Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/3230302e3231352e3230382e302f32302d3332203d3e203134383430.roa
File:                     3230302e3231352e3230382e302f32302d3332203d3e203134383430.roa (raw, json)
Hash identifier:          p1uZlN8Wlt/fWaORsWNF+wGYb4BEwpix52g3HRvieik=
Subject key identifier:   35:32:70:43:ED:5E:A7:85:83:89:7F:64:C3:05:56:27:90:CC:CC:74
Certificate issuer:       /CN=4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7
Certificate serial:       347BFA3E8DDC6A00D50CF2D573ABD436730A18DB
Authority key identifier: 4E:87:B4:46:2F:90:42:B5:2A:A4:D6:5A:C7:D2:FD:92:C2:70:2D:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/3230302e3231352e3230382e302f32302d3332203d3e203134383430.roa
Signing time:             Tue 13 May 2025 17:07:04 +0000
ROA not before:           Tue 13 May 2025 17:02:04 +0000
ROA not after:            Tue 12 May 2026 17:07:04 +0000
asID:                     14840
IP address blocks:        200.215.208.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.crl
                          rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 02:46:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:7b:fa:3e:8d:dc:6a:00:d5:0c:f2:d5:73:ab:d4:36:73:0a:18:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7
        Validity
            Not Before: May 13 17:02:04 2025 GMT
            Not After : May 12 17:07:04 2026 GMT
        Subject: CN=35327043ED5EA78583897F64C305562790CCCC74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1a:4a:3a:7d:13:15:08:1d:01:a0:48:04:1d:
                    2e:18:12:05:7c:90:7a:f9:90:49:77:9c:24:8b:96:
                    89:4a:bc:7b:ee:ca:30:dc:17:36:96:7f:58:f9:f6:
                    df:2f:71:fa:79:75:80:8d:72:4d:3f:45:8f:3e:fc:
                    4f:8a:40:e3:b2:f6:9e:0e:d4:3f:a5:61:db:be:64:
                    5b:20:49:4b:5e:f4:b5:35:ad:93:12:2c:de:82:89:
                    63:84:92:c8:54:11:71:a7:06:8f:a5:74:5e:ab:b5:
                    1e:e0:93:9f:cf:d2:e7:87:36:bc:a9:ab:f3:d1:8e:
                    08:86:ff:7d:45:4e:2c:a8:3e:f0:ee:ac:16:4d:1e:
                    df:30:cd:66:ff:85:6f:bb:4e:13:0b:a4:93:33:97:
                    17:8f:8d:e7:7f:5a:a4:1e:71:3b:5c:ff:da:a7:3b:
                    ca:1e:e5:42:cb:c2:21:cf:a9:46:8c:20:e9:c0:3f:
                    a6:17:50:07:31:77:23:62:56:7c:8b:b2:b1:97:42:
                    d2:ca:ab:e4:56:1c:ca:61:3f:c3:d9:67:75:02:73:
                    88:a2:fa:30:e1:25:0d:e9:90:3c:2d:0f:e2:9d:ed:
                    6d:02:dc:e9:6f:df:2b:6b:c5:f3:50:34:67:c6:86:
                    e2:89:38:fc:85:25:88:7b:71:d0:bb:d6:31:39:86:
                    31:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:32:70:43:ED:5E:A7:85:83:89:7F:64:C3:05:56:27:90:CC:CC:74
            X509v3 Authority Key Identifier:
                keyid:4E:87:B4:46:2F:90:42:B5:2A:A4:D6:5A:C7:D2:FD:92:C2:70:2D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/3230302e3231352e3230382e302f32302d3332203d3e203134383430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.215.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a9:9c:dc:27:01:73:97:c5:c0:c9:65:3b:1e:06:e1:38:f5:ee:
         48:7d:a3:06:a6:83:b1:52:99:9c:8e:6f:f6:1f:b3:c6:e2:f4:
         37:33:c3:33:5c:7d:f2:f3:1a:b2:b9:16:ca:11:04:00:22:2a:
         fa:c3:9f:e4:b3:da:75:60:a4:f8:b1:93:2a:5e:85:ba:db:71:
         1e:da:33:76:38:06:58:33:84:e4:89:d4:f2:69:fa:12:41:5b:
         b7:65:20:74:af:65:0d:ba:72:70:89:fe:3b:8d:d3:63:53:89:
         b4:25:1b:58:53:eb:21:14:a2:12:71:cd:5d:e6:a1:8f:6d:a4:
         71:a7:aa:96:bf:e8:d1:af:9c:ee:7a:c9:d4:e8:c6:4e:53:ac:
         c8:c7:19:a8:78:67:dd:e8:20:75:21:56:70:bd:19:60:57:21:
         3e:52:a6:28:59:98:af:7f:4d:fa:94:dd:36:ba:fa:44:61:af:
         9f:65:55:8d:20:e7:98:e3:fc:d0:67:83:f6:6b:f7:35:fe:7b:
         7c:be:c5:b5:0d:e7:34:e2:92:ac:d7:67:13:c2:23:ed:0c:a7:
         ff:9d:3c:f1:52:08:59:b5:41:3b:16:34:fe:df:e7:b1:17:64:
         0a:3b:7a:a9:f2:1c:45:32:89:ac:f3:7c:b7:26:fa:74:ba:f0:
         f1:2c:50:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 14:31:15 2025 by rpki-client