Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3230302e3136302e3134342e302f32302d3234203d3e203232313238.roa
File:                     3230302e3136302e3134342e302f32302d3234203d3e203232313238.roa (raw, json)
Hash identifier:          K/QKWU+NClIhv0L20xx5xdE587sdqSX2xpA58tbAEs4=
Subject key identifier:   19:37:A2:2D:E0:2E:2C:F3:CF:06:FD:3B:B4:EC:17:6E:73:D4:C3:AE
Certificate issuer:       /CN=1233961E0559F239AED4F50437087EF6837DC5E3
Certificate serial:       11C62582BE47B0C64CFAD8B72730FF7DBE43BEA4
Authority key identifier: 12:33:96:1E:05:59:F2:39:AE:D4:F5:04:37:08:7E:F6:83:7D:C5:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1233961E0559F239AED4F50437087EF6837DC5E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3230302e3136302e3134342e302f32302d3234203d3e203232313238.roa
Signing time:             Tue 08 Apr 2025 19:19:52 +0000
ROA not before:           Tue 08 Apr 2025 19:14:52 +0000
ROA not after:            Tue 07 Apr 2026 19:19:52 +0000
asID:                     22128
IP address blocks:        200.160.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/1233961E0559F239AED4F50437087EF6837DC5E3.crl
                          rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/1233961E0559F239AED4F50437087EF6837DC5E3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1233961E0559F239AED4F50437087EF6837DC5E3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 11:22:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:c6:25:82:be:47:b0:c6:4c:fa:d8:b7:27:30:ff:7d:be:43:be:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1233961E0559F239AED4F50437087EF6837DC5E3
        Validity
            Not Before: Apr  8 19:14:52 2025 GMT
            Not After : Apr  7 19:19:52 2026 GMT
        Subject: CN=1937A22DE02E2CF3CF06FD3BB4EC176E73D4C3AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d9:9e:b7:6e:ed:a1:c3:33:c8:97:d4:4a:09:
                    d3:9d:c8:61:f3:c9:f3:56:56:89:00:7b:89:9f:2c:
                    d8:1b:02:b4:d4:57:2c:22:7e:cb:c9:27:28:9d:05:
                    9d:c0:d5:5a:a8:0e:5b:a1:6d:de:eb:c1:4e:0d:56:
                    48:40:8e:3b:db:a6:3d:13:1c:cf:09:c3:e8:80:c7:
                    85:fc:e2:7a:d9:d3:75:99:eb:c5:a8:c9:4a:4f:16:
                    7c:df:36:fd:0a:5e:04:94:ea:cc:35:8e:85:be:e0:
                    0d:a6:9a:4d:b8:3f:a4:49:da:ab:43:ef:6e:70:8b:
                    81:38:20:b0:97:03:90:6f:a9:e9:d7:9c:9f:4f:35:
                    24:94:c5:0e:9c:96:3f:19:72:da:4f:9a:29:8d:87:
                    0d:0f:ae:84:96:35:89:43:11:a6:db:eb:86:c0:32:
                    5d:a1:8f:b1:ed:cc:60:ae:1f:d1:11:d1:e8:e3:70:
                    38:99:5f:04:44:d8:27:ba:7f:44:c0:4f:30:6e:04:
                    59:41:35:2f:48:83:1d:36:03:63:1e:58:81:f6:20:
                    84:57:9b:91:c7:e1:37:24:0e:78:7b:2e:12:9c:9c:
                    25:7f:98:ee:9d:c7:49:7a:e8:e4:2f:82:78:51:cf:
                    56:43:ce:31:0b:df:f4:a2:f2:4c:9a:13:d0:ec:0b:
                    09:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:37:A2:2D:E0:2E:2C:F3:CF:06:FD:3B:B4:EC:17:6E:73:D4:C3:AE
            X509v3 Authority Key Identifier:
