Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e31372e38332e302f32342d3234203d3e2032373136.roa
File:                     3230302e31372e38332e302f32342d3234203d3e2032373136.roa (raw, json)
Hash identifier:          N+iKl+KzFBdXyVnQ4oyAw9fRajriNfYmUia0433ETJg=
Subject key identifier:   87:E5:B5:BC:FE:80:CC:C5:7A:94:D1:37:86:0F:9D:15:A2:DE:B4:2B
Certificate issuer:       /CN=D54C376960A26972A0B767BDA084048DFFE3673E
Certificate serial:       6A8EB6E4EE60EB7401BB37C5A3FD106552C85EDC
Authority key identifier: D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e31372e38332e302f32342d3234203d3e2032373136.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     2716
IP address blocks:        200.17.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl
                          rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 15 Apr 2025 03:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:8e:b6:e4:ee:60:eb:74:01:bb:37:c5:a3:fd:10:65:52:c8:5e:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D54C376960A26972A0B767BDA084048DFFE3673E
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:02:16:56:df:1b:1f:a2:c2:d2:66:34:3e:ba:
                    3a:ca:ff:41:16:2b:b4:b7:84:85:ee:df:3e:69:8b:
                    05:07:d2:9f:03:fb:0d:ae:33:de:13:64:8d:e6:49:
                    cb:b6:28:97:4b:51:f5:15:b8:3f:d7:2a:13:1e:fb:
                    61:c1:6d:51:1c:fc:46:a3:b3:f5:b5:3f:d9:e3:3b:
                    92:9c:32:df:0b:94:3d:10:25:72:60:4a:75:9b:89:
                    f4:f1:15:07:71:42:e7:03:bf:45:51:4b:99:4f:9d:
                    d4:98:6f:96:b9:f5:24:e6:65:de:a6:54:b4:83:62:
                    47:87:aa:62:a3:f7:6b:62:ff:67:70:4e:1c:09:42:
                    93:8b:24:54:6f:80:2e:cf:46:3c:b2:cd:07:67:8c:
                    54:45:12:57:09:f3:df:11:40:7e:97:53:86:06:b1:
                    13:8f:eb:83:c3:b6:ea:21:a6:3e:35:f4:2d:2f:f2:
                    f5:4b:d3:b8:28:22:16:68:e8:da:fe:ef:f3:32:99:
                    80:10:8c:ca:8e:a4:c2:07:71:7a:65:a7:c5:e8:0c:
                    f1:40:c8:e9:de:14:59:bd:eb:05:45:c7:14:72:3a:
                    a7:53:6f:44:42:a2:6e:ac:97:48:08:19:f9:26:83:
                    c7:83:f5:40:02:c9:22:d6:6a:0c:32:8e:16:16:3a:
                    a1:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:E5:B5:BC:FE:80:CC:C5:7A:94:D1:37:86:0F:9D:15:A2:DE:B4:2B
            X509v3 Authority Key Identifier:
                keyid:D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/3230302e31372e38332e302f32342d3234203d3e2032373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.17.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:27:73:e0:d0:81:0f:b5:e8:cd:b2:24:5f:2b:8f:3e:4f:4c:
         a7:29:3c:51:39:df:d8:98:ff:59:af:4f:e4:d3:74:3a:44:e7:
         df:1e:b9:7d:2e:59:fc:ef:0b:8f:4d:70:5b:ee:33:e2:0d:f5:
         41:8b:cd:44:24:09:69:9d:fc:30:ca:d4:86:a6:d6:47:8e:70:
         4c:1a:f7:5b:74:8e:11:4d:d7:5d:96:cb:0d:c6:68:f8:d3:e9:
         0b:2f:cb:46:93:9f:f1:84:e7:e6:23:3e:02:cf:1f:57:76:a2:
         3a:8b:d9:60:fc:2f:eb:df:cd:77:e4:40:a8:6d:24:b6:76:59:
         6f:5e:c6:40:04:97:b8:dc:2d:cf:f5:41:80:a7:54:02:5d:9d:
         94:e8:db:61:cd:9c:8e:8e:09:19:36:98:7e:49:66:07:96:ea:
         82:ee:af:7d:6b:32:fa:84:00:6f:5f:be:25:0d:37:e2:58:a2:
         7c:4e:12:64:d8:69:18:c1:7a:e2:97:24:ee:a7:f4:0c:b6:d4:
         15:4b:b2:69:d9:ad:2e:55:eb:e6:7d:b2:03:dc:3b:b7:2d:80:
         da:31:7e:e5:69:fe:21:c3:bd:d7:8e:4f:fe:23:8b:ab:d8:49:
         a0:82:11:3f:6d:ba:a7:ad:6f:79:60:20:23:40:f3:52:65:cd:
         65:2d:33:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 14:33:21 2025 by rpki-client