Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7NtsbuNVLC34VsJihSmvZ6QSpYJ2xF1RiCzAdzWQtvr6/0/3230312e33332e3232342e302f32302d3234203d3e203238323835.roa
File:                     3230312e33332e3232342e302f32302d3234203d3e203238323835.roa (raw, json)
Hash identifier:          vi0G8TCkx4zDWEl1BVmZYJPMgUi7Zu8X6GPSsWiyvVo=
Subject key identifier:   5C:06:97:0A:69:03:AC:8D:E2:2A:F4:DC:63:03:F0:C1:0A:E7:4F:48
Certificate issuer:       /CN=18304E37E7B30DCE85765ECFC90E798EBF358498
Certificate serial:       27542EC328B7B571F992379BB5EBB4C7254B5808
Authority key identifier: 18:30:4E:37:E7:B3:0D:CE:85:76:5E:CF:C9:0E:79:8E:BF:35:84:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18304E37E7B30DCE85765ECFC90E798EBF358498.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NtsbuNVLC34VsJihSmvZ6QSpYJ2xF1RiCzAdzWQtvr6/0/3230312e33332e3232342e302f32302d3234203d3e203238323835.roa
Signing time:             Thu 06 Mar 2025 17:52:26 +0000
ROA not before:           Thu 06 Mar 2025 17:47:26 +0000
ROA not after:            Thu 05 Mar 2026 17:52:26 +0000
asID:                     28285
IP address blocks:        201.33.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7NtsbuNVLC34VsJihSmvZ6QSpYJ2xF1RiCzAdzWQtvr6/0/18304E37E7B30DCE85765ECFC90E798EBF358498.crl
                          rsync://rpki-repo.registro.br/repo/7NtsbuNVLC34VsJihSmvZ6QSpYJ2xF1RiCzAdzWQtvr6/0/18304E37E7B30DCE85765ECFC90E798EBF358498.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18304E37E7B30DCE85765ECFC90E798EBF358498.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 01:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:54:2e:c3:28:b7:b5:71:f9:92:37:9b:b5:eb:b4:c7:25:4b:58:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18304E37E7B30DCE85765ECFC90E798EBF358498
        Validity
            Not Before: Mar  6 17:47:26 2025 GMT
            Not After : Mar  5 17:52:26 2026 GMT
        Subject: CN=5C06970A6903AC8DE22AF4DC6303F0C10AE74F48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7b:a9:de:26:ec:c9:48:df:3b:fa:e5:c8:76:
                    0d:36:29:fa:b6:3a:1d:42:c1:12:6b:2c:9e:b4:48:
                    00:24:57:34:bd:01:6f:0b:b7:da:10:b6:52:76:4c:
                    6c:67:54:ec:4f:31:bf:49:d0:fd:90:7a:0a:fa:f6:
                    af:bd:43:4c:46:51:ab:46:25:77:01:e2:df:56:4f:
                    2b:ae:49:bd:28:4d:65:9d:21:34:a2:f9:73:af:41:
                    19:a4:35:5b:ed:38:b5:4a:63:cb:c1:0f:d6:f8:02:
                    e0:a6:2b:4b:59:35:9e:52:48:47:68:49:f2:d3:37:
                    9c:9f:59:f2:11:e8:8a:34:b2:0e:e1:25:e0:4f:0a:
                    6f:4c:c9:69:30:94:70:f0:0b:73:c6:f3:3a:5e:b9:
                    73:05:f1:38:ed:77:d5:e9:9e:a4:66:44:59:c1:53:
                    e0:23:47:5d:17:a0:0c:4e:df:b7:c3:cc:a7:d0:69:
                    2f:4b:51:5f:45:68:f9:40:98:40:2e:5b:54:52:02:
                    2c:7d:5b:ce:9a:33:49:47:2f:ad:7d:31:1b:01:cc:
                    c4:51:21:9c:f0:0a:46:e7:48:0c:b8:06:61:85:ee:
                    9d:26:5d:da:2a:8a:c3:d1:fe:7e:86:78:8b:83:0b:
                    bf:56:3d:7f:13:2a:3e:27:7f:ea:05:d1:b1:de:18:
                    3e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:06:97:0A:69:03:AC:8D:E2:2A:F4:DC:63:03:F0:C1:0A:E7:4F:48
            X509v3 Authority Key Identifier:
                keyid:18:30:4E:37:E7:B3:0D:CE:85:76:5E:CF:C9:0E:79:8E:BF:35:84:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NtsbuNVLC34VsJihSmvZ6QSpYJ2xF1RiCzAdzWQtvr6/0/18304E37E7B30DCE85765ECFC90E798EBF358498.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18304E37E7B30DCE85765ECFC90E798EBF358498.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NtsbuNVLC34VsJihSmvZ6QSpYJ2xF1RiCzAdzWQtvr6/0/3230312e33332e3232342e302f32302d3234203d3e203238323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.33.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8d:60:73:e7:49:2b:8e:c6:ea:15:e5:43:e9:82:c7:9b:01:fe:
         b4:79:3a:6d:a4:95:77:95:66:8a:4f:e2:ac:da:e4:08:53:21:
         af:47:48:e7:b5:25:1a:20:1d:4c:65:11:62:d4:82:e1:7b:08:
         4b:d1:8c:a3:23:6b:e3:46:d1:99:e3:4d:6e:67:8e:f2:af:45:
         d2:81:07:76:07:f8:1b:14:12:5f:3f:99:7c:41:3d:6a:7d:90:
         2b:b7:13:3e:3a:87:3d:df:3a:45:71:ed:c6:41:ed:4a:c2:65:
         56:a2:0b:b6:23:4c:44:cd:29:72:80:2b:09:9b:67:b2:35:a8:
         01:d2:10:dd:0b:cb:89:7b:09:cc:d8:85:ef:82:35:99:56:44:
         8e:a3:b2:de:84:eb:8a:b0:26:49:28:51:a6:d7:6b:34:04:a1:
         e9:d6:89:c0:3d:46:27:02:48:6a:44:24:4d:c9:fd:90:a7:76:
         be:eb:58:d2:e7:6e:bb:a5:08:d5:83:46:11:e6:fa:69:9d:54:
         81:f7:a8:73:d0:38:a4:56:90:4b:5d:80:2a:6b:a6:48:08:4c:
         46:4b:57:dd:0d:e4:2b:e4:d4:7a:01:c9:51:cc:db:31:96:d5:
         df:2f:4c:7c:09:e4:3f:59:ef:7f:5a:4a:e4:64:3b:ae:00:dc:
         93:b4:83:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 08:14:40 2025 by rpki-client