Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/3230312e38372e3230382e302f32302d3332203d3e203232333831.roa
File:                     3230312e38372e3230382e302f32302d3332203d3e203232333831.roa (raw, json)
Hash identifier:          7ruv4pdnFDvDGctduG1rE20vOxVXAU5uFS8hNwGKzQ4=
Subject key identifier:   BF:BF:99:D8:82:BF:19:56:C9:7C:47:AD:FC:86:F6:74:C0:F0:C5:7B
Certificate issuer:       /CN=C693E96398CDA5F5A4E242A3FD09B13E8AED7697
Certificate serial:       120F4A65443CAC6FF4D8980796205769B8DFFA8C
Authority key identifier: C6:93:E9:63:98:CD:A5:F5:A4:E2:42:A3:FD:09:B1:3E:8A:ED:76:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/3230312e38372e3230382e302f32302d3332203d3e203232333831.roa
Signing time:             Fri 07 Mar 2025 19:59:39 +0000
ROA not before:           Fri 07 Mar 2025 19:54:39 +0000
ROA not after:            Fri 06 Mar 2026 19:59:39 +0000
asID:                     22381
IP address blocks:        201.87.208.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.crl
                          rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 09:52:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:0f:4a:65:44:3c:ac:6f:f4:d8:98:07:96:20:57:69:b8:df:fa:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C693E96398CDA5F5A4E242A3FD09B13E8AED7697
        Validity
            Not Before: Mar  7 19:54:39 2025 GMT
            Not After : Mar  6 19:59:39 2026 GMT
        Subject: CN=BFBF99D882BF1956C97C47ADFC86F674C0F0C57B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:f3:b4:8b:77:85:42:0b:6f:45:ce:2f:c2:75:
                    25:ce:3d:08:a9:22:8d:c7:d4:1b:bc:1a:c6:d9:c6:
                    f1:1e:06:2d:44:6a:00:ff:ca:a0:cc:7b:c0:a1:ca:
                    a1:30:4c:eb:6c:41:27:13:6c:2e:2b:d9:85:6a:34:
                    6a:17:b9:dc:eb:b7:a6:af:28:4a:0a:28:04:ef:66:
                    df:13:b0:c8:13:56:15:c4:a1:84:fe:6e:2a:fb:91:
                    4c:0a:e1:ef:cb:e1:ad:b6:e7:5b:c3:92:e2:c6:b2:
                    8f:98:2e:fc:2e:c9:5b:e6:55:b9:8b:d8:b0:40:f2:
                    66:9b:37:16:7c:cf:61:ba:8c:57:b8:47:a8:db:a7:
                    aa:8a:f3:43:32:04:79:09:5a:30:5f:c5:4c:30:c8:
                    8e:60:81:9a:59:a6:b3:67:a5:9c:4c:ac:54:c3:fc:
                    37:e8:ec:49:6c:50:2c:d0:f1:a1:e6:51:77:a2:2a:
                    e4:62:9d:ed:b2:0d:01:2a:5b:7c:f0:b2:5e:cd:f0:
                    ff:97:9b:f8:cc:51:63:a5:da:72:dd:4a:88:5d:1e:
                    08:0a:5b:9f:6e:af:1c:49:50:cd:d6:eb:18:01:59:
                    70:cd:df:1d:bc:a3:07:74:7c:a9:b3:6c:55:85:da:
                    83:71:52:07:3d:c8:35:09:d9:ba:6b:a9:c8:05:78:
                    f9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:BF:99:D8:82:BF:19:56:C9:7C:47:AD:FC:86:F6:74:C0:F0:C5:7B
            X509v3 Authority Key Identifier:
                keyid:C6:93:E9:63:98:CD:A5:F5:A4:E2:42:A3:FD:09:B1:3E:8A:ED:76:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/3230312e38372e3230382e302f32302d3332203d3e203232333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.87.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         07:cd:5e:a2:99:b7:f2:22:50:88:82:e1:5f:12:b0:48:2b:99:
         91:a4:00:22:b3:50:92:18:d5:3a:45:91:43:00:b5:20:7b:01:
         a0:ed:7f:e4:b5:c2:1f:b2:60:bd:84:86:09:74:bc:93:1c:1f:
         de:42:42:39:0c:1c:2b:b7:70:38:be:48:ce:6d:af:fa:aa:5d:
         a4:ca:78:0e:92:de:9f:73:6d:97:7c:d2:77:40:b1:fe:dd:82:
         3b:3c:97:e9:c9:a6:45:fb:20:7f:e9:0e:37:bf:76:8b:03:11:
         fa:81:b8:6d:80:e8:6a:01:d4:e9:e5:dd:f8:d9:c5:61:8f:bd:
         a9:63:62:65:7d:44:6e:b7:16:c6:23:38:9e:75:3e:df:56:76:
         2b:d9:c8:4a:97:94:1a:56:7f:a2:a8:05:54:0a:41:a1:e9:ae:
         aa:51:f1:9b:7f:7a:b0:a0:a4:ae:74:8a:fd:73:cb:bf:74:32:
         db:39:64:24:57:52:81:c1:dc:56:99:67:82:dd:12:99:e2:84:
         b5:83:36:67:98:0e:f4:de:cf:0d:aa:ad:bb:cd:73:2e:f9:2b:
         30:32:69:18:d7:0c:f7:85:80:e4:b1:c6:30:c6:69:d9:80:4a:
         fb:40:ee:54:a7:e7:c2:85:23:5a:10:8c:51:4c:8c:c9:8c:71:
         5d:59:7e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:46:57 2025 by rpki-client