Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uoef8oNQrTCLDFNvGuTPY9sqXxK9XXbH4BmwAk11e7b/1/3230302e3138372e39362e302f32322d3234203d3e20323730363832.roa
File:                     3230302e3138372e39362e302f32322d3234203d3e20323730363832.roa (raw, json)
Hash identifier:          4F/pTsOyBurL5EiddMpZZnwLvL8B1KghzeDfukXjE9w=
Subject key identifier:   01:93:A1:3F:68:F7:7F:9B:CD:22:AE:48:DA:57:DB:AF:66:F5:4F:33
Certificate issuer:       /CN=FFC6D87C33255DE718EF9A38A927C4C09C5A2A27
Certificate serial:       64D82E54AA54517AA64C9358A5DCB26FE2468132
Authority key identifier: FF:C6:D8:7C:33:25:5D:E7:18:EF:9A:38:A9:27:C4:C0:9C:5A:2A:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFC6D87C33255DE718EF9A38A927C4C09C5A2A27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uoef8oNQrTCLDFNvGuTPY9sqXxK9XXbH4BmwAk11e7b/1/3230302e3138372e39362e302f32322d3234203d3e20323730363832.roa
Signing time:             Thu 06 Mar 2025 22:13:58 +0000
ROA not before:           Thu 06 Mar 2025 22:08:58 +0000
ROA not after:            Thu 05 Mar 2026 22:13:58 +0000
asID:                     270682
IP address blocks:        200.187.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uoef8oNQrTCLDFNvGuTPY9sqXxK9XXbH4BmwAk11e7b/1/FFC6D87C33255DE718EF9A38A927C4C09C5A2A27.crl
                          rsync://rpki-repo.registro.br/repo/5uoef8oNQrTCLDFNvGuTPY9sqXxK9XXbH4BmwAk11e7b/1/FFC6D87C33255DE718EF9A38A927C4C09C5A2A27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFC6D87C33255DE718EF9A38A927C4C09C5A2A27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 18 Jun 2025 02:03:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:d8:2e:54:aa:54:51:7a:a6:4c:93:58:a5:dc:b2:6f:e2:46:81:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFC6D87C33255DE718EF9A38A927C4C09C5A2A27
        Validity
            Not Before: Mar  6 22:08:58 2025 GMT
            Not After : Mar  5 22:13:58 2026 GMT
        Subject: CN=0193A13F68F77F9BCD22AE48DA57DBAF66F54F33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:39:4e:2a:79:71:4d:98:20:19:e5:71:cb:9a:
                    8b:b4:81:ad:51:42:39:a5:4f:df:dd:59:04:78:6c:
                    3c:45:79:2a:ef:27:1e:1a:13:0a:a2:be:c6:b5:8e:
                    c3:a8:17:0b:d7:57:0e:c7:00:56:e0:a1:a4:03:ce:
                    db:df:76:38:75:64:a3:17:1f:0b:3b:96:64:a9:e0:
                    2a:bd:9f:8d:ef:11:17:19:ac:3f:1d:56:e4:59:7e:
                    07:ea:35:42:08:05:0a:0b:ce:18:2e:fb:f8:97:bf:
                    42:c4:a8:c9:21:56:0b:98:1a:8e:01:6f:68:dd:f8:
                    c5:e7:de:8a:df:34:b9:b4:7e:cb:d5:7f:8f:35:fc:
                    29:76:e8:1d:f2:99:ac:4d:68:83:cc:c5:65:96:ef:
                    46:f7:71:fc:bf:d7:24:37:7d:de:77:23:64:02:67:
                    8a:e1:39:2e:fb:74:0a:3b:8d:ee:92:3c:db:a0:2f:
                    ac:12:99:e2:82:1b:42:ad:26:5f:40:0f:20:7d:2e:
                    d0:46:9e:a5:54:68:82:d0:23:f4:2b:a9:56:40:29:
                    55:ec:52:db:c7:94:a6:22:d2:e6:8f:d2:54:42:96:
                    fe:ec:d3:4f:c4:0a:2c:ec:0b:53:23:1c:cf:dc:73:
                    b5:28:51:ea:49:47:f8:7d:4a:af:47:1e:24:6c:1c:
                    73:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:93:A1:3F:68:F7:7F:9B:CD:22:AE:48:DA:57:DB:AF:66:F5:4F:33
            X509v3 Authority Key Identifier:
                keyid:FF:C6:D8:7C:33:25:5D:E7:18:EF:9A:38:A9:27:C4:C0:9C:5A:2A:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uoef8oNQrTCLDFNvGuTPY9sqXxK9XXbH4BmwAk11e7b/1/FFC6D87C33255DE718EF9A38A927C4C09C5A2A27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFC6D87C33255DE718EF9A38A927C4C09C5A2A27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uoef8oNQrTCLDFNvGuTPY9sqXxK9XXbH4BmwAk11e7b/1/3230302e3138372e39362e302f32322d3234203d3e20323730363832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.187.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:64:45:5e:f3:cf:14:5e:a5:36:6a:18:b4:af:07:1e:f6:80:
         eb:aa:72:ef:5f:b6:20:4c:d1:4b:ab:e6:15:0b:40:ed:f3:87:
         dd:04:97:e7:9a:e9:73:1f:dc:6c:3a:cd:c9:b6:c4:69:5d:3d:
         04:e0:6f:b9:9f:08:a6:32:c8:11:63:6d:95:e9:bf:74:4b:3c:
         00:13:ef:5b:9d:7f:5e:94:f2:02:21:29:b7:b2:5d:c4:b5:2c:
         d3:bb:6d:d8:fd:a3:ee:c9:da:89:1d:c2:c8:26:9e:4a:17:de:
         24:67:d8:30:ff:b6:5a:6a:bd:4d:29:11:d9:b1:ee:4a:95:83:
         19:9b:3d:c5:a0:b1:02:17:5a:44:f2:c4:cf:36:73:83:53:60:
         61:7f:11:3b:d3:00:7d:d0:5e:9f:7c:65:fd:e8:70:bb:68:34:
         7d:67:4a:ed:9d:2f:55:2c:f4:d0:e1:63:ff:c2:f9:c8:49:3b:
         a7:26:50:03:6d:cb:90:c8:0b:5a:6d:53:5f:79:b8:76:41:ed:
         ad:03:14:a2:90:d7:ca:11:11:9a:4c:77:89:a7:8d:b9:31:9e:
         ac:e5:6d:bb:c6:47:50:3e:c8:4f:da:99:79:db:cc:c3:81:7a:
         55:58:f7:c7:a6:7b:2e:f0:11:c7:d8:67:74:3d:d1:ea:85:be:
         7e:f0:23:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 11:14:56 2025 by rpki-client