Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3133362e3134342e302f32302d3234203d3e20313334393930.roa
File:                     3230302e3133362e3134342e302f32302d3234203d3e20313334393930.roa (raw, json)
Hash identifier:          ll5XKyxXg7+YnskyjcIfwbAKLb+tzvbl9cJJ0ZRnHeY=
Subject key identifier:   F5:A0:67:30:6B:F0:E4:73:67:FC:37:F8:B5:B7:41:6E:8E:C6:D2:BA
Certificate issuer:       /CN=47F9B7F1523B5B333E71404DF4D659EB16D1D775
Certificate serial:       4A18A79D1D73845280820BAB0ADC007AA680B749
Authority key identifier: 47:F9:B7:F1:52:3B:5B:33:3E:71:40:4D:F4:D6:59:EB:16:D1:D7:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F9B7F1523B5B333E71404DF4D659EB16D1D775.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3133362e3134342e302f32302d3234203d3e20313334393930.roa
Signing time:             Sat 03 May 2025 22:51:38 +0000
ROA not before:           Sat 03 May 2025 22:46:38 +0000
ROA not after:            Sat 02 May 2026 22:51:38 +0000
asID:                     134990
IP address blocks:        200.136.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/47F9B7F1523B5B333E71404DF4D659EB16D1D775.crl
                          rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/47F9B7F1523B5B333E71404DF4D659EB16D1D775.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F9B7F1523B5B333E71404DF4D659EB16D1D775.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 May 2025 03:54:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:18:a7:9d:1d:73:84:52:80:82:0b:ab:0a:dc:00:7a:a6:80:b7:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47F9B7F1523B5B333E71404DF4D659EB16D1D775
        Validity
            Not Before: May  3 22:46:38 2025 GMT
            Not After : May  2 22:51:38 2026 GMT
        Subject: CN=F5A067306BF0E47367FC37F8B5B7416E8EC6D2BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:98:be:4c:cb:f6:25:31:e2:31:90:26:8b:48:
                    62:9b:54:88:8b:90:96:24:a6:4c:b8:a9:f1:29:a8:
                    27:51:49:a8:7d:1b:6f:12:90:b4:c3:db:cd:dc:91:
                    2a:40:96:11:8b:44:24:06:19:55:39:28:74:f8:4f:
                    f0:94:91:ed:62:f1:a6:41:8f:95:16:ca:5f:e4:35:
                    fa:7e:12:22:a9:83:48:68:41:59:19:39:a0:6d:36:
                    c6:a1:ad:b9:cd:d3:c9:3a:31:cf:13:9f:63:2e:99:
                    e5:09:8b:60:6a:33:10:95:46:9e:ff:0a:3c:c0:04:
                    5a:62:d7:14:59:f1:0a:2e:ec:82:a1:41:0c:32:09:
                    75:b6:ce:73:d3:dc:43:74:0b:e8:34:aa:cb:60:bd:
                    f9:f8:c6:df:e8:51:c1:09:01:1e:e0:b0:0a:cb:ff:
                    53:9d:42:27:0a:7a:f2:ad:0e:ab:79:52:8f:a8:f8:
                    f4:fc:43:12:bd:2e:2e:b5:d9:7c:59:53:e4:de:55:
                    f1:3f:ef:ff:44:6c:71:3b:26:64:e5:76:64:1e:7b:
                    76:ef:96:f9:ae:fd:a4:64:85:6b:fd:8b:c5:29:9d:
                    b1:70:a4:8d:01:43:7f:2c:59:af:76:21:ba:69:62:
                    0f:13:1a:0e:05:ff:d6:09:5f:df:42:84:f2:53:66:
                    ad:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:A0:67:30:6B:F0:E4:73:67:FC:37:F8:B5:B7:41:6E:8E:C6:D2:BA
            X509v3 Authority Key Identifier:
                keyid:47:F9:B7:F1:52:3B:5B:33:3E:71:40:4D:F4:D6:59:EB:16:D1:D7:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/47F9B7F1523B5B333E71404DF4D659EB16D1D775.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F9B7F1523B5B333E71404DF4D659EB16D1D775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3133362e3134342e302f32302d3234203d3e20313334393930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.136.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         44:cf:6e:33:53:c1:ad:5e:a5:19:64:ee:b5:94:1c:fa:ed:3f:
         eb:f3:cf:51:0c:00:8d:9f:4f:ec:3f:8f:94:1e:88:36:04:1a:
         49:66:27:16:4a:68:e4:e7:89:41:56:8d:94:7d:01:ce:0f:be:
         05:e5:bc:77:ef:92:78:d5:f5:53:64:e4:bb:e4:d6:6f:5d:66:
         a6:44:19:8d:70:72:e6:94:61:3b:da:74:dc:4a:18:98:bd:c2:
         42:01:97:f3:db:51:3d:a2:07:de:ea:1d:80:aa:99:b1:71:b6:
         11:f4:eb:b4:3a:c3:22:f9:49:c5:cb:d8:6b:1e:ff:8c:96:2d:
         29:33:6a:71:74:b2:f5:3d:50:e6:b3:07:70:f2:6a:e1:67:e1:
         69:e5:23:3d:28:11:f5:2c:f6:11:b2:fb:2f:18:df:bc:d2:72:
         7f:99:6b:83:ee:f0:f3:a4:6d:28:19:b2:48:a5:98:c4:62:f0:
         0d:1e:ec:a6:d9:c0:4c:f6:6f:62:9f:de:90:ad:96:fc:8d:4d:
         b9:5d:ea:5f:14:3f:96:a7:bf:54:48:80:87:41:f7:d4:1b:64:
         52:58:6b:ea:81:e7:ed:42:8f:86:61:33:ca:53:33:ba:8d:6a:
         86:06:a6:48:20:99:c3:8f:b1:83:e7:27:3c:48:39:57:46:89:
         53:0e:9c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 18:19:55 2025 by rpki-client