Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/3230312e3135302e3132342e302f32332d3233203d3e203631383736.roa
File:                     3230312e3135302e3132342e302f32332d3233203d3e203631383736.roa (raw, json)
Hash identifier:          ncemmfCK8Jrh4s7nkif5EptKdEjXlKmZiVK2y8khyJc=
Subject key identifier:   E4:2F:F6:0B:25:3D:73:2E:C4:58:60:57:40:FC:E7:C8:14:EA:0D:30
Certificate issuer:       /CN=4FD2257689EE83DB094839D2005FC336CC9380AC
Certificate serial:       3D6D77EE855BB04B2200F0EB104AD5BF03372F23
Authority key identifier: 4F:D2:25:76:89:EE:83:DB:09:48:39:D2:00:5F:C3:36:CC:93:80:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FD2257689EE83DB094839D2005FC336CC9380AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/3230312e3135302e3132342e302f32332d3233203d3e203631383736.roa
Signing time:             Tue 21 Jan 2025 16:49:36 +0000
ROA not before:           Tue 21 Jan 2025 16:44:36 +0000
ROA not after:            Tue 20 Jan 2026 16:49:36 +0000
asID:                     61876
IP address blocks:        201.150.124.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/4FD2257689EE83DB094839D2005FC336CC9380AC.crl
                          rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/4FD2257689EE83DB094839D2005FC336CC9380AC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FD2257689EE83DB094839D2005FC336CC9380AC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 09:03:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:6d:77:ee:85:5b:b0:4b:22:00:f0:eb:10:4a:d5:bf:03:37:2f:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FD2257689EE83DB094839D2005FC336CC9380AC
        Validity
            Not Before: Jan 21 16:44:36 2025 GMT
            Not After : Jan 20 16:49:36 2026 GMT
        Subject: CN=E42FF60B253D732EC458605740FCE7C814EA0D30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e8:45:cf:55:b9:18:4d:b6:22:8f:4d:0b:6e:
                    7d:8a:37:9d:29:30:56:1d:c1:50:15:73:bb:45:84:
                    84:ed:ec:a8:fd:20:ed:13:58:3f:8d:a6:0e:d6:00:
                    4c:be:3b:7d:21:f3:7e:6b:31:5d:65:3f:01:90:6c:
                    dc:fd:0a:55:9b:af:dc:47:db:49:84:fc:35:eb:e7:
                    f9:52:1f:03:57:1e:44:05:5a:70:ab:3e:a1:b4:be:
                    9f:fb:8a:99:c5:41:c1:f3:a2:70:1e:55:11:e7:d8:
                    7f:44:33:f3:b4:1f:1d:70:61:5c:17:8d:bc:18:c6:
                    5e:74:37:0b:c1:86:e0:fd:72:ed:fe:24:dd:c5:bb:
                    bd:d4:d1:80:ce:ee:d2:f4:79:d9:10:43:9f:b2:9c:
                    5d:85:e2:3f:88:7e:7d:80:24:36:10:8f:1f:d6:0b:
                    ce:5a:bd:b5:6f:58:c5:db:8c:b4:4c:f1:a8:47:30:
                    90:77:11:83:08:e7:8a:1d:26:b1:ca:40:8b:29:6b:
                    3f:53:f7:80:4b:7e:f5:9c:84:89:4f:10:cb:e9:e8:
                    f9:ac:d3:4c:e3:4c:08:e8:41:5d:04:0b:85:c5:2f:
                    78:ef:b5:ac:87:d3:26:26:fa:6e:cc:70:ba:02:91:
                    c0:64:85:af:69:63:5d:8b:33:c6:85:02:c1:61:e9:
                    a5:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:2F:F6:0B:25:3D:73:2E:C4:58:60:57:40:FC:E7:C8:14:EA:0D:30
            X509v3 Authority Key Identifier:
                keyid:4F:D2:25:76:89:EE:83:DB:09:48:39:D2:00:5F:C3:36:CC:93:80:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/4FD2257689EE83DB094839D2005FC336CC9380AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FD2257689EE83DB094839D2005FC336CC9380AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/3230312e3135302e3132342e302f32332d3233203d3e203631383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.150.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:88:da:bf:19:aa:62:96:02:04:79:fa:80:ec:f1:d0:77:8f:
         27:11:20:7c:5b:3c:10:e3:d2:8f:7c:7b:18:63:67:21:de:a9:
         3d:48:6d:23:16:75:dd:9f:99:b0:6d:74:a4:4e:ff:17:b5:19:
         b2:b1:65:d7:10:52:62:a2:a7:3c:3c:be:0b:c3:04:c5:77:2d:
         17:9a:29:ff:f4:89:93:c3:54:31:67:e2:d1:21:59:58:68:bc:
         20:77:5b:51:00:81:2d:b1:d4:02:bc:08:13:e6:1f:40:46:6c:
         a2:79:f1:65:6a:ac:4d:03:05:89:c4:28:3f:96:24:80:87:2d:
         e1:7e:e3:d0:5b:8a:e7:6b:3d:20:74:78:87:f2:d0:ff:3b:99:
         27:8c:a1:82:e8:cd:27:3e:59:dd:98:c3:85:c8:1d:f7:8b:bc:
         71:59:53:ea:c4:58:ee:63:6c:91:78:96:36:7e:13:d3:e4:ed:
         23:60:e9:58:8b:a7:fb:58:52:ed:56:99:e6:6d:48:e2:75:17:
         09:b9:c3:23:dc:f0:ac:1b:ec:d9:fc:70:d0:db:48:9f:75:3a:
         95:ca:93:c7:e2:52:45:ca:2a:7f:21:91:d9:50:a6:87:19:de:
         51:0c:7c:6e:94:f3:08:20:6f:f3:00:a9:b8:d2:62:63:9f:35:
         63:67:d9:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:51:13 2025 by rpki-client