Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CxSuT3Yp7f46T6KGTj3RRygzec7yfXpycu8SPHP1MkjP/0/3230302e39302e3135352e302f32342d3234203d3e20323734363135.roa
File:                     3230302e39302e3135352e302f32342d3234203d3e20323734363135.roa (raw, json)
Hash identifier:          hg8CGdYwe5F8Hly0XSt6/EVmWSNztIxfylCjn4Xl+ZI=
Subject key identifier:   CC:97:87:C3:24:25:49:B4:0F:E5:B9:7B:C8:59:37:A5:C1:2F:5D:8A
Certificate issuer:       /CN=1C01E425C778F17A85EF01B47E8119E9F9426614
Certificate serial:       24DBFB95BAE4C8E39BCA9A343A5D88D12E00B298
Authority key identifier: 1C:01:E4:25:C7:78:F1:7A:85:EF:01:B4:7E:81:19:E9:F9:42:66:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C01E425C778F17A85EF01B47E8119E9F9426614.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CxSuT3Yp7f46T6KGTj3RRygzec7yfXpycu8SPHP1MkjP/0/3230302e39302e3135352e302f32342d3234203d3e20323734363135.roa
Signing time:             Wed 11 Jun 2025 20:55:39 +0000
ROA not before:           Wed 11 Jun 2025 20:50:39 +0000
ROA not after:            Wed 10 Jun 2026 20:55:39 +0000
asID:                     274615
IP address blocks:        200.90.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CxSuT3Yp7f46T6KGTj3RRygzec7yfXpycu8SPHP1MkjP/0/1C01E425C778F17A85EF01B47E8119E9F9426614.crl
                          rsync://rpki-repo.registro.br/repo/CxSuT3Yp7f46T6KGTj3RRygzec7yfXpycu8SPHP1MkjP/0/1C01E425C778F17A85EF01B47E8119E9F9426614.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C01E425C778F17A85EF01B47E8119E9F9426614.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 15 Jun 2025 22:09:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:db:fb:95:ba:e4:c8:e3:9b:ca:9a:34:3a:5d:88:d1:2e:00:b2:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C01E425C778F17A85EF01B47E8119E9F9426614
        Validity
            Not Before: Jun 11 20:50:39 2025 GMT
            Not After : Jun 10 20:55:39 2026 GMT
        Subject: CN=CC9787C3242549B40FE5B97BC85937A5C12F5D8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:d0:07:78:d2:c5:45:cb:72:a5:bf:ea:9e:71:
                    15:0d:4f:16:24:30:6a:00:f3:ee:f8:fa:09:89:7a:
                    41:c7:9e:f0:8a:12:d4:1a:b3:32:30:ac:99:51:3c:
                    20:eb:05:e7:8e:fc:69:e7:47:6c:82:1e:49:61:de:
                    22:8a:06:00:f5:65:d8:9e:93:14:62:eb:42:b2:42:
                    23:5f:f9:74:87:18:1d:0c:a5:3c:fe:5e:ef:70:85:
                    b2:b4:a6:39:a9:82:bc:90:02:d1:5b:5f:6f:e4:de:
                    7b:22:fe:75:d9:c4:9f:1c:ec:cd:8d:61:ed:e5:73:
                    7c:e0:be:29:89:3f:43:d4:2f:66:05:1e:21:29:67:
                    ae:c3:09:de:e0:3b:71:59:96:a2:a8:00:e2:bd:ac:
                    fb:c8:df:e5:62:cf:8e:7c:24:52:ce:0c:48:4d:ab:
                    c8:9a:e1:b3:05:70:78:d4:dc:42:91:27:c5:d5:ef:
                    e3:de:22:a1:ab:42:34:9d:56:ef:06:a3:60:ba:35:
                    8f:80:68:b5:b3:d9:3f:a2:ee:2d:28:8b:80:12:16:
                    03:8e:0b:0f:ec:85:62:28:66:d2:d3:07:6c:69:ab:
                    e3:31:5c:9d:23:26:9e:9b:46:c1:70:83:4b:bf:86:
                    06:05:d8:83:08:33:3c:2b:15:5f:39:9a:c1:85:5f:
                    3d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:97:87:C3:24:25:49:B4:0F:E5:B9:7B:C8:59:37:A5:C1:2F:5D:8A
            X509v3 Authority Key Identifier:
                keyid:1C:01:E4:25:C7:78:F1:7A:85:EF:01:B4:7E:81:19:E9:F9:42:66:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CxSuT3Yp7f46T6KGTj3RRygzec7yfXpycu8SPHP1MkjP/0/1C01E425C778F17A85EF01B47E8119E9F9426614.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C01E425C778F17A85EF01B47E8119E9F9426614.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxSuT3Yp7f46T6KGTj3RRygzec7yfXpycu8SPHP1MkjP/0/3230302e39302e3135352e302f32342d3234203d3e20323734363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.90.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:25:12:ec:c8:62:b2:db:1c:99:e0:fd:af:7d:50:64:7f:3c:
         0a:92:59:1e:84:28:7e:d0:13:e5:4f:10:79:03:75:c1:72:c6:
         bd:66:78:f5:03:b0:17:17:34:35:8d:15:38:bb:34:40:db:b5:
         87:a6:16:12:73:20:ec:6b:05:83:e7:ef:df:b6:63:de:78:53:
         1b:e1:e2:1d:1c:f9:0a:d0:2c:49:15:db:f3:ea:cf:5b:80:4a:
         bc:91:0e:7a:a1:80:6c:d9:3a:79:b9:6d:f0:97:d0:a6:7a:cd:
         f7:67:93:3f:7b:89:33:ff:25:d1:49:3d:fc:a8:ce:73:01:7f:
         86:d1:90:bc:45:02:00:d2:9e:9d:b0:63:96:1f:92:f7:d4:4b:
         74:d8:70:7d:4c:5b:19:3d:69:08:47:fb:b8:9e:ed:6b:77:5f:
         7e:60:c3:52:d5:55:3c:60:1f:66:a7:e7:b3:4e:fb:90:07:fb:
         76:ee:51:54:35:fb:3d:5e:97:f7:13:0d:c2:d6:dc:7c:69:01:
         1e:81:f9:41:35:47:18:bc:fc:67:5f:26:ff:a9:d5:ec:81:33:
         13:2d:5f:ab:31:8f:32:f7:18:7f:a7:36:be:14:dc:c6:3c:9c:
         2e:ac:24:ae:31:39:b3:39:f2:63:df:5d:8c:dc:ee:7b:a3:ed:
         21:04:6a:44
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUJNv7lbrkyOObypo0Ol2I0S4AspgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUMwMUU0MjVDNzc4RjE3QTg1RUYwMUI0N0U4MTE5RTlG
OTQyNjYxNDAeFw0yNTA2MTEyMDUwMzlaFw0yNjA2MTAyMDU1MzlaMDMxMTAvBgNV
BAMTKENDOTc4N0MzMjQyNTQ5QjQwRkU1Qjk3QkM4NTkzN0E1QzEyRjVEOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD90Ad40sVFy3Klv+qecRUNTxYk
MGoA8+74+gmJekHHnvCKEtQaszIwrJlRPCDrBeeO/GnnR2yCHklh3iKKBgD1Zdie
kxRi60KyQiNf+XSHGB0MpTz+Xu9whbK0pjmpgryQAtFbX2/k3nsi/nXZxJ8c7M2N
Ye3lc3zgvimJP0PUL2YFHiEpZ67DCd7gO3FZlqKoAOK9rPvI3+Viz458JFLODEhN
q8ia4bMFcHjU3EKRJ8XV7+PeIqGrQjSdVu8Go2C6NY+AaLWz2T+i7i0oi4ASFgOO
Cw/shWIoZtLTB2xpq+MxXJ0jJp6bRsFwg0u/hgYF2IMIMzwrFV85msGFXz1VAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUzJeHwyQlSbQP5bl7yFk3pcEvXYowHwYDVR0j
BBgwFoAUHAHkJcd48XqF7wG0foEZ6flCZhQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3hTdVQzWXA3ZjQ2VDZLR1RqM1JSeWd6ZWM3eWZYcHljdThTUEhQMU1r
alAvMC8xQzAxRTQyNUM3NzhGMTdBODVFRjAxQjQ3RTgxMTlFOUY5NDI2NjE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFDMDFFNDI1Qzc3OEYxN0E4
NUVGMDFCNDdFODExOUU5Rjk0MjY2MTQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0N4U3VUM1lwN2Y0NlQ2S0dUajNSUnlnemVjN3lmWHB5Y3U4U1BIUDFNa2pQLzAv
MzIzMDMwMmUzOTMwMmUzMTM1MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzQzNjMxMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADIWpswDQYJKoZIhvcNAQELBQADggEBAIclEuzI
YrLbHJng/a99UGR/PAqSWR6EKH7QE+VPEHkDdcFyxr1mePUDsBcXNDWNFTi7NEDb
tYemFhJzIOxrBYPn79+2Y954Uxvh4h0c+QrQLEkV2/Pqz1uASryRDnqhgGzZOnm5
bfCX0KZ6zfdnkz97iTP/JdFJPfyoznMBf4bRkLxFAgDSnp2wY5YfkvfUS3TYcH1M
Wxk9aQhH+7ie7Wt3X35gw1LVVTxgH2an57NO+5AH+3buUVQ1+z1el/cTDcLW3Hxp
AR6B+UE1Rxi8/GdfJv+p1eyBMxMtX6sxjzL3GH+nNr4U3MY8nC6sJK4xObM58mPf
XYzc7nuj7SEEakQ=
-----END CERTIFICATE-----
Generated at Sun Jun 15 10:21:48 2025 by rpki-client