Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/3230302e35332e36372e302f32342d3234203d3e20323731353034.roa
File:                     3230302e35332e36372e302f32342d3234203d3e20323731353034.roa (raw, json)
Hash identifier:          wQhjvJ9XwXOQkys8XGLQ8oQVnUa0X1devKBZxv9Emds=
Subject key identifier:   A6:E7:57:F6:6D:B7:C5:FC:13:EB:BE:EA:DC:A7:E0:7F:40:FF:7C:AF
Certificate issuer:       /CN=3B9278887F13B27AA11B20954CB918BC341F1426
Certificate serial:       49D5570E1883D1F1FD4B92B554418613EA4FA8C3
Authority key identifier: 3B:92:78:88:7F:13:B2:7A:A1:1B:20:95:4C:B9:18:BC:34:1F:14:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B9278887F13B27AA11B20954CB918BC341F1426.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/3230302e35332e36372e302f32342d3234203d3e20323731353034.roa
Signing time:             Thu 27 Feb 2025 14:51:39 +0000
ROA not before:           Thu 27 Feb 2025 14:46:39 +0000
ROA not after:            Thu 26 Feb 2026 14:51:39 +0000
asID:                     271504
IP address blocks:        200.53.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/3B9278887F13B27AA11B20954CB918BC341F1426.crl
                          rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/3B9278887F13B27AA11B20954CB918BC341F1426.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B9278887F13B27AA11B20954CB918BC341F1426.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 May 2025 18:54:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:d5:57:0e:18:83:d1:f1:fd:4b:92:b5:54:41:86:13:ea:4f:a8:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B9278887F13B27AA11B20954CB918BC341F1426
        Validity
            Not Before: Feb 27 14:46:39 2025 GMT
            Not After : Feb 26 14:51:39 2026 GMT
        Subject: CN=A6E757F66DB7C5FC13EBBEEADCA7E07F40FF7CAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:dc:11:fd:d7:69:0c:53:f6:91:62:3f:37:29:
                    11:1e:cf:50:c4:1f:5e:04:64:7d:81:69:49:7b:94:
                    d3:c8:6f:bb:c6:d2:22:06:24:7d:e1:d9:c3:5b:80:
                    8e:36:c3:97:18:88:8d:35:7d:65:bd:98:11:3d:03:
                    7b:ce:12:05:66:f4:dd:0b:7d:9d:ed:64:8a:32:65:
                    78:f8:ad:b6:a9:a5:a6:f1:3b:48:ba:a4:83:dd:78:
                    26:ec:63:7c:28:b7:88:b1:1e:2c:c3:cd:2f:8d:da:
                    aa:f3:4c:0b:ce:89:ce:b6:f0:6a:0d:48:d3:2b:ca:
                    6e:6e:48:60:55:d4:a6:5e:c2:af:75:e7:26:de:f8:
                    2a:3f:d8:72:04:27:91:a0:49:d2:87:5e:2b:cd:d8:
                    1c:9d:09:f1:f1:d7:d3:aa:72:74:b8:f4:fb:59:21:
                    d7:0d:d6:e2:01:10:00:16:11:66:15:f5:90:c2:94:
                    db:bf:1a:b9:83:6e:d8:79:f8:a2:77:a8:69:e8:b2:
                    24:d5:68:cd:38:5c:4b:62:fb:c3:4b:6c:91:81:4c:
                    fc:0b:7b:7e:9c:60:ed:35:4b:82:a6:92:dc:44:51:
                    2d:24:9e:36:a6:3f:c2:80:80:0b:aa:b2:a5:35:79:
                    ea:2a:a0:90:98:61:7f:a2:a3:89:d3:26:38:0d:51:
                    47:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:E7:57:F6:6D:B7:C5:FC:13:EB:BE:EA:DC:A7:E0:7F:40:FF:7C:AF
            X509v3 Authority Key Identifier:
                keyid:3B:92:78:88:7F:13:B2:7A:A1:1B:20:95:4C:B9:18:BC:34:1F:14:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/3B9278887F13B27AA11B20954CB918BC341F1426.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B9278887F13B27AA11B20954CB918BC341F1426.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/3230302e35332e36372e302f32342d3234203d3e20323731353034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:7b:d3:e2:b0:ab:2e:1a:43:a3:bc:31:10:55:8d:78:1d:75:
         74:00:ea:18:f4:e4:64:c0:ee:a2:99:b9:0a:c7:d5:8f:5e:c4:
         05:98:2a:b4:66:86:e8:8d:de:5e:ac:cc:11:87:3e:8d:3d:6e:
         0f:e2:c4:e0:35:d2:4d:c3:68:ad:c8:5c:b9:34:79:a6:c7:00:
         00:29:58:21:19:dd:1a:23:da:c8:ea:d3:66:24:37:06:70:73:
         09:37:93:cc:29:cd:cc:d2:da:44:0c:0c:c6:fd:1a:69:6e:9d:
         5f:53:00:c2:c6:8e:35:02:4e:07:08:86:3a:de:05:0d:93:26:
         1b:c1:ce:c7:9d:7e:96:79:46:1e:85:f1:94:29:de:c4:7c:0f:
         dd:18:46:14:a4:e9:71:a6:56:b5:55:23:e7:14:3f:f0:a8:0c:
         e1:b5:aa:f0:70:50:2b:1f:c1:35:dc:c8:07:7f:51:a3:7b:58:
         58:63:20:5b:3c:3b:ec:b0:ed:5f:fe:9d:52:da:a5:06:7d:1b:
         75:f3:08:fc:09:7d:2f:de:cd:c1:0d:20:bb:d7:f2:ef:8f:72:
         80:dd:5d:9a:c9:dd:24:13:08:58:8c:bd:ca:37:c1:02:85:5d:
         89:8c:7c:6e:68:fb:14:78:78:46:4d:8b:4b:8f:76:77:71:37:
         d9:db:08:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 22:05:07 2025 by rpki-client