Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e31392e38382e302f32322d3234203d3e20313334393930.roa
File:                     3230302e31392e38382e302f32322d3234203d3e20313334393930.roa (raw, json)
Hash identifier:          /J9XbdG8X6DEE2P9OzWYrGNcrwNjfyoMm9Mkgmed60g=
Subject key identifier:   12:BD:54:1A:B6:76:BD:35:CE:11:05:D6:70:49:E5:DF:EC:CF:38:05
Certificate issuer:       /CN=47F9B7F1523B5B333E71404DF4D659EB16D1D775
Certificate serial:       54A63CA49FC35D39D287DC592315131F2D96F4DB
Authority key identifier: 47:F9:B7:F1:52:3B:5B:33:3E:71:40:4D:F4:D6:59:EB:16:D1:D7:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F9B7F1523B5B333E71404DF4D659EB16D1D775.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e31392e38382e302f32322d3234203d3e20313334393930.roa
Signing time:             Wed 23 Apr 2025 14:07:00 +0000
ROA not before:           Wed 23 Apr 2025 14:02:00 +0000
ROA not after:            Wed 22 Apr 2026 14:07:00 +0000
asID:                     134990
IP address blocks:        200.19.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/47F9B7F1523B5B333E71404DF4D659EB16D1D775.crl
                          rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/47F9B7F1523B5B333E71404DF4D659EB16D1D775.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F9B7F1523B5B333E71404DF4D659EB16D1D775.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 14:34:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:a6:3c:a4:9f:c3:5d:39:d2:87:dc:59:23:15:13:1f:2d:96:f4:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47F9B7F1523B5B333E71404DF4D659EB16D1D775
        Validity
            Not Before: Apr 23 14:02:00 2025 GMT
            Not After : Apr 22 14:07:00 2026 GMT
        Subject: CN=12BD541AB676BD35CE1105D67049E5DFECCF3805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:02:ec:f8:0f:89:32:e5:3f:8d:64:33:7b:78:
                    8a:7b:2c:31:13:12:4f:73:21:77:9a:54:52:9f:18:
                    38:f0:70:43:2b:ad:39:b3:2a:fc:31:76:41:f8:2e:
                    c8:ba:4b:aa:d9:20:2d:04:33:b6:e2:dd:82:5e:5e:
                    8d:29:0f:98:63:16:61:84:94:f0:63:d7:ec:9f:c9:
                    fb:7a:5a:2a:60:89:eb:91:94:44:56:4d:9e:d7:d3:
                    f0:58:c4:00:17:c3:a2:1e:b2:3f:5f:98:9c:cf:fd:
                    4e:92:96:d4:a4:9f:12:8b:91:46:67:90:27:19:b5:
                    97:e3:2a:3a:51:9e:23:4e:56:e2:24:39:f7:a3:52:
                    ae:ba:ec:be:f3:4b:5e:67:e9:3a:18:d0:ab:fb:06:
                    cb:18:eb:f6:3e:04:33:89:fd:68:c4:db:5e:8b:19:
                    df:08:85:e2:3e:8a:18:b8:17:6d:ba:cf:2f:2e:ed:
                    b7:43:90:e3:d1:a7:b6:5c:63:fe:2f:97:8f:e8:67:
                    60:c6:57:0d:ab:55:19:4f:4a:c4:e0:e3:23:72:00:
                    b8:1b:ec:d6:54:14:e7:3a:a9:58:1c:59:30:2e:8b:
                    47:c7:56:77:3f:ba:ba:17:4e:9b:44:6d:b4:29:8c:
                    eb:9e:bc:56:39:b5:70:13:5b:d7:c5:29:95:8f:96:
                    00:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:BD:54:1A:B6:76:BD:35:CE:11:05:D6:70:49:E5:DF:EC:CF:38:05
            X509v3 Authority Key Identifier:
                keyid:47:F9:B7:F1:52:3B:5B:33:3E:71:40:4D:F4:D6:59:EB:16:D1:D7:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/47F9B7F1523B5B333E71404DF4D659EB16D1D775.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F9B7F1523B5B333E71404DF4D659EB16D1D775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e31392e38382e302f32322d3234203d3e20313334393930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.19.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:36:69:d1:73:1d:6b:a4:00:f4:6a:01:d0:ae:9a:21:cc:09:
         5d:4e:70:20:f7:85:b7:94:27:b6:02:1e:ef:58:2d:06:91:be:
         4f:4a:5f:44:92:11:f8:68:c9:c0:7c:9a:0e:f3:fe:f2:9f:28:
         13:92:b3:4e:0a:72:e6:38:b2:17:21:72:fb:e9:d6:df:22:5d:
         5e:20:47:1f:75:8b:37:44:15:30:ad:cd:26:c3:a2:53:c7:c9:
         f0:80:40:00:3c:a0:c2:f8:67:4c:b9:71:7a:aa:45:f7:ec:06:
         9a:8e:61:81:0a:49:fc:6a:c0:14:32:b9:40:e6:1d:21:ff:d6:
         46:92:73:8f:e3:fb:f3:14:3b:47:9f:09:b7:ed:30:27:e8:a3:
         d0:63:98:97:5c:7e:22:6b:9f:67:bc:cc:00:09:3e:7d:01:ce:
         aa:50:41:03:2c:1c:1f:3c:ca:46:fc:8e:95:1b:c1:50:67:31:
         0b:82:bd:32:c0:8b:39:20:e2:33:23:04:ac:16:aa:d6:c5:b8:
         cb:4a:fd:bf:34:76:6a:af:66:34:e1:02:87:57:9a:b3:84:38:
         4f:ff:c4:ca:a4:f5:1a:e7:7d:80:a9:45:32:3f:8b:ae:a1:32:
         3c:0d:20:99:59:f4:5e:24:da:7a:80:ca:93:15:49:b0:6a:f6:
         46:24:a0:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:27:39 2025 by rpki-client