Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3139322e3233322e302f32332d3234203d3e203131323834.roa
File:                     3230302e3139322e3233322e302f32332d3234203d3e203131323834.roa (raw, json)
Hash identifier:          zYXyYkw9+tAstnJrL5zNF9zGHEfAHtU6b4tuL1u3hdI=
Subject key identifier:   9B:81:67:E7:5B:F0:1E:22:AC:70:4B:03:38:78:7E:3C:35:8B:B3:36
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       20147EB325B56EB81A25A6C4C4535432B892033C
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3139322e3233322e302f32332d3234203d3e203131323834.roa
Signing time:             Mon 17 Mar 2025 17:44:01 +0000
ROA not before:           Mon 17 Mar 2025 17:39:01 +0000
ROA not after:            Mon 16 Mar 2026 17:44:01 +0000
asID:                     11284
IP address blocks:        200.192.232.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
                          rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 02:16:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:14:7e:b3:25:b5:6e:b8:1a:25:a6:c4:c4:53:54:32:b8:92:03:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Mar 17 17:39:01 2025 GMT
            Not After : Mar 16 17:44:01 2026 GMT
        Subject: CN=3082010A0282010100C987293FE88A1C36CF24444EEF070F585CC7DA7E72AE152DF959EC7EED6C56B1CF03393AC4E462AABA024312D470798B2CFF900F8E23D29F62044892E367C950FF6A747FCE2181A30A40BFFB290086F7B9CE19BA0FA3BA8E6D462E34D999F9F3D6FAD3432C049210F29BCFD46271DCC71FDF00C5384AF38D9335E1D7CE5BD1F8E71B956D1BA511AD5E1B689C750C9332C81E91FB6C8330817ED137673D1B7D8F42A23BF874306B90E70D0165FB3700A46EF70C8BC1D8E21D6BBD33347C61DBAC9819F3182ACC33CEABF1E28A66E51ACDC04A9F46057D4A6351A1F87C581EA762892CE39D976DC20F80F351F9077C0AD4784C2AFE0463BF5BA63C05777C5BACB50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:87:29:3f:e8:8a:1c:36:cf:24:44:4e:ef:07:
                    0f:58:5c:c7:da:7e:72:ae:15:2d:f9:59:ec:7e:ed:
                    6c:56:b1:cf:03:39:3a:c4:e4:62:aa:ba:02:43:12:
                    d4:70:79:8b:2c:ff:90:0f:8e:23:d2:9f:62:04:48:
                    92:e3:67:c9:50:ff:6a:74:7f:ce:21:81:a3:0a:40:
                    bf:fb:29:00:86:f7:b9:ce:19:ba:0f:a3:ba:8e:6d:
                    46:2e:34:d9:99:f9:f3:d6:fa:d3:43:2c:04:92:10:
                    f2:9b:cf:d4:62:71:dc:c7:1f:df:00:c5:38:4a:f3:
                    8d:93:35:e1:d7:ce:5b:d1:f8:e7:1b:95:6d:1b:a5:
                    11:ad:5e:1b:68:9c:75:0c:93:32:c8:1e:91:fb:6c:
                    83:30:81:7e:d1:37:67:3d:1b:7d:8f:42:a2:3b:f8:
                    74:30:6b:90:e7:0d:01:65:fb:37:00:a4:6e:f7:0c:
                    8b:c1:d8:e2:1d:6b:bd:33:34:7c:61:db:ac:98:19:
                    f3:18:2a:cc:33:ce:ab:f1:e2:8a:66:e5:1a:cd:c0:
                    4a:9f:46:05:7d:4a:63:51:a1:f8:7c:58:1e:a7:62:
                    89:2c:e3:9d:97:6d:c2:0f:80:f3:51:f9:07:7c:0a:
                    d4:78:4c:2a:fe:04:63:bf:5b:a6:3c:05:77:7c:5b:
                    ac:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:81:67:E7:5B:F0:1E:22:AC:70:4B:03:38:78:7E:3C:35:8B:B3:36
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3139322e3233322e302f32332d3234203d3e203131323834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.192.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b9:f1:a4:b9:c4:bd:cf:dc:4d:70:d1:3e:50:68:97:14:20:13:
         74:10:b6:f9:1a:a3:62:c9:7d:a1:8c:4a:8b:e7:59:23:75:46:
         0a:0f:db:f1:09:70:ae:ad:2e:36:de:d0:6d:ed:8c:b3:55:10:
         6d:36:81:c1:83:56:a9:d8:bc:aa:6b:bf:c2:fe:af:fc:30:16:
         9a:9c:7f:c4:78:b1:a2:73:4d:c4:b3:e5:96:2b:14:41:41:20:
         df:1e:13:a2:13:70:d4:8c:68:5a:bd:51:6c:bf:e3:0a:e4:5c:
         83:37:0e:e8:31:42:7e:45:37:83:0e:5d:53:3e:27:3c:4b:fa:
         9a:de:64:c0:a8:93:dc:3a:5d:df:67:52:6d:57:e3:f2:92:2b:
         e0:de:0a:8f:bb:84:46:0c:f6:1c:ba:52:fe:b9:e6:96:a3:5c:
         99:6c:c0:58:bf:dc:08:75:11:ea:3d:b0:77:5a:d7:23:01:63:
         69:56:52:62:63:94:38:8a:31:94:39:b4:46:5d:f4:b5:9f:67:
         ab:d5:de:0a:ab:60:82:71:1c:da:2d:87:5c:ec:24:d3:bc:a8:
         ce:17:75:3c:c7:50:96:e1:90:05:da:91:04:c3:a5:b0:d4:47:
         87:bd:ed:f5:05:c8:66:0f:6a:1e:e6:de:7d:c8:10:14:6d:b3:
         78:7d:af:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:58:54 2025 by rpki-client