Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/3230302e3231392e32302e302f32332d3233203d3e20323730383131.roa
File:                     3230302e3231392e32302e302f32332d3233203d3e20323730383131.roa (raw, json)
Hash identifier:          CyDXK9ljjUpg2AqV1nyIeRl76AjKavDna/RybpHlnfw=
Subject key identifier:   9A:2C:AE:64:FC:12:1B:DB:E8:61:29:96:AA:CC:9C:94:88:7F:55:D5
Certificate issuer:       /CN=6876A918DB59AE677BB1F068BBB1EC6A5E0C6596
Certificate serial:       0200B89F7BBE67613C572C395D612C5E85C1B3A3
Authority key identifier: 68:76:A9:18:DB:59:AE:67:7B:B1:F0:68:BB:B1:EC:6A:5E:0C:65:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/3230302e3231392e32302e302f32332d3233203d3e20323730383131.roa
Signing time:             Wed 05 Mar 2025 18:59:37 +0000
ROA not before:           Wed 05 Mar 2025 18:54:37 +0000
ROA not after:            Wed 04 Mar 2026 18:59:37 +0000
asID:                     270811
IP address blocks:        200.219.20.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.crl
                          rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 01:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:00:b8:9f:7b:be:67:61:3c:57:2c:39:5d:61:2c:5e:85:c1:b3:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6876A918DB59AE677BB1F068BBB1EC6A5E0C6596
        Validity
            Not Before: Mar  5 18:54:37 2025 GMT
            Not After : Mar  4 18:59:37 2026 GMT
        Subject: CN=9A2CAE64FC121BDBE8612996AACC9C94887F55D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a6:9b:41:43:7d:df:ec:4b:4c:12:53:d8:f7:
                    05:96:e1:d0:46:8f:85:34:ad:81:f2:a8:18:a9:fb:
                    bf:4d:35:9e:10:08:c4:7d:26:5a:50:79:9c:b8:22:
                    5a:e7:84:d1:a6:9e:a6:ab:c5:c5:12:83:b9:58:db:
                    08:a3:73:38:04:a3:6f:56:ec:e6:9e:90:88:f0:93:
                    3b:86:f4:4d:e6:d6:23:ed:09:c1:c1:f6:d0:4d:34:
                    0a:82:35:0e:38:40:19:d5:84:c6:8a:f3:15:fb:07:
                    ea:2d:86:07:fa:c7:be:4c:cb:9e:74:90:67:fa:da:
                    37:f3:82:04:a5:17:43:24:0c:17:83:78:83:56:64:
                    7c:d4:66:7a:bf:33:3b:90:a8:67:dc:8e:02:4b:c7:
                    ed:19:a5:42:14:07:09:74:3e:9e:b2:98:c6:a0:f0:
                    ba:3d:fb:32:36:c8:f3:fb:8b:ec:e4:d0:f1:ec:b4:
                    f3:2b:30:0d:d0:9d:ee:45:f8:50:c1:99:d1:f9:92:
                    52:b4:2c:ed:93:73:91:32:74:8f:47:bf:1b:66:21:
                    7a:76:02:46:28:75:46:e0:44:98:c1:cb:6f:8d:8b:
                    26:6b:96:c0:56:dd:99:1a:40:96:00:6b:54:28:fc:
                    f3:0a:09:a8:bb:f7:96:a4:b0:5a:0b:17:ff:89:f0:
                    42:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:2C:AE:64:FC:12:1B:DB:E8:61:29:96:AA:CC:9C:94:88:7F:55:D5
            X509v3 Authority Key Identifier:
                keyid:68:76:A9:18:DB:59:AE:67:7B:B1:F0:68:BB:B1:EC:6A:5E:0C:65:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/3230302e3231392e32302e302f32332d3233203d3e20323730383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         85:dd:91:ff:e8:fe:03:14:16:c1:f3:65:37:22:3e:f6:cf:cb:
         1a:5a:fc:d7:bb:43:85:4b:e8:64:b8:93:f7:78:98:6a:7c:7d:
         29:c5:b2:0c:b2:fe:2c:6d:ef:4f:99:4d:08:d2:c3:59:aa:45:
         4b:29:ff:7e:18:34:fb:98:cc:0d:f3:88:45:be:08:37:c0:39:
         70:a9:78:e5:c0:98:a1:51:c8:eb:a4:a3:75:45:be:a9:0e:9a:
         c2:7d:e4:74:55:a3:2d:5e:65:ea:3d:01:db:4c:40:50:59:b2:
         d1:09:65:a6:75:a3:ae:cf:ac:bc:bc:de:ec:e4:38:9f:f7:f6:
         8b:73:39:e9:2d:fb:98:0d:d2:50:03:a8:bd:3b:bd:a1:02:a1:
         75:07:c4:45:6a:a4:0e:be:ef:46:d0:cc:01:e1:46:a5:0e:23:
         a6:7a:27:b2:5c:fe:24:71:c7:86:fb:53:a7:27:2e:e6:e0:9c:
         7d:25:cf:ff:1c:91:1c:a8:0b:51:ba:1c:85:f4:d8:0c:09:7a:
         5e:a2:cb:92:2d:aa:70:f1:ce:3c:20:5d:2d:a3:63:c5:93:e8:
         e4:15:8c:88:e6:35:28:03:b0:72:72:65:27:c2:06:ee:79:91:
         e7:73:31:a2:80:85:a9:bb:bb:aa:2c:50:f5:ac:93:90:3f:c1:
         b6:41:f0:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:51:32 2025 by rpki-client