                keyid:12:33:96:1E:05:59:F2:39:AE:D4:F5:04:37:08:7E:F6:83:7D:C5:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/1233961E0559F239AED4F50437087EF6837DC5E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1233961E0559F239AED4F50437087EF6837DC5E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3230302e3136302e3134342e302f32302d3234203d3e203232313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.160.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8c:88:84:7d:ab:c7:c1:f3:9a:e1:3e:b7:ef:f9:64:df:0c:08:
         19:03:ab:56:41:45:2c:58:80:ad:2d:61:74:a1:f3:da:05:85:
         c6:a6:08:93:2d:bd:67:b8:1e:75:6d:e2:b7:cd:7c:b4:dd:92:
         40:30:36:3a:8a:c6:02:6e:22:a3:48:c9:ea:9c:4f:8f:04:94:
         10:b6:69:a4:bf:67:77:3d:9b:8a:13:5f:04:93:36:67:be:e8:
         e1:ce:d7:17:0b:e5:04:7d:11:57:92:9d:c9:c4:a1:46:f6:a0:
         bf:80:03:bd:5b:06:bb:8b:a2:db:76:9f:d4:98:94:32:40:92:
         f8:cd:4a:8d:53:ca:45:43:03:a8:0a:ad:b5:ea:d8:a8:7c:96:
         f0:85:87:4b:36:51:9c:73:24:6c:84:62:d7:bd:90:1e:47:07:
         d4:7a:90:97:cc:83:e5:56:dc:47:34:78:17:d9:34:9c:90:59:
         59:43:95:b8:50:86:61:f6:8f:24:7b:7c:a3:60:90:42:e9:62:
         b3:ff:ec:bf:71:2e:ac:fb:78:4d:d2:a1:e2:e1:33:4b:0c:02:
         1e:48:e7:8d:fb:d6:7c:50:26:e7:88:fc:5b:28:e6:81:a0:47:
         51:97:4c:d6:e3:68:3a:41:80:6f:85:03:7b:9b:62:1a:14:af:
         40:e2:ef:a5
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUEcYlgr5HsMZM+ti3JzD/fb5DvqQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTIzMzk2MUUwNTU5RjIzOUFFRDRGNTA0MzcwODdFRjY4
MzdEQzVFMzAeFw0yNTA0MDgxOTE0NTJaFw0yNjA0MDcxOTE5NTJaMDMxMTAvBgNV
BAMTKDE5MzdBMjJERTAyRTJDRjNDRjA2RkQzQkI0RUMxNzZFNzNENEMzQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp2Z63bu2hwzPIl9RKCdOdyGHz
yfNWVokAe4mfLNgbArTUVywifsvJJyidBZ3A1VqoDluhbd7rwU4NVkhAjjvbpj0T
HM8Jw+iAx4X84nrZ03WZ68WoyUpPFnzfNv0KXgSU6sw1joW+4A2mmk24P6RJ2qtD
725wi4E4ILCXA5BvqenXnJ9PNSSUxQ6clj8ZctpPmimNhw0ProSWNYlDEabb64bA
Ml2hj7HtzGCuH9ER0ejjcDiZXwRE2Ce6f0TATzBuBFlBNS9Igx02A2MeWIH2IIRX
m5HH4TckDnh7LhKcnCV/mO6dx0l66OQvgnhRz1ZDzjEL3/Si8kyaE9DsCwkLAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUGTeiLeAuLPPPBv07tOwXbnPUw64wHwYDVR0j
BBgwFoAUEjOWHgVZ8jmu1PUENwh+9oN9xeMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkFtVWMycnQ4RVVTbkRRb1JyWWdnUVJNNExWbW5kM2dmTnRVc2dwMVhR
a1AvMC8xMjMzOTYxRTA1NTlGMjM5QUVENEY1MDQzNzA4N0VGNjgzN0RDNUUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEyMzM5NjFFMDU1OUYyMzlB
RUQ0RjUwNDM3MDg3RUY2ODM3REM1RTMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJBbVVjMnJ0OEVVU25EUW9ScllnZ1FSTTRMVm1uZDNnZk50VXNncDFYUWtQLzAv
MzIzMDMwMmUzMTM2MzAyZTMxMzQzNDJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDMy
MzIzMTMyMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBATIoJAwDQYJKoZIhvcNAQELBQADggEBAIyIhH2r
x8HzmuE+t+/5ZN8MCBkDq1ZBRSxYgK0tYXSh89oFhcamCJMtvWe4HnVt4rfNfLTd
kkAwNjqKxgJuIqNIyeqcT48ElBC2aaS/Z3c9m4oTXwSTNme+6OHO1xcL5QR9EVeS
ncnEoUb2oL+AA71bBruLott2n9SYlDJAkvjNSo1TykVDA6gKrbXq2Kh8lvCFh0s2
UZxzJGyEYte9kB5HB9R6kJfMg+VW3Ec0eBfZNJyQWVlDlbhQhmH2jyR7fKNgkELp
YrP/7L9xLqz7eE3SoeLhM0sMAh5I54371nxQJueI/Fso5oGgR1GXTNbjaDpBgG+F
A3ubYhoUr0Di76U=
-----END CERTIFICATE-----
Generated at Tue Apr 22 12:36:41 2025 by rpki-client