Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3230302e3132352e3137392e302f32342d3234203d3e20323635333030.roa
File:                     3230302e3132352e3137392e302f32342d3234203d3e20323635333030.roa (raw, json)
Hash identifier:          UCqD4pwW6AAlGhvfONqkwKKkBJyE5em9pmuLXbjR5UY=
Subject key identifier:   AE:B9:E9:06:2A:39:2D:52:94:F7:9A:16:C2:8C:B4:37:85:15:DB:EE
Certificate issuer:       /CN=6A8306BAA9B2C90FC29708796503E6EE751CFB0F
Certificate serial:       55FEDAB9842CF6EA99542CE02E8C8AF328CB42A3
Authority key identifier: 6A:83:06:BA:A9:B2:C9:0F:C2:97:08:79:65:03:E6:EE:75:1C:FB:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A8306BAA9B2C90FC29708796503E6EE751CFB0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3230302e3132352e3137392e302f32342d3234203d3e20323635333030.roa
Signing time:             Mon 25 Nov 2024 17:35:57 +0000
ROA not before:           Mon 25 Nov 2024 17:30:57 +0000
ROA not after:            Mon 24 Nov 2025 17:35:57 +0000
asID:                     265300
IP address blocks:        200.125.179.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/6A8306BAA9B2C90FC29708796503E6EE751CFB0F.crl
                          rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/6A8306BAA9B2C90FC29708796503E6EE751CFB0F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A8306BAA9B2C90FC29708796503E6EE751CFB0F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 20:04:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:fe:da:b9:84:2c:f6:ea:99:54:2c:e0:2e:8c:8a:f3:28:cb:42:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A8306BAA9B2C90FC29708796503E6EE751CFB0F
        Validity
            Not Before: Nov 25 17:30:57 2024 GMT
            Not After : Nov 24 17:35:57 2025 GMT
        Subject: CN=AEB9E9062A392D5294F79A16C28CB4378515DBEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ff:98:d1:28:ee:dd:c5:1c:6f:11:20:37:5e:
                    08:ce:1f:c4:19:1c:c0:13:73:c4:e4:83:e0:77:6d:
                    27:71:10:50:02:0d:a9:7a:48:63:0d:48:dd:5d:b3:
                    a0:d0:f8:47:80:17:e0:85:f5:a2:a9:a1:b6:c1:4e:
                    e2:f7:02:eb:0d:34:7a:79:a8:63:f5:ee:8f:21:ae:
                    5b:fb:0a:78:18:45:e3:fa:6e:c1:1b:b8:91:18:72:
                    40:58:88:b8:1c:03:a1:b1:98:da:4d:c6:34:c1:24:
                    32:9f:5d:e9:ee:5a:98:97:c2:07:29:7d:b5:d6:d2:
                    96:01:fc:b1:0b:af:bb:4a:9f:b5:c4:a9:7e:0f:5a:
                    99:61:e6:62:78:1a:62:fa:8a:86:84:00:a4:8d:d3:
                    a7:c7:23:da:6b:98:00:0e:5f:0b:1a:02:fc:ae:05:
                    6f:e8:e1:35:c5:a1:db:2a:9d:f1:f3:02:7b:8f:e5:
                    cc:59:8f:27:22:49:bb:6a:5c:5f:71:b8:f4:14:32:
                    ae:0b:39:72:a9:11:8a:da:93:7a:f4:49:42:e0:da:
                    c4:43:c1:e8:45:59:7b:f8:36:29:75:0b:b3:0b:69:
                    cc:d0:91:93:25:25:aa:cc:32:10:d1:84:3d:1b:42:
                    85:c3:0a:87:87:de:9d:4f:11:ce:04:f9:0e:32:fe:
                    4d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:B9:E9:06:2A:39:2D:52:94:F7:9A:16:C2:8C:B4:37:85:15:DB:EE
            X509v3 Authority Key Identifier:
                keyid:6A:83:06:BA:A9:B2:C9:0F:C2:97:08:79:65:03:E6:EE:75:1C:FB:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/6A8306BAA9B2C90FC29708796503E6EE751CFB0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A8306BAA9B2C90FC29708796503E6EE751CFB0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3230302e3132352e3137392e302f32342d3234203d3e20323635333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.125.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:18:ed:39:2d:e0:2b:21:bb:d2:d6:17:8b:82:f0:d4:c0:ae:
         33:c9:18:57:78:59:66:aa:f6:98:f0:91:4d:56:a9:84:76:51:
         cb:45:2f:56:d8:35:e2:6d:4f:38:0a:65:a8:5a:df:ab:ec:56:
         65:a3:2a:de:39:7d:19:fe:bf:6a:fa:af:52:49:63:16:14:85:
         1a:9f:bd:f5:0f:b3:59:6a:05:7f:58:88:49:bc:21:b2:85:45:
         ea:74:6a:a9:c2:08:9e:42:1d:3d:0f:6c:8e:bc:6c:e3:72:9a:
         18:2c:fc:c4:a3:2c:67:ac:d5:04:06:42:4f:52:c6:fd:d4:9a:
         f7:ae:78:6e:c9:72:0c:d4:49:49:b3:4c:20:d5:c2:b4:26:bd:
         b3:70:58:d9:d5:9f:71:34:e2:39:dc:6e:a7:d3:3a:33:5f:75:
         47:1b:56:43:ab:92:b9:2c:50:52:6a:68:65:cb:8b:95:37:02:
         1c:31:9a:5f:2f:ba:9e:b6:19:24:d6:bb:bc:52:a4:83:e5:8f:
         34:85:7d:e0:88:e3:82:61:f6:fc:aa:12:32:04:c0:95:ad:25:
         7e:d2:1e:d4:39:97:2a:fe:d6:84:22:de:35:c3:84:f8:f9:f0:
         a0:4c:62:e6:d7:b8:8b:a0:3b:06:06:53:ed:4d:76:40:4e:59:
         8e:6c:50:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:46:38 2024 by rpki-client on console-fra.rpki-client.org