Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3231392e3134342e302f32322d3332203d3e2030.roa
File:                     3230302e3231392e3134342e302f32322d3332203d3e2030.roa (raw, json)
Hash identifier:          IgjaU+uogfQvvQoVPPdDouFl7ZWZgDbJ8TD0fmiTUbM=
Subject key identifier:   7A:74:32:A6:7A:D3:A4:0B:BB:1A:38:0D:FE:74:AE:DC:FE:85:38:1F
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       5D49EC8F4BFF598F8A09251F49D5CC8892F5AE78
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3231392e3134342e302f32322d3332203d3e2030.roa
Signing time:             Mon 17 Mar 2025 17:44:00 +0000
ROA not before:           Mon 17 Mar 2025 17:39:00 +0000
ROA not after:            Mon 16 Mar 2026 17:44:00 +0000
asID:                     0
IP address blocks:        200.219.144.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
                          rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 02:16:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:49:ec:8f:4b:ff:59:8f:8a:09:25:1f:49:d5:cc:88:92:f5:ae:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Mar 17 17:39:00 2025 GMT
            Not After : Mar 16 17:44:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:14:3b:b2:17:8c:43:f2:14:8e:ee:83:a8:d4:
                    2c:4d:ee:5f:14:81:f6:4a:24:3c:c2:40:81:18:89:
                    23:af:28:92:a8:75:81:9c:db:85:c9:0b:69:8c:8d:
                    70:fd:af:b4:63:97:1e:1d:23:a2:8b:17:09:f9:6a:
                    68:e8:ba:85:f1:6d:73:d4:77:81:b2:d0:1b:dd:68:
                    81:cf:73:ce:f9:75:4d:d9:41:ab:21:ba:e4:38:0a:
                    2e:a8:47:36:7b:ad:2e:89:88:65:2c:1e:f4:d6:e5:
                    b7:f2:d0:9f:38:48:19:1d:6c:d4:2d:2d:03:16:16:
                    44:e8:aa:0b:2a:ca:a0:04:51:f7:b4:26:ca:6d:80:
                    b6:27:c6:8f:0f:b4:1b:dc:bf:13:0a:c3:fb:a3:99:
                    71:8a:75:31:5b:48:67:32:7b:b8:cf:b2:84:da:a3:
                    9f:f1:38:fe:54:00:6a:97:f1:23:c4:42:33:6d:fb:
                    68:48:ed:19:9a:de:e7:d4:ca:18:38:f3:87:b0:24:
                    92:93:c1:fa:69:2d:f2:57:96:34:19:f6:db:e5:9e:
                    b2:5b:7f:6b:22:3c:5a:6c:d5:2d:0c:a9:f0:35:b2:
                    aa:f5:0b:1c:28:e9:80:97:d9:e1:7d:0d:54:02:92:
                    65:fd:f3:6f:43:49:4b:a5:b2:72:22:2a:d0:62:77:
                    b8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:74:32:A6:7A:D3:A4:0B:BB:1A:38:0D:FE:74:AE:DC:FE:85:38:1F
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3231392e3134342e302f32322d3332203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:c8:94:ae:09:df:86:5d:5a:5b:67:f4:b8:26:22:4b:82:57:
         fd:ce:d9:da:67:8d:1f:d4:03:bb:f2:f5:e4:dd:b5:ec:d8:dc:
         24:97:5d:40:4a:e4:9d:b6:21:cb:f9:10:4c:2b:03:6b:99:1a:
         55:94:e9:fa:00:2f:ff:76:80:53:b1:52:89:13:d3:ff:72:ad:
         d5:74:93:9c:47:a5:34:4b:85:7e:ee:37:5c:0c:9f:2b:ca:06:
         45:b3:3f:9b:8e:f0:5b:9a:d5:9b:9a:0d:67:f8:d4:21:7c:cd:
         9b:c2:9c:b1:6a:4f:62:24:b3:0b:2b:18:db:b0:78:a4:26:a4:
         45:2d:6f:bb:09:c3:46:77:11:e7:0e:56:42:66:95:a6:ae:08:
         fe:62:d5:d7:33:02:21:3e:dd:b9:da:1d:f3:b2:32:d7:2a:d7:
         f6:50:79:24:a1:1e:6d:14:82:3d:39:8f:3c:bb:66:e4:56:54:
         8e:84:3a:85:03:fc:3c:22:20:d2:59:67:ad:3f:f4:c5:f2:6b:
         8d:40:23:67:d1:49:56:33:00:4c:db:56:a3:5f:96:38:30:e0:
         32:b8:67:95:7b:3d:7a:1a:a1:15:8c:ea:b1:b3:6c:9b:6d:f4:
         38:da:d8:9d:86:7c:50:ca:55:85:77:37:90:45:d2:c1:0a:c5:
         91:2f:7d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:52:19 2025 by rpki-client