Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/3230302e36362e3132352e302f32342d3234203d3e20323632383132.roa
File:                     3230302e36362e3132352e302f32342d3234203d3e20323632383132.roa (raw, json)
Hash identifier:          Y16gXltex7bAp6LECpxZSKkI4g0BcLt/sSf6bDyhb9U=
Subject key identifier:   A9:FF:4C:29:65:5E:79:6A:A9:F7:48:4D:C3:B7:C2:42:A4:82:2E:29
Certificate issuer:       /CN=A8C40D851EE06F7454DE9587BD8710CA3EAB8536
Certificate serial:       0CCAC148C2B69DB36D3E274EF75C7538490A10FC
Authority key identifier: A8:C4:0D:85:1E:E0:6F:74:54:DE:95:87:BD:87:10:CA:3E:AB:85:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/3230302e36362e3132352e302f32342d3234203d3e20323632383132.roa
Signing time:             Mon 12 Aug 2024 14:40:45 +0000
ROA not before:           Mon 12 Aug 2024 14:35:45 +0000
ROA not after:            Mon 11 Aug 2025 14:40:45 +0000
asID:                     262812
IP address blocks:        200.66.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.crl
                          rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Mar 2025 12:24:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:ca:c1:48:c2:b6:9d:b3:6d:3e:27:4e:f7:5c:75:38:49:0a:10:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8C40D851EE06F7454DE9587BD8710CA3EAB8536
        Validity
            Not Before: Aug 12 14:35:45 2024 GMT
            Not After : Aug 11 14:40:45 2025 GMT
        Subject: CN=A9FF4C29655E796AA9F7484DC3B7C242A4822E29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:83:2f:09:0d:4b:d6:ed:0c:4f:3f:9c:a5:cd:
                    30:18:d0:47:dc:fa:5f:00:2a:3b:9a:7b:1a:27:ad:
                    ea:e7:84:3d:c1:e8:db:50:c1:c7:25:f3:cb:18:ab:
                    9f:85:fd:31:fb:b8:35:43:f5:93:59:f3:16:30:a7:
                    93:d3:bf:6c:53:f0:e0:31:25:c0:06:e3:46:74:cb:
                    7f:09:98:2e:d0:b1:c3:0d:f9:24:81:37:91:0f:8b:
                    36:39:17:d9:a6:d6:d7:6a:69:cd:92:92:88:4b:c8:
                    26:59:c6:75:f6:74:df:cb:c9:8c:79:b8:eb:0d:1d:
                    19:bc:e5:57:26:d1:32:b2:cf:48:7d:8f:fc:48:2f:
                    84:ba:9b:62:bf:68:6d:58:ee:f4:37:af:56:ba:15:
                    93:4f:80:7d:f0:cb:31:82:86:c1:d3:28:31:b0:ac:
                    05:4f:a4:02:33:d7:9e:7e:4c:7c:9b:e3:ed:62:98:
                    45:84:5e:94:aa:89:fd:6f:9f:b5:30:d1:76:50:a9:
                    1e:f1:5d:83:5a:6f:7c:ce:7d:e1:94:4e:dd:cb:f1:
                    20:4d:b3:e2:bb:75:0f:0c:33:5f:d4:74:33:8f:c9:
                    db:23:6a:ac:7c:d5:b0:28:e4:73:07:93:f4:ce:e6:
                    d2:4f:9a:9e:e7:11:88:bb:3d:c7:2a:88:6e:e1:03:
                    65:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:FF:4C:29:65:5E:79:6A:A9:F7:48:4D:C3:B7:C2:42:A4:82:2E:29
            X509v3 Authority Key Identifier:
                keyid:A8:C4:0D:85:1E:E0:6F:74:54:DE:95:87:BD:87:10:CA:3E:AB:85:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/3230302e36362e3132352e302f32342d3234203d3e20323632383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.66.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:fa:e7:a8:b8:61:8e:36:4f:33:f7:69:ce:25:c1:8f:14:98:
         48:bb:3c:d5:52:3f:4b:df:63:e7:03:3a:31:11:a5:74:2a:b9:
         06:bf:91:64:d3:01:86:76:29:39:ba:7c:99:ef:ad:cf:72:43:
         c9:f1:e0:da:25:08:3a:2e:35:de:f1:b2:24:fc:b4:3b:c5:f2:
         0c:20:cc:97:75:8b:03:cb:6b:a5:83:ce:9e:c2:42:88:97:94:
         af:5f:5c:af:79:2c:e5:45:39:70:ec:c2:1c:33:6a:f4:a3:d4:
         65:06:c6:b8:cd:ef:79:f4:3e:72:f7:eb:08:65:37:fd:8d:49:
         33:f7:c6:be:1b:0a:cc:3a:5e:2d:38:2d:a2:f7:b2:4c:87:a4:
         4b:02:5a:82:75:64:86:a0:2b:86:a6:a6:46:fc:4f:87:43:de:
         c8:2f:69:ed:a4:49:bf:5e:06:9a:23:0a:04:7a:01:fe:92:2e:
         5e:26:ce:da:eb:00:6e:1e:b6:11:1b:dd:cf:bc:bf:0b:6a:e1:
         6e:f7:b3:f5:ea:b3:eb:a5:0a:da:c1:f2:cb:b7:33:8e:0b:d4:
         54:3d:31:82:9b:01:7e:61:9f:64:db:fd:8a:6e:85:82:44:98:
         2c:10:51:84:64:3c:40:5c:d6:44:69:33:7e:78:e1:fa:80:c4:
         cb:4e:2f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:53:06 2025 by rpki-client