Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/3230302e3132342e3137322e302f32342d3234203d3e20323730323739.roa
File:                     3230302e3132342e3137322e302f32342d3234203d3e20323730323739.roa (raw, json)
Hash identifier:          VHq8ZEyoowCZWXDzrootpXLcNjZPy/BNrxBkB8brJ5I=
Subject key identifier:   7C:8F:C0:D4:A1:C0:D0:D9:1F:99:A4:67:68:BD:28:34:54:F4:1E:02
Certificate issuer:       /CN=CE4086C53A0E1A19AE5AA00A9874ABBD78563A96
Certificate serial:       37834FEDFBC2B3559015AE0EF18EE16911602128
Authority key identifier: CE:40:86:C5:3A:0E:1A:19:AE:5A:A0:0A:98:74:AB:BD:78:56:3A:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/3230302e3132342e3137322e302f32342d3234203d3e20323730323739.roa
Signing time:             Wed 05 Mar 2025 19:00:25 +0000
ROA not before:           Wed 05 Mar 2025 18:55:25 +0000
ROA not after:            Wed 04 Mar 2026 19:00:25 +0000
asID:                     270279
IP address blocks:        200.124.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.crl
                          rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 22:37:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:83:4f:ed:fb:c2:b3:55:90:15:ae:0e:f1:8e:e1:69:11:60:21:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE4086C53A0E1A19AE5AA00A9874ABBD78563A96
        Validity
            Not Before: Mar  5 18:55:25 2025 GMT
            Not After : Mar  4 19:00:25 2026 GMT
        Subject: CN=7C8FC0D4A1C0D0D91F99A46768BD283454F41E02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b0:bc:40:ec:f9:b2:75:9c:28:57:fe:f7:d7:
                    17:02:06:24:ca:66:02:b0:e8:c6:2d:60:69:4e:7d:
                    04:b5:6f:b5:8f:95:8a:e1:db:01:26:19:0e:d8:8a:
                    ea:68:80:a2:d4:19:94:bd:3b:16:34:06:5d:7a:0f:
                    fa:44:6b:d6:44:f8:47:2f:f7:1b:3a:53:ea:3e:2a:
                    94:22:0c:a8:b0:5e:eb:87:69:9d:4d:3a:52:9d:b7:
                    32:c0:01:b3:0f:81:80:bc:c6:1e:20:76:34:c2:b8:
                    f2:ef:1e:fe:b0:a2:d1:48:05:e3:0f:03:ad:34:74:
                    2f:d9:25:2b:e7:76:91:a6:bd:4a:49:a5:85:5e:3a:
                    28:f1:14:be:e2:ed:f2:fa:28:09:97:df:86:f3:53:
                    51:f6:0d:fa:2f:9c:6e:94:a5:d8:2c:4b:48:71:ac:
                    3e:0d:ea:cc:33:2d:b7:16:29:ac:1c:23:9f:7f:e4:
                    af:06:69:96:00:dd:c8:b8:5e:9a:31:39:35:44:e1:
                    52:3d:ed:2e:f4:e4:27:a7:d8:3f:66:74:fc:71:3f:
                    f4:13:fa:0c:e2:2b:27:76:8f:34:bf:a9:aa:b4:e8:
                    bd:fc:61:91:d4:7e:e8:b6:69:12:24:5c:79:20:cc:
                    f3:73:73:1b:c3:53:7b:89:7d:13:0f:9c:8b:42:57:
                    98:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:8F:C0:D4:A1:C0:D0:D9:1F:99:A4:67:68:BD:28:34:54:F4:1E:02
            X509v3 Authority Key Identifier:
                keyid:CE:40:86:C5:3A:0E:1A:19:AE:5A:A0:0A:98:74:AB:BD:78:56:3A:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/3230302e3132342e3137322e302f32342d3234203d3e20323730323739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:a6:8f:90:ba:fc:86:92:c1:e5:29:47:72:34:d5:e8:a3:d8:
         52:fc:e5:9b:7f:49:3c:fb:4d:73:f4:20:27:d6:50:46:e6:6b:
         c3:e2:18:33:95:aa:5e:ba:e7:76:ae:73:f4:82:a1:ab:f9:a4:
         c6:75:7f:8f:3a:52:ee:a4:2f:6e:ac:17:c6:d2:9b:bb:8b:4b:
         b5:ce:8d:db:f8:22:b4:6c:76:50:de:56:f3:69:c1:33:58:66:
         66:b6:5e:90:06:f2:01:61:e9:2e:dc:e8:de:fd:17:4a:21:f6:
         bd:47:1a:b1:27:50:7e:1f:a5:cd:32:57:39:9f:01:6e:f3:ff:
         a6:d4:64:06:87:75:ae:ad:98:a3:d7:ce:1d:80:72:0b:37:2e:
         72:59:c6:d0:5b:f7:32:24:09:be:e8:91:c5:2b:29:f6:aa:46:
         2e:09:d9:ed:79:72:68:13:32:cf:61:6c:b2:6f:5d:6b:45:82:
         cf:12:b7:b2:24:fb:cc:5c:89:b7:49:7b:86:10:39:2d:4d:f4:
         e4:87:c3:87:d4:70:19:3c:ea:34:09:b5:51:ec:06:74:65:a6:
         a5:6b:49:11:17:06:7b:42:1a:ff:43:95:0c:70:c7:e0:f8:87:
         1c:64:4d:79:ff:31:18:70:30:8b:38:05:f5:81:5d:3e:7e:21:
         20:c1:c4:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:28:51 2025 by rpki-client