Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/3230302e3132342e3137332e302f32342d3234203d3e20323730323739.roa
File:                     3230302e3132342e3137332e302f32342d3234203d3e20323730323739.roa (raw, json)
Hash identifier:          01D5qhjJLkkhNf3Sz3aZcGRoiRACCWeyCYEQrfnlp+c=
Subject key identifier:   55:C7:92:DF:DD:E2:FD:46:2B:68:06:36:AA:44:13:54:07:E7:1E:1A
Certificate issuer:       /CN=CE4086C53A0E1A19AE5AA00A9874ABBD78563A96
Certificate serial:       4A2BE15236F61B4517BC20B08546D862459AA02C
Authority key identifier: CE:40:86:C5:3A:0E:1A:19:AE:5A:A0:0A:98:74:AB:BD:78:56:3A:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/3230302e3132342e3137332e302f32342d3234203d3e20323730323739.roa
Signing time:             Wed 05 Mar 2025 19:00:25 +0000
ROA not before:           Wed 05 Mar 2025 18:55:25 +0000
ROA not after:            Wed 04 Mar 2026 19:00:25 +0000
asID:                     270279
IP address blocks:        200.124.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.crl
                          rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 22:37:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:2b:e1:52:36:f6:1b:45:17:bc:20:b0:85:46:d8:62:45:9a:a0:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE4086C53A0E1A19AE5AA00A9874ABBD78563A96
        Validity
            Not Before: Mar  5 18:55:25 2025 GMT
            Not After : Mar  4 19:00:25 2026 GMT
        Subject: CN=55C792DFDDE2FD462B680636AA44135407E71E1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:33:19:4c:1d:f4:51:a3:aa:51:1b:6b:e9:d2:
                    bc:f3:7f:bb:1c:95:fc:2d:00:8c:b0:6c:38:c6:fe:
                    69:58:53:6b:27:42:b0:74:9f:d6:a2:51:13:96:52:
                    a9:19:a0:1f:02:a9:25:86:94:07:5a:7f:bc:0f:be:
                    20:53:c6:95:c1:f3:9c:c5:49:50:d2:cd:fe:5a:70:
                    7a:b8:20:d2:97:b5:c3:ac:37:d1:52:a4:ab:ea:f6:
                    b3:fc:cd:54:58:91:4d:26:90:48:6f:02:82:3e:a1:
                    12:3f:4c:5e:a3:88:00:33:d7:8b:42:88:a0:fa:e6:
                    af:24:b5:31:66:c0:1c:46:99:81:a5:d9:e9:a9:89:
                    3b:9a:2c:98:ed:8c:81:76:42:a2:87:e0:e3:62:2d:
                    0e:ec:c8:3c:74:4f:97:16:aa:62:97:a3:08:a6:d3:
                    6d:44:b2:cf:71:95:bf:09:16:56:10:a9:bd:53:0d:
                    12:10:69:81:e0:aa:2e:9a:00:4e:aa:46:4f:ad:86:
                    fd:0b:1f:e1:6b:97:6d:a4:c9:c8:f9:6a:d9:9e:ef:
                    9b:ac:c3:fb:54:bb:ab:7a:c9:74:95:c9:db:4b:9d:
                    8d:49:e5:37:f6:e9:b1:31:1b:89:f2:77:59:5e:68:
                    ed:b3:dd:45:75:1b:fc:4e:82:bd:fb:be:6a:a2:83:
                    eb:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:C7:92:DF:DD:E2:FD:46:2B:68:06:36:AA:44:13:54:07:E7:1E:1A
            X509v3 Authority Key Identifier:
                keyid:CE:40:86:C5:3A:0E:1A:19:AE:5A:A0:0A:98:74:AB:BD:78:56:3A:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/3230302e3132342e3137332e302f32342d3234203d3e20323730323739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:da:03:75:b8:07:24:bc:bd:a9:29:69:79:b2:a8:50:51:bf:
         a8:a8:f5:b2:d7:dd:e3:24:c7:7b:99:c4:03:56:9e:f1:ed:a8:
         23:49:74:a3:3d:f3:f0:ed:8c:db:b0:55:c9:96:4e:e4:4d:b2:
         00:74:58:9f:b2:97:85:82:d2:64:91:95:14:b5:99:da:f1:c2:
         3d:1e:7a:7c:89:a6:ec:2f:00:8b:42:f3:e8:b8:9e:42:9a:27:
         33:96:4f:e1:87:06:cc:ca:58:f6:3c:f6:a1:3d:d0:07:61:38:
         32:4b:a6:d2:09:d0:b2:55:50:00:7c:37:b8:7a:de:b0:22:56:
         2d:68:b6:6b:1d:84:2e:d8:8c:26:85:ba:7a:dc:b8:42:8e:53:
         74:71:80:06:59:09:dc:1e:42:0f:5e:f6:d6:8c:40:6e:3d:32:
         81:76:d1:c9:9b:f3:91:c0:56:6f:4b:b8:7b:97:e0:24:cd:79:
         95:9a:00:0f:ca:12:21:ea:f3:1b:50:2c:98:cd:89:ec:8d:e4:
         33:61:2d:0e:69:55:83:3e:8b:3e:95:7b:17:b8:d4:e6:24:3b:
         eb:64:0f:17:18:b5:28:15:8d:98:70:72:55:0f:c2:17:92:54:
         99:37:77:e1:a7:c2:99:1e:ad:ea:b7:11:2c:52:3f:b6:77:c2:
         cc:05:5c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:26:20 2025 by rpki-client