Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3231392e3134382e302f3234203d3e203533303335.roa
File:                     3230302e3231392e3134382e302f3234203d3e203533303335.roa (raw, json)
Hash identifier:          ++Z9CTco5yf3m6NqSyWYeMHXqJknccClEjSHE2vFoyM=
Subject key identifier:   28:6A:5D:7B:13:F4:D0:BA:DD:3D:AD:54:0E:CF:15:74:C7:06:39:90
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       2A9117A46F70022D294312F74F9B5C2F9F87DEB1
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3231392e3134382e302f3234203d3e203533303335.roa
Signing time:             Mon 17 Mar 2025 17:44:00 +0000
ROA not before:           Mon 17 Mar 2025 17:39:00 +0000
ROA not after:            Mon 16 Mar 2026 17:44:00 +0000
asID:                     53035
IP address blocks:        200.219.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
                          rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 02:16:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:91:17:a4:6f:70:02:2d:29:43:12:f7:4f:9b:5c:2f:9f:87:de:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Mar 17 17:39:00 2025 GMT
            Not After : Mar 16 17:44:00 2026 GMT
        Subject: CN=3082010A0282010100A4EDEDBB13B9F1BA55E2EE0CD76C654A496231AD331762511DC57E2785AD876DC0A3E69038D544E3E3AA9FA2FE2E9BB082B4C1B455F86CFDE52A0A988B7C43308216D8A67D3E3D6B1DD81C1DE21FC65365E9911ED54399D1923484CD1677A897AC467C6F770E8BBA2835FD5DA04C121DD2DAA509FF8770B971B2927DD12B19BADA96E78DC3BE45A5AC95407C6A578C4431582C6EFB105862B74DFE9A9E036E8786A3B05465E42642516BABF84BC585FDFF61931F1AD1BBF0571161D2F879CFD635469400DCAE90D67CAEA01194ACA395CEA605F7C242FC35A9A0932B660FFCF3A10D259585D6473D97FC41A78003E01EA4EB099FB754B0B588E4E2F808D73E410203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ed:ed:bb:13:b9:f1:ba:55:e2:ee:0c:d7:6c:
                    65:4a:49:62:31:ad:33:17:62:51:1d:c5:7e:27:85:
                    ad:87:6d:c0:a3:e6:90:38:d5:44:e3:e3:aa:9f:a2:
                    fe:2e:9b:b0:82:b4:c1:b4:55:f8:6c:fd:e5:2a:0a:
                    98:8b:7c:43:30:82:16:d8:a6:7d:3e:3d:6b:1d:d8:
                    1c:1d:e2:1f:c6:53:65:e9:91:1e:d5:43:99:d1:92:
                    34:84:cd:16:77:a8:97:ac:46:7c:6f:77:0e:8b:ba:
                    28:35:fd:5d:a0:4c:12:1d:d2:da:a5:09:ff:87:70:
                    b9:71:b2:92:7d:d1:2b:19:ba:da:96:e7:8d:c3:be:
                    45:a5:ac:95:40:7c:6a:57:8c:44:31:58:2c:6e:fb:
                    10:58:62:b7:4d:fe:9a:9e:03:6e:87:86:a3:b0:54:
                    65:e4:26:42:51:6b:ab:f8:4b:c5:85:fd:ff:61:93:
                    1f:1a:d1:bb:f0:57:11:61:d2:f8:79:cf:d6:35:46:
                    94:00:dc:ae:90:d6:7c:ae:a0:11:94:ac:a3:95:ce:
                    a6:05:f7:c2:42:fc:35:a9:a0:93:2b:66:0f:fc:f3:
                    a1:0d:25:95:85:d6:47:3d:97:fc:41:a7:80:03:e0:
                    1e:a4:eb:09:9f:b7:54:b0:b5:88:e4:e2:f8:08:d7:
                    3e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:6A:5D:7B:13:F4:D0:BA:DD:3D:AD:54:0E:CF:15:74:C7:06:39:90
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3231392e3134382e302f3234203d3e203533303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:ef:2d:83:46:1a:e8:e5:ad:67:de:2f:70:d3:b4:25:f2:ff:
         87:89:59:89:ce:60:97:39:60:ad:9b:18:dd:70:50:53:b6:e0:
         f6:34:6c:72:ae:0c:e4:7c:df:f3:4d:79:08:85:50:43:99:14:
         d7:94:d6:42:80:66:35:c2:70:04:bf:b6:27:18:4f:00:6f:6c:
         ab:65:db:7e:28:c1:4c:07:5b:70:0e:3c:66:42:f3:bc:02:c4:
         47:f6:c8:87:0f:6e:25:72:5d:ff:10:f7:84:f8:0b:7d:09:dc:
         23:e3:26:8a:a8:5a:4a:a6:9b:85:72:17:d1:71:17:74:b8:41:
         21:e4:0d:f5:c3:1d:6e:26:51:ae:56:8c:71:60:b8:d8:3f:59:
         6d:05:92:00:65:6f:b2:d2:29:94:c7:2c:7c:61:4a:fd:40:97:
         b0:74:a5:be:5c:76:85:5b:c2:18:b3:9b:15:22:46:fe:d7:79:
         ca:dd:5a:a7:72:c0:4b:68:d6:4c:3d:a3:b2:be:57:0f:71:e0:
         37:ce:83:65:2b:db:9f:94:be:5b:ae:06:6e:84:4b:6a:fa:cb:
         4c:55:d8:f5:7f:05:48:96:bf:95:fa:14:df:d8:d1:42:ea:93:
         61:eb:1d:1f:ed:b6:0c:88:57:cf:96:1a:8f:0a:8b:32:91:36:
         1d:d6:d8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:58:47 2025 by rpki-client