Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/81FyMMaErXNwV6L3wgwgFsNePGyajh6D1EoQQidLZ1Pn/0/3230302e3136392e36342e302f32312d3332203d3e203532393736.roa
File:                     3230302e3136392e36342e302f32312d3332203d3e203532393736.roa (raw, json)
Hash identifier:          k0j0ThO3C3eVJxnuc6HtIlfX+rjx7+I5ODmbWgeCYLE=
Subject key identifier:   2C:7A:79:77:2F:FD:CD:5E:1C:98:0A:72:D5:8E:BA:62:CE:93:28:19
Certificate issuer:       /CN=241DA0E2A6F4A4E7C8831857C66C16E87C2C5C6B
Certificate serial:       73CA47489BADBC586AC116C68975721EF26AEABF
Authority key identifier: 24:1D:A0:E2:A6:F4:A4:E7:C8:83:18:57:C6:6C:16:E8:7C:2C:5C:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/241DA0E2A6F4A4E7C8831857C66C16E87C2C5C6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/81FyMMaErXNwV6L3wgwgFsNePGyajh6D1EoQQidLZ1Pn/0/3230302e3136392e36342e302f32312d3332203d3e203532393736.roa
Signing time:             Wed 18 Sep 2024 03:34:58 +0000
ROA not before:           Wed 18 Sep 2024 03:29:58 +0000
ROA not after:            Wed 17 Sep 2025 03:34:58 +0000
asID:                     52976
IP address blocks:        200.169.64.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/81FyMMaErXNwV6L3wgwgFsNePGyajh6D1EoQQidLZ1Pn/0/241DA0E2A6F4A4E7C8831857C66C16E87C2C5C6B.crl
                          rsync://rpki-repo.registro.br/repo/81FyMMaErXNwV6L3wgwgFsNePGyajh6D1EoQQidLZ1Pn/0/241DA0E2A6F4A4E7C8831857C66C16E87C2C5C6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/241DA0E2A6F4A4E7C8831857C66C16E87C2C5C6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Mar 2025 12:32:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:ca:47:48:9b:ad:bc:58:6a:c1:16:c6:89:75:72:1e:f2:6a:ea:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=241DA0E2A6F4A4E7C8831857C66C16E87C2C5C6B
        Validity
            Not Before: Sep 18 03:29:58 2024 GMT
            Not After : Sep 17 03:34:58 2025 GMT
        Subject: CN=2C7A79772FFDCD5E1C980A72D58EBA62CE932819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:07:53:bd:f8:cb:99:aa:39:30:18:a3:69:81:
                    26:58:07:85:c2:8c:2a:07:01:45:24:5c:52:1c:54:
                    e7:0e:0c:93:30:9f:63:2f:58:b6:d8:af:34:06:1f:
                    76:4c:1b:27:be:9c:37:ec:0b:3b:2c:fc:0e:74:b3:
                    eb:8c:2b:5c:bd:da:9b:57:0f:92:b0:7a:31:2e:86:
                    5f:38:67:23:9c:9b:e2:b7:79:13:fe:77:ae:36:5b:
                    ea:e8:60:4c:c7:50:38:cc:05:10:32:2d:62:0d:f4:
                    11:64:45:35:20:74:0f:24:27:32:db:01:3a:e7:83:
                    9f:62:5d:7b:cd:03:fa:0e:33:8d:70:6e:48:2b:3f:
                    a9:45:34:ed:1e:fd:89:6c:f3:44:2d:58:71:40:61:
                    e3:61:40:5a:d7:69:f9:ee:3e:e2:1a:69:cf:26:23:
                    3a:a2:a4:18:f5:41:91:e4:a4:37:57:af:32:77:b0:
                    d3:37:5e:1e:6d:49:5f:d3:9e:0b:d4:65:b9:fe:36:
                    b4:74:00:bd:83:15:7c:1b:4f:77:0d:a9:43:de:d7:
                    bc:76:2b:32:79:6f:bc:e9:d8:fb:da:a6:da:55:73:
                    7c:d9:cc:16:6e:aa:bb:f2:8d:5f:16:d1:85:04:7d:
                    a9:6e:27:6d:94:c8:62:ce:63:f3:62:8c:17:5e:54:
                    a0:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:7A:79:77:2F:FD:CD:5E:1C:98:0A:72:D5:8E:BA:62:CE:93:28:19
            X509v3 Authority Key Identifier:
                keyid:24:1D:A0:E2:A6:F4:A4:E7:C8:83:18:57:C6:6C:16:E8:7C:2C:5C:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/81FyMMaErXNwV6L3wgwgFsNePGyajh6D1EoQQidLZ1Pn/0/241DA0E2A6F4A4E7C8831857C66C16E87C2C5C6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/241DA0E2A6F4A4E7C8831857C66C16E87C2C5C6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/81FyMMaErXNwV6L3wgwgFsNePGyajh6D1EoQQidLZ1Pn/0/3230302e3136392e36342e302f32312d3332203d3e203532393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.169.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3c:b4:cb:d6:d2:8c:49:26:e6:67:bb:1d:b6:7e:e6:5b:05:3c:
         0a:4b:4a:bc:41:32:63:b1:29:26:db:73:60:04:26:8a:a4:f0:
         8b:3a:95:92:6c:0b:ec:c0:2d:99:9a:e4:41:15:34:1d:b4:62:
         6b:2e:6e:56:86:ee:a2:4d:fa:4d:c5:81:72:9b:8d:73:12:9f:
         ad:c7:06:2b:09:5b:98:71:16:6a:cc:39:1c:5e:e9:a9:09:70:
         01:50:87:c9:19:94:21:b3:13:3a:eb:9b:96:af:25:95:7a:9a:
         e1:68:7e:63:c0:ab:58:dd:9b:f9:1f:c4:7d:a8:32:0f:27:91:
         f9:f8:fa:65:75:8c:05:57:f9:9e:a4:e0:5d:8f:a3:4e:e5:19:
         e2:74:30:97:3a:58:2c:cd:f6:a6:ee:df:2f:6b:ae:5c:39:e0:
         f3:ef:31:78:ad:40:0f:c1:9f:9f:57:00:6e:bf:ec:67:e8:43:
         06:9c:22:d9:4a:bf:68:26:26:e5:59:ce:44:87:32:8e:85:cb:
         7c:47:19:3f:60:cc:34:9c:28:95:e2:68:35:3a:da:16:06:da:
         9a:3e:46:ec:31:72:3e:b7:99:26:6c:5e:1c:a8:f4:e8:2d:b4:
         35:5d:ab:36:26:d8:74:df:22:5e:80:41:7e:60:5a:5a:b2:ae:
         f8:84:93:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:32:03 2025 by rpki-client