Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/3230302e35332e36342e302f32322d3232203d3e20323731353034.roa
File:                     3230302e35332e36342e302f32322d3232203d3e20323731353034.roa (raw, json)
Hash identifier:          nBpiqvU1BZjtZC7iS6oj2MwAs1hEyt4X11u6rPvfo24=
Subject key identifier:   B8:1B:66:4C:5A:CD:66:02:8E:E4:B5:F9:0A:0B:58:E2:4D:31:9E:F7
Certificate issuer:       /CN=3B9278887F13B27AA11B20954CB918BC341F1426
Certificate serial:       59A3B7FF6C56B45E4586931756AE0CBB086924EF
Authority key identifier: 3B:92:78:88:7F:13:B2:7A:A1:1B:20:95:4C:B9:18:BC:34:1F:14:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B9278887F13B27AA11B20954CB918BC341F1426.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/3230302e35332e36342e302f32322d3232203d3e20323731353034.roa
Signing time:             Thu 27 Feb 2025 14:51:40 +0000
ROA not before:           Thu 27 Feb 2025 14:46:40 +0000
ROA not after:            Thu 26 Feb 2026 14:51:40 +0000
asID:                     271504
IP address blocks:        200.53.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/3B9278887F13B27AA11B20954CB918BC341F1426.crl
                          rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/3B9278887F13B27AA11B20954CB918BC341F1426.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B9278887F13B27AA11B20954CB918BC341F1426.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 13:55:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:a3:b7:ff:6c:56:b4:5e:45:86:93:17:56:ae:0c:bb:08:69:24:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B9278887F13B27AA11B20954CB918BC341F1426
        Validity
            Not Before: Feb 27 14:46:40 2025 GMT
            Not After : Feb 26 14:51:40 2026 GMT
        Subject: CN=B81B664C5ACD66028EE4B5F90A0B58E24D319EF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:94:3e:a8:84:89:e3:26:01:17:76:b4:db:8b:
                    dd:6d:2f:df:a9:2b:50:c7:cd:f4:36:8f:36:dd:a5:
                    89:c2:2d:f1:57:3a:d7:06:d0:81:b5:1c:c6:b2:c6:
                    7b:19:b2:f4:59:47:8b:f3:6d:a2:94:4e:d2:37:2d:
                    ce:bc:1e:2d:76:c5:35:eb:c3:27:50:cb:87:36:a9:
                    e0:fe:d9:42:7b:03:a4:7c:52:3c:7b:83:ce:7e:bb:
                    10:79:4d:12:02:c0:5a:74:a3:68:44:af:f1:a9:46:
                    96:da:b2:53:87:64:d6:e4:02:43:24:52:60:e1:f4:
                    a5:c8:35:53:4f:0d:f0:66:48:a1:37:72:37:66:b1:
                    40:fe:9a:0a:f2:55:62:57:a5:48:e1:e6:b9:94:ee:
                    6f:79:c1:a1:07:8a:4f:47:73:e7:cb:f7:a1:55:96:
                    08:20:b3:34:02:dd:8b:30:aa:ef:68:2c:16:10:de:
                    8d:be:44:bc:c7:09:92:7f:5b:5d:6f:ff:4f:f5:b3:
                    64:4f:5b:23:c6:6d:73:8b:ac:42:8a:16:f2:e0:a9:
                    11:e1:52:ff:96:12:d5:28:63:7a:08:f1:91:b8:c3:
                    46:48:b6:9a:b1:cc:76:9c:49:2d:48:c3:e9:87:13:
                    cf:7d:18:1a:3e:6a:53:cc:69:95:b3:16:e6:aa:0b:
                    ab:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:1B:66:4C:5A:CD:66:02:8E:E4:B5:F9:0A:0B:58:E2:4D:31:9E:F7
            X509v3 Authority Key Identifier:
                keyid:3B:92:78:88:7F:13:B2:7A:A1:1B:20:95:4C:B9:18:BC:34:1F:14:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/3B9278887F13B27AA11B20954CB918BC341F1426.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B9278887F13B27AA11B20954CB918BC341F1426.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/3230302e35332e36342e302f32322d3232203d3e20323731353034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:4b:4a:61:d0:3f:9b:ca:9d:46:15:51:ff:d6:6a:ff:89:b1:
         a3:cd:e9:9b:79:94:a0:77:3a:b0:c5:19:b6:2a:00:ee:5c:de:
         38:15:a7:fd:ad:d1:f4:bd:36:9a:e1:d3:84:f8:eb:ba:71:ea:
         11:8e:e0:d8:07:b0:ba:08:a5:a8:cf:53:8f:c5:6c:63:d1:93:
         cf:7a:df:f3:01:5a:84:12:78:e9:08:c5:8f:6c:df:2e:aa:b2:
         dd:c3:15:eb:0a:29:14:08:47:3c:f5:c8:48:c3:ef:aa:c2:88:
         9d:d5:86:b9:03:08:1a:43:b8:b8:56:35:86:5c:da:ea:9f:10:
         7c:e4:30:27:a0:1b:a9:df:57:56:cc:80:e4:b7:21:2a:3f:96:
         d3:47:16:3a:3a:64:07:45:4f:a1:0f:74:d5:46:39:f9:77:03:
         b8:54:a0:42:e4:0b:aa:f2:3a:ba:24:5f:0b:f5:81:fa:38:6f:
         41:8c:07:9b:e7:2c:bb:f4:d6:c9:45:21:71:f0:6c:39:ad:1a:
         75:31:97:0e:66:db:bd:9c:1d:80:c5:81:b4:a5:ce:0b:69:f8:
         fa:33:cb:78:10:b1:3d:d9:18:f6:38:49:8b:50:6c:84:28:ab:
         5c:a5:e7:eb:58:68:e9:59:27:b3:97:89:3b:78:12:52:1d:0c:
         1e:97:52:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:46:58 2025 by rpki-client