Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GadaWWgHpp2WL5T2SQNbLx9jnzQ1f5z6EgrKNerFtXQC/0/3230302e3135302e3234342e302f32322d3232203d3e20323731373434.roa
File:                     3230302e3135302e3234342e302f32322d3232203d3e20323731373434.roa (raw, json)
Hash identifier:          B5DPiTCZloa9yjzmgOY6PsQd3Rfm3bgH1nN4Xw2bFlU=
Subject key identifier:   8A:1E:8C:EB:C0:C8:29:71:16:69:19:5E:8F:F8:FF:F0:EE:A6:82:EF
Certificate issuer:       /CN=44C0DA9572BD779420F65A901B1FA51E6E3E6B5D
Certificate serial:       0394EEEE323C9FEE2D6CBF772D865DC529D5CDD8
Authority key identifier: 44:C0:DA:95:72:BD:77:94:20:F6:5A:90:1B:1F:A5:1E:6E:3E:6B:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44C0DA9572BD779420F65A901B1FA51E6E3E6B5D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GadaWWgHpp2WL5T2SQNbLx9jnzQ1f5z6EgrKNerFtXQC/0/3230302e3135302e3234342e302f32322d3232203d3e20323731373434.roa
Signing time:             Thu 27 Feb 2025 00:43:27 +0000
ROA not before:           Thu 27 Feb 2025 00:38:27 +0000
ROA not after:            Thu 26 Feb 2026 00:43:27 +0000
asID:                     271744
IP address blocks:        200.150.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GadaWWgHpp2WL5T2SQNbLx9jnzQ1f5z6EgrKNerFtXQC/0/44C0DA9572BD779420F65A901B1FA51E6E3E6B5D.crl
                          rsync://rpki-repo.registro.br/repo/GadaWWgHpp2WL5T2SQNbLx9jnzQ1f5z6EgrKNerFtXQC/0/44C0DA9572BD779420F65A901B1FA51E6E3E6B5D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44C0DA9572BD779420F65A901B1FA51E6E3E6B5D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 17:45:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:94:ee:ee:32:3c:9f:ee:2d:6c:bf:77:2d:86:5d:c5:29:d5:cd:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44C0DA9572BD779420F65A901B1FA51E6E3E6B5D
        Validity
            Not Before: Feb 27 00:38:27 2025 GMT
            Not After : Feb 26 00:43:27 2026 GMT
        Subject: CN=8A1E8CEBC0C829711669195E8FF8FFF0EEA682EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:ab:33:d0:8e:7c:27:ea:94:c0:59:3f:4c:1b:
                    c2:68:7b:35:c0:41:9e:c4:a5:93:b1:de:f4:39:b9:
                    d9:64:ae:6b:14:41:c9:4a:80:44:fe:e5:a6:11:e3:
                    a7:87:27:03:4a:b3:d1:96:8d:d6:35:61:70:2d:0e:
                    ce:11:da:d8:a8:c9:d0:65:6f:78:69:22:7f:ad:79:
                    5b:04:89:29:b9:76:9f:43:5e:6c:e9:f4:bd:3f:ed:
                    ef:39:78:89:af:08:6a:62:bb:c9:c6:8a:cc:2b:74:
                    be:80:14:b7:b0:cc:00:21:14:e5:63:a8:4c:b3:86:
                    94:6d:97:61:cf:a2:ab:d0:50:a1:7c:92:b2:f5:de:
                    12:6c:7f:64:dd:aa:7c:93:27:a2:9f:8e:14:f5:66:
                    a6:cc:cd:5f:20:df:41:7a:ed:63:b8:6b:b9:9b:ea:
                    6a:01:41:89:dd:71:27:85:86:35:9a:0d:ea:25:55:
                    d1:5e:ab:06:c6:fa:76:d1:88:2b:d6:03:77:d2:6e:
                    8a:69:03:12:b2:23:e2:0d:e8:5b:13:60:85:00:ae:
                    57:83:24:04:f2:e8:20:93:b5:81:71:43:70:89:4d:
                    bf:07:ec:ed:8d:3f:2f:d7:c6:1b:75:89:e4:40:2d:
                    f2:c4:a9:c3:0d:bd:d5:42:64:5e:a3:5f:07:f5:a1:
                    bc:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:1E:8C:EB:C0:C8:29:71:16:69:19:5E:8F:F8:FF:F0:EE:A6:82:EF
            X509v3 Authority Key Identifier:
                keyid:44:C0:DA:95:72:BD:77:94:20:F6:5A:90:1B:1F:A5:1E:6E:3E:6B:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GadaWWgHpp2WL5T2SQNbLx9jnzQ1f5z6EgrKNerFtXQC/0/44C0DA9572BD779420F65A901B1FA51E6E3E6B5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44C0DA9572BD779420F65A901B1FA51E6E3E6B5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GadaWWgHpp2WL5T2SQNbLx9jnzQ1f5z6EgrKNerFtXQC/0/3230302e3135302e3234342e302f32322d3232203d3e20323731373434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.150.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:f9:9b:f6:d0:df:ce:eb:82:be:60:1c:d3:c2:d0:1b:85:46:
         b3:50:77:ba:1d:1c:f0:e8:52:a0:f2:80:29:06:cb:4c:db:f8:
         ad:0a:f9:b0:77:ad:0b:8b:76:f5:43:d6:66:2b:23:7f:98:29:
         b2:f6:18:ee:cf:7c:51:4d:2f:5a:25:c3:26:fd:c6:5d:91:84:
         c4:01:af:8b:29:8c:f5:13:06:50:d0:67:14:d5:00:6b:9a:60:
         da:ad:71:13:97:df:62:66:cc:7b:d8:03:9d:1e:2f:6e:e8:ca:
         7f:a1:88:0f:84:66:0b:3c:76:c2:4f:9a:0a:fc:ec:ab:b0:c5:
         e1:59:0c:9d:73:f9:f4:0a:ab:3a:0f:98:fb:78:92:b6:e2:b2:
         c4:27:2b:46:9e:6b:10:e5:af:66:c1:3d:41:47:c1:d7:8f:6b:
         35:19:0f:40:90:64:47:3e:33:51:6e:5f:7d:26:f3:a0:e2:0e:
         ac:29:c7:36:bd:a7:da:61:44:d0:96:b2:21:e5:b3:c5:19:72:
         28:5a:ae:93:65:7b:0e:41:b2:b5:87:2e:d8:77:70:e7:03:55:
         6b:c8:ca:9c:61:8c:1a:68:da:e9:88:d9:e4:de:95:6c:9e:81:
         d5:da:57:54:a5:5f:3f:67:ca:85:61:5d:fd:11:64:a4:c6:7d:
         a7:6f:15:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:38:42 2025 by rpki-client