Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3231392e3135342e302f32332d3234203d3e203238333435.roa
File:                     3230302e3231392e3135342e302f32332d3234203d3e203238333435.roa (raw, json)
Hash identifier:          tGXQoB6QxibqzrwMOBkH7rnpm4auy4LR+1raclKliZE=
Subject key identifier:   AB:95:92:98:DB:02:F0:A1:E9:EC:9C:ED:DB:3B:57:01:E5:5F:C4:7E
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       6CB74E48A6C32F2329924012AC5B723798F49BDE
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3231392e3135342e302f32332d3234203d3e203238333435.roa
Signing time:             Mon 17 Mar 2025 17:44:03 +0000
ROA not before:           Mon 17 Mar 2025 17:39:03 +0000
ROA not after:            Mon 16 Mar 2026 17:44:03 +0000
asID:                     28345
IP address blocks:        200.219.154.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
                          rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 02:16:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:b7:4e:48:a6:c3:2f:23:29:92:40:12:ac:5b:72:37:98:f4:9b:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Mar 17 17:39:03 2025 GMT
            Not After : Mar 16 17:44:03 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:e3:5e:33:d2:c5:0a:40:e6:04:dd:0c:aa:e0:
                    95:6c:79:77:33:5a:f6:14:e0:83:ed:8c:36:ea:b8:
                    af:bb:73:d0:0a:66:92:95:b7:c6:cd:68:7a:9c:31:
                    f7:6c:2b:ab:bd:c7:0f:31:8d:ad:d3:af:9c:dc:28:
                    6e:92:db:7a:ae:49:b1:d7:93:98:c1:4f:eb:f8:bd:
                    82:7b:2a:a3:09:e5:39:2f:83:ba:88:87:bd:14:2c:
                    b7:c9:1a:bd:8a:81:be:f7:8d:41:8b:e4:2e:bd:27:
                    8b:03:c4:45:d1:27:7e:d5:79:03:23:c3:fd:c1:d6:
                    25:0d:c9:f7:68:88:05:8d:e0:b6:a9:1d:ef:74:6e:
                    b2:c9:0f:a7:69:c3:11:f3:14:3d:4c:e3:34:b6:b6:
                    8b:80:f4:09:0b:f9:19:e0:e6:b4:5a:e4:8a:da:48:
                    e3:74:a2:4d:fa:68:03:e9:65:e6:8c:ca:3b:6c:eb:
                    10:85:c1:a0:4b:00:a9:09:d8:9c:60:b2:7f:40:24:
                    56:7c:36:7b:19:a9:e9:97:85:eb:86:24:e9:3d:32:
                    0d:6d:ba:62:bc:5b:65:1d:46:c5:93:16:e9:38:b1:
                    4b:10:0e:30:37:6d:ae:0f:e2:29:71:98:6c:db:8f:
                    7d:5c:2f:05:0f:06:7e:df:ad:ef:fc:53:74:da:5f:
                    49:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:95:92:98:DB:02:F0:A1:E9:EC:9C:ED:DB:3B:57:01:E5:5F:C4:7E
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3231392e3135342e302f32332d3234203d3e203238333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:7e:55:05:34:d1:e9:47:8f:21:ad:30:8f:53:a9:3b:7d:c8:
         0f:f8:91:15:81:c0:0c:9b:e6:22:6a:8e:10:64:79:5a:c2:41:
         13:92:63:e3:a1:7f:cf:e2:66:7e:d7:c9:63:fa:2b:57:e2:e3:
         39:08:b2:49:79:7b:68:ff:cc:32:c6:d8:4f:6f:cf:7d:ed:39:
         76:bc:9d:a8:72:77:31:00:f4:0d:47:a0:73:0f:30:45:69:cb:
         91:6e:dd:91:01:00:18:58:2e:f7:52:84:4f:1d:94:ab:c8:ee:
         16:bd:b1:c6:77:92:74:27:dd:3f:11:3c:0c:29:58:93:ac:fd:
         21:7f:81:43:af:02:ac:ed:70:fd:a9:bb:90:5b:16:74:11:01:
         cf:df:ee:7b:29:1f:48:66:cc:63:13:b3:ca:cc:c7:29:06:fe:
         22:33:51:e1:ec:2c:c7:c5:5b:1f:6b:46:18:54:b7:b9:dc:52:
         24:4f:68:81:47:11:28:c4:01:82:d2:93:31:05:b6:8e:56:03:
         04:45:b5:c6:83:bd:cc:6d:e7:77:28:6d:6b:0b:5f:a5:0b:66:
         4f:31:eb:4f:d9:40:3e:2b:d5:25:15:bf:3f:22:16:80:c9:57:
         4f:b5:7e:53:89:25:ea:be:b6:d6:05:86:b1:d0:4b:a1:d8:d2:
         c2:ea:af:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:58:58 2025 by rpki-client