Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVDouUtADFMT5aJAAqBC4UQYZQYYAFL6EwCZWKWobMZ/0/3230312e35342e3139312e302f32342d3234203d3e20323731313337.roa
File:                     3230312e35342e3139312e302f32342d3234203d3e20323731313337.roa (raw, json)
Hash identifier:          vlOYDM/5jU/QeRDVwYcUqCbNcHk3tesZc9pMvhLaTN4=
Subject key identifier:   CE:E1:8B:8E:2F:A7:6E:16:82:09:AD:E4:32:8B:01:66:99:56:E4:87
Certificate issuer:       /CN=FC8054C13E33D34A2ACD3417AEC6EF030CF52C69
Certificate serial:       15FE6F20B705DFB28805BAB0B3FA8CF473F2363D
Authority key identifier: FC:80:54:C1:3E:33:D3:4A:2A:CD:34:17:AE:C6:EF:03:0C:F5:2C:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC8054C13E33D34A2ACD3417AEC6EF030CF52C69.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVDouUtADFMT5aJAAqBC4UQYZQYYAFL6EwCZWKWobMZ/0/3230312e35342e3139312e302f32342d3234203d3e20323731313337.roa
Signing time:             Wed 05 Mar 2025 14:01:54 +0000
ROA not before:           Wed 05 Mar 2025 13:56:54 +0000
ROA not after:            Wed 04 Mar 2026 14:01:54 +0000
asID:                     271137
IP address blocks:        201.54.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DVDouUtADFMT5aJAAqBC4UQYZQYYAFL6EwCZWKWobMZ/0/FC8054C13E33D34A2ACD3417AEC6EF030CF52C69.crl
                          rsync://rpki-repo.registro.br/repo/DVDouUtADFMT5aJAAqBC4UQYZQYYAFL6EwCZWKWobMZ/0/FC8054C13E33D34A2ACD3417AEC6EF030CF52C69.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC8054C13E33D34A2ACD3417AEC6EF030CF52C69.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 05:24:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:fe:6f:20:b7:05:df:b2:88:05:ba:b0:b3:fa:8c:f4:73:f2:36:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC8054C13E33D34A2ACD3417AEC6EF030CF52C69
        Validity
            Not Before: Mar  5 13:56:54 2025 GMT
            Not After : Mar  4 14:01:54 2026 GMT
        Subject: CN=CEE18B8E2FA76E168209ADE4328B01669956E487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4c:08:1d:3b:50:f2:08:09:13:d8:a2:be:4c:
                    eb:79:6f:f9:6b:cb:da:58:47:30:a8:b7:e0:85:c7:
                    71:ef:c2:1d:ef:6c:ec:b5:12:a3:1c:d0:10:d8:9d:
                    28:82:30:a6:55:19:67:42:dd:fe:e3:64:a5:cc:40:
                    2d:cd:80:0f:d6:58:19:a9:ad:c7:d6:44:f2:87:05:
                    70:72:84:cc:f1:89:69:9c:c5:df:6d:c4:55:b3:8b:
                    3a:be:94:fb:27:e6:3f:33:71:4a:20:82:ff:1c:58:
                    f8:f8:84:32:9d:47:62:8e:f3:23:d1:78:fb:43:f9:
                    88:09:9e:e5:c3:a6:82:3e:cc:16:69:2a:7a:cf:1d:
                    23:ea:f9:43:3f:f1:5c:00:f0:34:35:95:e7:a5:5f:
                    ec:68:45:ff:49:33:d3:79:4c:57:5e:90:cc:4f:90:
                    aa:3d:6b:c3:13:84:20:8a:8b:2a:45:2f:49:73:46:
                    9b:38:cd:64:4c:40:c5:63:86:04:42:57:49:78:0b:
                    77:53:f3:f3:ec:b6:53:33:17:42:16:3f:97:46:88:
                    71:87:ab:14:46:7a:5b:36:63:be:0c:37:ec:11:54:
                    69:46:40:69:bf:bc:27:b7:a6:54:bd:47:29:7e:d8:
                    9d:6f:6d:fa:e9:f8:20:6b:d2:e4:9c:17:b0:63:43:
                    46:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:E1:8B:8E:2F:A7:6E:16:82:09:AD:E4:32:8B:01:66:99:56:E4:87
            X509v3 Authority Key Identifier:
                keyid:FC:80:54:C1:3E:33:D3:4A:2A:CD:34:17:AE:C6:EF:03:0C:F5:2C:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVDouUtADFMT5aJAAqBC4UQYZQYYAFL6EwCZWKWobMZ/0/FC8054C13E33D34A2ACD3417AEC6EF030CF52C69.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC8054C13E33D34A2ACD3417AEC6EF030CF52C69.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVDouUtADFMT5aJAAqBC4UQYZQYYAFL6EwCZWKWobMZ/0/3230312e35342e3139312e302f32342d3234203d3e20323731313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.54.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:f3:c1:29:2e:05:19:f2:3b:fc:f4:14:a7:61:5b:b8:97:54:
         76:1b:1e:b8:57:34:cd:c9:70:79:6b:da:67:b7:dc:5d:34:c3:
         98:a4:5e:0c:80:bc:bf:ed:7f:4a:45:82:45:50:46:64:62:d5:
         d5:a2:4b:29:e8:8b:f7:38:02:d1:46:58:3b:3b:85:99:c1:bf:
         a9:e6:df:70:2f:4b:75:73:bc:87:87:fd:06:f1:3b:ef:72:b3:
         92:cb:9f:91:27:ab:53:f3:51:45:4c:29:6f:08:cb:20:a8:72:
         6a:1d:03:59:7a:21:b4:85:a1:06:96:01:c0:20:29:1e:97:44:
         8c:d4:9f:de:17:51:b1:72:18:65:aa:28:05:7a:21:45:08:29:
         97:96:82:16:a4:9e:1e:32:18:11:a8:2b:82:32:e1:e9:75:97:
         da:e4:db:50:da:1e:99:0b:4b:d7:16:f7:96:d5:75:ac:20:d1:
         d9:29:ab:64:9f:f8:59:40:24:24:1d:be:1e:0b:5b:9b:d6:b2:
         45:69:b1:c6:28:fb:5e:47:ae:3c:98:72:e1:bf:e2:3b:69:7b:
         e7:ac:bc:35:ad:32:46:a2:d2:2d:fa:31:ec:2f:21:15:d1:c1:
         1a:e9:44:d5:69:79:db:df:81:17:f4:d4:48:3e:f5:41:9d:82:
         e8:9a:cc:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:16:41 2025 by rpki-client