Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/3230302e31332e38372e302f32342d3234203d3e20323730343430.roa
File:                     3230302e31332e38372e302f32342d3234203d3e20323730343430.roa (raw, json)
Hash identifier:          61EkNtkOH2BSRDb/BzuK4F1sSqAj2AyZ/l/ZedNXKyc=
Subject key identifier:   16:5D:E8:02:1C:27:8C:4E:15:1D:F7:FD:82:16:1D:BF:BA:C0:A9:09
Certificate issuer:       /CN=2E8459987E9776F5848158AEADDA7C12BA642F8E
Certificate serial:       40828116E9EE731CE290C3E497483FAC85594917
Authority key identifier: 2E:84:59:98:7E:97:76:F5:84:81:58:AE:AD:DA:7C:12:BA:64:2F:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E8459987E9776F5848158AEADDA7C12BA642F8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/3230302e31332e38372e302f32342d3234203d3e20323730343430.roa
Signing time:             Thu 20 Mar 2025 12:36:12 +0000
ROA not before:           Thu 20 Mar 2025 12:31:12 +0000
ROA not after:            Thu 19 Mar 2026 12:36:12 +0000
asID:                     270440
IP address blocks:        200.13.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/2E8459987E9776F5848158AEADDA7C12BA642F8E.crl
                          rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/2E8459987E9776F5848158AEADDA7C12BA642F8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E8459987E9776F5848158AEADDA7C12BA642F8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 22:22:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:82:81:16:e9:ee:73:1c:e2:90:c3:e4:97:48:3f:ac:85:59:49:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E8459987E9776F5848158AEADDA7C12BA642F8E
        Validity
            Not Before: Mar 20 12:31:12 2025 GMT
            Not After : Mar 19 12:36:12 2026 GMT
        Subject: CN=165DE8021C278C4E151DF7FD82161DBFBAC0A909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f3:75:82:3c:34:9e:59:18:28:84:15:31:a3:
                    0b:f7:a7:33:98:8a:79:2d:f9:aa:12:13:6c:7f:22:
                    f5:cc:aa:52:33:18:68:27:1a:9f:64:81:14:fc:1e:
                    f5:92:d3:f8:78:6b:72:7f:f0:1e:6f:d7:b7:d3:55:
                    69:8d:f7:ed:45:ed:2e:0f:a1:42:89:8b:da:94:9d:
                    bd:ef:84:f7:01:4c:74:46:09:6e:f8:73:e3:20:46:
                    7e:66:1a:4c:5a:23:f6:3c:9c:08:34:31:7c:5b:95:
                    cc:a0:07:34:ba:96:21:d5:fd:de:e5:80:ba:03:b6:
                    aa:d7:4e:72:dd:db:c9:db:74:39:b4:b3:4b:84:66:
                    64:8f:46:fd:7b:4c:18:bf:66:c4:51:9c:20:ec:b3:
                    f8:aa:9e:2c:2b:00:97:df:97:75:3b:89:77:c1:47:
                    de:36:7e:2b:8d:ca:c8:66:65:96:1f:38:2b:b2:a5:
                    06:16:be:22:c4:2a:dd:de:7d:ef:cc:c9:c2:95:b4:
                    f2:8c:c5:af:48:a0:d2:88:0e:bb:eb:5c:9c:da:ab:
                    12:28:30:c2:35:0b:9c:fe:30:0f:f4:64:65:24:3e:
                    cd:26:90:ee:30:53:56:5c:fc:70:6b:c2:16:07:9f:
                    05:e7:1b:70:c3:ef:fd:bf:d6:b2:fe:16:2a:65:b5:
                    ee:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:5D:E8:02:1C:27:8C:4E:15:1D:F7:FD:82:16:1D:BF:BA:C0:A9:09
            X509v3 Authority Key Identifier:
                keyid:2E:84:59:98:7E:97:76:F5:84:81:58:AE:AD:DA:7C:12:BA:64:2F:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/2E8459987E9776F5848158AEADDA7C12BA642F8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E8459987E9776F5848158AEADDA7C12BA642F8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/3230302e31332e38372e302f32342d3234203d3e20323730343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:cf:fb:3b:0b:dc:51:c4:77:cb:0e:f8:b7:9a:17:c8:2b:01:
         5d:d0:d0:74:77:be:40:2c:d8:e6:05:c4:66:e6:74:97:a5:40:
         b7:f4:f6:26:dc:82:20:57:14:b8:c7:57:36:4c:a8:16:d1:0b:
         a5:af:d6:ab:63:7a:12:0f:56:57:b5:cf:7e:fe:51:7b:21:07:
         1e:d7:3d:0f:a3:19:38:ed:b0:67:86:e8:8c:16:c8:19:37:21:
         a7:b7:65:8e:be:ec:0d:c3:7d:8c:89:60:45:87:99:57:ee:9c:
         11:2b:c3:06:62:55:94:a1:d2:e7:96:a9:36:22:8f:36:b9:87:
         23:3b:ca:d9:8a:4c:ed:03:c6:a0:a4:fc:a7:3f:80:72:4e:21:
         9d:23:17:58:6b:d8:e7:96:2b:95:0a:6a:66:40:49:35:d0:1c:
         30:23:d5:dd:c2:43:c5:be:af:ed:1a:31:3b:0c:7f:0f:90:fb:
         36:b7:47:2e:c6:dc:7d:00:00:ae:66:11:aa:a3:c5:dc:79:91:
         67:47:f6:e9:55:96:36:9f:13:36:0a:cd:4d:71:53:af:f1:eb:
         51:33:0f:5b:fd:04:23:63:8e:d5:c1:72:2e:f9:3d:da:08:8b:
         25:1c:96:65:d1:5d:c0:89:b0:61:d2:78:da:c6:59:0f:af:8a:
         f1:64:9d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:14:46 2025 by rpki-client