Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/3230302e3139322e3135352e302f32342d3234203d3e203631363133.roa
File:                     3230302e3139322e3135352e302f32342d3234203d3e203631363133.roa (raw, json)
Hash identifier:          EhtmDDkzcmiX4JwPmKMWh6GnFFKp8HYt1ZcnQJgK7m8=
Subject key identifier:   6A:85:AF:55:AB:D8:D7:45:06:74:B8:9B:9E:83:37:8A:F4:1D:F6:90
Certificate issuer:       /CN=C5CF9FEDBE2481D771195D06081D49FA4AF07171
Certificate serial:       3142B55CF80BEF8E4E1BFECFB383ECA50425C174
Authority key identifier: C5:CF:9F:ED:BE:24:81:D7:71:19:5D:06:08:1D:49:FA:4A:F0:71:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5CF9FEDBE2481D771195D06081D49FA4AF07171.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/3230302e3139322e3135352e302f32342d3234203d3e203631363133.roa
Signing time:             Tue 18 Mar 2025 00:48:31 +0000
ROA not before:           Tue 18 Mar 2025 00:43:31 +0000
ROA not after:            Tue 17 Mar 2026 00:48:31 +0000
asID:                     61613
IP address blocks:        200.192.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/C5CF9FEDBE2481D771195D06081D49FA4AF07171.crl
                          rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/C5CF9FEDBE2481D771195D06081D49FA4AF07171.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5CF9FEDBE2481D771195D06081D49FA4AF07171.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 00:14:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:42:b5:5c:f8:0b:ef:8e:4e:1b:fe:cf:b3:83:ec:a5:04:25:c1:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5CF9FEDBE2481D771195D06081D49FA4AF07171
        Validity
            Not Before: Mar 18 00:43:31 2025 GMT
            Not After : Mar 17 00:48:31 2026 GMT
        Subject: CN=6A85AF55ABD8D7450674B89B9E83378AF41DF690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:61:4c:05:af:9c:59:df:7f:79:ce:1b:50:06:
                    c9:4e:64:3b:85:56:83:23:9e:47:cb:53:ac:8f:89:
                    ff:6f:8c:d2:54:10:b7:8c:2f:24:bc:2a:99:87:2b:
                    08:12:e8:e5:d5:fa:0f:f9:5f:91:03:c9:b6:8c:96:
                    a3:7e:97:1d:f5:23:4e:d9:85:82:84:f2:a9:de:f7:
                    5c:dc:1b:12:e0:02:cf:9f:07:8a:f4:b2:05:00:c5:
                    b2:90:61:08:b8:a3:79:04:d5:3a:d8:40:03:0b:7f:
                    20:2f:5a:d8:fb:8e:82:8a:35:12:65:47:6b:58:dc:
                    b2:8d:ea:de:eb:86:3c:4c:76:00:c7:91:f9:10:26:
                    88:17:05:87:69:1a:48:bc:e4:82:cc:d0:e6:70:4a:
                    73:ab:53:bc:d4:1e:18:c9:0f:cd:a5:64:b7:a9:f1:
                    a9:78:e6:8a:27:0c:6a:23:2c:68:55:b9:e3:2c:9f:
                    73:3b:b1:59:17:f0:91:2a:c6:d4:fe:b2:a0:be:92:
                    2f:8f:d8:e7:b2:d1:b7:e4:ba:43:5a:6f:8e:e1:34:
                    27:31:93:57:52:87:ff:f5:ec:de:1a:4e:58:0f:3f:
                    84:1d:0a:bb:1c:a1:48:38:61:7b:26:10:5a:31:87:
                    9a:3b:81:7e:9b:3c:7d:40:06:3d:28:42:5a:df:d5:
                    39:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:85:AF:55:AB:D8:D7:45:06:74:B8:9B:9E:83:37:8A:F4:1D:F6:90
            X509v3 Authority Key Identifier:
                keyid:C5:CF:9F:ED:BE:24:81:D7:71:19:5D:06:08:1D:49:FA:4A:F0:71:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/C5CF9FEDBE2481D771195D06081D49FA4AF07171.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5CF9FEDBE2481D771195D06081D49FA4AF07171.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/3230302e3139322e3135352e302f32342d3234203d3e203631363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.192.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:0c:3b:6e:9f:66:0f:5d:b2:f2:32:93:1b:37:f1:70:94:03:
         77:15:d2:ea:06:d1:36:51:86:f9:a4:c3:63:4a:da:b2:3b:46:
         47:f7:f7:da:41:36:5b:84:21:af:4c:8d:ec:ee:76:18:3b:82:
         a0:c8:fa:4e:91:29:32:94:df:10:11:51:5b:f1:e4:6d:75:ea:
         90:50:c5:33:c8:c7:92:c0:19:4b:b5:85:d2:83:66:b0:74:de:
         2c:3e:47:e0:a4:fd:07:06:17:a5:57:9d:83:64:ac:f5:01:db:
         d2:ff:5f:c3:40:3a:9c:e1:a1:5b:c7:b4:1f:d2:e9:92:e5:7e:
         bd:b2:cd:54:4a:d7:e7:23:b6:d4:4e:0e:06:fb:40:2c:8f:6f:
         f3:b8:ea:f3:5a:0c:0a:79:45:b9:b6:f1:cd:9b:e9:89:ac:11:
         84:93:3e:bf:75:4b:dc:37:87:ee:3d:af:f0:92:3b:a6:75:35:
         4f:99:ad:af:1a:ba:c1:d5:3f:f9:78:08:f0:12:eb:58:9d:e9:
         d6:9a:ff:c2:03:74:b0:52:8c:6b:73:5f:35:bf:11:f0:ce:2d:
         ef:d6:b4:02:fc:fe:73:ec:2a:ba:b5:86:4a:61:ad:ea:5e:0f:
         d1:ef:18:75:d5:14:35:d5:b1:67:6e:3b:17:8e:54:ef:2b:5e:
         2e:ab:fc:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 07:12:08 2025 by rpki-client