Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BfARKZfAYVhFh5NZeR5KM19Xn86EEkYneH4LzJoPP2o9/0/3230302e3130372e37362e302f32322d3332203d3e20323731363831.roa
File:                     3230302e3130372e37362e302f32322d3332203d3e20323731363831.roa (raw, json)
Hash identifier:          IljkCjb80IvwnZXtGNpwRC40xEjXdOutd5J5x4FmgbQ=
Subject key identifier:   A9:5B:EA:1F:71:87:94:F8:C9:62:9C:3C:A3:1F:B4:A4:C8:94:61:5E
Certificate issuer:       /CN=4CAD72F1E7054DCB5DB77A0B245F7AAD63A83E84
Certificate serial:       227287EC990C1776EEF230F8083F3A8A24226D60
Authority key identifier: 4C:AD:72:F1:E7:05:4D:CB:5D:B7:7A:0B:24:5F:7A:AD:63:A8:3E:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CAD72F1E7054DCB5DB77A0B245F7AAD63A83E84.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BfARKZfAYVhFh5NZeR5KM19Xn86EEkYneH4LzJoPP2o9/0/3230302e3130372e37362e302f32322d3332203d3e20323731363831.roa
Signing time:             Thu 16 Jan 2025 18:56:43 +0000
ROA not before:           Thu 16 Jan 2025 18:51:43 +0000
ROA not after:            Thu 15 Jan 2026 18:56:43 +0000
asID:                     271681
IP address blocks:        200.107.76.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BfARKZfAYVhFh5NZeR5KM19Xn86EEkYneH4LzJoPP2o9/0/4CAD72F1E7054DCB5DB77A0B245F7AAD63A83E84.crl
                          rsync://rpki-repo.registro.br/repo/BfARKZfAYVhFh5NZeR5KM19Xn86EEkYneH4LzJoPP2o9/0/4CAD72F1E7054DCB5DB77A0B245F7AAD63A83E84.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CAD72F1E7054DCB5DB77A0B245F7AAD63A83E84.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 05:20:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:72:87:ec:99:0c:17:76:ee:f2:30:f8:08:3f:3a:8a:24:22:6d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CAD72F1E7054DCB5DB77A0B245F7AAD63A83E84
        Validity
            Not Before: Jan 16 18:51:43 2025 GMT
            Not After : Jan 15 18:56:43 2026 GMT
        Subject: CN=A95BEA1F718794F8C9629C3CA31FB4A4C894615E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7d:6e:53:f3:ce:0b:4b:86:78:5e:2a:9f:90:
                    ab:c1:7c:ba:1c:9c:28:ca:6a:26:c0:e6:bc:35:4c:
                    f5:44:5b:53:f1:43:53:a4:62:5f:09:99:a2:76:60:
                    db:ba:01:3e:23:94:26:bd:db:2f:c0:69:d9:58:fb:
                    4d:5f:2b:66:d6:92:62:e3:32:4d:16:cc:df:36:e0:
                    8d:31:da:7b:72:91:9b:94:eb:5e:54:7b:74:20:35:
                    50:8d:66:8d:68:fb:1b:32:59:94:5e:91:ca:f6:51:
                    80:24:fa:f1:23:dd:a6:d1:7d:1d:c1:dd:48:a0:99:
                    74:28:b5:f2:ed:f5:f2:94:77:e8:3a:9c:dd:43:a0:
                    7c:ed:32:22:a9:21:a6:27:51:61:c8:54:bf:9a:74:
                    20:71:bb:78:da:4c:12:17:d8:6e:0d:3c:2d:2a:c2:
                    aa:20:5c:c1:c4:41:3a:6b:be:82:5c:82:1e:28:b8:
                    a2:56:30:14:37:98:8d:9c:26:ab:68:ef:60:c2:a9:
                    a5:8f:30:5c:4b:5f:53:eb:0b:01:e6:78:af:15:0e:
                    63:63:a5:81:71:c9:18:58:05:ca:0f:20:b0:b5:ed:
                    df:e7:46:a1:a0:db:28:28:4d:10:23:6b:31:98:a0:
                    8f:37:41:24:27:d6:0d:d2:38:3d:25:c1:1f:5c:33:
                    99:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:5B:EA:1F:71:87:94:F8:C9:62:9C:3C:A3:1F:B4:A4:C8:94:61:5E
            X509v3 Authority Key Identifier:
                keyid:4C:AD:72:F1:E7:05:4D:CB:5D:B7:7A:0B:24:5F:7A:AD:63:A8:3E:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BfARKZfAYVhFh5NZeR5KM19Xn86EEkYneH4LzJoPP2o9/0/4CAD72F1E7054DCB5DB77A0B245F7AAD63A83E84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CAD72F1E7054DCB5DB77A0B245F7AAD63A83E84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BfARKZfAYVhFh5NZeR5KM19Xn86EEkYneH4LzJoPP2o9/0/3230302e3130372e37362e302f32322d3332203d3e20323731363831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.107.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:90:75:cf:0c:47:77:61:1c:9a:d4:cb:08:0e:12:f2:73:65:
         4f:bc:7f:a8:ff:5a:62:35:73:2a:65:a8:fd:08:e3:6c:3f:cb:
         8c:a2:13:9d:b6:ca:07:dd:d8:f3:7a:c2:70:03:8e:b1:fb:6a:
         ae:cc:33:d0:55:34:da:1b:69:d3:4e:b1:82:5a:05:a9:96:e1:
         fc:3f:13:56:ac:6e:50:10:4d:dc:66:f3:95:92:4f:60:63:15:
         27:28:c2:b9:bd:b0:1a:b1:73:d8:e9:7d:6a:20:09:3c:9f:b1:
         64:10:dc:1d:da:d1:be:ec:f4:76:26:46:e3:f5:49:d2:a9:26:
         d8:56:90:ce:b0:52:e5:a6:c5:6f:e6:90:7f:d5:2a:a1:ad:a2:
         9c:62:79:32:13:e2:e3:8a:82:f6:6e:7b:ca:c4:6a:69:a1:7d:
         0e:6e:64:6f:2e:63:0c:ff:87:36:79:f6:22:58:8f:aa:5d:59:
         36:8b:39:34:71:28:8b:24:2b:f5:ce:6f:2c:e2:11:7d:ca:fb:
         09:b8:e0:ca:9c:a6:ab:43:6a:e2:fe:0d:b6:58:e0:64:7e:9d:
         a3:80:26:0d:ee:5d:a3:77:a4:88:ca:44:cb:9f:88:da:a6:5b:
         75:b9:c5:48:23:ff:ce:36:aa:61:d6:d6:21:2b:6c:7d:cd:1b:
         bd:67:bb:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:42:53 2025 by rpki-client