Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3139322e3130382e302f32322d3332203d3e2030.roa
File:                     3230302e3139322e3130382e302f32322d3332203d3e2030.roa (raw, json)
Hash identifier:          w8FKt8c2e8+UY9AVtlcb/cqHL+iAMrZOVJwQ+Okf0+w=
Subject key identifier:   E2:A9:33:2F:DE:9E:67:9F:0C:D3:AE:92:A9:19:08:B8:BE:65:A6:FA
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       24508268A1F883EBB8DF6BB45903B22DF33E8425
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3139322e3130382e302f32322d3332203d3e2030.roa
Signing time:             Mon 17 Mar 2025 17:44:01 +0000
ROA not before:           Mon 17 Mar 2025 17:39:01 +0000
ROA not after:            Mon 16 Mar 2026 17:44:01 +0000
asID:                     0
IP address blocks:        200.192.108.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
                          rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Apr 2025 04:03:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:50:82:68:a1:f8:83:eb:b8:df:6b:b4:59:03:b2:2d:f3:3e:84:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Mar 17 17:39:01 2025 GMT
            Not After : Mar 16 17:44:01 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b7:29:d5:f7:af:6b:f8:38:aa:2c:70:88:88:
                    6c:83:c7:ad:1b:9c:2a:25:96:cc:56:6d:4c:9c:35:
                    a7:b7:50:2b:65:5a:ec:d1:10:7b:17:94:36:7e:80:
                    15:01:0b:12:23:7b:d8:0a:7f:d8:7b:14:ab:e2:e0:
                    34:b1:16:f4:d6:91:9e:82:1f:f0:96:fd:ab:7c:26:
                    e5:fe:26:6c:18:85:b8:07:f3:fe:97:7a:a4:86:d1:
                    10:ab:35:f3:e4:68:a4:37:fe:7d:62:ca:52:5a:b3:
                    d8:bf:48:4f:d5:b4:25:7c:47:e8:e5:36:26:0d:bf:
                    d9:4c:a6:a9:76:44:61:15:8e:6c:8f:69:f8:5d:ca:
                    e0:c4:81:ac:c4:4b:e9:f2:aa:28:bb:1b:96:c6:10:
                    e9:63:0d:a7:70:96:c7:a6:85:7a:36:ed:f8:10:a6:
                    97:0e:44:06:c5:02:5c:f9:a6:ca:a3:ee:47:3f:f1:
                    1d:a9:28:bf:04:08:e9:1d:2b:82:09:44:47:1a:d5:
                    8a:57:f1:90:d9:c7:de:64:bb:1a:5c:07:00:d3:0f:
                    fe:68:b4:44:7c:13:50:73:4c:96:28:5e:11:eb:bf:
                    38:18:99:2a:c8:3f:24:98:62:7f:21:fc:75:d7:bf:
                    ab:14:a4:62:9a:e2:b6:41:cb:ca:65:4b:f0:2f:d8:
                    da:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:A9:33:2F:DE:9E:67:9F:0C:D3:AE:92:A9:19:08:B8:BE:65:A6:FA
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3139322e3130382e302f32322d3332203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.192.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:1b:a4:a3:17:0f:33:ea:db:c5:11:74:9a:bb:cb:b0:6f:92:
         f6:cc:a1:b1:db:a4:a7:03:6f:45:dd:9c:ac:58:1c:0d:12:fb:
         6e:a1:ec:96:c6:4d:2d:3e:19:3c:60:0f:85:ab:40:50:01:60:
         64:47:67:bd:ef:e2:56:ba:9b:93:14:a6:ad:69:05:ee:00:bd:
         4b:6c:b0:e5:73:87:b6:e0:2f:1a:40:13:94:bf:c4:75:8f:6e:
         f8:ee:8a:24:09:54:08:fc:d2:bb:8c:9a:e8:e8:7b:5e:b7:4c:
         a2:ed:a0:34:6e:2b:6b:40:a7:f9:6d:46:aa:26:cf:01:93:4f:
         3d:3c:b7:96:4b:e2:17:bf:5b:ce:f5:1b:de:11:2f:e4:2c:91:
         03:a2:a1:e9:33:2f:3d:9e:89:68:38:82:b8:b3:bb:af:e5:3e:
         98:3e:da:39:11:13:89:3c:92:a7:93:5f:d6:86:8f:ea:2f:23:
         64:91:1f:46:1a:c0:88:8b:51:03:e0:74:14:44:32:9d:c9:e8:
         a6:8e:25:bc:ab:7b:95:39:b9:6d:fe:3d:74:3b:dd:82:08:54:
         1c:b7:20:87:0b:fd:de:3a:0e:a7:d1:33:fa:57:39:a3:00:de:
         bd:d7:3d:47:b6:80:69:c8:aa:1e:ef:6f:c1:15:5f:68:0b:34:
         ab:ad:9f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 14:48:08 2025 by rpki-client