Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/3230302e33392e35312e302f32342d3234203d3e20323731353234.roa
File:                     3230302e33392e35312e302f32342d3234203d3e20323731353234.roa (raw, json)
Hash identifier:          1IV3WY/QEAW1n1IWjg0tOjW5dO+ggc66oTNHEIV7TWI=
Subject key identifier:   C1:B7:4F:23:EF:1E:11:56:01:BA:38:01:36:DB:18:4D:A8:89:88:C0
Certificate issuer:       /CN=2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647
Certificate serial:       20F532FB3ED5F047A71E22103AB25D5CC4FD366D
Authority key identifier: 2D:D9:7F:5E:85:D5:A9:57:8E:78:94:0C:FD:5B:AE:DF:B8:2E:06:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/3230302e33392e35312e302f32342d3234203d3e20323731353234.roa
Signing time:             Wed 07 May 2025 03:51:59 +0000
ROA not before:           Wed 07 May 2025 03:46:59 +0000
ROA not after:            Wed 06 May 2026 03:51:59 +0000
asID:                     271524
IP address blocks:        200.39.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.crl
                          rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 14:56:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:f5:32:fb:3e:d5:f0:47:a7:1e:22:10:3a:b2:5d:5c:c4:fd:36:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647
        Validity
            Not Before: May  7 03:46:59 2025 GMT
            Not After : May  6 03:51:59 2026 GMT
        Subject: CN=C1B74F23EF1E115601BA380136DB184DA88988C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d6:cf:a8:50:23:19:d3:d5:be:27:8b:fc:61:
                    97:fb:3d:b4:88:7d:57:dc:fe:db:47:70:88:76:82:
                    da:8a:75:be:3c:28:04:6d:f6:6b:e4:a6:1e:94:eb:
                    95:80:83:7d:42:b3:06:44:e0:d7:b9:33:a6:e9:97:
                    95:31:67:cb:af:f1:84:13:ef:cf:07:60:85:02:88:
                    ff:36:c9:82:67:95:d0:86:3f:2b:95:40:89:09:ed:
                    26:5f:b3:00:71:1a:2e:cd:75:28:32:e1:6b:e1:ba:
                    46:e9:da:f5:23:d4:3a:f5:4d:f2:0d:ec:0d:1c:89:
                    4b:fb:69:4f:c4:9b:d4:ef:ec:af:47:62:b1:00:e0:
                    bb:00:00:c9:48:a2:bd:44:07:c3:9e:59:2d:18:cb:
                    2f:aa:c8:84:4a:a1:cc:0e:1a:8a:86:ea:77:6a:88:
                    00:b2:f0:d8:1e:6b:17:2b:a3:ce:17:ec:1f:59:b4:
                    fa:8d:6b:82:6a:21:fe:37:be:9b:e4:c6:1d:80:4d:
                    46:72:0f:e7:82:28:08:91:7c:3d:e1:55:bb:d0:a8:
                    98:93:b6:5e:23:25:a7:a2:f9:6f:a5:33:43:49:60:
                    53:66:7c:22:0b:68:b9:51:ab:41:42:a7:59:1e:81:
                    07:79:3a:2b:93:b8:8e:96:a7:9b:66:18:df:bf:d2:
                    f1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:B7:4F:23:EF:1E:11:56:01:BA:38:01:36:DB:18:4D:A8:89:88:C0
            X509v3 Authority Key Identifier:
