Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/3230302e3232302e3135362e302f32342d3234203d3e203238353736.roa
File:                     3230302e3232302e3135362e302f32342d3234203d3e203238353736.roa (raw, json)
Hash identifier:          acD1pCz4UQgoqcBng67U1yyBEm+Wp93gwu1F33wDA5g=
Subject key identifier:   C2:93:43:88:E0:88:36:3B:54:87:B8:7E:47:45:F2:9B:C6:E5:2A:BB
Certificate issuer:       /CN=BD1E87C8514998E362292741C70F693178FDD20E
Certificate serial:       52B6571B69E5D2D2823B0EBA1FDB7167618C0563
Authority key identifier: BD:1E:87:C8:51:49:98:E3:62:29:27:41:C7:0F:69:31:78:FD:D2:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/3230302e3232302e3135362e302f32342d3234203d3e203238353736.roa
Signing time:             Fri 25 Apr 2025 22:30:51 +0000
ROA not before:           Fri 25 Apr 2025 22:25:51 +0000
ROA not after:            Fri 24 Apr 2026 22:30:51 +0000
asID:                     28576
IP address blocks:        200.220.156.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.crl
                          rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 22:25:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:b6:57:1b:69:e5:d2:d2:82:3b:0e:ba:1f:db:71:67:61:8c:05:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD1E87C8514998E362292741C70F693178FDD20E
        Validity
            Not Before: Apr 25 22:25:51 2025 GMT
            Not After : Apr 24 22:30:51 2026 GMT
        Subject: CN=C2934388E088363B5487B87E4745F29BC6E52ABB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a8:8d:92:ef:4f:c0:17:dc:2d:0d:c7:ea:d9:
                    14:a7:7d:b6:cd:4c:5c:32:ee:80:a8:ef:ff:65:0e:
                    bc:1e:5b:d8:0e:c9:4a:7a:f1:b6:56:28:40:be:95:
                    5a:34:b3:bf:07:74:22:38:9c:76:9a:ae:82:e8:de:
                    9b:22:79:56:16:1b:0a:1b:64:3c:c3:be:44:15:2b:
                    51:35:c2:4f:39:14:f1:be:93:c2:08:d6:0f:91:fe:
                    d3:b6:26:68:7d:42:51:13:e2:c8:0c:9a:d8:c9:29:
                    e8:8d:ef:c8:c1:39:91:b4:39:4d:a7:d5:3e:e2:13:
                    60:fe:ec:23:5f:64:31:89:e5:c0:ac:d1:6c:88:a7:
                    f3:84:ec:22:71:b0:59:be:55:9c:c9:d0:cd:54:55:
                    57:b6:10:92:32:75:d7:44:fd:cf:cb:f4:e8:4c:b0:
                    d7:ab:e6:fd:d9:5c:23:3c:c5:e2:e5:06:74:f4:80:
                    96:3c:4d:ae:7b:a8:de:ca:27:8e:ab:32:1b:8a:3d:
                    df:96:76:45:8c:fb:2e:19:e4:c7:47:33:5c:8c:6b:
                    2b:63:62:da:13:a5:b3:68:10:41:83:1c:bc:e8:1a:
                    1b:6d:66:2c:ee:50:d1:70:df:5d:1f:5e:e8:aa:20:
                    30:52:1f:af:1b:78:2b:0b:90:dc:ec:10:db:82:72:
                    cb:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:93:43:88:E0:88:36:3B:54:87:B8:7E:47:45:F2:9B:C6:E5:2A:BB
            X509v3 Authority Key Identifier:
                keyid:BD:1E:87:C8:51:49:98:E3:62:29:27:41:C7:0F:69:31:78:FD:D2:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/3230302e3232302e3135362e302f32342d3234203d3e203238353736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.220.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:71:7e:be:60:33:0d:83:e1:ad:6b:26:d0:05:ab:99:fe:0a:
         c9:eb:0a:7e:12:da:8b:f2:44:0a:ae:2f:63:c5:9b:94:a5:c4:
         29:d4:cd:f4:5c:30:db:55:dc:6a:83:97:a2:34:c8:dd:ea:14:
         4e:ea:aa:ee:fa:52:4f:9f:f3:4e:e6:b3:8a:66:6b:e1:d1:7b:
         e0:5b:56:cc:75:b4:95:4a:3a:29:e4:fa:ca:62:d5:51:85:8d:
         f4:59:f8:72:bc:ff:ee:03:77:ad:2d:04:19:08:b3:ee:f8:35:
         3c:30:b2:5b:cc:47:93:57:07:1a:c3:56:61:97:90:5e:82:e9:
         84:97:ec:f2:2f:25:ef:9a:ba:09:8a:38:26:fb:a0:a4:3f:40:
         9d:95:18:d8:33:c8:15:ef:8d:90:d9:dd:66:77:5b:cf:39:a3:
         6e:84:92:44:d7:c2:86:2e:51:31:78:af:72:0f:0b:27:c0:0f:
         cd:a4:23:84:4b:b7:cf:0a:67:63:9f:a2:b1:33:ec:db:24:c9:
         be:49:9d:55:29:46:77:2a:02:aa:a6:0e:27:93:c2:f1:f4:a5:
         1e:a0:2c:da:15:b2:39:17:d8:e2:01:9b:60:d4:9e:40:ce:7e:
         eb:b5:ab:3e:67:71:fe:ac:89:11:77:01:cc:10:8f:18:2c:b9:
         bd:e6:fa:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:58 2025 by rpki-client on console.sobornost.net