Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5j2sxcqboioC1nVdd14d6Q887bPycniW9bve1RDwo8UG/1/3230302e3134322e3233322e302f32322d3234203d3e20323730363837.roa
File:                     3230302e3134322e3233322e302f32322d3234203d3e20323730363837.roa (raw, json)
Hash identifier:          nMGRncqCi77HR1Ocpkds92AhY85hXHsOa8ZnQNVKexs=
Subject key identifier:   62:C3:99:6D:7C:65:1F:2F:E8:ED:2C:CA:AE:AE:00:89:74:9D:F3:6D
Certificate issuer:       /CN=F5BCA176884EEB5ECB0A2A512AAB32CA462590C9
Certificate serial:       07BFC9E140C0C20E0AA27EF5769F811FA001F9C1
Authority key identifier: F5:BC:A1:76:88:4E:EB:5E:CB:0A:2A:51:2A:AB:32:CA:46:25:90:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5BCA176884EEB5ECB0A2A512AAB32CA462590C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5j2sxcqboioC1nVdd14d6Q887bPycniW9bve1RDwo8UG/1/3230302e3134322e3233322e302f32322d3234203d3e20323730363837.roa
Signing time:             Thu 06 Mar 2025 11:40:30 +0000
ROA not before:           Thu 06 Mar 2025 11:35:30 +0000
ROA not after:            Thu 05 Mar 2026 11:40:30 +0000
asID:                     270687
IP address blocks:        200.142.232.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5j2sxcqboioC1nVdd14d6Q887bPycniW9bve1RDwo8UG/1/F5BCA176884EEB5ECB0A2A512AAB32CA462590C9.crl
                          rsync://rpki-repo.registro.br/repo/5j2sxcqboioC1nVdd14d6Q887bPycniW9bve1RDwo8UG/1/F5BCA176884EEB5ECB0A2A512AAB32CA462590C9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5BCA176884EEB5ECB0A2A512AAB32CA462590C9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 12:19:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:bf:c9:e1:40:c0:c2:0e:0a:a2:7e:f5:76:9f:81:1f:a0:01:f9:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5BCA176884EEB5ECB0A2A512AAB32CA462590C9
        Validity
            Not Before: Mar  6 11:35:30 2025 GMT
            Not After : Mar  5 11:40:30 2026 GMT
        Subject: CN=62C3996D7C651F2FE8ED2CCAAEAE0089749DF36D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:19:af:85:5f:8b:08:18:53:40:92:46:a9:68:
                    64:11:f0:63:97:10:c2:f3:17:30:a3:3f:45:6f:57:
                    5f:83:81:38:7e:62:bb:82:e1:29:e3:dd:a9:ae:d5:
                    52:99:c1:0f:fa:93:3d:a4:72:11:7d:c6:d4:91:e5:
                    92:c0:0d:fa:2e:52:08:c9:c7:59:c4:09:69:bb:f5:
                    86:28:11:b4:2e:1b:c6:ef:eb:81:ee:86:35:48:b5:
                    76:73:7e:7b:39:04:f9:75:e6:bd:35:d9:d3:a7:5c:
                    0a:d1:ff:b0:21:19:a2:93:06:d3:ea:d2:f5:43:7e:
                    72:20:41:51:35:8b:82:d6:82:af:9e:3c:85:49:6c:
                    6d:0f:28:b5:cf:27:78:a9:dc:3d:fa:7a:f6:65:88:
                    21:93:2a:79:c8:06:20:40:2d:a7:31:fb:3d:f7:08:
                    94:37:74:ff:75:18:98:91:04:72:ad:69:a0:dc:71:
                    e5:66:50:27:5d:cf:3f:fa:fe:ea:84:80:7b:1c:01:
                    d3:79:eb:f5:47:11:89:93:7e:ef:3e:e1:e9:3f:c3:
                    15:05:6a:40:75:eb:28:1d:98:a4:f9:08:45:fe:43:
                    dd:bb:4d:d2:d2:a3:31:97:0f:1b:d8:fe:66:4f:a3:
                    e0:1b:a9:91:45:5d:6b:01:80:2d:1c:47:49:d6:32:
                    f3:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C3:99:6D:7C:65:1F:2F:E8:ED:2C:CA:AE:AE:00:89:74:9D:F3:6D
            X509v3 Authority Key Identifier:
                keyid:F5:BC:A1:76:88:4E:EB:5E:CB:0A:2A:51:2A:AB:32:CA:46:25:90:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5j2sxcqboioC1nVdd14d6Q887bPycniW9bve1RDwo8UG/1/F5BCA176884EEB5ECB0A2A512AAB32CA462590C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5BCA176884EEB5ECB0A2A512AAB32CA462590C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5j2sxcqboioC1nVdd14d6Q887bPycniW9bve1RDwo8UG/1/3230302e3134322e3233322e302f32322d3234203d3e20323730363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.142.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:bf:d9:2f:53:5a:e2:01:04:4d:dc:d0:2f:d6:fd:a6:6c:1a:
         02:37:2a:0f:f1:8a:02:13:7e:2b:95:1f:7d:7f:9e:be:bd:8d:
         91:d5:8b:8b:45:ce:78:9e:6a:dc:2b:db:10:8e:10:d9:4c:6d:
         b4:2a:61:27:31:2d:0b:97:bb:dc:38:65:3e:7e:46:5f:14:98:
         fc:3f:59:1f:0c:32:d5:91:7e:6a:1a:01:2a:cc:e3:0b:62:ca:
         ff:f5:6a:4b:79:26:86:49:58:cc:f4:a7:23:d3:24:84:b7:a3:
         4a:40:2b:15:29:4a:ec:34:91:52:ba:15:ed:23:bd:eb:ab:c5:
         01:df:3d:2e:90:3f:d3:4d:d2:9c:3a:60:a0:ad:93:51:4f:1d:
         c5:bc:24:b2:b5:c2:49:2f:49:a2:df:5d:da:bf:87:64:46:19:
         cc:b6:97:08:3d:b2:1e:18:a0:53:c5:d1:cc:47:18:43:0d:17:
         d3:43:32:3b:72:b6:06:94:31:90:de:d3:5a:2c:32:bf:c6:a9:
         3c:68:05:47:21:c0:e4:87:48:18:23:1d:0d:12:25:b9:30:11:
         28:d9:c5:ac:65:69:68:58:05:53:10:f5:cd:c9:11:ea:fc:3b:
         6f:51:7e:20:da:c1:9b:f3:67:e4:8b:41:d1:47:fa:1e:3a:04:
         6b:14:a0:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:37:13 2025 by rpki-client on console.sobornost.net