Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/3230312e35342e3138352e302f32342d3234203d3e20323733333630.roa
File:                     3230312e35342e3138352e302f32342d3234203d3e20323733333630.roa (raw, json)
Hash identifier:          FzYJFbDNbZgiMUj1fIs1gkuhosqvbFTL0+CO+NSzJLE=
Subject key identifier:   51:38:3D:A3:95:88:57:BD:77:B6:25:73:AD:B2:61:80:8F:B5:AD:6C
Certificate issuer:       /CN=2F65513E9BA3C6CA0ED470DE03A6E1E304EC974C
Certificate serial:       4CED50A25F9A022989AB0A3CD3C3EE22C19A47D9
Authority key identifier: 2F:65:51:3E:9B:A3:C6:CA:0E:D4:70:DE:03:A6:E1:E3:04:EC:97:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F65513E9BA3C6CA0ED470DE03A6E1E304EC974C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/3230312e35342e3138352e302f32342d3234203d3e20323733333630.roa
Signing time:             Wed 12 Feb 2025 13:45:01 +0000
ROA not before:           Wed 12 Feb 2025 13:40:01 +0000
ROA not after:            Wed 11 Feb 2026 13:45:01 +0000
asID:                     273360
IP address blocks:        201.54.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/2F65513E9BA3C6CA0ED470DE03A6E1E304EC974C.crl
                          rsync://rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/2F65513E9BA3C6CA0ED470DE03A6E1E304EC974C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F65513E9BA3C6CA0ED470DE03A6E1E304EC974C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Apr 2025 05:19:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:ed:50:a2:5f:9a:02:29:89:ab:0a:3c:d3:c3:ee:22:c1:9a:47:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F65513E9BA3C6CA0ED470DE03A6E1E304EC974C
        Validity
            Not Before: Feb 12 13:40:01 2025 GMT
            Not After : Feb 11 13:45:01 2026 GMT
        Subject: CN=51383DA3958857BD77B62573ADB261808FB5AD6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:99:95:7d:88:07:cf:94:f7:8d:06:ba:a4:e8:
                    4c:49:a7:fa:a1:30:75:fc:04:53:8f:7d:35:bf:5c:
                    29:3a:f3:50:ad:0c:fd:1e:48:a4:2d:be:21:d1:c5:
                    c3:c5:3b:8c:ac:a6:ea:44:69:51:39:de:07:01:9d:
                    26:66:5c:e7:90:f6:c0:86:e2:88:41:6a:63:9f:21:
                    b8:48:f2:60:63:78:53:44:1a:0a:14:75:47:4e:c7:
                    07:b5:52:e8:af:c9:bb:29:b4:e8:53:a9:45:e7:4c:
                    c0:2d:69:56:4c:6d:de:e7:40:80:57:9a:21:44:af:
                    8a:96:47:f4:50:b0:f0:19:63:b0:9b:eb:fa:5d:71:
                    52:75:b2:db:79:9a:ff:f3:aa:ba:c0:a3:b5:b9:89:
                    c9:f9:23:e1:41:d1:27:1c:39:f2:68:c6:a2:65:66:
                    5d:c3:3e:2e:fb:c0:3a:3f:19:0f:55:11:ce:ff:88:
                    1e:09:18:42:74:4d:cb:16:fa:0d:08:cc:02:63:af:
                    99:9e:d6:9e:99:fe:03:ab:6c:5c:09:29:66:3e:01:
                    dd:b8:b4:a5:fc:02:98:00:ee:66:2f:4a:87:97:3d:
                    82:18:1b:49:1c:6b:0f:38:86:53:61:f8:32:45:71:
                    21:2e:2c:49:48:45:27:54:58:48:b2:9d:4b:b2:00:
                    1a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:38:3D:A3:95:88:57:BD:77:B6:25:73:AD:B2:61:80:8F:B5:AD:6C
            X509v3 Authority Key Identifier:
                keyid:2F:65:51:3E:9B:A3:C6:CA:0E:D4:70:DE:03:A6:E1:E3:04:EC:97:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/2F65513E9BA3C6CA0ED470DE03A6E1E304EC974C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F65513E9BA3C6CA0ED470DE03A6E1E304EC974C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/3230312e35342e3138352e302f32342d3234203d3e20323733333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.54.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:28:f6:c4:ae:aa:c9:22:e6:6e:08:7c:8a:bf:de:c7:7a:2b:
         94:e4:1d:d9:cf:e4:32:3b:5f:0c:ee:39:93:c8:71:6a:fb:74:
         f4:83:4a:2e:bb:86:8a:74:d2:cf:f4:53:ea:d5:f8:be:2b:2b:
         30:64:82:68:b4:c4:2d:f9:29:1a:18:3e:76:4e:7b:76:4b:fd:
         e5:3f:07:b7:89:d1:59:ea:47:9f:17:8e:43:74:1e:ad:72:99:
         c1:4c:e5:97:41:69:d9:de:79:ac:bd:71:78:44:0a:2d:09:37:
         37:f5:ea:19:a7:c1:f2:87:e2:5d:1b:fe:ce:72:29:6e:a2:80:
         28:5d:c4:45:5b:77:87:2a:21:b9:89:f6:d6:65:10:20:b2:bb:
         01:ee:3f:07:31:cb:df:ea:29:10:f6:2e:52:40:3b:b7:91:d3:
         c9:f8:f9:df:df:8f:83:6d:10:5c:3b:82:bb:17:86:7c:29:00:
         68:5a:42:09:cf:32:18:b2:8a:00:7e:59:81:ba:27:99:94:12:
         bf:70:2d:f2:89:86:7c:4a:05:99:28:aa:b2:24:ab:47:bb:b3:
         af:46:c0:c4:17:77:9c:cf:67:ec:1c:78:3e:c1:64:e3:1e:9d:
         55:a5:14:ba:e8:4f:74:cf:c8:18:f4:db:d2:dc:69:05:8b:70:
         ca:0a:c8:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 20:47:24 2025 by rpki-client