Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C8eVXvmGohob1kAGTiaJDUD1UZnSPEm1m3UdQ2vpDAoU/1/3230302e3232392e39322e302f32322d3234203d3e20323636393836.roa
File:                     3230302e3232392e39322e302f32322d3234203d3e20323636393836.roa (raw, json)
Hash identifier:          ImCqjIuw7ZPjN+CMKosxW66zFXcydQRtxmlATNq8CEo=
Subject key identifier:   74:AC:BF:F2:B4:45:E0:9D:76:1D:31:8C:46:3E:2D:BF:C9:9F:91:90
Certificate issuer:       /CN=78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D
Certificate serial:       5B961E5139B6F950EA726879A58D607B00F2E504
Authority key identifier: 78:C3:1F:85:CF:8B:6A:84:18:FA:D2:5A:55:F5:94:2F:3B:AC:DE:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C8eVXvmGohob1kAGTiaJDUD1UZnSPEm1m3UdQ2vpDAoU/1/3230302e3232392e39322e302f32322d3234203d3e20323636393836.roa
Signing time:             Thu 06 Mar 2025 10:06:04 +0000
ROA not before:           Thu 06 Mar 2025 10:01:04 +0000
ROA not after:            Thu 05 Mar 2026 10:06:04 +0000
asID:                     266986
IP address blocks:        200.229.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C8eVXvmGohob1kAGTiaJDUD1UZnSPEm1m3UdQ2vpDAoU/1/78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D.crl
                          rsync://rpki-repo.registro.br/repo/C8eVXvmGohob1kAGTiaJDUD1UZnSPEm1m3UdQ2vpDAoU/1/78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 15:25:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:96:1e:51:39:b6:f9:50:ea:72:68:79:a5:8d:60:7b:00:f2:e5:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D
        Validity
            Not Before: Mar  6 10:01:04 2025 GMT
            Not After : Mar  5 10:06:04 2026 GMT
        Subject: CN=74ACBFF2B445E09D761D318C463E2DBFC99F9190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8e:d8:11:41:87:64:f6:57:9a:8f:88:00:c4:
                    a4:b9:b0:f7:b7:15:7b:51:1c:10:31:ca:cd:ff:d9:
                    1b:31:e7:3a:37:f1:78:49:77:80:fd:ba:a8:8e:b0:
                    01:3c:82:fd:73:a9:f5:5b:f4:77:ca:ee:7b:7b:da:
                    6a:32:36:7f:40:b2:64:68:26:1a:23:0a:d2:87:c1:
                    14:1a:2d:26:fb:fb:f7:d5:f5:95:f3:52:6e:8e:36:
                    8b:43:58:9c:5d:bb:50:24:a0:03:58:40:c1:d1:d0:
                    fe:4f:6d:97:e8:ae:2b:b9:93:37:4f:e1:56:1b:57:
                    dd:d6:d4:e5:64:6b:80:dc:7b:86:db:8e:22:4f:6c:
                    c6:fa:bb:04:8d:6f:87:6c:04:2c:ae:0f:a8:f3:09:
                    24:ee:54:17:5d:87:53:28:0a:95:98:7a:17:0e:8e:
                    14:be:73:5c:02:d2:2f:66:51:53:86:bd:08:f5:26:
                    c9:96:7a:8b:10:4c:b2:6f:a5:40:91:26:be:bc:69:
                    03:d0:c7:3b:cd:20:df:66:d9:1b:76:a6:8e:c8:40:
                    ea:de:c1:c5:61:f1:90:12:32:8f:3e:92:11:aa:65:
                    c7:a9:6d:78:22:61:6e:c9:3a:b9:a7:b3:1c:a2:db:
                    ca:7c:9b:84:b2:4d:b6:40:f7:32:00:ff:78:54:2e:
                    09:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:AC:BF:F2:B4:45:E0:9D:76:1D:31:8C:46:3E:2D:BF:C9:9F:91:90
            X509v3 Authority Key Identifier:
                keyid:78:C3:1F:85:CF:8B:6A:84:18:FA:D2:5A:55:F5:94:2F:3B:AC:DE:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C8eVXvmGohob1kAGTiaJDUD1UZnSPEm1m3UdQ2vpDAoU/1/78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C8eVXvmGohob1kAGTiaJDUD1UZnSPEm1m3UdQ2vpDAoU/1/3230302e3232392e39322e302f32322d3234203d3e20323636393836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cb:69:ed:eb:38:d1:f9:15:93:7b:10:a3:a0:06:5e:80:8d:d8:
         cb:2e:b4:d8:b1:ee:6a:d3:eb:06:aa:6b:9c:87:a8:d4:77:42:
         a9:57:cc:70:bc:1d:ef:b9:cc:71:15:db:cd:06:fd:b1:1e:16:
         09:9f:a2:86:f3:54:01:98:b0:4e:fb:76:f7:30:ff:7a:51:8a:
         eb:ec:21:90:49:06:a1:46:cc:0e:dc:6f:1d:1d:ab:b9:b7:ac:
         20:b6:0c:e0:70:b6:ce:a1:ef:45:41:7d:59:29:c3:5d:60:d7:
         f2:d7:86:69:76:8d:6e:be:8c:61:dd:96:57:a4:ea:12:81:08:
         bd:d6:b7:08:15:bc:29:0e:7b:be:0a:2b:c7:51:e3:da:8d:03:
         b0:66:8b:ae:7f:d6:23:82:2b:32:1d:71:74:a6:ac:ff:cf:18:
         d2:94:45:61:3b:ca:55:77:50:eb:7b:bc:23:33:72:b7:91:98:
         e0:5e:26:7f:14:b3:f3:75:e2:d1:82:44:4b:d1:4d:16:aa:7f:
         50:f1:66:ee:e8:e3:c9:91:f2:c1:7d:a3:7e:87:27:29:da:43:
         ac:4c:46:50:9d:8f:b5:fb:4b:22:85:12:c4:cf:13:85:f0:9f:
         3b:09:d7:28:64:d3:dc:09:8a:bd:d9:32:68:16:30:a4:71:d6:
         07:a8:5e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 04:25:00 2025 by rpki-client