Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/3230302e35322e3233322e302f32322d3232203d3e20323731303139.roa
File:                     3230302e35322e3233322e302f32322d3232203d3e20323731303139.roa (raw, json)
Hash identifier:          9ERjD8DpMziib6W0C0kG5iGqYzmf9eF0V4BiiOmtU68=
Subject key identifier:   8F:C5:BA:0D:11:4C:A0:D4:4F:39:29:7E:AE:00:A8:3D:6E:8C:3B:3E
Certificate issuer:       /CN=6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5
Certificate serial:       4B504B2B2C091DD3C31659EE278CE899A9E319F4
Authority key identifier: 6E:0E:6A:39:72:47:D4:96:E3:9C:0A:78:DF:B1:E5:1A:71:DB:AA:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/3230302e35322e3233322e302f32322d3232203d3e20323731303139.roa
Signing time:             Tue 25 Mar 2025 20:13:32 +0000
ROA not before:           Tue 25 Mar 2025 20:08:32 +0000
ROA not after:            Tue 24 Mar 2026 20:13:32 +0000
asID:                     271019
IP address blocks:        200.52.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.crl
                          rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 08:03:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:50:4b:2b:2c:09:1d:d3:c3:16:59:ee:27:8c:e8:99:a9:e3:19:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5
        Validity
            Not Before: Mar 25 20:08:32 2025 GMT
            Not After : Mar 24 20:13:32 2026 GMT
        Subject: CN=8FC5BA0D114CA0D44F39297EAE00A83D6E8C3B3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8c:56:e9:39:d7:a6:7c:f7:77:50:ad:b2:26:
                    5b:db:7f:bf:9b:10:5e:fe:56:81:6c:16:b3:1a:5e:
                    35:06:77:76:23:28:68:6b:c5:40:d0:c0:e1:cb:9d:
                    61:e6:38:a9:ee:e9:d9:12:29:58:bc:23:b7:83:60:
                    4c:5f:28:94:7a:1b:59:10:e1:65:43:55:9e:6f:43:
                    2d:a1:9f:02:3f:d6:d5:db:8b:f3:5c:f6:27:3a:44:
                    0b:0d:78:dd:83:b7:b6:d1:df:27:0a:57:ba:08:6d:
                    38:b6:9a:7c:cd:d1:f9:74:a4:1a:93:ff:50:c1:e9:
                    57:55:a3:d6:fa:cd:ed:92:43:25:c3:c0:4e:6c:92:
                    e9:31:a4:23:14:b8:67:14:de:d3:4d:3c:19:06:ab:
                    29:20:44:16:9a:04:ef:c3:af:40:54:3c:e4:66:ae:
                    9d:bf:23:21:da:06:92:95:13:70:a1:c6:f6:ce:b1:
                    32:0a:16:9a:03:2d:a3:db:20:9d:79:ac:c4:13:ca:
                    4b:4b:5b:a6:97:85:08:92:6f:89:d4:e8:1f:d7:4e:
                    63:3e:02:38:a0:f2:e4:da:46:20:5d:b8:59:fa:73:
                    48:73:97:ca:15:ce:31:2c:35:c7:61:90:45:17:e8:
                    41:d3:ac:61:a6:bf:e1:49:02:26:37:79:5f:09:a2:
                    97:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:C5:BA:0D:11:4C:A0:D4:4F:39:29:7E:AE:00:A8:3D:6E:8C:3B:3E
            X509v3 Authority Key Identifier:
                keyid:6E:0E:6A:39:72:47:D4:96:E3:9C:0A:78:DF:B1:E5:1A:71:DB:AA:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E0E6A397247D496E39C0A78DFB1E51A71DBAAB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/3230302e35322e3233322e302f32322d3232203d3e20323731303139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.52.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:56:07:78:d4:19:ff:fe:07:7b:da:bb:d8:3f:af:12:50:77:
         ca:0f:00:ab:d8:95:7f:ef:1d:d1:35:b8:d8:3d:6a:0f:42:2b:
         e6:0a:6c:ad:25:a3:b9:f4:17:db:68:72:7b:b4:c9:76:86:33:
         56:37:58:e9:e7:ab:b7:95:b2:22:e2:49:0b:ee:af:a2:cc:1a:
         31:cb:1e:95:7a:6d:ec:3a:5f:0c:62:92:a3:1c:49:93:d2:a5:
         b5:50:45:34:b1:e5:a9:01:99:5a:b8:cf:e4:a0:c4:f7:fe:7f:
         75:d3:e5:aa:05:b6:90:3f:58:97:78:78:21:73:ac:ff:a0:59:
         0f:5e:dd:d1:ad:5a:22:af:22:b1:b1:27:99:39:6f:96:77:31:
         db:0e:ad:45:58:b7:f0:13:aa:4c:1d:b0:fd:d6:70:a4:e1:c6:
         fd:58:4e:45:06:94:15:09:da:6a:8f:4c:56:56:19:ea:26:00:
         89:73:c3:20:e8:98:f0:c6:22:b1:a9:5e:51:2e:0d:e0:be:76:
         d2:df:b5:64:f5:94:12:83:f3:bd:ce:e2:31:58:93:af:c5:b7:
         ca:ce:c2:89:5d:93:de:f1:77:32:3e:c2:8a:44:dd:63:3a:e9:
         d2:85:52:0c:33:90:ad:31:08:d5:93:0c:63:ed:26:3e:8a:89:
         65:41:89:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 18:14:16 2025 by rpki-client