Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3232392e3234382e302f32332d3234203d3e203238333435.roa
File:                     3230302e3232392e3234382e302f32332d3234203d3e203238333435.roa (raw, json)
Hash identifier:          wlziULleMZfuOd4qD0KwPYm/vRE8Ra+BICztKU4Z1LU=
Subject key identifier:   F9:CB:2D:C7:11:38:F2:E8:48:49:20:CC:87:72:EE:8E:D8:0A:36:27
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       15EC59F6CD4A6C06B15DE36DF95BC90548D6875A
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3232392e3234382e302f32332d3234203d3e203238333435.roa
Signing time:             Mon 17 Mar 2025 17:44:00 +0000
ROA not before:           Mon 17 Mar 2025 17:39:00 +0000
ROA not after:            Mon 16 Mar 2026 17:44:00 +0000
asID:                     28345
IP address blocks:        200.229.248.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
                          rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 02:16:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:ec:59:f6:cd:4a:6c:06:b1:5d:e3:6d:f9:5b:c9:05:48:d6:87:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Mar 17 17:39:00 2025 GMT
            Not After : Mar 16 17:44:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:eb:d6:f5:08:cd:36:ab:c9:93:4b:a9:62:97:
                    d4:d8:69:32:e5:e0:05:4f:3f:73:c0:39:02:ad:95:
                    ed:53:09:3b:09:e7:57:c7:c7:bf:8f:f1:58:8d:43:
                    02:5b:8b:3f:f2:1f:d6:c2:77:45:76:8f:0e:ab:b7:
                    ae:5c:c3:01:4d:69:31:ed:fb:64:85:80:c0:26:31:
                    ed:ea:2c:15:e7:cb:0a:ce:16:a2:f7:a8:ec:5e:c6:
                    ed:84:0a:19:2e:4e:7d:fc:c9:dd:57:a8:90:4b:d0:
                    a0:d5:82:9d:36:08:f2:cf:6f:f3:e6:db:bd:09:ac:
                    0d:a1:7a:5a:6a:78:b4:97:62:b2:63:8a:e8:6c:c4:
                    ed:e2:76:d4:b2:08:30:38:b1:cb:56:3d:eb:3c:97:
                    2c:7e:4d:94:67:53:97:73:17:5d:95:5c:9c:8e:36:
                    4d:92:63:bb:30:7f:d5:16:82:3f:a6:2e:ac:98:ae:
                    ba:cf:c1:4a:57:0f:dc:d9:65:a2:13:bf:dc:ee:9c:
                    c8:85:9d:89:bc:5c:d5:29:40:3d:c2:a0:0b:b2:ff:
                    c4:10:8b:52:45:d2:bf:19:0d:c1:03:ac:50:54:e6:
                    d0:07:94:ca:ae:81:bf:a9:3a:37:16:af:2d:c5:f2:
                    7c:18:e7:65:c4:f0:6e:92:6a:dd:be:a2:1d:91:5e:
                    15:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:CB:2D:C7:11:38:F2:E8:48:49:20:CC:87:72:EE:8E:D8:0A:36:27
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3232392e3234382e302f32332d3234203d3e203238333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1a:f5:f6:be:ef:d7:d1:96:65:88:36:49:6c:0c:76:64:7f:e0:
         ff:d3:97:3d:2d:d2:c0:3b:f3:3e:17:86:45:6f:ef:3f:92:69:
         b3:d3:d0:43:19:87:38:f9:13:c2:ae:25:dc:4a:00:85:3a:fd:
         5b:5f:f3:66:a3:9b:76:ab:a4:23:44:9d:08:68:ab:ad:47:40:
         31:ae:80:c0:9b:e2:9e:10:14:ca:37:a9:7e:eb:aa:01:3e:49:
         34:f4:4e:cc:24:c5:b7:ea:24:70:10:79:97:cd:11:da:07:af:
