Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/3230302e3232392e3231322e302f32322d3234203d3e203532393638.roa
File:                     3230302e3232392e3231322e302f32322d3234203d3e203532393638.roa (raw, json)
Hash identifier:          a2B4jtYC+ny41vwXBbpQuMxXaAtwI4S9uQ1yen/s5m8=
Subject key identifier:   4F:E8:76:96:0A:6F:D7:EE:F6:1F:10:F5:97:78:30:DB:2A:A6:7C:A5
Certificate issuer:       /CN=C27181D3D53BD228B34586DC6F756EBF5695A6B2
Certificate serial:       150CBA0FAB682D17FA469297CA9288E40D3198F1
Authority key identifier: C2:71:81:D3:D5:3B:D2:28:B3:45:86:DC:6F:75:6E:BF:56:95:A6:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/3230302e3232392e3231322e302f32322d3234203d3e203532393638.roa
Signing time:             Thu 06 Mar 2025 07:30:52 +0000
ROA not before:           Thu 06 Mar 2025 07:25:52 +0000
ROA not after:            Thu 05 Mar 2026 07:30:52 +0000
asID:                     52968
IP address blocks:        200.229.212.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.crl
                          rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 19:55:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:0c:ba:0f:ab:68:2d:17:fa:46:92:97:ca:92:88:e4:0d:31:98:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C27181D3D53BD228B34586DC6F756EBF5695A6B2
        Validity
            Not Before: Mar  6 07:25:52 2025 GMT
            Not After : Mar  5 07:30:52 2026 GMT
        Subject: CN=4FE876960A6FD7EEF61F10F5977830DB2AA67CA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:8e:98:30:12:19:ba:14:df:f0:7d:9b:9d:a9:
                    02:7b:00:ae:28:81:38:48:9f:a0:47:bb:c5:bd:01:
                    da:ad:1b:96:30:53:d9:ba:af:f2:83:de:b9:0b:60:
                    d5:11:ea:d3:56:cd:2d:a9:73:70:00:19:ab:ac:94:
                    59:a7:4e:6d:6b:89:db:db:7d:4f:eb:70:38:a1:71:
                    90:c6:b4:09:49:78:2b:6c:28:d8:58:c9:c6:ab:03:
                    5d:ed:a7:2e:9e:2c:3e:d0:62:b1:3f:68:cd:dd:31:
                    89:37:84:fa:2f:ea:33:1e:dc:de:e9:dc:4a:b7:15:
                    b7:8e:56:18:84:75:7f:ac:79:25:24:e2:36:70:7c:
                    b8:bf:08:90:21:09:28:12:5a:4d:b0:9c:be:b2:9f:
                    db:93:0f:c3:e6:88:52:64:65:56:0a:dc:44:8e:92:
                    b9:af:79:a0:43:06:7a:bb:e9:35:6a:1d:43:f4:da:
                    3f:64:a0:cb:eb:44:81:87:f1:32:a7:3b:b0:9b:98:
                    7f:66:8d:55:35:02:2d:1b:eb:c7:da:bb:74:2f:b1:
                    b3:b2:2e:21:c6:fe:6f:b5:10:a2:c2:83:d5:bc:7a:
                    85:bd:28:46:87:b4:42:1d:12:60:16:fd:a3:53:ce:
                    c2:89:3d:05:f5:7a:b4:82:85:87:b9:8e:50:8e:0f:
                    3c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:E8:76:96:0A:6F:D7:EE:F6:1F:10:F5:97:78:30:DB:2A:A6:7C:A5
            X509v3 Authority Key Identifier:
                keyid:C2:71:81:D3:D5:3B:D2:28:B3:45:86:DC:6F:75:6E:BF:56:95:A6:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/3230302e3232392e3231322e302f32322d3234203d3e203532393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         aa:d4:ab:27:d3:52:47:52:b0:ab:7b:ad:4f:bc:3a:c1:53:12:
         c3:4f:d2:a9:91:5b:fe:f6:65:2c:0a:8a:fe:4c:bb:d7:99:6b:
         66:32:08:09:75:a3:30:3b:74:60:ff:9e:7a:5f:35:8c:d8:25:
         3f:c9:0e:b3:1a:14:f1:ad:4a:1f:0b:63:b2:9a:b0:8e:43:55:
         39:b5:46:70:b8:63:bf:aa:a3:48:34:91:20:63:90:50:b0:96:
         b8:39:04:f8:96:99:f4:69:99:80:2c:ca:ad:ee:29:40:ec:44:
         18:6a:b2:82:ae:42:0a:96:09:ef:ba:92:11:5e:20:e6:cd:69:
         62:8a:0e:1d:52:80:89:ce:60:5e:a2:13:53:a5:ae:02:ef:48:
         49:40:2e:69:85:1b:3d:9f:22:78:5d:78:2b:c2:13:ac:fb:10:
         10:65:05:bb:eb:fb:7d:a8:8a:7f:eb:d7:e2:a9:51:7c:d2:0b:
         55:1e:bf:cd:ac:e5:20:04:cd:d4:f9:16:93:15:f6:d4:35:53:
         d3:bf:50:1f:21:0b:43:66:36:83:80:34:e8:d6:5b:55:b0:d5:
         c2:18:69:c8:18:5e:8c:5e:a1:52:af:b5:15:23:08:ce:b0:2b:
         f3:b5:c1:e4:ae:bc:79:d9:16:f5:19:dd:06:c1:01:78:bd:2f:
         3e:5e:67:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:45:53 2025 by rpki-client