Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3231392e3135342e302f32332d3234203d3e203131363434.roa
File:                     3230302e3231392e3135342e302f32332d3234203d3e203131363434.roa (raw, json)
Hash identifier:          cOMhsJ1f3XZZOvuHxiC/Aka2gKJ+u7I7kqA/CMsq3T0=
Subject key identifier:   94:01:9E:A0:85:78:D2:CD:22:65:96:46:09:99:85:3B:9A:71:86:46
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       32CAC7D6CE3E7ECE5149572C065AB5C65F5B7E8D
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3231392e3135342e302f32332d3234203d3e203131363434.roa
Signing time:             Mon 17 Mar 2025 17:44:02 +0000
ROA not before:           Mon 17 Mar 2025 17:39:02 +0000
ROA not after:            Mon 16 Mar 2026 17:44:02 +0000
asID:                     11644
IP address blocks:        200.219.154.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
                          rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 18:32:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:ca:c7:d6:ce:3e:7e:ce:51:49:57:2c:06:5a:b5:c6:5f:5b:7e:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Mar 17 17:39:02 2025 GMT
            Not After : Mar 16 17:44:02 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6a:a8:a1:df:21:9a:c7:e9:53:1b:bb:e6:c9:
                    57:ef:36:99:2a:d8:3e:6a:94:4c:6a:26:55:85:2f:
                    55:ba:1a:2d:4c:4a:2c:97:d0:08:bc:d1:b1:39:8b:
                    f1:68:4a:a5:26:ac:d2:23:de:91:91:b4:ae:8f:f3:
                    3e:7e:7b:c4:56:f4:73:07:35:99:34:6c:78:f3:cb:
                    ad:97:33:45:b7:ad:ad:ce:de:2c:e3:ad:e1:1f:bc:
                    02:8c:be:75:de:92:0f:91:51:b9:24:76:74:d5:61:
                    6e:d2:3b:e0:72:a7:95:e4:02:69:46:32:45:61:4f:
                    c6:49:80:4e:2c:13:14:b2:3c:9f:3c:5c:cb:be:67:
                    8e:0c:14:c3:c6:62:2b:e7:08:d5:4e:82:b4:32:9d:
                    e1:68:2c:ac:5f:aa:a3:8b:e5:c1:a0:a8:72:d3:ad:
                    36:13:be:90:9e:2f:b0:85:ff:19:c2:4b:6e:59:e7:
                    c5:a1:a4:95:45:f5:6d:1d:75:e7:04:ee:8d:d3:54:
                    ae:3c:0f:5c:28:c6:b5:a5:09:93:2f:5a:bc:5e:70:
                    5f:36:c9:96:6a:d0:aa:02:e1:27:16:d3:60:26:7b:
                    32:bc:df:fd:51:57:9a:4d:be:a0:c5:5a:b4:5f:34:
                    cc:9d:e1:6f:64:4c:0c:f7:99:d9:bc:52:5f:6e:5c:
                    c3:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:01:9E:A0:85:78:D2:CD:22:65:96:46:09:99:85:3B:9A:71:86:46
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3231392e3135342e302f32332d3234203d3e203131363434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:b1:ec:c5:bc:5a:31:d1:37:62:3e:ae:42:39:b4:54:4a:bb:
         4a:dd:77:13:68:25:d6:80:a2:42:bc:38:d6:5f:ab:b4:fb:e4:
         ae:b6:09:f7:e8:32:33:9a:bc:df:b0:9b:a2:64:44:bf:d5:c2:
         9c:86:c6:3a:4b:c9:fe:47:dc:9e:17:76:1c:70:54:12:ee:73:
         13:09:5c:4d:1c:b2:97:7c:e2:1b:09:0e:ca:6b:23:06:4b:ce:
         0a:3e:89:90:1b:53:e9:fc:29:e4:1f:e8:19:d3:86:1c:08:65:
         05:2d:dd:e5:c7:16:e5:e7:c0:c5:a9:c1:c8:b7:7e:02:7b:11:
         8b:bf:78:c3:9a:62:3e:a2:31:e0:1d:93:f1:e2:09:6a:3a:19:
         8a:51:8d:9b:03:4d:2f:37:95:f8:52:f1:09:ce:fb:14:42:f9:
         67:37:03:03:ee:6b:be:5b:52:72:ce:03:82:26:67:3b:17:41:
         9f:df:34:26:b3:81:3a:29:1f:9c:a6:e0:77:8d:2a:e8:43:11:
         92:9d:36:22:8a:90:67:41:2d:82:95:6a:4e:58:72:87:91:39:
         eb:05:cb:d4:7b:46:da:1b:ce:ae:ce:89:6b:f0:8c:e2:58:a8:
         f3:93:d5:e2:88:15:9b:ea:57:24:b1:1e:a6:b6:b8:81:f3:9c:
         b6:f8:a5:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 04:58:23 2025 by rpki-client