         8a:a2:dc:2c:72:ac:4d:8e:0d:85:ee:86:eb:9f:9a:f5:48:db:
         39:69:6e:42:47:25:3c:79:2c:c4:55:49:4f:0e:cb:b2:69:33:
         d7:de:a4:16:cc:47:ee:74:58:e5:ce:40:d4:a8:b1:2e:89:2b:
         57:b2:93:df:e0:4a:e8:5b:c3:d4:0f:86:6a:51:5f:4c:7f:60:
         e6:78:e4:56:40:45:d1:05:99:11:0d:a6:b9:a5:7a:04:4e:d3:
         c2:21:6d:5b:03:d4:a5:23:be:bc:02:1a:e0:5c:75:e3:92:d6:
         2d:e1:1e:fb:fe:5f:1f:d7:2a:22:18:53:8a:20:b8:eb:c4:dc:
         c3:81:7f:45:52:a8:37:c3:f8:94:f6:62:93:ab:e4:a7:24:7c:
         6c:aa:67:77
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUFexZ9s1KbAaxXeNt+VvJBUjWh1owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjMyNTE5QTlDMjdCM0IyODY5QUMzMEVERjI5NkI0ODRF
NDRCRjFGMDAeFw0yNTAzMTcxNzM5MDBaFw0yNjAzMTYxNzQ0MDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOUZFQkQ2RjUwOENEMzZBQkM5
OTM0QkE5NjI5N0Q0RDg2OTMyRTVFMDA1NEYzRjczQzAzOTAyQUQ5NUVENTMwOTNC
MDlFNzU3QzdDN0JGOEZGMTU4OEQ0MzAyNUI4QjNGRjIxRkQ2QzI3NzQ1NzY4RjBF
QUJCN0FFNUNDMzAxNEQ2OTMxRURGQjY0ODU4MEMwMjYzMUVERUEyQzE1RTdDQjBB
Q0UxNkEyRjdBOEVDNUVDNkVEODQwQTE5MkU0RTdERkNDOURENTdBODkwNEJEMEEw
RDU4MjlEMzYwOEYyQ0Y2RkYzRTZEQkJEMDlBQzBEQTE3QTVBNkE3OEI0OTc2MkIy
NjM4QUU4NkNDNEVERTI3NkQ0QjIwODMwMzhCMUNCNTYzREVCM0M5NzJDN0U0RDk0
Njc1Mzk3NzMxNzVEOTU1QzlDOEUzNjREOTI2M0JCMzA3RkQ1MTY4MjNGQTYyRUFD
OThBRUJBQ0ZDMTRBNTcwRkRDRDk2NUEyMTNCRkRDRUU5Q0M4ODU5RDg5QkM1Q0Q1
Mjk0MDNEQzJBMDBCQjJGRkM0MTA4QjUyNDVEMkJGMTkwREMxMDNBQzUwNTRFNkQw
MDc5NENBQUU4MUJGQTkzQTM3MTZBRjJEQzVGMjdDMThFNzY1QzRGMDZFOTI2QURE
QkVBMjFEOTE1RTE1QzkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAn+vW9QjNNqvJk0upYpfU2Gky5eAFTz9zwDkCrZXtUwk7CedXx8e/
j/FYjUMCW4s/8h/WwndFdo8Oq7euXMMBTWkx7ftkhYDAJjHt6iwV58sKzhai96js
XsbthAoZLk59/MndV6iQS9Cg1YKdNgjyz2/z5tu9CawNoXpaani0l2KyY4robMTt
4nbUsggwOLHLVj3rPJcsfk2UZ1OXcxddlVycjjZNkmO7MH/VFoI/pi6smK66z8FK
Vw/c2WWiE7/c7pzIhZ2JvFzVKUA9wqALsv/EEItSRdK/GQ3BA6xQVObQB5TKroG/
qTo3Fq8txfJ8GOdlxPBukmrdvqIdkV4VyQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FPnLLccROPLoSEkgzIdy7o7YCjYnMB8GA1UdIwQYMBaAFGMlGanCezsoaaww7fKW
tITkS/HwMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0EyeDZpY2FLcFZXUDV1
VUJ6SlF6UnZFcGp2UzdQVlc3WjJFcjRGMnF0MUN0LzIvNjMyNTE5QTlDMjdCM0Iy
ODY5QUMzMEVERjI5NkI0ODRFNDRCRjFGMC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS82MzI1MTlBOUMyN0IzQjI4NjlBQzMwRURGMjk2QjQ4NEU0NEJG
MUYwLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9BMng2aWNhS3BWV1A1dVVCekpR
elJ2RXBqdlM3UFZXN1oyRXI0RjJxdDFDdC8yLzMyMzAzMDJlMzIzMjM5MmUzMjM0
MzgyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjM4MzMzNDM1LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
yOX4MA0GCSqGSIb3DQEBCwUAA4IBAQAa9fa+79fRlmWINklsDHZkf+D/05c9LdLA
O/M+F4ZFb+8/kmmz09BDGYc4+RPCriXcSgCFOv1bX/Nmo5t2q6QjRJ0IaKutR0Ax
roDAm+KeEBTKN6l+66oBPkk09E7MJMW36iRwEHmXzRHaB6+KotwscqxNjg2F7obr
n5r1SNs5aW5CRyU8eSzEVUlPDsuyaTPX3qQWzEfudFjlzkDUqLEuiStXspPf4Ero
W8PUD4ZqUV9Mf2DmeORWQEXRBZkRDaa5pXoETtPCIW1bA9SlI768AhrgXHXjktYt
4R77/l8f1yoiGFOKILjrxNzDgX9FUqg3w/iU9mKTq+SnJHxsqmd3
-----END CERTIFICATE-----
Generated at Tue Apr 8 13:58:49 2025 by rpki-client