                keyid:2D:D9:7F:5E:85:D5:A9:57:8E:78:94:0C:FD:5B:AE:DF:B8:2E:06:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/3230302e33392e35312e302f32342d3234203d3e20323731353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:ff:93:79:d4:c7:f8:6d:9f:ab:1e:5a:56:b6:cb:66:b3:0c:
         d6:56:18:2f:ef:74:c6:d4:6b:ba:85:b6:1c:53:d8:37:96:0b:
         b0:ec:d8:88:c2:9e:93:22:90:2b:18:bf:87:c1:0e:bd:2b:95:
         f8:ff:83:fa:23:03:35:f0:58:e1:f1:3d:46:17:1e:7c:fe:bb:
         77:2a:8c:cc:85:a2:6c:39:9d:db:8c:3e:ac:72:96:8e:f6:0e:
         5f:91:d6:fd:2d:df:f4:bb:64:c9:be:1d:71:c7:0f:5d:80:6b:
         be:74:b2:8b:f8:58:24:1a:f1:46:aa:38:93:37:27:d4:3a:6e:
         05:4e:a1:d4:ea:92:44:13:cb:7d:51:71:4e:eb:ad:c9:5a:a0:
         d5:97:51:3c:bb:5f:10:30:83:60:b2:39:cd:3a:4d:26:cc:b9:
         25:6a:cc:f0:a4:61:1c:b5:01:aa:4c:b6:c6:02:4d:c6:58:1e:
         8f:0c:ca:fd:67:d1:90:d0:d4:8e:6b:71:63:d4:90:2a:4b:04:
         a8:46:68:88:c6:8f:e2:07:ad:86:eb:4e:9f:a6:53:6f:fa:70:
         bf:ee:9a:d9:86:26:29:8c:42:9c:5e:b8:96:da:8e:e4:e4:a7:
         26:64:d1:85:e8:1d:f5:f0:9a:37:31:ac:b2:bf:57:4a:06:9d:
         43:ca:cb:84
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUIPUy+z7V8EenHiIQOrJdXMT9Nm0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkREOTdGNUU4NUQ1QTk1NzhFNzg5NDBDRkQ1QkFFREZC
ODJFMDY0NzAeFw0yNTA1MDcwMzQ2NTlaFw0yNjA1MDYwMzUxNTlaMDMxMTAvBgNV
BAMTKEMxQjc0RjIzRUYxRTExNTYwMUJBMzgwMTM2REIxODREQTg4OTg4QzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+1s+oUCMZ09W+J4v8YZf7PbSI
fVfc/ttHcIh2gtqKdb48KARt9mvkph6U65WAg31CswZE4Ne5M6bpl5UxZ8uv8YQT
788HYIUCiP82yYJnldCGPyuVQIkJ7SZfswBxGi7NdSgy4Wvhukbp2vUj1Dr1TfIN
7A0ciUv7aU/Em9Tv7K9HYrEA4LsAAMlIor1EB8OeWS0Yyy+qyIRKocwOGoqG6ndq
iACy8Ngeaxcro84X7B9ZtPqNa4JqIf43vpvkxh2ATUZyD+eCKAiRfD3hVbvQqJiT
tl4jJaei+W+lM0NJYFNmfCILaLlRq0FCp1kegQd5OiuTuI6Wp5tmGN+/0vH/AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUwbdPI+8eEVYBujgBNtsYTaiJiMAwHwYDVR0j
BBgwFoAULdl/XoXVqVeOeJQM/Vuu37guBkcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ2ZVVEdxUTI0YmNMcUNjQjkyOE15ZldBYkNrZFVreVV0WFB5RFhlQW0x
b0IvMC8yREQ5N0Y1RTg1RDVBOTU3OEU3ODk0MENGRDVCQUVERkI4MkUwNjQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJERDk3RjVFODVENUE5NTc4
RTc4OTQwQ0ZENUJBRURGQjgyRTA2NDcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NmVVRHcVEyNGJjTHFDY0I5MjhNeWZXQWJDa2RVa3lVdFhQeURYZUFtMW9CLzAv
MzIzMDMwMmUzMzM5MmUzNTMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMx
MzUzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAyCczMA0GCSqGSIb3DQEBCwUAA4IBAQBH/5N51Mf4
bZ+rHlpWtstmswzWVhgv73TG1Gu6hbYcU9g3lguw7NiIwp6TIpArGL+HwQ69K5X4
/4P6IwM18Fjh8T1GFx58/rt3KozMhaJsOZ3bjD6scpaO9g5fkdb9Ld/0u2TJvh1x
xw9dgGu+dLKL+FgkGvFGqjiTNyfUOm4FTqHU6pJEE8t9UXFO663JWqDVl1E8u18Q
MINgsjnNOk0mzLklaszwpGEctQGqTLbGAk3GWB6PDMr9Z9GQ0NSOa3Fj1JAqSwSo
RmiIxo/iB62G606fplNv+nC/7prZhiYpjEKcXriW2o7k5KcmZNGF6B318Jo3Mayy
v1dKBp1DysuE
-----END CERTIFICATE-----
Generated at Sat Jun 7 21:07:36 2025 by rpki-client