Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3230302e31312e382e302f32312d3234203d3e203532353437.roa
File:                     3230302e31312e382e302f32312d3234203d3e203532353437.roa (raw, json)
Hash identifier:          5RBH75aTQqo3d0ZYsjFNclV039j8v1MvCHzL+se5j8g=
Subject key identifier:   C4:2E:AE:A8:68:F9:AE:9A:53:8D:BD:62:85:AA:CF:14:6D:C4:E1:9B
Certificate issuer:       /CN=FF5D171186C7F92AA82E56A3848B9D1390938458
Certificate serial:       1E50EA94B8165534D58F0A1750E5F2886306C277
Authority key identifier: FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3230302e31312e382e302f32312d3234203d3e203532353437.roa
Signing time:             Wed 30 Apr 2025 18:28:52 +0000
ROA not before:           Wed 30 Apr 2025 18:23:52 +0000
ROA not after:            Wed 29 Apr 2026 18:28:52 +0000
asID:                     52547
IP address blocks:        200.11.8.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl
                          rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Jun 2025 05:59:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:50:ea:94:b8:16:55:34:d5:8f:0a:17:50:e5:f2:88:63:06:c2:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF5D171186C7F92AA82E56A3848B9D1390938458
        Validity
            Not Before: Apr 30 18:23:52 2025 GMT
            Not After : Apr 29 18:28:52 2026 GMT
        Subject: CN=C42EAEA868F9AE9A538DBD6285AACF146DC4E19B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5b:72:48:5f:b9:71:0e:31:a7:dc:e4:0b:4b:
                    f8:20:a2:38:82:10:66:c2:9a:a0:0f:59:b3:c8:2b:
                    66:02:bc:b5:17:63:02:f8:bd:a5:3c:82:1d:2c:fd:
                    ac:78:fd:22:0b:90:c2:45:68:0a:2b:48:be:77:f8:
                    13:8b:66:50:90:cf:33:33:49:00:41:a4:f6:b9:47:
                    ef:ce:71:ab:f1:96:4a:54:35:9e:9a:88:46:fa:85:
                    25:63:68:0c:70:76:62:43:fa:bd:19:ed:ca:c6:5d:
                    16:bd:36:d3:43:19:b8:6c:83:68:42:fb:f6:d8:da:
                    35:2b:b6:1d:90:df:4a:fc:32:c3:cf:d0:30:c2:58:
                    aa:f2:1f:2c:2b:f0:39:58:60:e5:04:8f:0b:23:9d:
                    cb:fd:2b:4b:ca:ba:1b:fe:ce:31:56:94:9e:a7:75:
                    3c:02:45:2b:51:fc:20:1d:f1:ef:6e:b0:e6:fe:04:
                    ea:25:9a:bc:87:c1:29:76:9c:4a:fe:f6:09:e7:53:
                    af:3f:66:8f:5f:b8:6b:98:5c:d3:b7:1b:68:45:e5:
                    b2:8f:fe:48:a5:a1:f5:b5:91:54:f1:32:22:93:bf:
                    39:0e:52:e9:12:c6:26:ea:46:b7:7b:e4:cc:bf:49:
                    a5:94:89:7a:a8:9f:a7:eb:99:32:8b:d4:6b:20:fa:
                    ea:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:2E:AE:A8:68:F9:AE:9A:53:8D:BD:62:85:AA:CF:14:6D:C4:E1:9B
            X509v3 Authority Key Identifier:
                keyid:FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3230302e31312e382e302f32312d3234203d3e203532353437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.11.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         66:52:cd:50:5b:1e:af:40:d5:7a:89:15:18:2c:c5:4d:cf:c4:
         f0:dd:e8:af:d0:db:a2:ac:c0:d4:70:05:b0:4a:8c:62:ac:59:
         b5:95:22:70:b0:ea:e1:7c:03:6f:95:c8:5d:5c:3e:85:3e:31:
         07:05:5b:6a:4b:6c:69:10:8f:78:d4:06:14:39:9c:a0:f3:25:
         56:66:da:cb:41:c3:03:58:32:09:36:91:3a:d7:9a:21:f4:ab:
         9a:2e:8c:84:6d:10:0c:a8:6a:49:c7:f4:00:e5:f1:ee:c3:3a:
         73:66:f6:d6:a6:a7:df:2f:db:cf:85:65:9b:88:1b:2b:8b:3b:
         9b:48:24:14:19:71:be:28:9f:76:62:b7:65:63:b1:6e:5b:6b:
         48:d9:3f:a3:d6:a0:30:e8:2f:9c:9a:ff:ff:e2:0d:40:51:bf:
         c2:ba:b0:03:96:6a:24:b8:42:6a:4c:f6:44:f4:da:f8:4d:aa:
         5d:9a:13:61:65:13:c9:64:26:58:51:00:9d:d3:d6:f4:b7:d2:
         1e:da:8f:f5:90:2b:2d:91:51:32:71:89:25:a0:bd:ff:f5:44:
         f1:9c:21:3f:2b:9c:d2:90:d2:47:4c:b1:68:63:13:85:29:d6:
         fe:c7:67:bc:6a:d7:dc:3d:54:d7:98:8f:e6:54:b2:82:04:ea:
         d3:e1:20:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 08:56:46 2025 by rpki-client