Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ENZNLMwewHzpbJmgndnh9VuSSbK2cc1PUFXF4voAXCn4/0/3230302e31302e3133322e302f32322d3234203d3e203631393334.roa
File:                     3230302e31302e3133322e302f32322d3234203d3e203631393334.roa (raw, json)
Hash identifier:          Uh2VZJXBFjwIXsk6dNIPR+r7ZelmgSXtkE8Do2UhAi8=
Subject key identifier:   00:7D:CB:DE:45:77:8C:74:2C:EE:D2:37:1C:9B:21:D2:E1:54:31:A4
Certificate issuer:       /CN=B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204
Certificate serial:       025C794D704CC9C6E94715149FD10106F8841FB6
Authority key identifier: B2:A1:BA:E4:B3:4B:FC:AC:AD:5F:1A:7C:AF:81:C3:FE:7E:9C:02:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ENZNLMwewHzpbJmgndnh9VuSSbK2cc1PUFXF4voAXCn4/0/3230302e31302e3133322e302f32322d3234203d3e203631393334.roa
Signing time:             Fri 13 Jun 2025 18:26:13 +0000
ROA not before:           Fri 13 Jun 2025 18:21:13 +0000
ROA not after:            Fri 12 Jun 2026 18:26:13 +0000
asID:                     61934
IP address blocks:        200.10.132.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ENZNLMwewHzpbJmgndnh9VuSSbK2cc1PUFXF4voAXCn4/0/B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204.crl
                          rsync://rpki-repo.registro.br/repo/ENZNLMwewHzpbJmgndnh9VuSSbK2cc1PUFXF4voAXCn4/0/B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 16:53:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:5c:79:4d:70:4c:c9:c6:e9:47:15:14:9f:d1:01:06:f8:84:1f:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204
        Validity
            Not Before: Jun 13 18:21:13 2025 GMT
            Not After : Jun 12 18:26:13 2026 GMT
        Subject: CN=007DCBDE45778C742CEED2371C9B21D2E15431A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e3:ea:6e:c2:e9:0e:c4:05:7c:e4:bc:4d:4c:
                    72:a2:4c:38:1c:47:62:c4:56:39:01:7a:f0:00:dc:
                    74:8f:a8:e8:f2:f1:f6:41:01:33:e9:29:df:a3:4d:
                    e8:f7:0b:6a:54:da:bd:1b:ff:79:68:18:ac:70:35:
                    1c:cb:97:7e:e3:71:d6:ae:a6:7f:fa:be:4c:60:e9:
                    d2:4a:81:47:ba:47:0d:95:3b:99:0d:3b:60:1c:71:
                    01:1c:ad:b4:59:01:43:02:71:f8:86:12:2a:67:f9:
                    8b:03:2c:79:39:91:0d:d2:53:5b:f1:8e:42:c9:ed:
                    fd:54:63:5d:d8:96:b8:d5:42:f2:bf:b1:4c:8e:af:
                    b8:8e:18:02:7b:38:b0:d0:20:87:c2:28:d9:85:d4:
                    3e:29:02:cf:d8:a6:a5:d9:9a:ad:a9:cc:2d:1e:8c:
                    33:27:b3:07:18:76:6c:12:54:21:6c:7f:f9:e7:db:
                    7b:06:db:58:54:bc:10:67:87:1b:1b:f3:42:57:83:
                    a6:09:10:d1:70:af:e0:66:b2:a7:50:81:05:92:22:
                    ac:d8:89:6a:34:a3:33:00:27:f9:f4:90:df:5b:e0:
                    74:99:37:3a:3d:f3:0b:cb:4e:ff:c1:2a:88:b2:65:
                    90:12:78:90:eb:8a:7f:37:bb:41:dc:1f:b0:47:62:
                    fc:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:7D:CB:DE:45:77:8C:74:2C:EE:D2:37:1C:9B:21:D2:E1:54:31:A4
            X509v3 Authority Key Identifier:
                keyid:B2:A1:BA:E4:B3:4B:FC:AC:AD:5F:1A:7C:AF:81:C3:FE:7E:9C:02:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ENZNLMwewHzpbJmgndnh9VuSSbK2cc1PUFXF4voAXCn4/0/B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ENZNLMwewHzpbJmgndnh9VuSSbK2cc1PUFXF4voAXCn4/0/3230302e31302e3133322e302f32322d3234203d3e203631393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:41:a5:1f:0c:43:47:50:9d:32:c5:16:11:b6:56:63:28:35:
         6c:8e:c6:52:b2:8a:ac:84:2d:fe:cb:69:86:77:0b:2b:6e:e3:
         14:c0:38:80:50:19:ce:8e:cc:a6:cd:4c:f6:27:a4:5b:6b:e0:
         96:63:87:3f:5c:e9:2c:60:67:74:d4:66:40:76:a1:8b:38:b5:
         b0:f8:73:16:ae:0b:af:2a:5b:19:d2:22:f2:ec:43:51:40:22:
         90:16:75:6a:3b:d0:10:76:a5:25:93:c4:93:0a:fb:46:32:1b:
         cb:88:91:e8:0c:2f:4f:37:86:c5:3d:7d:12:38:ad:07:da:82:
         2b:8f:67:32:6d:6b:f8:94:7c:2f:df:15:dc:03:56:be:27:98:
         45:79:93:cd:bb:8f:f8:43:b8:f7:34:bc:50:c0:37:a6:49:98:
         69:43:9a:d9:e3:90:fd:c6:4c:8a:12:c6:16:7a:21:77:3b:ac:
         9d:77:f1:68:80:25:83:35:76:e4:71:92:a7:35:4f:af:31:06:
         38:4d:cd:b7:7b:da:44:dd:45:e5:e1:2e:72:b1:40:cf:f8:02:
         f4:4e:07:20:e2:b8:c9:90:c2:30:d7:fd:09:4a:b8:af:e0:a1:
         c1:c7:14:d4:54:b3:f5:ab:85:b5:7b:5e:7e:4a:af:bd:1a:18:
         6c:36:1d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 19:44:43 2025 by rpki-client