Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BZgTKVP87K6uWivxSqnD7oQ1RUGvSi5MrNad2z1nkA8m/0/3230302e3131302e3130302e302f32332d3233203d3e20323730323630.roa
File:                     3230302e3131302e3130302e302f32332d3233203d3e20323730323630.roa (raw, json)
Hash identifier:          7jfTG/wn9s9AHxwMsg6N4zBsZ1WQ54LfEVTU75eiGNY=
Subject key identifier:   D9:7F:BD:A9:95:69:83:C0:7B:3C:17:6F:E0:7C:89:8B:F5:3C:8B:7C
Certificate issuer:       /CN=82EFE137B6D9999428400B1E8C0FA5C15F8F7C9F
Certificate serial:       21A276EFDE66258B3A7C7A644B77726F4B0F64E0
Authority key identifier: 82:EF:E1:37:B6:D9:99:94:28:40:0B:1E:8C:0F:A5:C1:5F:8F:7C:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82EFE137B6D9999428400B1E8C0FA5C15F8F7C9F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BZgTKVP87K6uWivxSqnD7oQ1RUGvSi5MrNad2z1nkA8m/0/3230302e3131302e3130302e302f32332d3233203d3e20323730323630.roa
Signing time:             Tue 08 Apr 2025 16:11:58 +0000
ROA not before:           Tue 08 Apr 2025 16:06:58 +0000
ROA not after:            Tue 07 Apr 2026 16:11:58 +0000
asID:                     270260
IP address blocks:        200.110.100.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BZgTKVP87K6uWivxSqnD7oQ1RUGvSi5MrNad2z1nkA8m/0/82EFE137B6D9999428400B1E8C0FA5C15F8F7C9F.crl
                          rsync://rpki-repo.registro.br/repo/BZgTKVP87K6uWivxSqnD7oQ1RUGvSi5MrNad2z1nkA8m/0/82EFE137B6D9999428400B1E8C0FA5C15F8F7C9F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82EFE137B6D9999428400B1E8C0FA5C15F8F7C9F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 15:19:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:a2:76:ef:de:66:25:8b:3a:7c:7a:64:4b:77:72:6f:4b:0f:64:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82EFE137B6D9999428400B1E8C0FA5C15F8F7C9F
        Validity
            Not Before: Apr  8 16:06:58 2025 GMT
            Not After : Apr  7 16:11:58 2026 GMT
        Subject: CN=D97FBDA9956983C07B3C176FE07C898BF53C8B7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fc:28:ec:60:01:0d:f8:70:65:8f:af:26:33:
                    2a:9f:ca:06:7f:9e:94:cb:3c:01:e6:f3:3d:dd:c2:
                    64:3e:17:88:50:85:14:73:1d:9e:4e:5a:fd:f7:79:
                    54:26:e4:66:9d:3d:14:6d:03:58:d3:60:53:12:05:
                    f5:2b:32:9f:91:12:f5:05:44:0a:42:89:99:3e:61:
                    b7:cb:4c:d0:6c:9f:55:7b:b8:b6:1f:81:a8:17:c3:
                    62:c4:3d:96:77:00:de:53:1a:4c:08:d0:4c:45:62:
                    35:b6:ac:e4:f8:9d:c3:2f:bf:5f:36:d1:00:cb:a3:
                    45:c5:f5:5e:c6:a9:48:27:f1:e7:85:6b:bd:ca:34:
                    ad:6c:68:ef:69:f0:24:6c:cb:be:d8:6f:75:7c:b9:
                    b2:06:b7:2c:c5:1a:70:51:d3:59:bd:4c:30:62:d1:
                    70:4d:a5:88:5c:43:9c:e5:32:fc:8c:3d:d6:ba:6b:
                    e1:fa:0d:60:73:90:eb:b5:19:32:ed:6b:9f:f1:41:
                    e8:41:9a:bf:89:a0:d6:8f:0c:9c:af:d7:bb:f7:90:
                    69:1b:6b:81:cd:05:77:60:ce:84:91:04:1e:59:c1:
                    ba:87:a4:e1:6c:ba:34:06:01:3b:41:cb:02:0e:a7:
                    47:8a:84:d9:d5:5d:bf:90:94:10:e7:ad:b3:ab:1c:
                    b6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:7F:BD:A9:95:69:83:C0:7B:3C:17:6F:E0:7C:89:8B:F5:3C:8B:7C
            X509v3 Authority Key Identifier:
                keyid:82:EF:E1:37:B6:D9:99:94:28:40:0B:1E:8C:0F:A5:C1:5F:8F:7C:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BZgTKVP87K6uWivxSqnD7oQ1RUGvSi5MrNad2z1nkA8m/0/82EFE137B6D9999428400B1E8C0FA5C15F8F7C9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82EFE137B6D9999428400B1E8C0FA5C15F8F7C9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BZgTKVP87K6uWivxSqnD7oQ1RUGvSi5MrNad2z1nkA8m/0/3230302e3131302e3130302e302f32332d3233203d3e20323730323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.110.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:12:99:01:0a:b7:b7:2b:80:34:74:43:28:6f:89:ea:fc:d9:
         e5:e0:27:74:6e:e6:df:4e:51:03:9f:82:e1:da:2e:63:09:7e:
         55:7e:70:55:15:42:b6:79:2e:04:38:d8:47:74:8e:97:6f:c7:
         f0:f7:bb:3c:63:bc:d8:34:c3:14:00:50:d3:e1:e8:38:7b:6e:
         44:bf:39:5d:b2:66:6c:72:65:0a:43:32:b5:ce:61:3a:42:25:
         ba:91:3e:f2:54:70:07:51:4a:5e:c8:53:05:5b:f1:0d:78:3c:
         04:0a:fe:f7:b1:ab:06:38:88:1f:71:37:6b:3e:35:7a:f7:96:
         94:fe:0c:5b:68:a7:0b:13:29:21:92:fe:f0:b6:f4:9e:e8:7d:
         fe:3d:35:82:c3:66:a9:9d:5b:ba:b5:8e:16:fe:12:bd:29:59:
         d2:c6:7d:7b:d8:00:e0:54:1e:3d:a0:09:d9:33:d2:41:e1:1f:
         7d:f4:b6:6c:45:f5:eb:a9:40:61:44:76:bf:dd:e6:7f:d3:77:
         11:8a:b7:21:e3:25:60:0c:40:b4:c9:70:ab:67:87:7a:a7:6d:
         6f:b9:24:f0:eb:78:4f:df:64:6a:b8:6e:bb:00:89:a4:73:b6:
         2a:03:8f:f8:f5:6b:b0:de:0d:5c:c4:00:b2:4b:c4:38:ed:8d:
         36:cd:1e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:24:11 2025 by rpki-client on console.sobornost.net