Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BPRnbCSNvcAZoGGQYyfogJqnYcvbHvfa6o8QgnTo87wQ/1/3230302e33392e34342e302f32322d3234203d3e20323731343235.roa
File:                     3230302e33392e34342e302f32322d3234203d3e20323731343235.roa (raw, json)
Hash identifier:          7R2hF0kVVu4KD5KvZ3+D1DVGCGxwlkQZBWEgRy3pgpU=
Subject key identifier:   BE:DB:99:45:44:C6:05:8D:58:98:19:49:23:06:17:CA:DD:4D:31:4D
Certificate issuer:       /CN=4937C541E7F86C7930B257F315044E29E4FF02B0
Certificate serial:       3049139CE80EEFF00557B0793A6B56D79F297501
Authority key identifier: 49:37:C5:41:E7:F8:6C:79:30:B2:57:F3:15:04:4E:29:E4:FF:02:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4937C541E7F86C7930B257F315044E29E4FF02B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BPRnbCSNvcAZoGGQYyfogJqnYcvbHvfa6o8QgnTo87wQ/1/3230302e33392e34342e302f32322d3234203d3e20323731343235.roa
Signing time:             Fri 07 Mar 2025 01:23:05 +0000
ROA not before:           Fri 07 Mar 2025 01:18:05 +0000
ROA not after:            Fri 06 Mar 2026 01:23:05 +0000
asID:                     271425
IP address blocks:        200.39.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BPRnbCSNvcAZoGGQYyfogJqnYcvbHvfa6o8QgnTo87wQ/1/4937C541E7F86C7930B257F315044E29E4FF02B0.crl
                          rsync://rpki-repo.registro.br/repo/BPRnbCSNvcAZoGGQYyfogJqnYcvbHvfa6o8QgnTo87wQ/1/4937C541E7F86C7930B257F315044E29E4FF02B0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4937C541E7F86C7930B257F315044E29E4FF02B0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 04:43:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:49:13:9c:e8:0e:ef:f0:05:57:b0:79:3a:6b:56:d7:9f:29:75:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4937C541E7F86C7930B257F315044E29E4FF02B0
        Validity
            Not Before: Mar  7 01:18:05 2025 GMT
            Not After : Mar  6 01:23:05 2026 GMT
        Subject: CN=BEDB994544C6058D58981949230617CADD4D314D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3f:7f:ac:bb:c8:36:d0:67:ff:8e:f2:d9:83:
                    59:10:2e:a9:79:5e:e8:99:d4:f0:84:23:ac:9c:c5:
                    3a:f9:8a:e9:0d:88:62:e0:0b:a5:90:fb:27:a2:0b:
                    8c:9f:e2:6b:27:bf:fa:a5:1a:b9:8c:c9:6c:e3:b3:
                    27:20:20:b3:8c:46:57:4f:3c:a7:01:2f:c4:85:b7:
                    5c:a1:59:52:f1:ea:e4:f7:00:35:14:31:4a:e6:79:
                    9c:ec:47:29:47:28:a8:73:b0:1f:d4:b8:a9:53:40:
                    28:7a:6d:16:de:31:58:c2:59:01:83:a5:43:cc:a0:
                    ff:88:f9:3d:d3:41:70:91:90:bb:c2:75:57:be:ad:
                    41:28:4e:1a:70:e4:53:9a:dc:4f:8f:e6:22:1c:ba:
                    26:31:5f:bc:73:d1:99:b3:86:1a:fb:0d:ad:f0:57:
                    3b:68:a8:29:81:28:38:b4:1a:fd:25:3a:7e:b5:40:
                    c8:0e:23:a8:22:5c:ef:5f:8e:1e:43:64:34:b7:d3:
                    24:1e:95:c9:99:52:9e:5c:1a:92:5b:9e:21:74:f2:
                    f9:fc:45:c6:c2:df:d8:7a:c2:d4:fc:06:c6:86:9f:
                    a9:61:66:4d:3e:c8:f2:38:5c:01:4b:a2:d9:de:47:
                    e2:f7:a7:c1:4b:5f:fb:5f:31:30:aa:ea:3b:e3:a3:
                    18:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:DB:99:45:44:C6:05:8D:58:98:19:49:23:06:17:CA:DD:4D:31:4D
            X509v3 Authority Key Identifier:
                keyid:49:37:C5:41:E7:F8:6C:79:30:B2:57:F3:15:04:4E:29:E4:FF:02:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BPRnbCSNvcAZoGGQYyfogJqnYcvbHvfa6o8QgnTo87wQ/1/4937C541E7F86C7930B257F315044E29E4FF02B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4937C541E7F86C7930B257F315044E29E4FF02B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BPRnbCSNvcAZoGGQYyfogJqnYcvbHvfa6o8QgnTo87wQ/1/3230302e33392e34342e302f32322d3234203d3e20323731343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:ca:06:6d:32:13:92:ac:6a:95:01:7b:dc:84:66:63:4b:04:
         fc:25:6f:33:7f:9f:5e:6f:95:97:c5:82:0f:42:63:97:f4:7c:
         50:f5:5e:49:71:47:79:dc:d4:00:57:0a:4a:2f:8a:03:9e:2a:
         85:ad:ae:ef:ee:a2:4e:1e:43:33:84:4d:2b:56:e3:ec:36:1b:
         3b:a8:22:7a:4f:08:52:a6:c6:ac:59:85:17:19:bd:8a:1a:a3:
         b9:2d:8b:6c:d0:e5:10:18:86:65:31:f3:6f:10:c1:75:71:c9:
         c0:71:da:71:66:57:d3:aa:b9:51:a0:50:ce:35:93:44:f2:cd:
         a6:e2:e7:e9:a2:a1:8c:16:cc:98:43:63:0e:59:54:3c:c7:3c:
         0c:8a:48:73:d3:a4:79:9c:27:6d:25:53:7b:77:3b:41:08:e0:
         58:53:49:23:2e:d8:e6:7e:5d:b5:ee:f0:1e:ec:a1:69:88:4c:
         78:94:d8:82:2e:96:fc:70:1a:2c:00:b3:ed:5b:27:8c:4b:8a:
         71:51:cf:a5:91:0d:f4:23:a9:b1:22:ef:b8:0d:a3:49:a7:22:
         ea:b1:5d:14:45:28:58:24:f6:52:63:cb:44:4c:fc:95:3d:86:
         80:7d:84:5a:b3:23:b3:a4:3b:f2:0c:b8:43:63:a6:71:06:7c:
         e2:b3:55:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:15:08 2025 by rpki-client