Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/3230302e33362e3231362e302f32322d3234203d3e20323731333637.roa
File:                     3230302e33362e3231362e302f32322d3234203d3e20323731333637.roa (raw, json)
Hash identifier:          xBPwvS0zrXLXBjGxZbTS0R+/LiP5J9k9hLEuIZa5HTs=
Subject key identifier:   F0:F5:EE:C6:FA:C2:16:B7:E0:A0:BF:24:6F:D6:D7:E1:5B:C8:17:E1
Certificate issuer:       /CN=3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE
Certificate serial:       751E672CEC1132CC769DDCBFAE778AAEE1F0664F
Authority key identifier: 3A:BF:96:D1:8E:7E:05:A2:4E:DA:A1:17:D2:B9:E7:6A:07:FE:C5:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/3230302e33362e3231362e302f32322d3234203d3e20323731333637.roa
Signing time:             Wed 05 Mar 2025 19:00:03 +0000
ROA not before:           Wed 05 Mar 2025 18:55:03 +0000
ROA not after:            Wed 04 Mar 2026 19:00:03 +0000
asID:                     271367
IP address blocks:        200.36.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.crl
                          rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 19:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:1e:67:2c:ec:11:32:cc:76:9d:dc:bf:ae:77:8a:ae:e1:f0:66:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE
        Validity
            Not Before: Mar  5 18:55:03 2025 GMT
            Not After : Mar  4 19:00:03 2026 GMT
        Subject: CN=3082010A0282010100A919BE31AAAB84C938B403DDDD53E5193EDF1AFA61F25FEC2DCD10CD0676D5ABFDD371B24B3E330D49A0AB0A0080227910B8DAA3CB31164D61D5DE81D08E47C48AE58BE700727E3D0FBB5383DF2A6CB4271C6A7F80BE2FB65306F189AA274BA601A64CC7CA3DE1948298D89A63613063002D951935B33E316EACD6CCE7AD356C1569CC9B11F21D31463AABAB39173D622729D0EA5B806E7DE7C58734238EEE5CC97CF6596B62BB50924A518BBCADEDE35273C4C561A2240D4CD3FB777B326C05A524A0973454D55C36F06AE2E1F1E5D1339FC5909F05E021C6B264AB9DAE00C1B56B9471C0A3128DD1E5E6EAFA28D709D1C6A775793C915B048A768E6ECBD4470203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:19:be:31:aa:ab:84:c9:38:b4:03:dd:dd:53:
                    e5:19:3e:df:1a:fa:61:f2:5f:ec:2d:cd:10:cd:06:
                    76:d5:ab:fd:d3:71:b2:4b:3e:33:0d:49:a0:ab:0a:
                    00:80:22:79:10:b8:da:a3:cb:31:16:4d:61:d5:de:
                    81:d0:8e:47:c4:8a:e5:8b:e7:00:72:7e:3d:0f:bb:
                    53:83:df:2a:6c:b4:27:1c:6a:7f:80:be:2f:b6:53:
                    06:f1:89:aa:27:4b:a6:01:a6:4c:c7:ca:3d:e1:94:
                    82:98:d8:9a:63:61:30:63:00:2d:95:19:35:b3:3e:
                    31:6e:ac:d6:cc:e7:ad:35:6c:15:69:cc:9b:11:f2:
                    1d:31:46:3a:ab:ab:39:17:3d:62:27:29:d0:ea:5b:
                    80:6e:7d:e7:c5:87:34:23:8e:ee:5c:c9:7c:f6:59:
                    6b:62:bb:50:92:4a:51:8b:bc:ad:ed:e3:52:73:c4:
                    c5:61:a2:24:0d:4c:d3:fb:77:7b:32:6c:05:a5:24:
                    a0:97:34:54:d5:5c:36:f0:6a:e2:e1:f1:e5:d1:33:
                    9f:c5:90:9f:05:e0:21:c6:b2:64:ab:9d:ae:00:c1:
                    b5:6b:94:71:c0:a3:12:8d:d1:e5:e6:ea:fa:28:d7:
                    09:d1:c6:a7:75:79:3c:91:5b:04:8a:76:8e:6e:cb:
                    d4:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:F5:EE:C6:FA:C2:16:B7:E0:A0:BF:24:6F:D6:D7:E1:5B:C8:17:E1
            X509v3 Authority Key Identifier:
                keyid:3A:BF:96:D1:8E:7E:05:A2:4E:DA:A1:17:D2:B9:E7:6A:07:FE:C5:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/3230302e33362e3231362e302f32322d3234203d3e20323731333637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:c9:a3:6a:d2:df:d6:49:5f:fa:3d:7a:c6:9f:22:1b:a2:54:
         72:43:07:30:85:24:54:42:19:98:38:78:49:eb:09:e1:07:9f:
         99:ac:2f:8f:d4:ac:cd:45:9d:34:84:e0:d2:a4:b5:87:cf:5a:
         ec:21:18:b1:09:0c:88:a7:70:5f:90:5d:a4:dd:c2:5e:47:a1:
         89:72:ba:63:70:23:0e:0f:12:31:d3:05:b5:76:28:81:84:8c:
         68:8b:18:e7:c3:05:35:7c:59:83:b9:34:30:98:ce:08:d2:0f:
         cd:32:70:78:e0:d0:0d:b4:e6:1a:e4:a8:0c:bc:a8:74:f6:a5:
         7d:39:f8:8a:86:47:a9:b9:61:43:cb:77:0b:8a:e2:c7:87:57:
         35:da:e2:f8:06:fe:49:db:d1:6d:c9:d2:7f:ae:d0:ab:56:7d:
         2c:0f:8a:cd:c8:bf:e0:e2:bc:ef:e3:c3:4e:39:7b:b5:c5:5d:
         4b:49:41:1c:b6:fe:88:3c:89:1a:0c:33:a9:64:3e:90:d2:9a:
         38:4a:01:a7:4a:57:8f:9d:ab:ca:ee:e4:58:91:35:40:31:ce:
         b3:15:3d:3a:b5:f8:81:fd:88:0d:ca:25:30:ea:d8:4f:44:c9:
         dc:8e:bd:08:f5:c5:99:22:75:3e:80:1d:f8:28:ba:7e:36:e3:
         c5:a5:f9:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:52:00 2025 by rpki-client