Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3230302e35332e382e302f32342d3234203d3e203532393737.roa
File:                     3230302e35332e382e302f32342d3234203d3e203532393737.roa (raw, json)
Hash identifier:          3ftu23yyVZuIwbJ0wHGzU7D8I3Lx4tXhfArQpsV24P4=
Subject key identifier:   43:4C:5E:EF:59:41:31:CD:45:F3:B6:F5:DF:03:54:47:F2:E9:39:02
Certificate issuer:       /CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
Certificate serial:       6FAF22EE494F207B3962E10A76A0C64001DE82D6
Authority key identifier: 9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3230302e35332e382e302f32342d3234203d3e203532393737.roa
Signing time:             Wed 05 Mar 2025 19:00:02 +0000
ROA not before:           Wed 05 Mar 2025 18:55:02 +0000
ROA not after:            Wed 04 Mar 2026 19:00:02 +0000
asID:                     52977
IP address blocks:        200.53.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl
                          rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 06:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:af:22:ee:49:4f:20:7b:39:62:e1:0a:76:a0:c6:40:01:de:82:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
        Validity
            Not Before: Mar  5 18:55:02 2025 GMT
            Not After : Mar  4 19:00:02 2026 GMT
        Subject: CN=434C5EEF594131CD45F3B6F5DF035447F2E93902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c5:fe:4d:b3:64:09:9b:89:6a:35:eb:8b:47:
                    ab:fc:12:29:60:dc:2a:d7:29:d6:20:89:12:9e:81:
                    fe:4b:b5:8a:b4:61:ba:f3:a4:01:5d:92:6f:aa:69:
                    ef:1d:7e:c7:f7:b1:26:46:be:fb:03:87:ac:ec:8f:
                    3c:4d:8c:6c:c7:6c:71:ca:4d:14:3f:66:fd:7f:4a:
                    68:fd:ad:f0:7c:b5:a5:25:cb:bd:cd:c5:43:6a:15:
                    a8:a2:1a:4f:c3:b6:8d:03:ef:1a:e9:fb:15:91:9e:
                    60:8d:15:39:a4:c3:60:e7:1e:7a:30:8b:ca:cc:ff:
                    aa:8f:46:e4:63:2a:4a:8c:4a:8e:22:39:49:fc:03:
                    77:00:b2:63:61:45:19:1f:c3:3d:7a:e3:c8:ec:21:
                    44:4d:30:b7:54:58:61:fd:78:0a:b5:42:2a:cd:fa:
                    f3:db:de:cc:b1:77:85:d0:88:3f:2c:7d:79:28:0d:
                    b8:47:57:4e:85:20:2f:12:30:25:6b:8a:b3:1a:a9:
                    db:53:f4:a1:d8:9e:f3:3f:2a:98:a2:c6:34:0e:8e:
                    57:24:5f:8b:78:d9:b5:23:1a:f5:6d:de:6a:d6:4e:
                    c8:63:ec:49:d1:a4:a0:26:71:3c:9c:d1:6e:50:18:
                    90:5f:af:c5:71:9f:37:73:72:79:d7:7c:ec:f6:cf:
                    35:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:4C:5E:EF:59:41:31:CD:45:F3:B6:F5:DF:03:54:47:F2:E9:39:02
            X509v3 Authority Key Identifier:
