Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/3230302e3231392e32322e302f32342d3234203d3e20323730383131.roa
File:                     3230302e3231392e32322e302f32342d3234203d3e20323730383131.roa (raw, json)
Hash identifier:          fgdwBClArGcywT5nJVYvGozREMbGVi5St1oOX7D5Sv4=
Subject key identifier:   3F:24:F2:B8:47:B9:24:0F:9D:8F:C8:AA:CD:28:06:B4:AC:59:ED:AE
Certificate issuer:       /CN=6876A918DB59AE677BB1F068BBB1EC6A5E0C6596
Certificate serial:       19DB382F86FB2C11DF210942E371FFE30A53B0D1
Authority key identifier: 68:76:A9:18:DB:59:AE:67:7B:B1:F0:68:BB:B1:EC:6A:5E:0C:65:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/3230302e3231392e32322e302f32342d3234203d3e20323730383131.roa
Signing time:             Wed 05 Mar 2025 18:59:36 +0000
ROA not before:           Wed 05 Mar 2025 18:54:36 +0000
ROA not after:            Wed 04 Mar 2026 18:59:36 +0000
asID:                     270811
IP address blocks:        200.219.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.crl
                          rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 01:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:db:38:2f:86:fb:2c:11:df:21:09:42:e3:71:ff:e3:0a:53:b0:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6876A918DB59AE677BB1F068BBB1EC6A5E0C6596
        Validity
            Not Before: Mar  5 18:54:36 2025 GMT
            Not After : Mar  4 18:59:36 2026 GMT
        Subject: CN=3F24F2B847B9240F9D8FC8AACD2806B4AC59EDAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6b:4e:b8:84:60:6c:92:22:62:1f:61:e6:5c:
                    6d:ad:5c:21:d8:1b:34:81:63:f9:f9:9e:9e:81:d9:
                    ba:39:24:f9:58:8b:ae:90:4f:c7:65:14:8a:8e:1e:
                    dd:30:3d:30:7e:a8:57:bb:94:58:e5:dc:fe:2e:92:
                    8d:ae:5f:36:ee:50:44:28:51:b1:d0:8d:c3:48:d4:
                    a9:17:8f:75:f9:a8:cc:56:d6:91:2c:75:d0:5b:da:
                    84:0b:d6:1b:63:17:9e:1b:42:37:95:17:6b:11:09:
                    b6:7e:74:95:01:b3:96:cb:c6:a3:fe:0c:37:8e:40:
                    8b:04:40:d8:0b:5b:54:c7:85:22:97:9b:df:6f:61:
                    82:b0:8e:54:e3:7a:52:f9:73:68:da:9b:e3:95:4e:
                    21:fe:b4:31:d4:eb:c9:50:da:c6:21:d5:08:dc:d6:
                    ba:1b:26:a8:6a:ff:d4:ec:74:00:8a:46:f9:b6:fb:
                    b0:3a:fc:10:68:c1:1c:b0:61:3f:95:01:62:b8:74:
                    b1:19:fc:84:5b:4c:2d:d9:2c:eb:42:75:d5:15:03:
                    ca:ec:8c:e0:0c:2a:bd:2e:79:19:b6:b9:06:a5:79:
                    bb:65:16:7e:42:92:2c:38:ea:24:d8:58:36:44:97:
                    e6:05:3b:73:f1:28:05:36:75:98:f1:76:16:5e:93:
                    ad:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:24:F2:B8:47:B9:24:0F:9D:8F:C8:AA:CD:28:06:B4:AC:59:ED:AE
            X509v3 Authority Key Identifier:
                keyid:68:76:A9:18:DB:59:AE:67:7B:B1:F0:68:BB:B1:EC:6A:5E:0C:65:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/3230302e3231392e32322e302f32342d3234203d3e20323730383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e7:fe:43:2e:65:80:a5:37:d1:49:8b:b0:9b:80:16:18:66:3f:
         e0:2d:0c:be:95:b4:58:b2:18:51:31:8c:a8:07:52:d4:eb:d7:
         ba:42:f8:ca:70:7f:67:91:4d:86:f7:a1:3d:6c:c9:87:36:39:
         93:4a:14:52:6e:82:f6:36:d3:79:bb:2d:7d:38:93:d3:55:17:
         7a:93:de:e2:eb:5f:32:02:56:9d:dd:62:61:3a:c9:f2:4f:76:
         32:38:b8:2c:0b:51:e3:e1:e2:44:65:a8:7c:6b:07:f0:67:2b:
         33:f8:d0:96:08:b5:35:eb:3b:9c:a7:3f:23:ac:a6:68:f8:51:
         e4:03:57:18:f6:d1:46:dd:40:59:50:05:6d:63:a9:49:73:8c:
         dd:cc:e6:35:e3:99:68:6f:de:67:30:9b:f5:be:09:7a:1e:5c:
         fb:e7:19:96:e1:b3:11:2d:1a:8d:09:60:dc:b7:81:aa:a8:62:
         0f:05:cd:92:4f:32:18:17:0d:e7:52:59:44:34:5a:03:05:81:
         42:80:a6:40:51:da:21:28:06:80:68:52:da:02:59:c3:6a:55:
         d9:f6:d2:ba:8a:de:2d:b6:b6:5c:d6:b9:8a:b8:8a:6d:f7:eb:
         d7:73:80:30:69:bf:22:7d:fb:0f:08:ce:51:8c:43:69:6b:59:
         1d:a9:43:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:53:55 2025 by rpki-client