Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HHPETmcfR2hPaougfQMxyLGSpKXehX35jxAp4yd4dQ5i/0/3230302e32342e38342e302f32322d3232203d3e203631373930.roa
File:                     3230302e32342e38342e302f32322d3232203d3e203631373930.roa (raw, json)
Hash identifier:          oWpT8s3eNAWGbVlR5gpPmlnfM5HqmKLYroWKrDnfVhA=
Subject key identifier:   59:DD:B7:70:EB:85:16:A7:DF:27:49:C3:5F:84:F2:0A:80:34:2A:D6
Certificate issuer:       /CN=D45EE207E811FF7831A3054740F4FC376DE9C473
Certificate serial:       4EDF7FC59BFD7D78B59985B4630EDAE1995AE4E4
Authority key identifier: D4:5E:E2:07:E8:11:FF:78:31:A3:05:47:40:F4:FC:37:6D:E9:C4:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D45EE207E811FF7831A3054740F4FC376DE9C473.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HHPETmcfR2hPaougfQMxyLGSpKXehX35jxAp4yd4dQ5i/0/3230302e32342e38342e302f32322d3232203d3e203631373930.roa
Signing time:             Wed 18 Dec 2024 23:19:52 +0000
ROA not before:           Wed 18 Dec 2024 23:14:52 +0000
ROA not after:            Wed 17 Dec 2025 23:19:52 +0000
asID:                     61790
IP address blocks:        200.24.84.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HHPETmcfR2hPaougfQMxyLGSpKXehX35jxAp4yd4dQ5i/0/D45EE207E811FF7831A3054740F4FC376DE9C473.crl
                          rsync://rpki-repo.registro.br/repo/HHPETmcfR2hPaougfQMxyLGSpKXehX35jxAp4yd4dQ5i/0/D45EE207E811FF7831A3054740F4FC376DE9C473.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D45EE207E811FF7831A3054740F4FC376DE9C473.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 09:32:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:df:7f:c5:9b:fd:7d:78:b5:99:85:b4:63:0e:da:e1:99:5a:e4:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D45EE207E811FF7831A3054740F4FC376DE9C473
        Validity
            Not Before: Dec 18 23:14:52 2024 GMT
            Not After : Dec 17 23:19:52 2025 GMT
        Subject: CN=59DDB770EB8516A7DF2749C35F84F20A80342AD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fa:ce:a9:63:4d:bf:4e:22:4b:63:73:4b:96:
                    58:23:e2:ac:a5:6e:b3:b6:c8:0f:70:65:57:2d:83:
                    0a:fd:c0:93:21:f2:46:d6:d2:07:72:8e:49:b9:2c:
                    f5:bf:02:6a:cb:57:74:40:f8:43:54:2b:20:fb:dd:
                    db:13:1f:ec:fe:09:3e:98:02:d1:0d:93:13:6f:7a:
                    35:95:a2:34:88:8d:c5:b6:f9:16:ef:67:b8:9c:d2:
                    8a:00:da:4a:23:23:28:7e:ab:8d:f0:05:f7:09:a8:
                    cd:ff:ff:2c:13:48:3b:81:99:21:25:cd:61:67:65:
                    d3:9d:12:d6:cf:0e:bc:b7:fb:e9:a9:4f:91:ab:38:
                    f2:db:b5:12:cf:23:96:95:7b:5f:fb:71:65:33:05:
                    09:af:74:ac:e1:0c:a7:1a:60:b9:74:03:82:cf:5b:
                    3a:8e:59:67:40:98:73:ad:09:7b:c6:6b:1c:1a:cf:
                    7e:b5:15:9c:15:ac:36:43:9e:75:2d:3f:f8:4b:ca:
                    eb:c0:ab:77:a6:0c:84:e6:5a:d8:fc:ad:26:8d:69:
                    21:dc:4d:d4:8c:e3:ad:8f:b4:eb:ae:0e:e9:ca:39:
                    9a:23:33:5c:17:d7:4e:b3:c1:47:7e:bc:1a:df:8b:
                    1a:e6:ae:6b:1d:7e:80:97:2f:30:da:72:b5:e0:f8:
                    dd:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:DD:B7:70:EB:85:16:A7:DF:27:49:C3:5F:84:F2:0A:80:34:2A:D6
            X509v3 Authority Key Identifier:
                keyid:D4:5E:E2:07:E8:11:FF:78:31:A3:05:47:40:F4:FC:37:6D:E9:C4:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HHPETmcfR2hPaougfQMxyLGSpKXehX35jxAp4yd4dQ5i/0/D45EE207E811FF7831A3054740F4FC376DE9C473.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D45EE207E811FF7831A3054740F4FC376DE9C473.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HHPETmcfR2hPaougfQMxyLGSpKXehX35jxAp4yd4dQ5i/0/3230302e32342e38342e302f32322d3232203d3e203631373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.24.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:00:0e:b8:4f:b1:58:71:87:c6:03:2e:62:76:86:ca:95:af:
         71:be:26:aa:69:c3:1d:2a:07:2a:44:7f:8f:74:0a:f6:dd:a7:
         8e:fc:3f:1f:c1:c6:8b:e9:b5:9c:25:3c:d6:9a:9c:49:fc:6e:
         0c:d2:3b:70:a7:7c:ca:c4:ad:44:d1:3f:41:ce:75:0b:de:fe:
         08:c9:c4:17:a1:50:2d:4f:c6:fd:fb:74:e3:87:60:61:c6:b7:
         22:69:b8:8f:d2:ae:19:11:24:d0:5f:7a:f2:08:ec:c7:27:7e:
         f1:fb:31:be:36:62:b4:f5:9e:d8:51:25:5d:70:8c:dc:3a:23:
         02:45:10:a9:66:52:65:32:3b:39:bb:1d:ab:70:3b:5a:a6:b0:
         a7:37:20:7c:de:0e:f7:33:90:16:c6:8a:4e:ec:db:eb:8d:87:
         fa:05:7c:84:4c:ba:6e:69:97:33:5a:73:68:1c:0f:c4:89:67:
         85:50:0b:07:f1:c3:e6:1f:b0:31:5a:34:ec:4d:2f:7d:a1:07:
         9d:3c:ba:eb:b1:24:6b:5b:ee:54:29:86:45:df:ce:79:ef:01:
         d6:a5:6d:0b:3c:80:8a:b3:7b:d3:d9:af:bb:15:df:56:6c:29:
         72:86:96:82:6a:2a:01:cf:12:e4:88:01:50:57:28:15:74:23:
         ea:76:c7:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:56:40 2025 by rpki-client