Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3232392e3234382e302f32332d3234203d3e203132313336.roa
File:                     3230302e3232392e3234382e302f32332d3234203d3e203132313336.roa (raw, json)
Hash identifier:          vAJs4ipkLC8SzyHdWtGVoQRROKmDqsWlNrcBjD2lOnU=
Subject key identifier:   F7:0F:EE:D5:B9:14:31:EF:94:D4:D2:69:ED:88:FA:32:9E:64:2C:8B
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       3F7567B333B36C4E13940BEE72A39FD0DA8E0005
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3232392e3234382e302f32332d3234203d3e203132313336.roa
Signing time:             Mon 17 Mar 2025 17:44:02 +0000
ROA not before:           Mon 17 Mar 2025 17:39:02 +0000
ROA not after:            Mon 16 Mar 2026 17:44:02 +0000
asID:                     12136
IP address blocks:        200.229.248.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
                          rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 02:16:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:75:67:b3:33:b3:6c:4e:13:94:0b:ee:72:a3:9f:d0:da:8e:00:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Mar 17 17:39:02 2025 GMT
            Not After : Mar 16 17:44:02 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:78:e3:0d:6d:ab:bf:79:7f:9d:06:eb:86:c0:
                    dd:40:40:58:5d:9c:70:99:9d:d7:fc:87:28:82:73:
                    d8:26:e1:ed:de:5d:be:28:de:12:22:31:49:e9:1c:
                    27:78:fd:6d:4d:5c:39:12:31:79:c0:f6:67:40:31:
                    31:c0:72:2a:3c:31:f2:17:f3:c4:93:fa:32:20:19:
                    40:4f:16:1a:b3:5a:ae:7f:0b:b9:c5:4d:c7:2c:0d:
                    11:aa:55:6f:0b:10:ca:72:06:4d:f5:8a:e3:0f:a6:
                    34:ef:7a:fa:37:87:b7:83:28:7f:9d:41:71:64:7c:
                    0e:d1:70:3b:be:46:8a:dd:98:bc:ee:09:7b:c7:e0:
                    c3:b8:4c:14:5f:28:85:57:2b:ee:f5:00:1d:ae:ab:
                    c6:d1:64:eb:0c:b5:fb:4e:61:ba:71:67:77:49:7b:
                    18:04:cd:b1:2c:47:70:14:09:16:b3:e2:3e:9a:e0:
                    75:b2:af:56:79:73:4a:47:a8:b9:95:84:71:7f:5d:
                    da:92:69:5f:a3:45:1c:9c:b4:68:9a:52:fc:c8:72:
                    71:92:1d:07:fb:6a:0b:7a:5a:0d:08:bf:85:f8:83:
                    ee:6d:be:9a:d6:6a:1d:f7:e5:19:66:a0:13:fd:ed:
                    77:e6:53:3b:c1:13:c2:09:32:a1:b3:e5:4d:d0:27:
                    6a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:0F:EE:D5:B9:14:31:EF:94:D4:D2:69:ED:88:FA:32:9E:64:2C:8B
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3232392e3234382e302f32332d3234203d3e203132313336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:a0:71:72:eb:b0:dd:fc:df:54:56:b3:16:88:50:66:e3:1d:
         0e:eb:c6:68:43:e3:d4:15:64:9e:19:25:f6:4d:3e:e0:40:e8:
         b1:0a:61:bc:7b:3a:35:c4:36:8b:97:4b:4f:79:3c:76:59:fb:
         76:df:18:19:74:db:4a:de:ac:5e:3d:6f:1c:59:99:36:37:f2:
         b5:0a:ac:85:7f:9f:41:a3:f5:48:c8:2e:96:75:77:07:78:55:
         c2:1d:9c:b4:b4:ff:69:04:3b:fe:23:05:bb:39:b4:c4:44:e9:
         f0:94:47:dd:0e:b1:2f:df:a9:ec:a5:96:40:93:92:e1:20:7c:
         83:af:62:c1:a0:cd:5a:eb:ed:c4:13:a9:fa:04:b0:d8:c1:56:
         89:5c:19:61:3c:b5:8b:9a:0b:e3:3c:ab:8c:c4:2d:00:8a:ae:
         fc:84:fa:43:4d:32:d4:21:e3:28:4e:ac:b1:af:79:05:8c:c1:
         9f:35:ca:15:3e:5e:48:ba:ed:c6:fd:d6:79:a2:05:9f:dd:5f:
         df:67:4e:32:48:4e:08:b8:84:91:6b:57:82:9f:d4:e5:36:7a:
         e9:8e:03:4c:c4:be:82:90:5e:8f:76:81:8f:8c:58:bc:b3:cf:
         a7:10:e3:0b:d2:c6:3f:25:e3:46:6b:9e:f4:9f:18:40:7d:78:
         ca:f5:24:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:56:31 2025 by rpki-client