                keyid:9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3230302e35332e382e302f32342d3234203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:ee:f1:12:df:0b:e0:15:ef:5c:59:d8:57:79:b0:37:ea:a3:
         cf:a6:29:ec:bd:b4:7b:40:4e:a4:65:d5:b7:4f:fe:66:b7:9a:
         f5:ee:b6:f7:08:b0:c4:5a:7e:8f:11:0e:d3:4d:08:a5:3e:63:
         58:6f:0b:08:55:cc:ca:ee:bf:9a:c1:60:44:1c:75:b5:a8:7e:
         40:65:2f:7d:de:1b:4d:4a:cd:8c:09:23:cf:e1:4a:f1:10:03:
         21:b9:39:1e:71:b5:79:d0:e1:43:92:f1:4b:d9:5a:81:dc:c6:
         1d:15:1f:3d:b6:f1:58:cd:09:a8:1a:74:4d:76:74:a0:11:a7:
         e4:af:c5:60:16:ab:40:38:73:68:ff:3f:90:85:c7:7d:07:9d:
         8c:29:8f:f0:e5:75:6f:29:6f:31:18:9c:61:53:ca:f1:85:f9:
         07:d8:da:1a:ed:e4:b0:93:ef:63:45:4b:c7:d2:8f:09:14:25:
         92:32:6a:ce:dc:54:b2:22:ad:bd:f1:09:3e:e2:35:b8:d2:9a:
         4f:7c:de:cd:d4:cb:74:89:a6:8b:95:c8:90:25:8b:18:32:28:
         fd:72:76:64:9b:4d:25:7b:29:d9:9b:3c:b0:d3:90:4e:94:4d:
         e7:01:94:eb:b8:36:04:0a:4f:4f:7c:af:7e:4f:ce:7c:87:01:
         4a:55:cf:7f
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUb68i7klPIHs5YuEKdqDGQAHegtYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUNCQzREQzc1MDBDMjRFQjdCRTVEMUIzMjM1QTdDRjBF
RTdDQzUwRTAeFw0yNTAzMDUxODU1MDJaFw0yNjAzMDQxOTAwMDJaMDMxMTAvBgNV
BAMTKDQzNEM1RUVGNTk0MTMxQ0Q0NUYzQjZGNURGMDM1NDQ3RjJFOTM5MDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdxf5Ns2QJm4lqNeuLR6v8Eilg
3CrXKdYgiRKegf5LtYq0YbrzpAFdkm+qae8dfsf3sSZGvvsDh6zsjzxNjGzHbHHK
TRQ/Zv1/Smj9rfB8taUly73NxUNqFaiiGk/Dto0D7xrp+xWRnmCNFTmkw2DnHnow
i8rM/6qPRuRjKkqMSo4iOUn8A3cAsmNhRRkfwz1648jsIURNMLdUWGH9eAq1QirN
+vPb3syxd4XQiD8sfXkoDbhHV06FIC8SMCVrirMaqdtT9KHYnvM/KpiixjQOjlck
X4t42bUjGvVt3mrWTshj7EnRpKAmcTyc0W5QGJBfr8VxnzdzcnnXfOz2zzXFAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUQ0xe71lBMc1F87b13wNUR/LpOQIwHwYDVR0j
BBgwFoAUnLxNx1AMJOt75dGzI1p88O58xQ4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTl6dGV3SmRGQjJ1WkNIWWlwZ244Ylp0RjZFN2NDWjhEdTFzeEN0aEYy
cHAvMS85Q0JDNERDNzUwMEMyNEVCN0JFNUQxQjMyMzVBN0NGMEVFN0NDNTBFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlDQkM0REM3NTAwQzI0RUI3
QkU1RDFCMzIzNUE3Q0YwRUU3Q0M1MEUuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0E5enRld0pkRkIydVpDSFlpcGduOGJadEY2RTdjQ1o4RHUxc3hDdGhGMnBwLzEv
MzIzMDMwMmUzNTMzMmUzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1MzIzOTM3
Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADINQgwDQYJKoZIhvcNAQELBQADggEBAFTu8RLfC+AV71xZ
2Fd5sDfqo8+mKey9tHtATqRl1bdP/ma3mvXutvcIsMRafo8RDtNNCKU+Y1hvCwhV
zMruv5rBYEQcdbWofkBlL33eG01KzYwJI8/hSvEQAyG5OR5xtXnQ4UOS8UvZWoHc
xh0VHz228VjNCagadE12dKARp+SvxWAWq0A4c2j/P5CFx30HnYwpj/DldW8pbzEY
nGFTyvGF+QfY2hrt5LCT72NFS8fSjwkUJZIyas7cVLIirb3xCT7iNbjSmk983s3U
y3SJpouVyJAlixgyKP1ydmSbTSV7KdmbPLDTkE6UTecBlOu4NgQKT098r35PznyH
AUpVz38=
-----END CERTIFICATE-----
Generated at Sat Apr 5 15:20:19 2025 by rpki-client