Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3230302e3232302e3134302e302f32322d3232203d3e203237363933.roa
File:                     3230302e3232302e3134302e302f32322d3232203d3e203237363933.roa (raw, json)
Hash identifier:          j+SvqbZXVfxmgtohwZr9g1G/nFYBl+Kemb3YNEknS2o=
Subject key identifier:   C1:FD:0E:7F:FF:32:2C:68:70:05:89:6E:7E:FD:CF:D2:1F:7F:2F:BB
Certificate issuer:       /CN=3345439099C79C13F583D2238E3BB7D0D60D6877
Certificate serial:       1623FB27040460D6B25EC1E676BB24F5CFD22F1C
Authority key identifier: 33:45:43:90:99:C7:9C:13:F5:83:D2:23:8E:3B:B7:D0:D6:0D:68:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3230302e3232302e3134302e302f32322d3232203d3e203237363933.roa
Signing time:             Tue 22 Oct 2024 14:30:15 +0000
ROA not before:           Tue 22 Oct 2024 14:25:15 +0000
ROA not after:            Tue 21 Oct 2025 14:30:15 +0000
asID:                     27693
IP address blocks:        200.220.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.crl
                          rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 08:39:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:23:fb:27:04:04:60:d6:b2:5e:c1:e6:76:bb:24:f5:cf:d2:2f:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3345439099C79C13F583D2238E3BB7D0D60D6877
        Validity
            Not Before: Oct 22 14:25:15 2024 GMT
            Not After : Oct 21 14:30:15 2025 GMT
        Subject: CN=C1FD0E7FFF322C687005896E7EFDCFD21F7F2FBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:3f:54:e4:ee:74:cf:5c:82:04:d2:b1:43:d5:
                    d9:1d:12:ce:40:d6:28:8b:4e:9d:62:45:8c:62:f4:
                    81:55:b9:87:38:35:8d:89:ae:d6:87:ab:39:72:fc:
                    8a:d2:14:5b:d6:13:07:cb:b5:a4:e3:2a:7f:5a:88:
                    88:23:cc:c0:4d:b6:13:0f:80:a0:fd:98:8a:a0:dd:
                    42:09:54:79:2e:8d:93:16:eb:98:af:b7:89:2a:65:
                    1c:21:dd:d0:11:3e:ee:4a:e3:ca:66:f4:62:03:39:
                    28:ca:0d:56:a4:eb:bf:32:42:75:42:13:25:07:eb:
                    97:6f:d4:72:65:95:e1:9b:24:64:d5:ae:8e:ba:f0:
                    e7:87:56:19:7a:40:5e:48:9f:45:4e:60:28:d4:64:
                    1d:24:12:ce:e5:8f:2f:9f:a3:c8:c9:34:32:7b:c4:
                    ba:e1:ed:c8:01:a6:c7:69:97:a1:b1:7c:e8:be:59:
                    c8:74:bb:af:f3:12:c0:7b:e9:62:c8:41:36:af:51:
                    0e:12:d6:71:b0:5f:7e:5b:d6:ad:c8:be:a3:12:82:
                    ea:8b:2b:85:10:6f:1a:ea:81:2b:1e:7d:8b:d7:22:
                    cc:7c:36:ec:ab:d5:98:8e:22:0e:29:4f:70:bf:47:
                    b3:2a:f0:85:b5:e4:e7:91:ab:2c:59:20:ef:cd:4f:
                    30:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:FD:0E:7F:FF:32:2C:68:70:05:89:6E:7E:FD:CF:D2:1F:7F:2F:BB
            X509v3 Authority Key Identifier:
                keyid:33:45:43:90:99:C7:9C:13:F5:83:D2:23:8E:3B:B7:D0:D6:0D:68:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3230302e3232302e3134302e302f32322d3232203d3e203237363933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.220.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:70:5a:e1:da:62:13:3d:92:ac:1f:f0:55:52:ef:6c:46:9b:
         43:11:ff:db:4a:15:0e:a0:36:03:70:3f:fb:a6:6a:38:b4:62:
         bf:8f:43:94:3a:0e:e3:d8:8a:6b:a1:0b:01:2a:c3:f2:52:cc:
         75:12:0f:22:57:5c:73:c3:a3:12:0e:07:71:54:94:94:0b:1e:
         21:e4:37:38:3c:52:cc:63:14:c1:b3:64:70:2f:64:b3:40:56:
         4f:84:3d:dc:42:b2:6f:cb:a1:1b:89:0f:26:89:36:bf:4c:a0:
         b3:ec:84:c2:e6:41:f8:da:ba:6a:38:3f:57:06:1e:8f:dd:73:
         35:3c:2e:6a:24:42:fb:9f:53:8f:84:cf:09:bb:03:14:1c:c9:
         c2:03:39:29:fc:8b:18:ee:5e:3f:ba:c0:47:cd:8e:84:32:c5:
         30:50:7e:ee:be:af:7e:5f:2d:57:93:e1:3f:59:ff:69:e7:02:
         42:57:d8:cc:df:c1:d0:63:86:03:da:1c:38:53:0e:69:8e:ee:
         c1:b8:1b:72:5d:f9:78:56:f2:38:88:1c:bb:44:0a:65:db:4f:
         a4:05:2c:c8:1e:00:8d:1a:7a:8c:9a:8c:ca:c3:61:d3:77:fa:
         22:3e:3d:23:ed:ba:60:78:8a:e1:53:45:93:ce:a2:95:be:2f:
         33:a8:7e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:24:27 2025 by rpki-client