Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D657bXPCT1rs5scmeJ57CSV712Bf6Lgm7BY3FrvytfbG/1/3230302e3233382e302e302f31382d3138203d3e2032373136.roa
File:                     3230302e3233382e302e302f31382d3138203d3e2032373136.roa (raw, json)
Hash identifier:          606UeYcu8WRJ8CPeEzwRSL4P1veDATyXbJNAOX7nhLY=
Subject key identifier:   F1:18:78:15:71:1A:46:38:FC:78:76:0C:90:76:1D:A0:4F:A4:71:EA
Certificate issuer:       /CN=FE00A0246E047910F52B97F063352EE5D22A71CC
Certificate serial:       6A791889626283E2FA08BB810697C3EECFFC95BB
Authority key identifier: FE:00:A0:24:6E:04:79:10:F5:2B:97:F0:63:35:2E:E5:D2:2A:71:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE00A0246E047910F52B97F063352EE5D22A71CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D657bXPCT1rs5scmeJ57CSV712Bf6Lgm7BY3FrvytfbG/1/3230302e3233382e302e302f31382d3138203d3e2032373136.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     2716
IP address blocks:        200.238.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D657bXPCT1rs5scmeJ57CSV712Bf6Lgm7BY3FrvytfbG/1/FE00A0246E047910F52B97F063352EE5D22A71CC.crl
                          rsync://rpki-repo.registro.br/repo/D657bXPCT1rs5scmeJ57CSV712Bf6Lgm7BY3FrvytfbG/1/FE00A0246E047910F52B97F063352EE5D22A71CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE00A0246E047910F52B97F063352EE5D22A71CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:79:18:89:62:62:83:e2:fa:08:bb:81:06:97:c3:ee:cf:fc:95:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE00A0246E047910F52B97F063352EE5D22A71CC
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:89:83:f3:da:b6:49:5b:a7:9c:fe:a6:0b:f7:
                    75:59:8f:7d:15:a1:d8:02:73:03:0c:c8:74:08:ac:
                    c4:21:18:32:dd:67:22:02:1f:96:fb:a2:b4:3b:d0:
                    19:24:4f:8e:47:d4:51:f5:74:de:d0:f2:16:8b:1a:
                    6a:3b:a8:d1:e3:4d:b5:06:f8:bc:2b:90:d6:c6:51:
                    10:4b:13:8d:74:f1:b9:5d:43:aa:cc:db:49:93:f7:
                    fb:11:d5:fd:13:0a:e7:8f:5d:8b:a9:46:52:a1:59:
                    df:f7:31:ee:74:25:65:14:e0:b1:3c:94:40:1b:12:
                    5e:a8:f3:85:26:09:3e:a1:a5:95:ac:39:78:a2:26:
                    ac:bf:fd:71:a6:0e:25:3a:17:4c:f8:7f:42:57:19:
                    6d:e3:d6:b2:69:86:0f:c6:73:d4:88:3b:b4:f1:43:
                    ab:81:52:2a:3a:f5:da:5f:a5:64:1f:0b:8c:1c:8b:
                    85:f1:9e:9e:5d:51:85:5e:de:4e:4b:f7:87:fb:ec:
                    77:72:26:c7:d3:8a:97:76:8a:f0:b8:dc:6c:a3:83:
                    cd:0a:30:af:a7:fe:d0:92:9c:e3:b7:45:30:66:7f:
                    97:91:54:e8:4d:09:ba:da:50:e4:7c:80:4c:1d:27:
                    2a:b2:a0:95:6d:45:75:4d:d7:6e:17:45:ad:d8:80:
                    a4:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:18:78:15:71:1A:46:38:FC:78:76:0C:90:76:1D:A0:4F:A4:71:EA
            X509v3 Authority Key Identifier:
                keyid:FE:00:A0:24:6E:04:79:10:F5:2B:97:F0:63:35:2E:E5:D2:2A:71:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D657bXPCT1rs5scmeJ57CSV712Bf6Lgm7BY3FrvytfbG/1/FE00A0246E047910F52B97F063352EE5D22A71CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE00A0246E047910F52B97F063352EE5D22A71CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D657bXPCT1rs5scmeJ57CSV712Bf6Lgm7BY3FrvytfbG/1/3230302e3233382e302e302f31382d3138203d3e2032373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.238.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         7f:ac:f4:23:d2:72:92:b2:93:28:a7:24:27:69:58:e2:b2:8a:
         18:0d:7e:d8:99:2c:a8:cd:0e:13:65:ec:dc:c3:d0:7e:00:4c:
         82:53:59:30:cd:7c:97:74:23:65:23:b2:e5:41:e9:7a:cf:d0:
         5e:f8:64:65:e3:cb:1a:9c:ed:fb:18:1a:f8:e6:d4:f8:62:01:
         14:eb:62:66:12:44:a4:28:cc:d7:04:4a:cc:93:cb:30:f3:3f:
         b0:3f:24:05:17:53:cc:3e:eb:87:e7:98:56:8d:2c:cf:63:88:
         96:4a:6d:13:78:3f:df:4d:29:f7:3c:7a:70:fd:0b:cb:91:58:
         1d:61:05:92:4d:af:28:aa:2e:36:90:ef:08:3b:6d:c4:13:0d:
         7c:81:fb:d8:a5:11:32:08:47:7d:dd:99:b9:bb:bb:47:7b:96:
         7e:fb:f5:b6:4e:97:68:7f:64:9f:16:fd:d3:8a:6e:d9:5e:26:
         7d:6a:4a:d7:9a:8b:1b:34:86:21:85:14:43:ba:c1:dd:8d:9b:
         9b:fd:e8:68:9e:a4:3a:05:02:5a:ac:a5:73:1e:89:c2:dd:2c:
         52:39:98:11:31:ec:b5:af:89:91:ca:1a:fa:32:6d:72:79:e8:
         be:d9:ae:6d:ca:00:a5:15:8c:93:5c:f2:a9:2a:ff:ee:4f:01:
         ad:4d:03:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 18:59:36 2025 by rpki-client