Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/3230302e3232302e3135372e302f32342d3234203d3e203238353736.roa
File:                     3230302e3232302e3135372e302f32342d3234203d3e203238353736.roa (raw, json)
Hash identifier:          3mgGxqreyqiNTo2aJj4IPoMojo1f1Ga1WwXbt+YSq88=
Subject key identifier:   62:25:1C:EF:85:6B:BF:FB:26:58:54:E7:40:4F:92:E7:5C:DD:64:67
Certificate issuer:       /CN=BD1E87C8514998E362292741C70F693178FDD20E
Certificate serial:       6D7C1E93B2534DF93287679A92F28DFC6364BA08
Authority key identifier: BD:1E:87:C8:51:49:98:E3:62:29:27:41:C7:0F:69:31:78:FD:D2:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/3230302e3232302e3135372e302f32342d3234203d3e203238353736.roa
Signing time:             Fri 25 Apr 2025 22:30:51 +0000
ROA not before:           Fri 25 Apr 2025 22:25:51 +0000
ROA not after:            Fri 24 Apr 2026 22:30:51 +0000
asID:                     28576
IP address blocks:        200.220.157.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.crl
                          rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 22:25:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:7c:1e:93:b2:53:4d:f9:32:87:67:9a:92:f2:8d:fc:63:64:ba:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD1E87C8514998E362292741C70F693178FDD20E
        Validity
            Not Before: Apr 25 22:25:51 2025 GMT
            Not After : Apr 24 22:30:51 2026 GMT
        Subject: CN=62251CEF856BBFFB265854E7404F92E75CDD6467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a8:6b:51:19:c6:53:51:a0:94:4d:29:2e:82:
                    a6:b2:88:e3:3b:55:3a:f6:f4:8f:56:90:0f:7c:5c:
                    a0:9f:30:29:65:de:40:b3:a3:f1:56:00:f2:73:2a:
                    3e:26:85:b1:26:ad:f8:69:b3:66:5d:43:99:81:f6:
                    30:c5:9f:60:69:63:f4:7e:3a:eb:0e:81:b7:ef:6a:
                    a3:bf:1d:50:1a:93:bb:fb:48:48:8b:b9:b7:fa:26:
                    2d:17:54:f9:c1:e7:7e:37:bf:91:e2:b6:30:a2:ef:
                    42:7b:b2:d5:1b:ea:8b:dc:5e:ee:d1:e0:ba:e8:06:
                    f2:5d:5d:a8:04:44:55:22:39:f9:ce:7a:bc:0b:11:
                    58:54:d9:f1:2f:88:1e:2e:ba:2a:2b:99:fd:df:8f:
                    51:2d:37:0f:10:84:b2:c4:1a:72:3e:4e:ea:95:6f:
                    d3:bb:fc:aa:ac:f3:cd:e2:7b:e8:47:15:27:63:84:
                    74:03:fa:36:61:fe:a3:3e:8f:b2:1d:58:81:bb:fd:
                    98:98:8a:ce:e3:c0:a2:3a:e0:80:c7:7c:15:47:24:
                    21:fb:92:61:d9:a3:c2:22:81:00:bc:6e:a1:82:c3:
                    22:06:25:af:b1:8c:6c:cb:02:25:d2:3d:60:38:57:
                    41:64:5b:69:d0:09:b6:45:f3:ca:f1:a2:e7:f8:ed:
                    2b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:25:1C:EF:85:6B:BF:FB:26:58:54:E7:40:4F:92:E7:5C:DD:64:67
            X509v3 Authority Key Identifier:
                keyid:BD:1E:87:C8:51:49:98:E3:62:29:27:41:C7:0F:69:31:78:FD:D2:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/3230302e3232302e3135372e302f32342d3234203d3e203238353736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.220.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:9e:ac:77:36:86:24:8a:36:4b:0b:b9:17:66:82:c8:ee:5e:
         90:55:be:1e:46:97:30:77:69:21:0d:10:14:98:ad:5b:61:a7:
         68:14:e1:3c:40:9f:ec:16:d1:b8:b8:29:17:3f:58:6f:d8:7a:
         80:29:dd:b5:da:e7:d9:0a:71:27:a3:b0:4f:03:7f:6a:7f:67:
         b2:45:73:c8:d6:ea:b7:24:c4:66:fb:7b:c1:7f:bf:ac:67:45:
         d0:e8:ee:7a:82:8c:75:0f:5f:eb:34:d3:d7:05:9e:3e:ca:fb:
         7d:0b:f7:92:5a:9c:cc:bf:bd:e8:b5:a5:fa:e6:46:eb:eb:bb:
         f6:33:17:56:9b:0a:d4:3d:8a:bb:bf:50:e5:26:ba:25:c1:ae:
         4b:91:dc:cc:bc:d5:a6:63:d0:8d:b1:88:59:3a:d1:ff:a9:e3:
         4c:52:fe:69:36:81:06:40:f0:71:24:2e:bd:80:ae:79:0d:14:
         2c:5c:00:14:5f:9a:94:4f:79:ec:e5:01:0b:7e:ef:c8:e1:61:
         4a:6b:e2:cd:94:b3:7e:96:8d:47:9d:2e:4e:84:15:73:67:e6:
         1d:42:e0:68:9a:fb:7d:4d:1b:37:49:15:8d:f0:0f:d7:07:50:
         8e:0b:5b:53:03:16:79:60:c9:71:fa:2f:ae:92:8f:04:42:5a:
         b7:50:55:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:58 2025 by rpki-client on console.sobornost.net