Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3231392e3135382e302f32332d3234203d3e203134363530.roa
File:                     3230302e3231392e3135382e302f32332d3234203d3e203134363530.roa (raw, json)
Hash identifier:          HSIZbifo8tSfRigC6+kJBtWrPHtJoMZThWpbwORcuDk=
Subject key identifier:   6D:65:29:83:D0:01:4A:52:BF:8B:6D:69:0A:3E:B9:57:D0:22:5D:B3
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       0ED6FC92DD2BA5A069654D71F8D2690F30A315DE
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3231392e3135382e302f32332d3234203d3e203134363530.roa
Signing time:             Mon 17 Mar 2025 17:44:00 +0000
ROA not before:           Mon 17 Mar 2025 17:39:00 +0000
ROA not after:            Mon 16 Mar 2026 17:44:00 +0000
asID:                     14650
IP address blocks:        200.219.158.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
                          rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 18:32:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:d6:fc:92:dd:2b:a5:a0:69:65:4d:71:f8:d2:69:0f:30:a3:15:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Mar 17 17:39:00 2025 GMT
            Not After : Mar 16 17:44:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0c:d3:d4:a0:dd:5c:ad:36:c6:ab:87:3d:56:
                    2e:82:4f:cc:c1:91:a1:31:00:f9:5e:28:37:cf:7f:
                    06:d3:09:b0:9a:48:18:cc:b0:1e:5a:9b:3f:cc:33:
                    25:d6:44:de:7e:ca:97:3f:05:f4:bf:69:46:5f:41:
                    72:5e:ac:14:a3:20:71:a4:81:78:58:5b:68:a8:f8:
                    61:47:e8:ba:dd:65:ce:71:00:9b:f5:88:ef:a9:c8:
                    53:85:5a:66:00:20:46:dc:b5:ce:b0:07:8a:d8:6e:
                    06:8c:af:6e:89:c5:82:ba:9e:db:e6:f1:96:a4:10:
                    36:c3:a6:85:e5:d4:2b:ee:5b:ea:f6:31:df:f3:1e:
                    7e:c6:17:d2:1b:2f:63:58:a8:93:ec:e6:43:de:59:
                    33:01:6e:ad:cf:6d:dc:00:36:71:f1:f7:03:15:20:
                    b8:94:7d:38:16:e2:b4:2d:c2:ff:89:39:b1:31:e3:
                    ee:8a:78:ac:e0:cb:b6:3c:70:9d:d5:51:5d:71:6a:
                    47:c2:e1:15:bb:49:d6:26:81:ce:e5:0f:66:8b:30:
                    ba:2a:1c:bc:43:46:11:ac:e1:16:89:d0:2b:e3:57:
                    12:89:1e:05:d5:de:38:5d:72:e2:02:d5:2e:bc:04:
                    ca:8f:dc:9c:ab:5f:e5:7a:dd:aa:93:07:8d:10:7e:
                    91:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:65:29:83:D0:01:4A:52:BF:8B:6D:69:0A:3E:B9:57:D0:22:5D:B3
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3231392e3135382e302f32332d3234203d3e203134363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:02:9d:52:31:30:60:1c:eb:e5:4d:54:d7:0b:74:b7:b2:53:
         f0:54:7f:8d:5f:58:96:21:cf:fc:7c:90:2e:a4:b8:61:4a:95:
         c3:60:8e:22:74:9e:02:44:6f:08:ba:64:5a:65:a0:85:a6:3a:
         19:44:63:70:56:79:17:8f:20:0c:9b:95:a6:91:99:aa:a3:48:
         e0:4f:5a:53:65:0d:e5:7f:1a:99:2a:06:c8:24:55:31:6b:f6:
         1c:0f:7b:a0:d1:fe:f6:02:18:36:d4:89:f9:82:51:e8:01:7e:
         37:8f:6e:c4:e7:11:dd:1d:7a:de:6d:89:ed:7a:62:98:57:df:
         e1:18:dc:86:b8:51:14:fa:38:82:a7:22:6f:0d:bf:58:83:51:
         71:f3:ad:ed:c3:6c:9f:34:3d:00:a7:c8:7d:c3:8e:45:dc:fd:
         95:61:37:32:87:a0:95:c0:1d:d7:85:d0:5e:96:2a:e8:13:82:
         14:41:36:0a:be:3e:62:1a:b8:cd:45:93:06:04:21:16:c5:17:
         f1:f1:7a:09:bf:2b:d6:70:dc:1a:ce:5a:56:ce:3a:89:30:1c:
         35:0b:d9:e4:dd:a4:72:ea:ca:78:15:72:b8:0e:7c:bb:a4:80:
         cf:b5:ef:28:9c:34:b7:67:8e:ac:38:2d:dc:13:de:f9:82:86:
         b3:f3:d2:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 04:56:00 2025 by rpki-client