Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/3230302e3232392e3135362e302f32322d3234203d3e203631383035.roa
File:                     3230302e3232392e3135362e302f32322d3234203d3e203631383035.roa (raw, json)
Hash identifier:          7djXiz8NjJOw50ed99k51mS1HJ+0xG36GsVajF3RGQs=
Subject key identifier:   DE:24:E4:E6:5F:92:B8:44:D4:08:3A:36:08:FA:75:7D:4B:91:AD:5E
Certificate issuer:       /CN=FE70BF4821B21DC5905FDD74ED03C136A16A2830
Certificate serial:       55922926DC443E0E29A2D67EF1F0D8EC90D85196
Authority key identifier: FE:70:BF:48:21:B2:1D:C5:90:5F:DD:74:ED:03:C1:36:A1:6A:28:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE70BF4821B21DC5905FDD74ED03C136A16A2830.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/3230302e3232392e3135362e302f32322d3234203d3e203631383035.roa
Signing time:             Wed 05 Jun 2024 18:55:25 +0000
ROA not before:           Wed 05 Jun 2024 18:50:25 +0000
ROA not after:            Wed 04 Jun 2025 18:55:25 +0000
asID:                     61805
IP address blocks:        200.229.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.crl
                          rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE70BF4821B21DC5905FDD74ED03C136A16A2830.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 05:30:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:92:29:26:dc:44:3e:0e:29:a2:d6:7e:f1:f0:d8:ec:90:d8:51:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE70BF4821B21DC5905FDD74ED03C136A16A2830
        Validity
            Not Before: Jun  5 18:50:25 2024 GMT
            Not After : Jun  4 18:55:25 2025 GMT
        Subject: CN=DE24E4E65F92B844D4083A3608FA757D4B91AD5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:57:81:8e:18:ef:fb:82:b1:95:f8:99:97:4f:
                    dc:77:1f:c6:32:8b:75:b8:87:2e:8a:77:4d:2c:d3:
                    68:23:f9:a1:ad:e9:c9:6f:d8:4c:ed:f1:9e:83:0c:
                    96:4c:c9:53:01:6b:6c:96:12:5e:9b:55:d1:e6:6f:
                    45:a2:db:98:68:4b:3c:d5:bf:63:62:a4:a0:7a:d3:
                    3a:47:64:0f:89:dc:03:42:f0:e3:e0:35:a0:16:83:
                    d8:b0:89:9e:75:64:51:85:68:1a:5e:76:43:d6:bf:
                    4c:4f:68:c3:fc:20:8a:36:18:f7:dc:82:df:00:d0:
                    b9:f2:a8:0b:7c:07:7e:b8:04:89:c6:8d:0a:30:54:
                    71:93:c6:04:2e:f8:9b:cc:1b:3a:20:01:1c:00:41:
                    2f:80:56:5a:bb:30:25:ac:47:50:d6:0f:06:fe:1a:
                    6d:77:50:f0:ee:49:e7:2a:35:cd:a4:cd:c7:a8:d6:
                    c8:ee:ca:21:fb:9f:02:c8:5b:4a:cf:b1:69:1c:dd:
                    a7:2e:59:92:91:4b:09:dc:e1:59:b4:e6:91:ed:ce:
                    27:84:60:14:d6:9d:ee:15:b4:a4:7d:17:8a:b7:56:
                    f4:1c:68:ee:67:0b:e1:ab:f8:d7:1b:6a:a6:4b:78:
                    04:84:29:e6:f0:3d:5f:2c:35:4e:f5:df:d8:32:bd:
                    83:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:24:E4:E6:5F:92:B8:44:D4:08:3A:36:08:FA:75:7D:4B:91:AD:5E
            X509v3 Authority Key Identifier:
                keyid:FE:70:BF:48:21:B2:1D:C5:90:5F:DD:74:ED:03:C1:36:A1:6A:28:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE70BF4821B21DC5905FDD74ED03C136A16A2830.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/3230302e3232392e3135362e302f32322d3234203d3e203631383035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:50:5f:cb:4d:fa:d0:6d:da:37:80:28:e0:ae:8f:03:99:0d:
         37:dd:42:c6:d4:a0:6b:53:67:31:36:e8:16:15:c6:61:61:33:
         45:03:c4:6b:76:86:eb:00:43:20:87:be:e9:c9:99:a3:ac:33:
         c3:47:13:aa:c0:4a:5b:fc:52:6b:84:14:73:87:42:40:51:5c:
         9b:f2:ee:b6:82:25:7e:1e:38:77:43:8a:7e:38:ff:54:c7:23:
         46:d1:8b:16:c0:d9:5e:ce:46:50:c8:ef:68:cc:80:36:77:ab:
         56:d8:d2:e5:ca:b4:2c:56:11:51:61:2b:e0:83:71:d3:97:63:
         68:e5:80:d3:e5:7f:d1:c9:0e:01:57:1d:1c:15:ff:55:b5:35:
         c5:60:f2:5c:72:78:23:b7:0f:72:05:a6:5a:19:59:8c:5a:e8:
         62:c9:9e:0f:8a:56:bb:bb:03:56:4a:13:a3:44:51:d3:a2:12:
         3f:91:44:27:f3:0b:09:cf:18:5d:6e:48:ad:d6:14:e4:af:0a:
         a3:05:8f:69:07:fb:44:21:6c:db:61:dd:bb:cd:53:77:14:ea:
         24:8a:9a:8b:1a:ca:fa:25:fd:57:f8:ee:1b:5b:a2:b6:2e:df:
         2f:6a:57:d9:22:d4:96:1d:85:b1:fa:b1:54:5c:62:03:80:a6:
         14:27:2f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:24:25 2025 by rpki-client