Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/3230302e36362e3131322e302f32332d3233203d3e20323632383132.roa
File:                     3230302e36362e3131322e302f32332d3233203d3e20323632383132.roa (raw, json)
Hash identifier:          FON6k5t60/c78bSEu3aLXlJ/zPyRt6Frbp6oMAB6pcU=
Subject key identifier:   F8:90:26:EA:EF:60:B0:E4:6D:B4:07:73:0C:B6:6A:00:E5:EB:10:C3
Certificate issuer:       /CN=A8C40D851EE06F7454DE9587BD8710CA3EAB8536
Certificate serial:       30725DA31C7F800B745DEDAFCCE676977653F724
Authority key identifier: A8:C4:0D:85:1E:E0:6F:74:54:DE:95:87:BD:87:10:CA:3E:AB:85:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/3230302e36362e3131322e302f32332d3233203d3e20323632383132.roa
Signing time:             Mon 12 Aug 2024 14:41:06 +0000
ROA not before:           Mon 12 Aug 2024 14:36:06 +0000
ROA not after:            Mon 11 Aug 2025 14:41:06 +0000
asID:                     262812
IP address blocks:        200.66.112.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.crl
                          rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 13:30:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:72:5d:a3:1c:7f:80:0b:74:5d:ed:af:cc:e6:76:97:76:53:f7:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8C40D851EE06F7454DE9587BD8710CA3EAB8536
        Validity
            Not Before: Aug 12 14:36:06 2024 GMT
            Not After : Aug 11 14:41:06 2025 GMT
        Subject: CN=F89026EAEF60B0E46DB407730CB66A00E5EB10C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d2:15:e8:e6:e5:86:94:b4:ea:be:c1:3f:54:
                    ea:d6:c9:c3:00:9f:e6:55:66:ea:ea:5e:c4:9a:1a:
                    08:58:98:06:fb:c7:59:80:d9:7d:10:8d:3c:95:1a:
                    f2:16:13:6b:b6:2f:d8:48:bf:47:1c:21:18:76:00:
                    1c:4c:47:29:b1:b2:77:ee:46:b8:2c:64:c5:b4:b3:
                    34:35:fd:35:9c:a9:96:cf:40:04:a9:fe:b3:78:ec:
                    8f:c5:b8:68:df:2b:8d:4d:3c:c1:03:cf:02:a4:4c:
                    50:50:2c:6a:dd:c8:1a:fc:28:5e:e2:49:cc:2d:25:
                    ca:c4:c9:66:4d:fb:6f:d5:6b:d9:49:0d:d0:e4:ae:
                    a8:e7:a4:81:9b:de:58:53:a8:6d:76:6b:0b:9f:a3:
                    69:c4:bb:27:fd:1f:c6:ff:df:7f:e8:35:9b:4e:d8:
                    c9:ed:cb:e7:13:7a:75:d5:03:cc:31:b5:d0:81:7f:
                    ba:6e:26:3e:e5:60:99:63:8f:19:bf:09:89:6d:6a:
                    1f:55:65:78:7f:64:32:5d:54:c3:81:c3:66:e2:56:
                    9e:80:05:78:ca:b6:f0:16:60:e9:c6:21:d5:e4:71:
                    4b:ea:59:59:48:a8:b0:35:99:a9:61:8e:61:33:ce:
                    bb:49:37:db:fa:cb:f0:74:0f:b3:26:62:ce:b1:75:
                    c3:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:90:26:EA:EF:60:B0:E4:6D:B4:07:73:0C:B6:6A:00:E5:EB:10:C3
            X509v3 Authority Key Identifier:
