Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3230302e3232392e38382e302f32322d3234203d3e203533313538.roa
File:                     3230302e3232392e38382e302f32322d3234203d3e203533313538.roa (raw, json)
Hash identifier:          YqV0/Lhj2MxuOJ6HOw87Su9/s1ow22MaSfI8k8cZeuU=
Subject key identifier:   FA:AC:31:E5:50:22:C7:3D:38:70:BD:B0:18:15:1D:7B:DA:BB:7D:A7
Certificate issuer:       /CN=3B60C03C0834984570E58DB9BDE5D3DD976B0717
Certificate serial:       1D44B639E9937A765A5E6041E12F3B2AB4BDDA0A
Authority key identifier: 3B:60:C0:3C:08:34:98:45:70:E5:8D:B9:BD:E5:D3:DD:97:6B:07:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3230302e3232392e38382e302f32322d3234203d3e203533313538.roa
Signing time:             Fri 20 Dec 2024 15:00:37 +0000
ROA not before:           Fri 20 Dec 2024 14:55:37 +0000
ROA not after:            Fri 19 Dec 2025 15:00:37 +0000
asID:                     53158
IP address blocks:        200.229.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl
                          rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 07:55:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:44:b6:39:e9:93:7a:76:5a:5e:60:41:e1:2f:3b:2a:b4:bd:da:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B60C03C0834984570E58DB9BDE5D3DD976B0717
        Validity
            Not Before: Dec 20 14:55:37 2024 GMT
            Not After : Dec 19 15:00:37 2025 GMT
        Subject: CN=FAAC31E55022C73D3870BDB018151D7BDABB7DA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d3:e0:6d:3b:cc:62:db:ef:13:70:66:ed:b0:
                    5a:24:9e:ce:ed:2a:6a:3c:26:8f:58:cc:8d:d6:18:
                    16:59:af:07:0c:58:7f:1c:76:9e:64:fe:b7:1e:8a:
                    17:69:5c:41:df:b0:7e:6f:a6:42:e0:a6:27:2e:04:
                    97:ad:71:66:10:9b:17:fe:6b:59:ed:0f:11:bf:4b:
                    a0:2c:e9:fa:db:4d:83:27:f2:9b:c1:d4:4a:ad:19:
                    25:99:35:a0:7f:c5:94:9f:92:87:6b:55:c9:45:b6:
                    03:cb:3c:7d:5a:a9:e8:06:94:10:f3:fa:33:f6:e3:
                    b0:8e:7f:a1:10:f5:c1:e0:4e:7a:9a:8b:b8:52:ca:
                    77:5b:40:84:87:80:46:d5:2e:b2:b7:4a:4b:f6:db:
                    43:64:45:05:69:07:35:2a:75:b2:3a:04:59:9d:87:
                    95:a1:8c:d5:d9:7e:b3:94:82:ac:ed:6b:12:85:46:
                    fb:b4:ad:f6:f3:ac:a1:cc:14:7a:51:55:d6:a7:9d:
                    e8:1c:05:8a:96:62:6e:7f:8a:0d:86:b3:14:7a:b5:
                    5b:39:ee:fa:e2:b3:89:6c:f8:ea:9d:41:cf:96:96:
                    29:a7:e9:06:9c:b4:4c:5f:12:22:37:39:cb:c7:be:
                    4d:b1:09:8f:fb:de:16:d6:6b:48:c6:93:a6:60:3a:
                    d1:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:AC:31:E5:50:22:C7:3D:38:70:BD:B0:18:15:1D:7B:DA:BB:7D:A7
            X509v3 Authority Key Identifier:
                keyid:3B:60:C0:3C:08:34:98:45:70:E5:8D:B9:BD:E5:D3:DD:97:6B:07:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3230302e3232392e38382e302f32322d3234203d3e203533313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:ea:26:45:b3:22:31:37:08:92:ad:f7:96:b7:61:8b:e0:95:
         c4:08:0e:a1:d5:cd:23:fd:64:91:dc:46:67:f5:59:f7:32:cb:
         4d:f1:c4:6c:b9:9e:ba:61:d7:3b:0e:32:8a:f2:d8:0e:38:db:
         53:db:0d:72:25:46:20:f4:f1:ab:4a:6b:14:18:57:59:72:e3:
         8e:49:07:72:21:26:d7:ec:be:9c:20:57:41:9c:e5:98:69:32:
         4a:ab:e6:35:82:03:de:c7:d2:8c:7b:58:b2:8a:77:20:43:d6:
         cf:78:6f:a5:fc:88:f8:f2:4f:c9:2b:96:12:32:1d:b0:45:96:
         4f:1b:65:fa:8f:2b:55:b6:b9:50:b8:f3:02:24:e8:83:38:1c:
         b9:23:8f:6a:61:02:4b:32:17:3d:52:9b:d3:ba:1d:1c:57:f1:
         c9:de:dd:1d:20:d5:c5:46:5c:06:cd:25:a1:e7:a4:dc:11:ac:
         15:1d:14:c6:7b:88:ac:a6:cb:16:f8:62:aa:c4:10:9f:12:6a:
         4c:c6:6d:a0:70:d8:60:7d:47:41:9b:41:ee:3b:8e:69:70:49:
         ea:09:32:79:70:1f:01:9f:ed:3a:11:1b:e9:17:1b:16:b0:24:
         e5:c3:b1:ee:c7:d4:ac:9a:1b:8f:b7:66:3c:f8:f2:7e:37:89:
         e1:4c:89:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:36:00 2025 by rpki-client