Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JAdyexWaHjVRohxdAiGodTC9xjzVJbZHWrzFGLoL16nM/0/3230312e3133302e38382e302f32312d3232203d3e203631393234.roa
File:                     3230312e3133302e38382e302f32312d3232203d3e203631393234.roa (raw, json)
Hash identifier:          7f7PGYK76sstBCaTU/9ue0Qoia27tVoeosIX+ZYa56I=
Subject key identifier:   45:D1:11:E5:93:9F:59:DC:8B:D7:76:CC:98:A2:C4:51:78:A3:BC:50
Certificate issuer:       /CN=D00CC509AF17310BD082A9DE6401DA345FE17442
Certificate serial:       6466EFCC9550747476D79F718E457915440C906D
Authority key identifier: D0:0C:C5:09:AF:17:31:0B:D0:82:A9:DE:64:01:DA:34:5F:E1:74:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D00CC509AF17310BD082A9DE6401DA345FE17442.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JAdyexWaHjVRohxdAiGodTC9xjzVJbZHWrzFGLoL16nM/0/3230312e3133302e38382e302f32312d3232203d3e203631393234.roa
Signing time:             Fri 09 May 2025 15:14:08 +0000
ROA not before:           Fri 09 May 2025 15:09:08 +0000
ROA not after:            Fri 08 May 2026 15:14:08 +0000
asID:                     61924
IP address blocks:        201.130.88.0/21 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JAdyexWaHjVRohxdAiGodTC9xjzVJbZHWrzFGLoL16nM/0/D00CC509AF17310BD082A9DE6401DA345FE17442.crl
                          rsync://rpki-repo.registro.br/repo/JAdyexWaHjVRohxdAiGodTC9xjzVJbZHWrzFGLoL16nM/0/D00CC509AF17310BD082A9DE6401DA345FE17442.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D00CC509AF17310BD082A9DE6401DA345FE17442.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 04:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:66:ef:cc:95:50:74:74:76:d7:9f:71:8e:45:79:15:44:0c:90:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D00CC509AF17310BD082A9DE6401DA345FE17442
        Validity
            Not Before: May  9 15:09:08 2025 GMT
            Not After : May  8 15:14:08 2026 GMT
        Subject: CN=45D111E5939F59DC8BD776CC98A2C45178A3BC50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:02:05:fe:26:e4:74:20:cf:a1:86:92:96:61:
                    bc:0f:18:d8:2e:c6:3d:ac:ff:f3:d9:d0:a4:e5:89:
                    fc:7a:50:32:c1:7e:24:49:20:ae:d2:53:da:f3:32:
                    5d:39:21:2c:f3:15:70:61:79:14:2e:60:08:06:b9:
                    8c:0d:6b:59:e4:c0:86:2a:ab:13:51:f5:79:c3:2a:
                    42:b3:a8:6b:69:f0:0a:ca:69:a6:e9:05:03:f8:02:
                    07:84:25:a2:5b:cb:db:e6:6b:0d:94:06:7e:73:7a:
                    6d:2b:86:81:6d:85:71:5d:65:3f:79:2b:c8:50:9e:
                    d4:ce:d3:1b:82:b4:1e:1a:70:34:3c:ef:7e:36:e6:
                    52:c8:40:87:ac:d4:d1:62:91:60:ef:53:ce:79:b7:
                    64:c4:34:a4:8c:ae:7e:e8:f2:e6:c7:3c:f1:dc:59:
                    15:31:1c:27:c6:6e:e2:0d:48:38:87:6e:7e:82:d1:
                    05:bf:d6:58:f2:8b:4e:29:c1:1d:2f:6c:90:4b:3a:
                    76:62:16:54:73:9b:88:1c:11:d8:d2:1e:b9:3b:17:
                    de:f7:a6:79:ca:f4:ca:81:17:a0:77:60:98:b0:fd:
                    a3:ee:d4:ef:e1:8f:ee:39:d6:e9:0c:d4:63:be:4e:
                    2f:be:ec:5f:59:86:be:08:41:7c:8e:9f:cd:9e:21:
                    1c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:D1:11:E5:93:9F:59:DC:8B:D7:76:CC:98:A2:C4:51:78:A3:BC:50
            X509v3 Authority Key Identifier:
                keyid:D0:0C:C5:09:AF:17:31:0B:D0:82:A9:DE:64:01:DA:34:5F:E1:74:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JAdyexWaHjVRohxdAiGodTC9xjzVJbZHWrzFGLoL16nM/0/D00CC509AF17310BD082A9DE6401DA345FE17442.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D00CC509AF17310BD082A9DE6401DA345FE17442.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JAdyexWaHjVRohxdAiGodTC9xjzVJbZHWrzFGLoL16nM/0/3230312e3133302e38382e302f32312d3232203d3e203631393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.130.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         03:56:87:e2:e6:2a:bb:21:a3:c2:80:8c:c5:fb:d9:64:36:a8:
         00:56:4d:d8:cc:4f:2f:5c:4a:25:76:50:b2:40:f0:8b:ed:ad:
         44:5c:89:cb:70:e9:ce:35:33:df:f1:b0:49:73:85:25:7d:45:
         40:8a:da:03:42:09:a3:45:cc:32:9b:13:39:62:f1:28:f2:97:
         c8:11:98:7e:00:45:a6:c7:4b:d7:21:e3:23:03:cd:22:09:05:
         13:08:08:ab:7e:3b:86:ce:89:a8:e4:a0:18:18:c2:e3:e9:84:
         13:be:4c:99:50:60:25:18:12:39:67:64:da:cb:53:8e:90:31:
         b2:1d:d6:87:b8:46:8b:1c:35:56:dd:0e:a8:12:ad:57:29:83:
         b5:11:8b:c2:8d:60:e9:41:e0:e4:d7:e7:ee:f1:65:e8:27:7e:
         f3:13:4c:16:1e:0a:c1:4b:66:a8:75:13:98:e0:2a:ba:4b:c6:
         62:cd:88:e5:94:14:10:94:0a:9e:41:41:22:fc:0f:19:4f:5b:
         d0:32:a2:4a:af:aa:5d:90:c2:8d:f8:eb:31:a3:3c:f4:6b:81:
         4d:a9:9b:08:75:d6:b4:c7:dd:ae:bb:cd:ef:a3:f6:76:df:76:
         86:80:31:ce:b1:a6:a2:be:1f:46:9b:e4:ba:ad:bf:32:28:16:
         2a:04:4d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 10:24:25 2025 by rpki-client