                keyid:A8:C4:0D:85:1E:E0:6F:74:54:DE:95:87:BD:87:10:CA:3E:AB:85:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/3230302e36362e3131322e302f32332d3233203d3e20323632383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.66.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:33:cc:bb:1a:61:e9:da:49:a4:e4:12:ca:fd:5e:47:3e:61:
         0e:e4:43:ca:68:8e:a3:71:a1:21:40:c3:ba:66:01:8e:e8:ee:
         9a:97:fc:53:2f:d5:15:0e:3a:7e:d6:fa:16:37:d2:05:1e:ed:
         46:6e:76:8b:ff:0a:62:9b:95:51:99:6c:b9:ea:e2:a1:3e:31:
         9e:b5:8b:b7:d9:23:2a:b9:8c:f7:90:29:b3:37:e6:b6:09:cd:
         a4:2f:1e:ad:9b:45:78:9e:7c:98:49:12:e9:ff:dc:93:1f:c8:
         ba:c5:54:10:50:e8:0e:b1:b0:bc:43:e2:47:d5:a9:7e:19:12:
         0c:46:f6:e1:6e:1c:05:ae:e2:8e:ce:9d:42:03:2b:18:37:0b:
         14:f0:fb:b3:a9:88:2d:b5:b0:b0:c6:df:f4:25:3b:af:9d:51:
         8e:fb:53:85:5a:95:4a:fb:40:d1:18:6f:0f:58:3e:70:ab:23:
         84:33:8f:e7:bc:28:d3:46:64:b8:4c:fc:aa:ed:ce:68:0f:7a:
         f5:d7:3d:85:31:e9:e5:5c:7b:21:94:16:9f:cb:de:e7:ec:4a:
         29:02:c6:61:a4:4c:01:d6:25:5e:8d:53:f0:3d:6e:ed:67:be:
         c7:3f:61:5a:07:e8:1a:e3:04:ec:c9:07:24:cf:7b:ea:ad:1a:
         a2:a0:1d:f7
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUMHJdoxx/gAt0Xe2vzOZ2l3ZT9yQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQThDNDBEODUxRUUwNkY3NDU0REU5NTg3QkQ4NzEwQ0Ez
RUFCODUzNjAeFw0yNDA4MTIxNDM2MDZaFw0yNTA4MTExNDQxMDZaMDMxMTAvBgNV
BAMTKEY4OTAyNkVBRUY2MEIwRTQ2REI0MDc3MzBDQjY2QTAwRTVFQjEwQzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs0hXo5uWGlLTqvsE/VOrWycMA
n+ZVZurqXsSaGghYmAb7x1mA2X0QjTyVGvIWE2u2L9hIv0ccIRh2ABxMRymxsnfu
RrgsZMW0szQ1/TWcqZbPQASp/rN47I/FuGjfK41NPMEDzwKkTFBQLGrdyBr8KF7i
ScwtJcrEyWZN+2/Va9lJDdDkrqjnpIGb3lhTqG12awufo2nEuyf9H8b/33/oNZtO
2Mnty+cTenXVA8wxtdCBf7puJj7lYJljjxm/CYltah9VZXh/ZDJdVMOBw2biVp6A
BXjKtvAWYOnGIdXkcUvqWVlIqLA1malhjmEzzrtJN9v6y/B0D7MmYs6xdcMnAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU+JAm6u9gsORttAdzDLZqAOXrEMMwHwYDVR0j
BBgwFoAUqMQNhR7gb3RU3pWHvYcQyj6rhTYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3JwZENGNVRqUVVndEI1dmJ5NGRMaU1TbkVFRjFrV0IzOHJyNjN3Nkx3
ZncvMC9BOEM0MEQ4NTFFRTA2Rjc0NTRERTk1ODdCRDg3MTBDQTNFQUI4NTM2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E4QzQwRDg1MUVFMDZGNzQ1
NERFOTU4N0JEODcxMENBM0VBQjg1MzYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NycGRDRjVUalFVZ3RCNXZieTRkTGlNU25FRUYxa1dCMzhycjYzdzZMd2Z3LzAv
MzIzMDMwMmUzNjM2MmUzMTMxMzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzIzODMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAHIQnAwDQYJKoZIhvcNAQELBQADggEBABAzzLsa
YenaSaTkEsr9Xkc+YQ7kQ8pojqNxoSFAw7pmAY7o7pqX/FMv1RUOOn7W+hY30gUe
7UZudov/CmKblVGZbLnq4qE+MZ61i7fZIyq5jPeQKbM35rYJzaQvHq2bRXiefJhJ
Eun/3JMfyLrFVBBQ6A6xsLxD4kfVqX4ZEgxG9uFuHAWu4o7OnUIDKxg3CxTw+7Op
iC21sLDG3/QlO6+dUY77U4ValUr7QNEYbw9YPnCrI4Qzj+e8KNNGZLhM/KrtzmgP
evXXPYUx6eVceyGUFp/L3ufsSikCxmGkTAHWJV6NU/A9bu1nvsc/YVoH6BrjBOzJ
ByTPe+qtGqKgHfc=
-----END CERTIFICATE-----
Generated at Fri Apr 18 18:14:36 2025 by rpki-client