Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3231392e3133382e302f32332d3332203d3e2030.roa
File:                     3230302e3231392e3133382e302f32332d3332203d3e2030.roa (raw, json)
Hash identifier:          uii4OLp1CKJTouqMLOCw4WqKElG/vy3Oa5mLJCtMWVQ=
Subject key identifier:   E2:1C:5B:85:C7:A0:2C:58:98:A5:88:D9:61:45:36:F1:88:AA:5D:03
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       5CF8EE173201BE9FAC6D56AEC95FAC87F1576ECF
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3231392e3133382e302f32332d3332203d3e2030.roa
Signing time:             Mon 17 Mar 2025 17:44:02 +0000
ROA not before:           Mon 17 Mar 2025 17:39:02 +0000
ROA not after:            Mon 16 Mar 2026 17:44:02 +0000
asID:                     0
IP address blocks:        200.219.138.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
                          rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 02:16:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:f8:ee:17:32:01:be:9f:ac:6d:56:ae:c9:5f:ac:87:f1:57:6e:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Mar 17 17:39:02 2025 GMT
            Not After : Mar 16 17:44:02 2026 GMT
        Subject: CN=3082010A0282010100C77FED71163FE69A52053C85BEFB1EF054295E497773EB889903B728AFC4300705822498B8F0170A74A415F4B34314ED43DBC1BBCCD350757853203A835B5B0D3A7CBAEA25640E1F34037B181EE92B79EAC9515C650E46929E8C1377AA40D486155098E2C53554D77B9D5AFE7D08F28BF286193ABBD7337076F50D6ADEFEDB4F6F1DCC1F5B368706BC970C5FDDC2E983CFC83090D00C7CFC2EE55F5D59841FB421A9372CFA74ECCC8B121EDA844B381817598AF936E96F4862C732040E187E25C1BCC87123CD00920A26786747D2062985F99D14DD89DFCEC7567D75BAA08418FE00A5E6359D8882A3CC285333F07AC49585837073E895426AE0FF171E57F9630203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7f:ed:71:16:3f:e6:9a:52:05:3c:85:be:fb:
                    1e:f0:54:29:5e:49:77:73:eb:88:99:03:b7:28:af:
                    c4:30:07:05:82:24:98:b8:f0:17:0a:74:a4:15:f4:
                    b3:43:14:ed:43:db:c1:bb:cc:d3:50:75:78:53:20:
                    3a:83:5b:5b:0d:3a:7c:ba:ea:25:64:0e:1f:34:03:
                    7b:18:1e:e9:2b:79:ea:c9:51:5c:65:0e:46:92:9e:
                    8c:13:77:aa:40:d4:86:15:50:98:e2:c5:35:54:d7:
                    7b:9d:5a:fe:7d:08:f2:8b:f2:86:19:3a:bb:d7:33:
                    70:76:f5:0d:6a:de:fe:db:4f:6f:1d:cc:1f:5b:36:
                    87:06:bc:97:0c:5f:dd:c2:e9:83:cf:c8:30:90:d0:
                    0c:7c:fc:2e:e5:5f:5d:59:84:1f:b4:21:a9:37:2c:
                    fa:74:ec:cc:8b:12:1e:da:84:4b:38:18:17:59:8a:
                    f9:36:e9:6f:48:62:c7:32:04:0e:18:7e:25:c1:bc:
                    c8:71:23:cd:00:92:0a:26:78:67:47:d2:06:29:85:
                    f9:9d:14:dd:89:df:ce:c7:56:7d:75:ba:a0:84:18:
                    fe:00:a5:e6:35:9d:88:82:a3:cc:28:53:33:f0:7a:
                    c4:95:85:83:70:73:e8:95:42:6a:e0:ff:17:1e:57:
                    f9:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:1C:5B:85:C7:A0:2C:58:98:A5:88:D9:61:45:36:F1:88:AA:5D:03
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3231392e3133382e302f32332d3332203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a3:a2:d0:24:ad:f5:8c:f2:8f:ac:3f:36:2b:90:3d:4d:30:02:
         b8:50:8e:c8:c5:0b:62:6b:ed:c5:59:f1:f1:42:c0:2d:9d:23:
         59:82:f9:3c:cf:1c:77:18:f5:67:6c:a7:66:97:4c:61:c8:75:
         ad:12:33:50:2b:55:66:a4:23:32:1a:7f:7f:b3:c0:47:b9:e1:
         f0:e8:ad:0f:d3:fd:01:cc:d7:38:bf:33:33:63:38:13:6a:7c:
         86:81:10:65:ff:35:f4:f6:b7:3e:7a:cf:76:b3:f0:c3:dd:ca:
         4b:8a:67:9c:4c:b5:d7:e8:19:1c:c0:14:6e:0d:52:47:66:5e:
         cb:da:c0:be:97:3b:83:6b:f3:2b:3d:34:70:f8:9b:20:9d:74:
         34:05:f5:5e:4e:99:eb:78:2f:91:70:ef:c0:c7:b3:ee:8b:9b:
         f7:26:b6:ca:2e:44:66:cd:77:58:f7:31:f5:a5:5f:ab:08:c4:
         b5:6d:94:12:e8:47:8d:12:e9:a4:ae:c1:b1:10:31:d2:a2:76:
         d0:a8:0e:de:95:f0:f6:57:2e:5d:ec:5b:5a:78:ad:70:69:11:
         36:4d:99:99:36:9d:ce:94:dd:c9:c6:82:88:85:f8:77:a8:e8:
         dc:9c:7b:ff:5f:72:be:29:3e:d5:4e:93:f5:dd:09:80:aa:a6:
         01:c7:c9:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:52:15 2025 by rpki-client