Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3230302e33332e3133322e302f32322d3232203d3e20323633323633.roa
File:                     3230302e33332e3133322e302f32322d3232203d3e20323633323633.roa (raw, json)
Hash identifier:          5RAt2NaXRou26+FE4J4mLy9b/A2xfAeFtOVID7Ohe8s=
Subject key identifier:   20:A9:C8:D5:D3:0D:CC:5B:8F:C7:57:87:73:05:4B:4B:AC:70:F1:85
Certificate issuer:       /CN=CE2D1BC8B26735E9068E8833320A9FDEB04E69CD
Certificate serial:       674C3E9728B032C428E6A27D79FEB86A594BFD6A
Authority key identifier: CE:2D:1B:C8:B2:67:35:E9:06:8E:88:33:32:0A:9F:DE:B0:4E:69:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3230302e33332e3133322e302f32322d3232203d3e20323633323633.roa
Signing time:             Thu 06 Mar 2025 08:00:30 +0000
ROA not before:           Thu 06 Mar 2025 07:55:30 +0000
ROA not after:            Thu 05 Mar 2026 08:00:30 +0000
asID:                     263263
IP address blocks:        200.33.132.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.crl
                          rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 10:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:4c:3e:97:28:b0:32:c4:28:e6:a2:7d:79:fe:b8:6a:59:4b:fd:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE2D1BC8B26735E9068E8833320A9FDEB04E69CD
        Validity
            Not Before: Mar  6 07:55:30 2025 GMT
            Not After : Mar  5 08:00:30 2026 GMT
        Subject: CN=20A9C8D5D30DCC5B8FC7578773054B4BAC70F185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2d:ac:8e:9e:4a:21:51:4f:f5:c7:5f:cb:d3:
                    27:d4:03:28:02:12:98:6e:c7:c6:f4:0d:0d:97:8c:
                    29:5d:36:52:72:ba:a6:50:a9:bb:51:44:c1:8c:ef:
                    9e:7e:8b:7b:b4:27:a9:a7:f1:da:9d:9b:bd:91:74:
                    dd:47:3a:a8:91:56:65:c2:24:aa:18:84:1c:70:7f:
                    84:dc:dd:02:f0:31:77:01:b2:71:60:5c:77:da:c0:
                    eb:dc:1e:ab:1d:dd:32:d1:80:08:e1:71:15:86:f0:
                    3b:b6:b8:7c:26:7c:5a:7c:89:68:57:fd:b6:1b:d7:
                    d3:15:4d:0e:9f:5c:e6:7a:4a:79:cd:f0:ea:98:e8:
                    64:15:02:15:4f:d4:fd:89:99:cc:a2:80:fd:cb:8f:
                    de:56:d6:18:e6:ec:99:2d:e5:d6:ea:1e:76:2c:b1:
                    45:6f:db:7c:ad:a0:ed:af:ee:c8:60:95:f8:79:0f:
                    8e:ac:1c:fa:3a:73:52:05:a6:32:c8:f8:3b:fa:34:
                    6e:4c:77:ab:8e:3e:c2:3d:44:b9:11:ac:ee:67:35:
                    f5:33:dd:f8:72:9a:4f:00:61:a3:1b:3b:ba:51:ea:
                    78:ea:e9:52:7d:cc:dc:0a:57:30:3f:5c:a8:8d:8c:
                    fb:8c:a8:ac:43:e4:6e:4f:4a:f8:63:e0:3d:35:7e:
                    94:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:A9:C8:D5:D3:0D:CC:5B:8F:C7:57:87:73:05:4B:4B:AC:70:F1:85
            X509v3 Authority Key Identifier:
                keyid:CE:2D:1B:C8:B2:67:35:E9:06:8E:88:33:32:0A:9F:DE:B0:4E:69:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3230302e33332e3133322e302f32322d3232203d3e20323633323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:8c:44:43:63:11:4f:44:51:fc:65:22:ad:2b:d8:aa:bb:69:
         6c:97:41:4d:58:cc:43:74:c8:a3:41:6f:50:35:65:7d:03:b7:
         84:c1:80:69:5a:d0:13:d0:af:35:97:48:06:aa:56:7e:c7:2e:
         15:25:f4:8c:08:e2:aa:db:2c:98:d9:3a:30:01:6f:fb:a4:8f:
         65:9e:9e:f3:de:2e:00:66:7d:85:45:77:10:68:80:f2:b6:5d:
         3d:12:1b:af:03:be:0e:d6:75:21:d3:39:3d:3d:b4:88:b1:42:
         89:40:8e:72:72:1a:47:38:b1:11:34:7c:b9:f1:02:b9:a4:d9:
         4c:54:56:7c:fd:b4:fd:65:56:80:97:91:33:fc:b5:8e:18:f4:
         f4:9f:96:20:b9:13:3f:7e:ba:e4:20:f0:8a:92:95:c3:30:74:
         cd:54:8a:28:64:5f:a2:6e:e7:d6:2c:35:2b:9c:b5:56:b5:fd:
         46:ca:a4:6d:8a:73:f4:c6:7d:c4:a4:cf:86:c9:23:6e:fe:2b:
         cb:16:85:a0:e4:a1:3b:1f:b5:f8:fe:36:c7:10:ad:45:02:4a:
         ba:86:b5:6e:8c:53:c4:22:0d:ff:e9:c4:f2:dc:e4:c8:f6:e7:
         4c:92:43:41:ad:07:61:a1:be:7d:e3:54:33:94:6e:a4:6d:6a:
         d8:e1:79:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:52:10 2025 by rpki-client