Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gm8LDgLSWrv6HoAYC1B2mMHpEHPfnZKmVxEcqWcDv9r6/0/3230302e39352e3137392e302f32342d3234203d3e203532353439.roa
File:                     3230302e39352e3137392e302f32342d3234203d3e203532353439.roa (raw, json)
Hash identifier:          Or8U/2QfNAs8fHsR569N45/cYkSMfFkoftfTbyNLKwY=
Subject key identifier:   50:70:90:7E:08:7D:6C:0D:34:D5:0B:38:90:00:41:53:88:70:74:5D
Certificate issuer:       /CN=5F8F031A7D99BDA7B63CC80436979A44A62B14CF
Certificate serial:       2E7E5133482963C83F73A271D044D68F7AAB990B
Authority key identifier: 5F:8F:03:1A:7D:99:BD:A7:B6:3C:C8:04:36:97:9A:44:A6:2B:14:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F8F031A7D99BDA7B63CC80436979A44A62B14CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gm8LDgLSWrv6HoAYC1B2mMHpEHPfnZKmVxEcqWcDv9r6/0/3230302e39352e3137392e302f32342d3234203d3e203532353439.roa
Signing time:             Tue 03 Jun 2025 16:49:33 +0000
ROA not before:           Tue 03 Jun 2025 16:44:33 +0000
ROA not after:            Tue 02 Jun 2026 16:49:33 +0000
asID:                     52549
IP address blocks:        200.95.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gm8LDgLSWrv6HoAYC1B2mMHpEHPfnZKmVxEcqWcDv9r6/0/5F8F031A7D99BDA7B63CC80436979A44A62B14CF.crl
                          rsync://rpki-repo.registro.br/repo/Gm8LDgLSWrv6HoAYC1B2mMHpEHPfnZKmVxEcqWcDv9r6/0/5F8F031A7D99BDA7B63CC80436979A44A62B14CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F8F031A7D99BDA7B63CC80436979A44A62B14CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 09:23:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:7e:51:33:48:29:63:c8:3f:73:a2:71:d0:44:d6:8f:7a:ab:99:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F8F031A7D99BDA7B63CC80436979A44A62B14CF
        Validity
            Not Before: Jun  3 16:44:33 2025 GMT
            Not After : Jun  2 16:49:33 2026 GMT
        Subject: CN=5070907E087D6C0D34D50B38900041538870745D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:89:0c:29:42:f9:26:6d:eb:b2:d2:51:49:18:
                    1c:2a:ac:55:a4:1d:9a:07:17:a6:1c:e2:f2:b3:65:
                    bf:e3:48:b9:49:d2:8f:a2:01:90:b9:82:85:56:8e:
                    f5:ee:a3:ed:1f:e9:f1:fe:6c:26:24:b3:8d:74:6f:
                    2a:10:bb:bf:67:b0:87:de:96:f0:09:0a:97:61:c3:
                    54:e3:a4:25:36:6f:f7:b7:a8:3a:7e:4e:28:81:2a:
                    a1:f1:5f:34:84:ee:40:d2:42:79:50:cd:8e:5d:ac:
                    a9:ae:9d:6e:41:65:42:06:20:6d:6e:cc:e0:40:05:
                    59:be:60:f0:2f:40:54:3b:99:d0:d5:6d:7b:74:76:
                    67:e3:84:77:99:7c:f6:fa:2b:de:50:09:05:a2:62:
                    f0:c3:35:54:8c:89:a8:41:de:72:48:f7:3f:92:bd:
                    b2:e9:d1:f4:9a:9f:44:df:28:33:29:54:54:ee:26:
                    9f:8c:77:6b:d7:18:e9:d4:e7:aa:2c:13:c4:87:95:
                    3f:d1:bb:79:04:b5:d7:37:d3:a3:e4:af:00:0a:8e:
                    74:c7:7b:26:d0:b8:62:44:d1:e6:d5:5a:93:86:66:
                    2c:20:bd:68:c7:f9:f8:40:a1:4d:50:61:63:ff:bb:
                    33:5c:38:7e:af:66:7e:28:18:dc:d2:f2:07:62:20:
                    e0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:70:90:7E:08:7D:6C:0D:34:D5:0B:38:90:00:41:53:88:70:74:5D
            X509v3 Authority Key Identifier:
                keyid:5F:8F:03:1A:7D:99:BD:A7:B6:3C:C8:04:36:97:9A:44:A6:2B:14:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gm8LDgLSWrv6HoAYC1B2mMHpEHPfnZKmVxEcqWcDv9r6/0/5F8F031A7D99BDA7B63CC80436979A44A62B14CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F8F031A7D99BDA7B63CC80436979A44A62B14CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gm8LDgLSWrv6HoAYC1B2mMHpEHPfnZKmVxEcqWcDv9r6/0/3230302e39352e3137392e302f32342d3234203d3e203532353439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.95.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:3f:af:e4:8f:9a:9d:b5:c5:63:db:ea:48:ad:b5:60:80:1b:
         4b:8d:b7:3e:4f:ba:9b:db:66:78:62:06:0d:6f:66:f7:38:12:
         0a:98:d6:fc:0c:18:e5:df:5e:44:e3:dc:37:bb:0b:dc:51:7a:
         b1:6f:85:b4:da:8f:23:ff:03:e0:ac:47:f5:ec:ba:96:38:48:
         5b:6f:77:ec:d1:f3:80:6b:a2:09:6e:cb:fa:d2:05:d4:7d:88:
         6c:bb:22:1a:eb:b4:88:7c:a7:b0:d2:82:fc:e0:bd:b1:df:e1:
         d7:dd:1c:3f:13:cf:a7:36:b5:d1:97:3d:55:d8:ec:9d:24:43:
         e6:2f:94:7d:db:61:2e:4c:82:f8:40:41:b0:51:7b:43:4f:72:
         6a:5a:91:ad:df:8b:00:4a:ec:ef:1a:67:af:ba:68:55:2e:8b:
         72:82:4c:f0:10:9c:1a:28:2e:74:40:52:b8:b1:fe:b4:28:e9:
         31:e9:75:23:33:00:85:0d:38:11:d4:e4:46:5c:cd:b7:a2:fe:
         2f:0c:ce:08:77:47:ea:1b:ea:1c:8e:e2:85:86:89:42:38:1f:
         84:4b:c5:fe:4d:ff:52:fc:3d:24:c8:f4:61:e9:57:d2:a0:53:
         6d:f5:c9:cd:ee:71:b7:0e:8e:dd:08:ce:bb:1b:aa:d5:71:bf:
         24:d2:6c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 03:09:38 2025 by rpki-client