Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/3230302e3231392e32312e302f32342d3234203d3e20323730383131.roa
File:                     3230302e3231392e32312e302f32342d3234203d3e20323730383131.roa (raw, json)
Hash identifier:          LLRlbHTgsnwJrTLX/m1CwgoDx+KvHwfahlAasRbqstY=
Subject key identifier:   3C:17:D8:C9:CB:EE:0F:1F:43:54:D9:04:C0:69:C0:A0:D7:CE:DB:02
Certificate issuer:       /CN=6876A918DB59AE677BB1F068BBB1EC6A5E0C6596
Certificate serial:       45AC2147126AD3B2AA5EC2C1E33C8F780E1EB607
Authority key identifier: 68:76:A9:18:DB:59:AE:67:7B:B1:F0:68:BB:B1:EC:6A:5E:0C:65:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/3230302e3231392e32312e302f32342d3234203d3e20323730383131.roa
Signing time:             Wed 05 Mar 2025 18:59:37 +0000
ROA not before:           Wed 05 Mar 2025 18:54:37 +0000
ROA not after:            Wed 04 Mar 2026 18:59:37 +0000
asID:                     270811
IP address blocks:        200.219.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.crl
                          rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 01:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:ac:21:47:12:6a:d3:b2:aa:5e:c2:c1:e3:3c:8f:78:0e:1e:b6:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6876A918DB59AE677BB1F068BBB1EC6A5E0C6596
        Validity
            Not Before: Mar  5 18:54:37 2025 GMT
            Not After : Mar  4 18:59:37 2026 GMT
        Subject: CN=3C17D8C9CBEE0F1F4354D904C069C0A0D7CEDB02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d9:bb:70:d8:e7:3d:71:b9:60:b3:63:0e:6a:
                    fa:33:45:76:73:cf:4f:35:6d:70:31:e0:fb:13:f1:
                    22:25:92:27:da:fc:33:dd:99:a5:ac:7a:ef:42:8e:
                    ba:d1:9e:3f:87:9d:11:64:e7:53:13:67:5c:67:07:
                    82:83:b1:74:86:8b:9a:a2:4b:1b:25:e9:1d:cb:fe:
                    95:48:82:07:f9:ea:65:a3:f4:78:7b:ec:f5:2d:56:
                    59:5e:8e:77:22:6a:5a:3d:86:71:a8:a7:60:52:5c:
                    50:7a:e7:2d:bb:31:c1:c6:03:ac:b3:e7:23:ca:9b:
                    12:41:b6:82:96:d7:dd:54:2a:23:54:e7:00:9d:bb:
                    65:51:25:78:8b:39:73:92:91:95:b5:80:ad:cb:88:
                    e6:ad:63:fd:66:47:40:56:93:74:61:2b:9b:aa:94:
                    70:b8:a5:ee:31:42:b8:ee:e6:39:fe:94:7e:65:13:
                    75:fe:aa:7c:e3:59:4d:83:92:e8:d7:6d:46:1b:8f:
                    ab:92:3a:2b:87:dd:5d:99:a5:d1:36:18:5e:2e:50:
                    e3:06:b5:ac:d1:8d:ab:3e:e2:34:ad:13:06:1b:a3:
                    05:6b:0d:9a:84:33:9b:9c:a1:62:cc:68:92:f6:f1:
                    c1:d0:65:8e:f3:50:ed:04:f2:c5:29:a3:a8:fd:38:
                    b6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:17:D8:C9:CB:EE:0F:1F:43:54:D9:04:C0:69:C0:A0:D7:CE:DB:02
            X509v3 Authority Key Identifier:
                keyid:68:76:A9:18:DB:59:AE:67:7B:B1:F0:68:BB:B1:EC:6A:5E:0C:65:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/3230302e3231392e32312e302f32342d3234203d3e20323730383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:7a:ef:19:c4:0b:f3:d9:ed:7e:b2:2e:79:d1:1c:c4:87:7d:
         a4:ec:8e:4f:ba:a6:36:b7:bc:72:5f:68:88:6b:cc:22:18:68:
         b4:45:89:5a:14:fa:bd:86:53:4b:62:ce:10:c7:34:07:3b:2a:
         58:3f:13:bf:42:3d:de:7d:f6:b0:c7:21:4a:73:2d:1c:41:8a:
         27:24:da:c6:2a:ec:5b:ec:9a:e8:94:b2:c4:71:93:16:3e:0f:
         43:c3:1a:55:9a:8b:65:c1:7c:e7:a5:43:25:1b:46:03:67:9d:
         84:89:66:91:fd:ed:34:d6:5a:50:0c:cd:47:87:dc:67:e7:51:
         f4:bc:8d:8f:00:1c:db:40:88:7d:d8:c0:d0:65:17:7b:2a:93:
         08:70:dc:d6:22:1d:ae:d2:9a:53:54:cd:af:65:c6:6b:34:72:
         03:9f:d2:6a:f7:a8:e9:cf:af:fb:f0:72:33:df:eb:d2:1c:9f:
         71:3e:47:bb:77:1b:2f:30:93:88:f5:d5:3a:2a:f3:b9:f8:43:
         55:ec:09:d3:2a:e9:6d:8a:aa:7f:07:0a:1f:0b:5c:ea:15:6c:
         8c:92:3c:07:a5:db:cb:9a:4b:a2:f2:bf:06:37:e0:36:67:0f:
         18:61:e3:8a:a5:39:21:2c:04:77:63:dc:d0:a1:ba:60:af:08:
         ea:21:8a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:51:24 2025 by rpki-client