Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/3230302e3134332e36342e302f31382d3332203d3e203134383430.roa
File:                     3230302e3134332e36342e302f31382d3332203d3e203134383430.roa (raw, json)
Hash identifier:          ZuO3760agCW6ki2IUMCtyhYJ6ZjbnFPlmjd4mvq3Lt8=
Subject key identifier:   51:E1:EF:F6:D4:C2:49:75:C4:35:78:C1:22:D2:E3:F7:4F:5E:86:98
Certificate issuer:       /CN=4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7
Certificate serial:       265A46EABC5A1383775BD4D9A01FFD6CFF55F0A1
Authority key identifier: 4E:87:B4:46:2F:90:42:B5:2A:A4:D6:5A:C7:D2:FD:92:C2:70:2D:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/3230302e3134332e36342e302f31382d3332203d3e203134383430.roa
Signing time:             Tue 11 Jun 2024 16:56:48 +0000
ROA not before:           Tue 11 Jun 2024 16:51:48 +0000
ROA not after:            Tue 10 Jun 2025 16:56:48 +0000
asID:                     14840
IP address blocks:        200.143.64.0/18 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.crl
                          rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 09:51:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:5a:46:ea:bc:5a:13:83:77:5b:d4:d9:a0:1f:fd:6c:ff:55:f0:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7
        Validity
            Not Before: Jun 11 16:51:48 2024 GMT
            Not After : Jun 10 16:56:48 2025 GMT
        Subject: CN=51E1EFF6D4C24975C43578C122D2E3F74F5E8698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7c:bc:23:08:54:f5:60:68:77:e5:fa:8b:c3:
                    58:24:45:41:68:a5:40:5b:fc:b0:93:8b:f3:ce:eb:
                    85:1d:9e:73:1a:b3:51:11:94:48:cc:b2:62:5d:fd:
                    57:b3:bf:6d:3f:d2:e6:27:20:10:e4:a8:e7:c8:a2:
                    98:51:d1:7b:90:2c:a5:eb:9b:27:5e:c0:c4:23:c6:
                    cb:5a:5a:cd:e4:ed:f5:eb:4a:78:0f:c6:e7:7a:3e:
                    cc:c6:b8:7c:a9:32:36:d0:73:7e:39:67:37:af:c5:
                    05:01:48:46:50:90:3d:b2:a7:80:63:e0:39:a1:fd:
                    03:6b:c9:ec:b7:58:f0:c7:c1:33:e7:d5:3e:39:00:
                    94:a3:10:2c:13:7d:0c:da:0d:77:3f:96:24:39:fc:
                    5e:c0:40:59:21:b0:9e:45:3c:4b:c2:19:7e:38:3e:
                    6e:6b:fc:8b:60:ee:7b:c9:0d:5e:3a:b3:7a:f8:67:
                    8d:57:e5:d1:e5:06:0a:0f:47:6b:d5:84:13:0e:8f:
                    a1:a2:b5:f3:63:b9:aa:b4:b2:87:28:f4:b9:1b:a2:
                    bc:77:cb:89:8d:d7:b6:03:05:44:8c:48:25:f4:4e:
                    36:85:4d:2a:69:bb:41:3f:5d:0b:c4:9b:f7:9a:21:
                    e8:fa:7f:11:dd:9b:2e:ba:0b:96:55:16:3d:10:f7:
                    44:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:E1:EF:F6:D4:C2:49:75:C4:35:78:C1:22:D2:E3:F7:4F:5E:86:98
            X509v3 Authority Key Identifier:
                keyid:4E:87:B4:46:2F:90:42:B5:2A:A4:D6:5A:C7:D2:FD:92:C2:70:2D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/3230302e3134332e36342e302f31382d3332203d3e203134383430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.143.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         b1:62:48:6d:2f:57:88:fe:bc:cd:96:62:33:38:73:c5:8d:b6:
         10:f4:33:fd:39:c6:ca:85:fe:ab:5c:fd:78:8e:64:19:25:8f:
         89:d9:35:74:12:2c:fa:18:36:de:27:82:a2:f0:6e:f4:6f:fa:
         db:79:64:ed:65:dc:78:e2:36:a6:5d:92:f7:43:3b:a7:f1:2e:
         13:cd:6a:74:d1:42:71:96:7a:27:3d:71:b4:8e:7a:60:40:eb:
         ec:ab:0d:35:10:8d:07:12:f7:ee:f0:4d:40:5d:9a:91:78:6a:
         58:5d:b8:49:3a:76:e8:5a:c6:ce:85:40:de:c2:d4:42:5a:72:
         5c:fa:43:27:b1:91:df:34:c5:b9:e0:e9:90:10:be:62:7f:83:
         f3:80:db:6f:74:5c:17:9a:28:58:f1:c8:1a:86:81:b9:52:41:
         21:25:d9:b3:53:98:43:15:a1:23:4c:f0:6e:5a:7d:98:76:3f:
         bc:ef:51:cb:ba:4f:f8:5c:5c:b9:86:9f:7b:0b:32:ec:ac:af:
         6c:37:92:dc:b2:86:7e:d4:cd:31:a2:1e:e9:df:3d:b0:70:78:
         0a:b8:6d:76:13:b6:f1:4e:2d:bd:32:2c:0f:54:d7:ec:c4:3a:
         c0:2f:d4:68:3b:5b:a9:90:85:13:04:ef:ce:2f:d2:ad:8f:d1:
         55:4f:9b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:45:37 2025 by rpki-client