Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/3230302e3135302e3136302e302f32322d3332203d3e203232333831.roa
File:                     3230302e3135302e3136302e302f32322d3332203d3e203232333831.roa (raw, json)
Hash identifier:          Z+cx0g+I+SaNUfGIShoGbOJpN1jV36T/ldm3UyM4aqg=
Subject key identifier:   C2:E7:C9:A3:CF:87:13:46:40:A3:87:F6:0C:33:74:96:8A:B7:F7:0A
Certificate issuer:       /CN=193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC
Certificate serial:       786958FB3F44BCAD668CD8ED10F8B8E84975940D
Authority key identifier: 19:34:32:16:7D:7C:BA:FA:4E:5D:DE:04:01:9A:8E:57:DE:FE:0A:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/3230302e3135302e3136302e302f32322d3332203d3e203232333831.roa
Signing time:             Fri 07 Mar 2025 19:06:10 +0000
ROA not before:           Fri 07 Mar 2025 19:01:10 +0000
ROA not after:            Fri 06 Mar 2026 19:06:10 +0000
asID:                     22381
IP address blocks:        200.150.160.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.crl
                          rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 10:53:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:69:58:fb:3f:44:bc:ad:66:8c:d8:ed:10:f8:b8:e8:49:75:94:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC
        Validity
            Not Before: Mar  7 19:01:10 2025 GMT
            Not After : Mar  6 19:06:10 2026 GMT
        Subject: CN=C2E7C9A3CF87134640A387F60C3374968AB7F70A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e5:1f:16:39:2e:7a:8c:9a:84:b3:e1:c0:a2:
                    f4:f7:8d:5e:ef:94:72:2d:1f:13:5e:b9:bd:64:1e:
                    b2:bf:d5:d3:49:94:36:c2:60:61:0f:92:7a:6c:2a:
                    25:b4:68:6a:78:67:c3:c9:0b:40:94:b7:cf:61:46:
                    a9:54:08:67:d9:72:e9:da:80:88:70:e7:ad:c9:be:
                    7c:1c:e0:34:a1:48:29:e0:9e:93:cf:40:55:06:93:
                    cd:3e:06:9a:a8:f0:67:48:a5:85:7f:51:d0:9b:32:
                    c5:20:d3:bb:6c:59:e9:2e:fc:ff:e1:65:63:11:dc:
                    28:94:12:0b:cc:a8:d1:8f:b5:bf:8c:aa:10:05:40:
                    ea:41:cc:ea:b1:db:fe:80:f1:9e:d8:7d:f1:89:41:
                    98:81:d4:47:39:73:02:d1:8d:a8:46:d9:7a:70:ae:
                    4b:92:6d:62:1e:8f:77:ed:71:dd:76:de:61:ec:1a:
                    1f:02:96:16:01:96:3d:59:ce:15:69:a1:8f:2a:b9:
                    56:a1:b5:de:84:8a:cd:49:02:5c:ed:f9:b0:18:2d:
                    8e:2c:8a:fb:d9:bd:d9:b6:74:dd:7f:af:f1:23:2f:
                    4a:08:12:ed:ec:c9:ef:9e:03:13:95:ed:d0:f6:ac:
                    8d:6f:fe:19:6a:a2:11:0c:c2:a0:86:df:6b:8a:15:
                    92:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:E7:C9:A3:CF:87:13:46:40:A3:87:F6:0C:33:74:96:8A:B7:F7:0A
            X509v3 Authority Key Identifier:
                keyid:19:34:32:16:7D:7C:BA:FA:4E:5D:DE:04:01:9A:8E:57:DE:FE:0A:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/3230302e3135302e3136302e302f32322d3332203d3e203232333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.150.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:67:3e:5a:c5:e0:62:4c:47:3e:d8:67:99:20:68:47:2a:f4:
         75:a7:26:dd:d6:78:fa:25:75:bd:34:92:eb:80:87:71:99:f2:
         38:3c:43:26:e5:87:6c:e8:7b:d7:29:c6:c7:60:08:f0:7e:77:
         37:fd:68:44:33:48:b6:93:3b:38:74:2e:9c:ac:11:25:d4:4b:
         34:8e:d2:4c:b9:47:7c:d3:f2:28:47:13:3e:cd:e4:b8:03:b8:
         5b:19:d0:9f:6d:6a:93:2c:8f:56:2f:b8:fa:06:41:46:c6:3f:
         22:87:5d:0d:0d:32:b4:b8:ca:04:44:bc:7b:b4:f4:ca:1d:64:
         f9:7c:cb:73:02:1e:20:fe:51:08:13:ca:15:b0:9d:d8:43:1a:
         9d:8a:56:ac:e9:33:fb:fa:a8:8c:b8:ef:d1:62:05:42:24:f1:
         a8:f8:bd:51:bb:d8:56:ee:0e:68:c6:9d:5a:90:a6:dd:cf:71:
         42:64:d5:e8:9b:36:ad:50:c8:cd:de:9b:d9:f4:70:02:a2:88:
         1d:95:e7:c7:a1:4d:2e:fa:de:0c:8c:98:af:ea:0a:c6:29:1a:
         98:c3:73:a9:5d:0e:c0:ee:57:33:7d:a0:a3:ab:f8:e9:f1:5d:
         a3:17:d8:8a:ae:c8:6b:83:e6:7b:97:0b:92:fb:17:94:d5:bb:
         82:37:a8:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:44:00 2025 by rpki-client