Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/0/3230302e3132332e3233322e302f32342d3234203d3e20323730323838.roa
File:                     3230302e3132332e3233322e302f32342d3234203d3e20323730323838.roa (raw, json)
Hash identifier:          hYHBO6HQqvnJykXeGYmLBy85O5ADDeYvv8Qr8FA6EDU=
Subject key identifier:   F2:28:4C:5B:F8:8A:BB:16:5E:94:F6:95:5F:0B:11:AD:E9:F5:3B:28
Certificate issuer:       /CN=7C39647D835751BB03E763780FC3CF55E30C6370
Certificate serial:       397FECB46993AD6D3924D94671CCF8ACEC058443
Authority key identifier: 7C:39:64:7D:83:57:51:BB:03:E7:63:78:0F:C3:CF:55:E3:0C:63:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C39647D835751BB03E763780FC3CF55E30C6370.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/0/3230302e3132332e3233322e302f32342d3234203d3e20323730323838.roa
Signing time:             Tue 25 Mar 2025 14:56:50 +0000
ROA not before:           Tue 25 Mar 2025 14:51:50 +0000
ROA not after:            Tue 24 Mar 2026 14:56:50 +0000
asID:                     270288
IP address blocks:        200.123.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/0/7C39647D835751BB03E763780FC3CF55E30C6370.crl
                          rsync://rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/0/7C39647D835751BB03E763780FC3CF55E30C6370.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C39647D835751BB03E763780FC3CF55E30C6370.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 22:57:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:7f:ec:b4:69:93:ad:6d:39:24:d9:46:71:cc:f8:ac:ec:05:84:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C39647D835751BB03E763780FC3CF55E30C6370
        Validity
            Not Before: Mar 25 14:51:50 2025 GMT
            Not After : Mar 24 14:56:50 2026 GMT
        Subject: CN=F2284C5BF88ABB165E94F6955F0B11ADE9F53B28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:51:bd:a6:98:87:b5:94:26:8c:fb:ed:62:03:
                    7a:24:e0:a7:fc:ff:7e:2f:2d:00:0e:6b:db:ce:fa:
                    a6:35:f2:53:38:b5:e9:f1:f6:22:43:54:cf:8b:d8:
                    c1:d8:b4:5b:b3:82:08:da:8e:4d:73:38:9f:78:1f:
                    0e:60:dc:3d:71:e7:ec:fd:f8:d7:2e:3a:46:23:9a:
                    00:42:b2:9c:e7:99:64:3d:05:5e:b3:6f:33:c1:c4:
                    a1:b1:d2:89:51:56:18:7b:5f:79:c3:02:f4:37:45:
                    9e:16:4e:56:85:cf:d0:67:66:2d:c9:5c:b4:a5:39:
                    7a:e4:df:72:31:8c:41:51:aa:51:87:db:9a:6f:d2:
                    a3:49:5a:5b:db:b9:ae:36:20:93:22:94:e0:a9:be:
                    18:9e:ad:85:f9:db:6b:b8:e0:c0:62:9a:84:f4:87:
                    97:9d:9b:4e:aa:8a:a6:12:dd:ed:f4:8f:96:05:82:
                    01:af:92:49:f5:00:9a:e2:8d:0b:fe:38:b2:35:56:
                    10:b1:59:58:c2:9b:d5:9f:97:f6:51:46:b1:8b:38:
                    95:95:9c:7f:78:92:9f:50:34:b7:d9:57:ef:23:ab:
                    61:d8:2e:92:2a:64:6c:d4:95:38:e8:88:f2:50:eb:
                    b3:aa:e5:a7:d3:1d:b7:44:85:b3:5d:f0:69:3b:25:
                    39:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:28:4C:5B:F8:8A:BB:16:5E:94:F6:95:5F:0B:11:AD:E9:F5:3B:28
            X509v3 Authority Key Identifier:
                keyid:7C:39:64:7D:83:57:51:BB:03:E7:63:78:0F:C3:CF:55:E3:0C:63:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/0/7C39647D835751BB03E763780FC3CF55E30C6370.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C39647D835751BB03E763780FC3CF55E30C6370.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/0/3230302e3132332e3233322e302f32342d3234203d3e20323730323838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:b6:b4:b7:2a:a1:d6:2b:f9:9a:7e:8b:32:5c:cc:cd:e8:84:
         cd:c1:f9:45:59:29:f6:e8:ac:85:e3:76:90:fa:04:9f:94:c4:
         0a:f9:6f:b0:e3:79:d8:be:74:40:9f:c7:d6:d7:70:2b:25:ae:
         f3:0c:c3:c8:ed:6e:4c:f2:51:d3:1b:41:6a:0b:ec:ab:bb:3f:
         79:26:9f:16:3d:39:09:e7:70:eb:8b:ec:29:23:ae:98:28:6a:
         00:48:5a:c0:ab:82:bb:fb:55:4e:b3:a2:da:d8:83:61:63:5e:
         11:1c:62:3d:2d:dd:6b:d3:3e:1e:63:6c:99:84:5e:22:74:48:
         5f:bf:80:b3:bf:69:5b:40:01:1e:53:00:bf:e5:c2:f8:9e:67:
         72:41:a6:68:58:c8:13:a0:5b:67:6f:61:65:d7:72:b8:b3:22:
         37:c3:0d:10:24:b6:7a:1d:00:0f:65:9a:52:4d:48:1b:14:cd:
         0d:69:66:39:67:fc:4c:92:95:5a:b9:0e:8a:47:03:47:01:f7:
         3f:b5:90:53:72:d6:02:11:af:65:42:e4:25:92:59:c7:3d:27:
         d5:9b:db:95:63:c4:2b:a5:6f:04:d4:c0:f7:51:22:5c:b0:f4:
         18:a5:45:9c:ff:cc:1c:26:03:34:07:ba:f6:da:41:c7:c0:8a:
         f8:50:7e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:06:58 2025 by rpki-client