a:51:52:30:c9:
         27:e5:10:d2:9d:71:db:e0:ce:75:e2:d5:d7:c3:be:06:ab:9a:
         79:ad:a3:04:79:33:42:48:ea:28:20:ed:54:a2:d9:f6:8f:d0:
         4c:4e:8c:1a:5c:3b:b8:b2:d0:c3:0a:04:ce:fa:89:b9:25:f4:
         de:b9:94:12:a3:43:80:3a:d8:94:bd:f0:90:1b:ab:dc:b7:32:
         bf:83:a7:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:25:00 2025 by rpki-client