Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/3230302e33392e34392e302f32342d3234203d3e20323731353234.roa
File:                     3230302e33392e34392e302f32342d3234203d3e20323731353234.roa (raw, json)
Hash identifier:          KleVsHAqtvWr8k2742HawWCdXqH/hhdJzyliz+AilX4=
Subject key identifier:   C1:9E:1D:6E:E7:0D:3E:CD:52:D0:CF:61:AF:04:20:51:AC:ED:EB:E7
Certificate issuer:       /CN=2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647
Certificate serial:       40A9704B88E0072F3F22681BCBB1C0A0FA31EA07
Authority key identifier: 2D:D9:7F:5E:85:D5:A9:57:8E:78:94:0C:FD:5B:AE:DF:B8:2E:06:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/3230302e33392e34392e302f32342d3234203d3e20323731353234.roa
Signing time:             Wed 07 May 2025 03:51:59 +0000
ROA not before:           Wed 07 May 2025 03:46:59 +0000
ROA not after:            Wed 06 May 2026 03:51:59 +0000
asID:                     271524
IP address blocks:        200.39.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.crl
                          rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 14:56:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:a9:70:4b:88:e0:07:2f:3f:22:68:1b:cb:b1:c0:a0:fa:31:ea:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647
        Validity
            Not Before: May  7 03:46:59 2025 GMT
            Not After : May  6 03:51:59 2026 GMT
        Subject: CN=C19E1D6EE70D3ECD52D0CF61AF042051ACEDEBE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:43:51:f6:40:05:d7:ae:9d:01:84:79:80:03:
                    cc:37:dd:62:64:f2:75:75:06:e9:e9:69:6d:2b:81:
                    9e:2f:8e:a4:84:ca:3c:d1:a1:b1:f0:82:c9:87:6d:
                    17:4a:c1:6d:49:29:b9:0e:a8:3c:ac:cb:f3:36:dc:
                    3e:45:da:0e:55:e6:1b:26:58:5c:97:28:4f:97:97:
                    ec:e3:bc:f0:b4:5d:85:fb:3f:33:18:49:c8:4e:06:
                    5e:db:60:b7:0e:58:91:0e:15:aa:91:79:51:83:d5:
                    8e:b7:9d:fd:a0:54:f3:e3:f0:36:39:71:27:64:6a:
                    fa:9c:9b:a7:5f:e7:b2:2f:07:17:cb:2d:68:f3:6b:
                    a9:73:88:76:d0:37:85:a5:75:9b:f1:32:6a:76:bf:
                    52:1d:54:8c:aa:43:80:24:dd:de:75:4c:c5:a3:e2:
                    c5:4e:1d:b7:1f:9a:95:bd:30:d3:86:b1:68:3b:3b:
                    0d:1f:52:d9:af:b2:2e:a7:d4:e0:20:5a:33:44:53:
                    29:69:97:7a:f2:e7:1f:4a:51:d3:6b:a7:04:32:a0:
                    24:8e:bf:b6:4d:ea:1f:47:85:c2:1f:1e:e5:f2:ca:
                    61:09:50:b8:be:30:ca:f8:fd:23:33:67:99:5d:e8:
                    0e:dc:1c:33:ed:71:66:e7:3a:75:61:06:c4:19:fb:
                    f2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:9E:1D:6E:E7:0D:3E:CD:52:D0:CF:61:AF:04:20:51:AC:ED:EB:E7
            X509v3 Authority Key Identifier:
                keyid:2D:D9:7F:5E:85:D5:A9:57:8E:78:94:0C:FD:5B:AE:DF:B8:2E:06:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/3230302e33392e34392e302f32342d3234203d3e20323731353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:fb:d8:03:e5:6b:84:d8:93:f9:73:9b:e9:83:0e:25:ea:f8:
         29:ff:d8:fd:88:11:02:c2:71:d7:73:4f:c9:b2:3b:8e:22:39:
         d2:e1:40:8f:ae:8a:91:5b:a0:57:6c:c0:eb:43:e3:75:6e:a2:
         47:42:c2:97:9f:92:1c:f5:d6:a6:35:86:cf:41:12:10:eb:1f:
         c7:1a:09:c9:e6:fc:eb:04:b9:67:d0:e7:84:0d:95:6f:df:69:
         28:09:5a:f5:ca:45:e3:90:42:a2:a7:3a:20:ff:54:d8:bc:cb:
         93:a8:a1:76:48:97:3a:73:3b:ac:1a:61:e0:c6:9c:2c:c8:2b:
         bc:a2:0d:8c:85:13:97:ba:ad:70:0e:27:96:6e:60:bd:e7:c2:
         50:77:20:ba:be:9e:a3:f2:48:2f:0b:b4:06:7e:b2:22:39:ef:
         0c:a1:77:5e:4e:ce:2c:fa:df:09:fa:04:c5:3c:6f:22:de:e2:
         14:c1:b9:ff:a4:cb:6b:ba:35:ae:2e:6b:ef:6e:6c:df:1b:34:
         77:d8:89:81:8e:ee:3c:bb:b9:73:9d:31:bc:ea:1f:70:5d:9a:
         d1:6a:42:f8:e5:13:bf:01:84:cd:a8:51:42:bb:2e:50:c1:58:
         e9:05:69:10:40:dc:af:d5:bb:14:f7:6d:5c:bc:64:7c:c8:ac:
         cb:0c:c2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:39:22 2025 by rpki-client