Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3231392e3135342e302f32332d3234203d3e203131343331.roa
File:                     3230302e3231392e3135342e302f32332d3234203d3e203131343331.roa (raw, json)
Hash identifier:          8mP8CXxgxIfrQI9CbaIxakIuNkCB1nhO1vkfUBB+BUo=
Subject key identifier:   CD:F0:77:A6:14:13:C9:C2:3B:FE:EA:66:2F:37:82:76:C4:10:F1:58
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       0E60C34F7CAD0C1A7DFAE279BAA37E448B7DCBB6
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3231392e3135342e302f32332d3234203d3e203131343331.roa
Signing time:             Mon 17 Mar 2025 17:44:02 +0000
ROA not before:           Mon 17 Mar 2025 17:39:02 +0000
ROA not after:            Mon 16 Mar 2026 17:44:02 +0000
asID:                     11431
IP address blocks:        200.219.154.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
                          rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 02:16:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:60:c3:4f:7c:ad:0c:1a:7d:fa:e2:79:ba:a3:7e:44:8b:7d:cb:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Mar 17 17:39:02 2025 GMT
            Not After : Mar 16 17:44:02 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5d:83:5a:fa:f1:94:58:a8:58:ae:32:a2:c9:
                    2e:78:74:1b:0c:e2:0a:e5:4e:39:22:d0:1b:8c:e8:
                    f8:42:42:ad:80:dd:38:30:ed:0c:75:5b:0f:f9:d6:
                    9d:b4:16:67:20:62:94:51:6a:79:b7:cc:f3:2a:84:
                    5b:f5:5c:c0:05:29:4e:30:9c:bd:29:46:83:13:25:
                    92:97:dc:00:7b:f9:49:b6:6b:73:a3:f2:cc:ea:f8:
                    ad:06:be:d0:07:1f:56:bb:3e:46:66:3c:f4:9d:48:
                    53:36:ae:fd:b7:0a:56:8e:06:71:5d:68:45:31:a8:
                    b3:e2:ed:33:7b:8f:d5:bd:32:c6:ec:d7:a8:df:1b:
                    c4:2f:4e:bc:73:1f:90:2b:64:3c:5e:f8:53:2f:94:
                    96:b6:f9:71:48:7a:ca:7b:e6:69:88:79:73:93:84:
                    ca:49:90:f3:b7:6c:b6:1c:ea:61:68:9b:af:60:6d:
                    db:86:a4:e0:e5:3f:62:93:3b:30:bf:3c:67:1a:be:
                    b7:c8:04:3b:ed:f0:8f:07:cf:91:cc:a0:7a:87:36:
                    ec:0f:36:36:ed:d4:c2:6e:b4:b8:51:fc:5c:91:a8:
                    55:12:04:ee:02:02:9a:5b:1a:c4:79:a9:dc:50:e4:
                    57:69:bc:7d:ab:5e:04:57:0a:24:45:e8:e7:54:0c:
                    10:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:F0:77:A6:14:13:C9:C2:3B:FE:EA:66:2F:37:82:76:C4:10:F1:58
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3231392e3135342e302f32332d3234203d3e203131343331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:b9:7f:34:4d:e5:90:e0:0a:e2:cd:15:4a:1a:3f:40:29:a5:
         08:25:39:a3:c1:52:94:aa:36:17:de:c2:19:34:5d:31:4d:27:
         47:ad:47:0b:11:62:87:82:98:ae:45:22:3e:b5:1d:8c:34:9a:
         8f:26:b1:f9:61:90:25:19:77:32:e5:a6:a8:4c:8c:d1:cd:8e:
         e9:95:3b:4a:79:6f:a6:24:d4:a1:a6:d7:15:7e:19:6a:59:19:
         d7:9d:8b:cf:65:13:a8:3a:80:49:54:7f:02:31:1b:a6:7b:83:
         cd:ea:ce:9c:40:57:fe:ff:96:fa:04:f8:3f:05:b7:7d:2f:63:
         e9:03:0e:1f:ef:a8:41:4e:4f:7c:7c:72:3f:f1:fa:51:57:a5:
         79:bc:7a:40:42:5c:67:b0:0a:ab:52:97:bc:55:55:ff:96:52:
         f2:8c:78:f2:c6:56:f1:c6:42:9b:d2:f0:48:ac:44:77:ca:45:
         1c:5a:97:18:64:a9:d0:60:5d:70:78:a1:0d:ff:60:d0:b7:d6:
         18:e3:a2:16:6e:c3:fe:20:83:4f:fe:cc:3d:3a:4e:14:b6:35:
         48:d6:f1:35:70:9d:15:75:4f:d8:31:23:51:b4:bd:f3:50:6c:
         51:28:bb:bf:8e:b8:25:3b:b8:eb:eb:36:9a:1d:6f:85:b6:1d:
         a3:7f:bc:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:23:35 2025 by rpki-client