Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gm8LDgLSWrv6HoAYC1B2mMHpEHPfnZKmVxEcqWcDv9r6/0/3230302e39352e3137382e302f32342d3234203d3e203532353439.roa
File:                     3230302e39352e3137382e302f32342d3234203d3e203532353439.roa (raw, json)
Hash identifier:          9VjzFrc1m0F0hbD852vakAsuPbNhUYtj3YalV46pnWM=
Subject key identifier:   F9:25:7E:96:4C:1D:90:6A:77:7C:FF:32:E8:FF:B7:76:29:10:EE:CA
Certificate issuer:       /CN=5F8F031A7D99BDA7B63CC80436979A44A62B14CF
Certificate serial:       4F06E07900729959206705AC4B0CB2FAC8191FC1
Authority key identifier: 5F:8F:03:1A:7D:99:BD:A7:B6:3C:C8:04:36:97:9A:44:A6:2B:14:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F8F031A7D99BDA7B63CC80436979A44A62B14CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gm8LDgLSWrv6HoAYC1B2mMHpEHPfnZKmVxEcqWcDv9r6/0/3230302e39352e3137382e302f32342d3234203d3e203532353439.roa
Signing time:             Tue 03 Jun 2025 16:49:33 +0000
ROA not before:           Tue 03 Jun 2025 16:44:33 +0000
ROA not after:            Tue 02 Jun 2026 16:49:33 +0000
asID:                     52549
IP address blocks:        200.95.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gm8LDgLSWrv6HoAYC1B2mMHpEHPfnZKmVxEcqWcDv9r6/0/5F8F031A7D99BDA7B63CC80436979A44A62B14CF.crl
                          rsync://rpki-repo.registro.br/repo/Gm8LDgLSWrv6HoAYC1B2mMHpEHPfnZKmVxEcqWcDv9r6/0/5F8F031A7D99BDA7B63CC80436979A44A62B14CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F8F031A7D99BDA7B63CC80436979A44A62B14CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Jun 2025 20:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:06:e0:79:00:72:99:59:20:67:05:ac:4b:0c:b2:fa:c8:19:1f:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F8F031A7D99BDA7B63CC80436979A44A62B14CF
        Validity
            Not Before: Jun  3 16:44:33 2025 GMT
            Not After : Jun  2 16:49:33 2026 GMT
        Subject: CN=F9257E964C1D906A777CFF32E8FFB7762910EECA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:40:81:f6:4d:f4:47:bd:4f:58:36:7b:5b:89:
                    51:fc:0a:72:b0:1e:c5:62:e6:a4:e9:87:cf:cd:5f:
                    3c:f2:aa:3c:7d:1c:35:ff:b7:fb:48:35:fb:b9:d1:
                    f9:30:0f:f9:da:08:b8:4d:ea:0d:ba:df:e1:9b:84:
                    02:d1:70:0e:b9:52:0e:65:6d:ef:7a:47:25:05:5a:
                    21:b5:b7:d1:4a:cc:cd:20:91:36:94:28:33:f5:8a:
                    4e:bb:eb:aa:d1:35:b4:69:2d:53:ea:5c:7c:3d:06:
                    7b:25:16:04:ea:95:33:61:32:b5:04:5d:d7:38:75:
                    88:7f:0c:0a:93:c3:73:78:db:30:d5:a4:68:b1:31:
                    d6:3b:36:bb:86:10:8f:1e:d6:da:07:a1:5c:e5:77:
                    e2:c1:91:40:46:5d:51:a5:c4:01:46:e5:f0:25:74:
                    31:0d:bb:21:c6:89:78:51:6a:b6:13:83:73:97:ae:
                    45:16:95:c2:0b:f0:12:73:50:a6:91:1a:3f:09:7a:
                    38:50:79:b3:a4:09:fc:e5:95:ef:28:17:93:9e:58:
                    b4:ab:c3:31:ce:d2:85:81:d5:b9:c9:5f:a3:e2:14:
                    77:d2:8d:ed:0c:ef:18:f2:d9:97:1a:99:0f:8b:8b:
                    96:29:bd:80:bb:32:51:eb:cc:76:02:e1:75:4c:fb:
                    c9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:25:7E:96:4C:1D:90:6A:77:7C:FF:32:E8:FF:B7:76:29:10:EE:CA
            X509v3 Authority Key Identifier:
                keyid:5F:8F:03:1A:7D:99:BD:A7:B6:3C:C8:04:36:97:9A:44:A6:2B:14:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gm8LDgLSWrv6HoAYC1B2mMHpEHPfnZKmVxEcqWcDv9r6/0/5F8F031A7D99BDA7B63CC80436979A44A62B14CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F8F031A7D99BDA7B63CC80436979A44A62B14CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gm8LDgLSWrv6HoAYC1B2mMHpEHPfnZKmVxEcqWcDv9r6/0/3230302e39352e3137382e302f32342d3234203d3e203532353439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.95.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:c7:60:e6:b5:12:bc:02:0e:ec:3f:f9:00:65:9e:4d:1c:a2:
         ed:ce:ce:8f:80:38:51:48:00:7f:38:e2:f0:3d:44:10:17:e8:
         1a:79:89:31:e1:bb:ba:fd:3a:18:15:b3:d5:de:a9:29:f4:15:
         e4:9f:23:8f:8d:50:9f:a3:18:90:70:95:d4:f1:e5:43:58:d1:
         59:84:10:91:f8:fb:99:c8:a4:e9:fc:6c:28:b7:9d:33:a8:7f:
         73:6f:2f:19:24:ba:fc:bb:96:e9:dd:37:81:7e:d2:fd:c1:80:
         76:f7:e8:4b:d2:c3:31:43:52:e6:ad:b6:99:10:8b:3f:e9:25:
         da:72:6f:0d:be:d7:94:f4:bf:2b:14:af:f6:76:2c:0d:1f:98:
         f6:23:6b:65:1c:0e:66:22:ab:67:2a:49:d8:c4:9a:b7:c6:22:
         56:27:a5:77:a0:f7:ac:96:f0:3d:fc:97:2a:66:67:a6:24:4e:
         c6:65:ab:01:17:e9:9f:a1:97:51:a0:81:6a:c1:0a:6a:cf:fb:
         58:5e:df:bb:cb:81:6a:6a:81:b1:c9:84:35:9c:05:49:69:b6:
         9f:b8:e2:1f:0a:2c:81:c8:6a:ee:95:0b:3b:54:e3:b3:67:5b:
         0f:82:12:98:46:21:eb:55:e1:58:e0:1f:5e:02:88:f1:2b:b7:
         13:10:26:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 20:24:14 2025 by rpki-client