Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2kVLugrRuU74jXmV79YRaADWChuqcwrfwT7NMP1oMjy/1/3230302e35332e38302e302f32322d3234203d3e20323731333635.roa
File:                     3230302e35332e38302e302f32322d3234203d3e20323731333635.roa (raw, json)
Hash identifier:          m21AKTEwaxTzxL9A9GvR/gGR+uMVtqW0EhELAOHx+6I=
Subject key identifier:   E4:C0:CF:7D:F5:B8:98:DE:D0:51:01:5A:DF:6F:97:4A:7D:71:E5:BD
Certificate issuer:       /CN=C757684E22CCEFF79DD9DFFDB7BA53ED8CBE881C
Certificate serial:       1353C4B9CFE01029CF5D0DD9BCDD4A733E29FEDC
Authority key identifier: C7:57:68:4E:22:CC:EF:F7:9D:D9:DF:FD:B7:BA:53:ED:8C:BE:88:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C757684E22CCEFF79DD9DFFDB7BA53ED8CBE881C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2kVLugrRuU74jXmV79YRaADWChuqcwrfwT7NMP1oMjy/1/3230302e35332e38302e302f32322d3234203d3e20323731333635.roa
Signing time:             Fri 07 Mar 2025 01:03:59 +0000
ROA not before:           Fri 07 Mar 2025 00:58:59 +0000
ROA not after:            Fri 06 Mar 2026 01:03:59 +0000
asID:                     271365
IP address blocks:        200.53.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2kVLugrRuU74jXmV79YRaADWChuqcwrfwT7NMP1oMjy/1/C757684E22CCEFF79DD9DFFDB7BA53ED8CBE881C.crl
                          rsync://rpki-repo.registro.br/repo/A2kVLugrRuU74jXmV79YRaADWChuqcwrfwT7NMP1oMjy/1/C757684E22CCEFF79DD9DFFDB7BA53ED8CBE881C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C757684E22CCEFF79DD9DFFDB7BA53ED8CBE881C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 01:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:53:c4:b9:cf:e0:10:29:cf:5d:0d:d9:bc:dd:4a:73:3e:29:fe:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C757684E22CCEFF79DD9DFFDB7BA53ED8CBE881C
        Validity
            Not Before: Mar  7 00:58:59 2025 GMT
            Not After : Mar  6 01:03:59 2026 GMT
        Subject: CN=E4C0CF7DF5B898DED051015ADF6F974A7D71E5BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0d:4d:90:21:cc:e8:37:e4:6c:6c:84:0a:f6:
                    4f:4f:65:dd:6d:c4:87:f9:c0:d1:d5:31:e9:9d:1e:
                    b6:1b:0e:53:61:cb:65:0a:7e:d5:ca:88:91:ea:19:
                    bf:13:fd:95:0d:37:d1:46:17:45:fa:06:91:0b:f9:
                    35:8d:cc:14:a5:af:89:35:e1:1b:5d:38:f1:85:a9:
                    91:74:6d:a8:fe:62:76:dd:9d:23:16:6a:3d:37:fa:
                    cc:e8:4a:de:f8:0d:91:cd:f1:c6:1a:a0:d4:8c:af:
                    7a:38:0c:88:64:b2:77:2f:3e:75:7b:5d:a2:20:70:
                    60:c1:75:6d:3c:3d:b1:9b:ee:25:79:c9:2a:7e:a1:
                    74:a6:bb:2f:ed:b4:37:d2:10:5b:f2:7c:68:08:6f:
                    8a:6f:6b:d0:a2:db:1a:d8:44:7a:06:19:c9:d3:1f:
                    e9:81:98:56:ae:f2:ae:e8:cf:a6:ac:7f:07:d2:28:
                    9f:4d:b4:fc:44:94:92:5b:6f:55:2c:4b:69:6d:3b:
                    57:88:bd:77:fc:c1:5e:45:e3:43:53:8f:48:5c:43:
                    26:8f:60:03:bc:33:ff:3e:95:79:4f:cf:f9:14:67:
                    e8:c7:b2:5c:00:ec:a3:78:d9:a5:22:27:3b:29:04:
                    1a:0c:e4:96:d9:81:4b:26:ea:53:1f:73:40:07:58:
                    a4:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:C0:CF:7D:F5:B8:98:DE:D0:51:01:5A:DF:6F:97:4A:7D:71:E5:BD
            X509v3 Authority Key Identifier:
                keyid:C7:57:68:4E:22:CC:EF:F7:9D:D9:DF:FD:B7:BA:53:ED:8C:BE:88:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2kVLugrRuU74jXmV79YRaADWChuqcwrfwT7NMP1oMjy/1/C757684E22CCEFF79DD9DFFDB7BA53ED8CBE881C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C757684E22CCEFF79DD9DFFDB7BA53ED8CBE881C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2kVLugrRuU74jXmV79YRaADWChuqcwrfwT7NMP1oMjy/1/3230302e35332e38302e302f32322d3234203d3e20323731333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:e4:00:60:72:36:bb:d0:dd:ca:2b:1a:b1:e5:56:13:2b:55:
         86:db:a8:9a:c4:11:87:55:fd:2f:cc:37:4f:08:1c:49:c8:4a:
         44:c1:ab:f9:eb:c3:1b:6d:c5:ac:f2:b8:a0:7c:af:2b:2c:8d:
         1e:0f:db:de:c2:7a:a0:70:d3:a6:d4:81:88:e5:46:84:3c:95:
         22:cc:9c:1f:40:35:94:5e:90:7d:1b:0b:89:d3:f0:1d:c5:09:
         6b:9d:f8:30:c7:aa:ff:15:ce:51:5b:02:89:89:8e:5e:55:42:
         46:56:91:a8:b2:1e:15:e7:fb:88:0a:18:fa:8d:74:1a:17:d2:
         36:34:ae:6a:6a:3a:5b:5d:bb:23:0d:ba:bf:f0:91:8b:3b:dd:
         41:cb:28:35:79:b8:63:9d:b5:ce:41:a3:c7:34:c6:40:f2:99:
         f7:47:a6:98:48:8a:6f:82:ee:72:73:d6:a1:c4:ea:17:c6:dc:
         f9:ad:4d:a4:be:51:e3:ea:34:9f:81:e4:71:fa:31:57:c2:f1:
         6e:de:0c:b1:82:3e:42:93:dc:3d:cf:07:ae:8b:4b:32:6a:1c:
         58:cb:09:df:06:c5:e3:d9:27:02:a8:2e:eb:69:cb:0a:45:8e:
         8d:25:e9:e6:9e:6f:4b:80:cc:e7:14:90:37:d0:44:7f:3c:63:
         b0:d9:ad:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 08:08:07 2025 by rpki-client