Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/3230302e3232302e3134382e302f32332d3234203d3e203238353736.roa
File:                     3230302e3232302e3134382e302f32332d3234203d3e203238353736.roa (raw, json)
Hash identifier:          8xz0wUV96UX241nbfOSxSTuVkOxDRhfVaaIHtY1FXMc=
Subject key identifier:   5B:FA:E4:BB:10:1D:C1:C8:00:F6:1A:61:DB:06:01:52:CC:E4:11:7F
Certificate issuer:       /CN=BD1E87C8514998E362292741C70F693178FDD20E
Certificate serial:       68F30271BC56EFC6B20EA39D8E5C0FC6EC9877A2
Authority key identifier: BD:1E:87:C8:51:49:98:E3:62:29:27:41:C7:0F:69:31:78:FD:D2:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/3230302e3232302e3134382e302f32332d3234203d3e203238353736.roa
Signing time:             Fri 25 Apr 2025 23:30:51 +0000
ROA not before:           Fri 25 Apr 2025 23:25:51 +0000
ROA not after:            Fri 24 Apr 2026 23:30:51 +0000
asID:                     28576
IP address blocks:        200.220.148.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.crl
                          rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 22:25:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:f3:02:71:bc:56:ef:c6:b2:0e:a3:9d:8e:5c:0f:c6:ec:98:77:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD1E87C8514998E362292741C70F693178FDD20E
        Validity
            Not Before: Apr 25 23:25:51 2025 GMT
            Not After : Apr 24 23:30:51 2026 GMT
        Subject: CN=5BFAE4BB101DC1C800F61A61DB060152CCE4117F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:08:9b:a5:0f:ea:91:5d:31:e1:1c:9f:6e:a0:
                    19:26:0a:43:ba:4e:2c:19:2b:fb:0c:13:fe:ca:41:
                    14:72:e3:0b:15:76:70:16:f4:87:da:85:7d:f3:88:
                    0c:42:50:99:8b:c5:d1:ea:17:20:2b:4f:42:bb:b5:
                    af:18:60:70:c4:3d:cb:1e:e7:82:2f:c0:e6:4b:15:
                    b6:d5:f8:6c:3d:ed:9c:56:d8:2d:c6:d1:d0:14:75:
                    59:23:75:a9:c5:cb:66:da:63:e6:81:87:d0:12:3b:
                    5c:2f:3a:b7:87:24:2e:2d:c1:6a:83:50:e6:90:22:
                    4f:c9:08:32:0f:7e:cc:55:ac:b8:4b:14:52:35:a1:
                    59:a9:4e:e5:8c:c5:ea:6b:98:c9:ba:9b:e8:78:9e:
                    98:9b:d6:c8:b4:8c:16:e7:61:41:1c:f8:a0:1a:78:
                    3a:89:04:c7:3e:2d:37:47:d3:5f:26:2b:46:ef:76:
                    e3:b2:e1:7c:bc:ba:51:19:36:06:ff:a1:cc:2c:a8:
                    74:cd:bb:0e:37:99:2c:93:97:d1:79:de:f0:4b:69:
                    e6:3b:85:73:31:92:11:fb:85:3c:4f:37:be:23:a8:
                    24:7d:d6:52:cb:e8:a9:91:b3:56:d2:e2:e1:ad:7f:
                    e2:8d:d7:b8:cf:9a:21:0e:b4:42:1f:9d:e0:e0:24:
                    34:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:FA:E4:BB:10:1D:C1:C8:00:F6:1A:61:DB:06:01:52:CC:E4:11:7F
            X509v3 Authority Key Identifier:
                keyid:BD:1E:87:C8:51:49:98:E3:62:29:27:41:C7:0F:69:31:78:FD:D2:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/3230302e3232302e3134382e302f32332d3234203d3e203238353736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.220.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:d7:23:53:dc:a3:ae:62:13:0f:c7:fc:91:e9:0e:91:b2:77:
         48:a3:b8:81:f2:70:23:75:30:67:02:7d:94:08:b0:1c:c3:8f:
         bc:62:76:ea:88:68:d8:8d:52:95:51:15:9e:9a:a1:dc:92:03:
         f0:1f:88:35:a4:32:b4:23:85:ab:2d:3e:23:03:1d:bc:ae:ec:
         f4:3a:1f:a6:df:e2:0c:12:9c:18:fc:59:16:d3:72:d9:37:c7:
         44:87:e0:84:c2:91:3a:3a:a1:9f:dc:21:f8:8a:e9:4c:b8:ba:
         b3:37:57:74:18:20:6f:94:30:e2:13:d8:4e:98:53:ee:f9:e5:
         5e:72:26:d0:dd:66:1e:66:d5:74:f2:b5:a2:a2:fd:47:9e:6d:
         2e:a1:8e:ad:94:de:5d:62:6c:c0:de:bd:52:7b:13:94:a7:54:
         41:5c:3f:b5:92:23:ad:44:4f:5f:9d:43:e3:2a:3e:3e:b6:a9:
         11:cc:98:03:8a:36:78:bb:2a:57:91:14:8e:ae:45:49:5c:6f:
         73:b9:85:37:a8:b1:2c:ed:fb:77:4a:19:fd:d8:e9:dd:a5:c6:
         a2:ce:f3:ac:cd:bf:f5:e4:14:8c:dc:23:9e:db:8e:f3:cd:de:
         2e:54:6f:9c:27:32:37:a4:40:77:ec:d2:d1:62:b0:7e:2f:0d:
         47:aa:11:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:58 2025 by rpki-client on console.sobornost.net