Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ATPVmXwY6zqHTYx5AuztY1wd7ZYWk3sazUnwx4oQyhny/1/3230312e3134302e3233362e302f32322d3234203d3e20323636313438.roa
File:                     3230312e3134302e3233362e302f32322d3234203d3e20323636313438.roa (raw, json)
Hash identifier:          XBzWqW9YDveuVHx+7SXmGBQTfPTBajlKu5xGrZrJcjs=
Subject key identifier:   40:A9:C4:20:60:CD:E1:13:C1:DE:5A:BA:25:04:38:6B:26:D8:62:1F
Certificate issuer:       /CN=8C2E92E0BAD02E89BAE6DBB5B23B674A2D577A1D
Certificate serial:       281FF96CCF01A95E04AC72323E4F3E2C98C482A4
Authority key identifier: 8C:2E:92:E0:BA:D0:2E:89:BA:E6:DB:B5:B2:3B:67:4A:2D:57:7A:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C2E92E0BAD02E89BAE6DBB5B23B674A2D577A1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATPVmXwY6zqHTYx5AuztY1wd7ZYWk3sazUnwx4oQyhny/1/3230312e3134302e3233362e302f32322d3234203d3e20323636313438.roa
Signing time:             Thu 06 Mar 2025 08:01:21 +0000
ROA not before:           Thu 06 Mar 2025 07:56:21 +0000
ROA not after:            Thu 05 Mar 2026 08:01:21 +0000
asID:                     266148
IP address blocks:        201.140.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ATPVmXwY6zqHTYx5AuztY1wd7ZYWk3sazUnwx4oQyhny/1/8C2E92E0BAD02E89BAE6DBB5B23B674A2D577A1D.crl
                          rsync://rpki-repo.registro.br/repo/ATPVmXwY6zqHTYx5AuztY1wd7ZYWk3sazUnwx4oQyhny/1/8C2E92E0BAD02E89BAE6DBB5B23B674A2D577A1D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C2E92E0BAD02E89BAE6DBB5B23B674A2D577A1D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 05:40:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:1f:f9:6c:cf:01:a9:5e:04:ac:72:32:3e:4f:3e:2c:98:c4:82:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C2E92E0BAD02E89BAE6DBB5B23B674A2D577A1D
        Validity
            Not Before: Mar  6 07:56:21 2025 GMT
            Not After : Mar  5 08:01:21 2026 GMT
        Subject: CN=40A9C42060CDE113C1DE5ABA2504386B26D8621F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:05:7b:1d:8a:14:06:3a:33:4a:3f:90:12:1b:
                    3c:17:14:12:69:81:49:a6:1b:c9:b2:25:23:0f:c1:
                    e2:60:4a:1e:f4:03:97:04:dc:ef:5b:c8:70:2d:f7:
                    9b:6b:b1:aa:6a:f1:3f:9c:97:39:6d:f9:7a:6f:7a:
                    81:4c:0e:0d:e8:0c:40:c1:e5:59:32:b1:82:93:6d:
                    dc:75:10:6c:a3:fd:b1:e1:30:ea:b8:9c:57:2e:f4:
                    be:6a:7a:04:2d:27:cf:e5:c8:fc:3f:7b:7b:32:c4:
                    11:6f:93:3b:98:fb:1c:c2:09:79:c7:90:94:07:34:
                    cf:aa:67:e4:cc:eb:2c:ea:9b:d9:02:33:88:84:7f:
                    a3:e1:bf:02:b8:6a:2b:c3:7a:d7:b4:fc:73:bb:d5:
                    c3:e0:01:de:75:8a:e4:24:b1:4e:d7:f9:b8:c1:e6:
                    2e:6c:08:07:83:7a:14:ef:b4:92:5c:91:91:27:2e:
                    40:89:4d:7b:0f:ce:f4:48:79:88:c1:f4:38:6e:28:
                    1c:4f:15:42:2f:a1:95:f1:9b:5f:1a:6c:ff:b1:0c:
                    88:9c:8f:d8:b8:89:16:b9:c2:b6:6c:92:40:c2:a3:
                    50:df:f9:0c:d8:36:3d:58:63:a6:aa:97:b5:10:ad:
                    66:79:67:5a:cd:a8:4f:83:28:c1:44:e4:c2:4c:e1:
                    3f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:A9:C4:20:60:CD:E1:13:C1:DE:5A:BA:25:04:38:6B:26:D8:62:1F
            X509v3 Authority Key Identifier:
                keyid:8C:2E:92:E0:BA:D0:2E:89:BA:E6:DB:B5:B2:3B:67:4A:2D:57:7A:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATPVmXwY6zqHTYx5AuztY1wd7ZYWk3sazUnwx4oQyhny/1/8C2E92E0BAD02E89BAE6DBB5B23B674A2D577A1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C2E92E0BAD02E89BAE6DBB5B23B674A2D577A1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATPVmXwY6zqHTYx5AuztY1wd7ZYWk3sazUnwx4oQyhny/1/3230312e3134302e3233362e302f32322d3234203d3e20323636313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.140.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:cd:22:98:22:77:04:c5:56:da:ef:19:66:d7:75:6d:06:f9:
         b3:01:3b:68:5c:93:87:a6:98:7c:a6:35:d5:be:56:3f:cb:6c:
         58:39:58:7a:45:b5:72:17:5d:fe:96:1a:7f:a4:f3:02:f1:a1:
         e7:ee:43:be:0b:ed:3f:14:f9:75:30:a8:81:34:30:0b:86:8a:
         1b:44:f8:0c:e9:f5:4f:5c:a5:b7:35:cb:ab:75:b2:3a:b8:eb:
         18:55:2f:41:47:ca:eb:89:97:93:3a:9c:5c:d0:23:d0:43:88:
         5d:65:5c:df:c2:21:26:3f:b2:13:5b:28:2c:0a:eb:49:d8:5b:
         4e:d8:18:c2:a7:21:c3:b4:72:4f:36:78:11:ef:39:c2:7e:8b:
         4b:08:ca:b7:43:bf:4d:6e:41:75:27:19:42:16:fc:e2:11:63:
         55:2d:78:71:c7:35:a3:c2:aa:59:45:9e:9f:9e:26:e3:32:49:
         a1:78:eb:51:50:4f:63:5f:8d:77:68:73:7f:e2:3e:ac:dd:aa:
         bd:a6:d8:a6:d2:f2:29:2e:3a:95:cf:61:10:0c:75:b4:4f:59:
         a5:55:22:8d:c9:53:1c:0b:d0:c1:95:e5:41:87:c5:27:d3:7c:
         08:dd:54:57:0b:46:32:c3:2b:1a:7e:70:54:c3:e4:f4:40:93:
         d0:65:7d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 22:48:07 2025 by rpki-client