Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9jTpwWLcqbvWx9Q8aBPFXL9jYvGqHboH8MUPR6RhSfeD/0/3230302e37312e39362e302f32322d3234203d3e20323730343533.roa
File:                     3230302e37312e39362e302f32322d3234203d3e20323730343533.roa (raw, json)
Hash identifier:          XIko/oHAiuaIXL8cp4ZaYjvo1p+3o6HC7u/Q2SKZG1U=
Subject key identifier:   9A:6D:2A:43:A6:F6:4F:A2:20:5B:4A:5E:45:13:52:06:95:CB:B5:A5
Certificate issuer:       /CN=4789007660ED3ABF117FD57FE8F1948535ABD806
Certificate serial:       3C83299E116C8B4AACBEB26A752E8D2F696E5B51
Authority key identifier: 47:89:00:76:60:ED:3A:BF:11:7F:D5:7F:E8:F1:94:85:35:AB:D8:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4789007660ED3ABF117FD57FE8F1948535ABD806.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9jTpwWLcqbvWx9Q8aBPFXL9jYvGqHboH8MUPR6RhSfeD/0/3230302e37312e39362e302f32322d3234203d3e20323730343533.roa
Signing time:             Tue 24 Dec 2024 17:41:10 +0000
ROA not before:           Tue 24 Dec 2024 17:36:10 +0000
ROA not after:            Tue 23 Dec 2025 17:41:10 +0000
asID:                     270453
IP address blocks:        200.71.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9jTpwWLcqbvWx9Q8aBPFXL9jYvGqHboH8MUPR6RhSfeD/0/4789007660ED3ABF117FD57FE8F1948535ABD806.crl
                          rsync://rpki-repo.registro.br/repo/9jTpwWLcqbvWx9Q8aBPFXL9jYvGqHboH8MUPR6RhSfeD/0/4789007660ED3ABF117FD57FE8F1948535ABD806.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4789007660ED3ABF117FD57FE8F1948535ABD806.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 13:51:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:83:29:9e:11:6c:8b:4a:ac:be:b2:6a:75:2e:8d:2f:69:6e:5b:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4789007660ED3ABF117FD57FE8F1948535ABD806
        Validity
            Not Before: Dec 24 17:36:10 2024 GMT
            Not After : Dec 23 17:41:10 2025 GMT
        Subject: CN=9A6D2A43A6F64FA2205B4A5E4513520695CBB5A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e1:5d:15:ee:97:b4:ab:3e:bd:24:59:e9:ce:
                    56:ab:59:23:ac:b9:ad:29:36:18:23:5e:7f:4b:45:
                    7f:cb:06:31:30:b3:ac:a4:a1:c0:4b:53:3d:61:38:
                    c8:54:64:d5:ad:1f:bd:58:97:8b:e0:38:1f:85:85:
                    9f:d6:19:87:6a:fa:1d:60:9a:d0:44:f4:a9:88:57:
                    47:04:ff:46:ec:e4:fb:0a:04:17:de:83:3d:4e:29:
                    16:87:85:60:7a:2b:c2:b8:45:3d:59:ca:71:98:d8:
                    63:d3:d8:4e:89:2f:5a:01:f1:04:7e:4d:4e:f7:2d:
                    75:45:62:c6:33:11:d4:2b:6c:a9:ce:3d:07:e5:44:
                    c1:2d:64:4a:60:e1:2d:14:9e:2e:e8:6d:86:ab:d2:
                    a7:b9:f0:8d:f0:a2:e6:b7:c4:43:3f:2d:8d:e5:e1:
                    ab:a6:97:0a:47:1b:89:e5:af:d4:56:6b:3c:b4:41:
                    78:ad:a1:6a:9c:8d:40:e3:9e:66:17:bc:2f:10:cd:
                    c6:19:05:ca:0e:12:25:e1:cf:c2:90:fd:52:7b:d2:
                    40:65:3c:bd:53:0d:bd:e6:20:a3:bc:43:fa:84:4b:
                    38:61:5a:3e:b2:5f:b5:fb:2f:a7:23:43:cd:c7:2e:
                    5f:5c:0a:89:e6:07:47:6d:09:f3:c4:3f:22:1a:29:
                    54:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:6D:2A:43:A6:F6:4F:A2:20:5B:4A:5E:45:13:52:06:95:CB:B5:A5
            X509v3 Authority Key Identifier:
                keyid:47:89:00:76:60:ED:3A:BF:11:7F:D5:7F:E8:F1:94:85:35:AB:D8:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9jTpwWLcqbvWx9Q8aBPFXL9jYvGqHboH8MUPR6RhSfeD/0/4789007660ED3ABF117FD57FE8F1948535ABD806.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4789007660ED3ABF117FD57FE8F1948535ABD806.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9jTpwWLcqbvWx9Q8aBPFXL9jYvGqHboH8MUPR6RhSfeD/0/3230302e37312e39362e302f32322d3234203d3e20323730343533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:e2:c0:c4:b8:7d:73:12:f4:d1:f4:7c:82:9b:19:c6:b2:cb:
         d1:21:18:74:c4:3f:2b:40:fa:ef:62:bf:c4:55:7c:ea:8f:64:
         38:ba:12:8f:70:5e:67:47:47:db:87:6f:27:32:cb:c3:02:59:
         28:81:cc:43:82:e8:99:7b:ce:7f:43:79:4d:a0:5a:ee:26:a9:
         1d:b6:a7:62:7a:12:98:9a:b7:0e:33:be:a3:16:85:18:d6:2e:
         79:ad:85:a4:14:26:07:22:e8:f5:ac:6f:53:58:f0:8f:4d:c6:
         a4:ac:62:18:78:1b:e1:5f:12:89:05:3e:50:57:02:d6:39:71:
         25:20:c7:58:7b:f4:c2:f0:b9:0a:80:33:17:c6:d8:ed:27:9f:
         4e:84:c0:04:f5:72:47:e5:8f:49:10:c9:de:0f:9c:28:a2:b6:
         e2:9f:92:fb:c1:e3:c0:35:73:81:2f:a0:f1:fa:d2:42:6b:58:
         a3:93:80:3e:7c:03:dd:c8:c1:82:70:b1:10:a9:4a:16:02:87:
         98:28:ad:61:5a:51:61:14:1c:13:b1:f4:53:fd:dc:06:4f:dc:
         c5:7a:f4:7d:48:51:ab:2f:19:2f:4e:9c:03:c1:d0:39:92:05:
         a8:39:a5:a2:74:99:50:f5:f7:6f:ac:f9:b2:c6:88:2a:e9:0f:
         69:46:a0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:01:42 2025 by rpki-client