Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/3230302e33392e34382e302f32322d3232203d3e20323731353234.roa
File:                     3230302e33392e34382e302f32322d3232203d3e20323731353234.roa (raw, json)
Hash identifier:          Vp+ej4dQx+65lyUdgAHuPgBaf+ucorRNSBDiDndfVME=
Subject key identifier:   14:5E:3F:2B:C3:33:C6:07:38:FA:BD:D3:6A:58:70:20:13:C2:94:74
Certificate issuer:       /CN=2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647
Certificate serial:       1861F66CB327F1DA273ED20834F011F20CA0A237
Authority key identifier: 2D:D9:7F:5E:85:D5:A9:57:8E:78:94:0C:FD:5B:AE:DF:B8:2E:06:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/3230302e33392e34382e302f32322d3232203d3e20323731353234.roa
Signing time:             Wed 07 May 2025 03:52:00 +0000
ROA not before:           Wed 07 May 2025 03:47:00 +0000
ROA not after:            Wed 06 May 2026 03:52:00 +0000
asID:                     271524
IP address blocks:        200.39.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.crl
                          rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 14:56:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:61:f6:6c:b3:27:f1:da:27:3e:d2:08:34:f0:11:f2:0c:a0:a2:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647
        Validity
            Not Before: May  7 03:47:00 2025 GMT
            Not After : May  6 03:52:00 2026 GMT
        Subject: CN=145E3F2BC333C60738FABDD36A58702013C29474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a7:cb:f4:4d:78:3f:5f:33:92:d3:1e:99:ab:
                    8a:c7:ec:8d:38:59:ab:96:ca:06:78:2c:57:02:4d:
                    76:c9:56:5f:6c:65:0e:a0:4a:d2:a1:3f:d2:51:ea:
                    0f:fd:7b:dc:5c:b7:72:be:05:be:9f:9f:47:f3:0d:
                    48:9e:6b:f6:de:ff:59:3b:31:8f:36:85:67:b5:8f:
                    93:b5:47:b3:33:9c:9a:fb:80:ca:06:90:2f:0a:03:
                    c5:74:f6:a0:f3:97:c5:30:76:b9:a2:f8:13:14:4a:
                    fc:04:09:33:e0:4e:3e:b3:04:d4:7a:a7:ea:c5:5c:
                    83:d6:44:fd:4c:4f:a6:59:ac:d2:95:8d:f7:38:3d:
                    19:8a:c0:a4:b6:7e:d4:68:31:16:61:00:d4:13:47:
                    0e:c3:1f:0c:d0:65:f6:f3:d3:ca:8b:a7:42:b8:54:
                    38:ef:4d:2b:c5:15:49:cb:80:bb:56:91:9a:bb:ce:
                    50:eb:0d:39:e8:47:2b:bd:32:d2:2a:ea:84:60:a9:
                    bd:7d:99:5d:3e:81:49:55:af:8e:70:47:39:47:71:
                    d2:c5:4d:94:5f:60:1d:0f:75:21:be:6e:19:8b:02:
                    93:5e:e5:c6:2b:cd:40:99:fc:93:07:d7:cf:e3:f4:
                    81:23:e2:9f:41:91:f0:f8:1c:66:fc:92:a5:50:78:
                    62:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:5E:3F:2B:C3:33:C6:07:38:FA:BD:D3:6A:58:70:20:13:C2:94:74
            X509v3 Authority Key Identifier:
                keyid:2D:D9:7F:5E:85:D5:A9:57:8E:78:94:0C:FD:5B:AE:DF:B8:2E:06:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/3230302e33392e34382e302f32322d3232203d3e20323731353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:b6:7f:10:a7:29:09:58:c3:a6:91:22:c8:33:e0:78:6d:44:
         dc:04:fa:94:8f:4a:78:bf:b0:2d:d2:c2:47:40:ff:ab:f0:b5:
         08:49:a4:2e:cd:6c:d6:49:37:1a:fe:8d:3b:eb:56:b4:5b:81:
         77:cf:9e:53:b9:bb:7c:a8:c9:86:58:dc:8f:db:f2:b8:19:dd:
         dc:42:f8:80:c8:78:69:c5:7a:a2:eb:cb:fc:7e:0a:7b:b6:16:
         a5:91:5e:f7:a9:de:71:4a:b0:be:47:94:4e:70:bb:20:d3:15:
         3e:9d:0a:bb:eb:89:aa:12:4c:0c:c0:91:1b:a6:33:3e:88:a9:
         de:f9:98:f3:81:c6:57:0c:eb:83:f0:85:00:07:3d:fb:eb:22:
         6a:f4:82:6d:56:bb:82:7f:6f:1d:91:c3:7b:f8:c2:1e:d4:50:
         6d:d5:77:db:a9:f5:6a:15:fe:11:5e:d1:b6:a8:13:d8:4b:27:
         07:13:a6:76:bb:7a:5b:17:1c:ba:40:86:c4:13:32:92:ba:a9:
         a5:73:4d:7e:01:fc:71:b8:2f:0a:34:0b:01:31:e6:ed:4c:02:
         7f:5e:1f:d4:1d:3d:b4:f9:3b:cd:9b:18:74:9a:88:4a:50:f5:
         db:7b:02:90:9a:9b:2b:cb:e0:3e:d2:41:3a:6a:dc:88:9b:70:
         52:67:31:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:22:16 2025 by rpki-client