Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/3230302e35332e36352e302f32342d3234203d3e20323731353034.roa
File:                     3230302e35332e36352e302f32342d3234203d3e20323731353034.roa (raw, json)
Hash identifier:          r0jEZG4cGBEfJwFJTim9Ug7TmdxuJXItdVc7N1BqIFM=
Subject key identifier:   09:55:96:A1:DE:89:B9:A0:C0:8A:1D:D1:56:38:7F:72:52:B1:13:C3
Certificate issuer:       /CN=3B9278887F13B27AA11B20954CB918BC341F1426
Certificate serial:       288B2B4FBFD2ED414BA52D30266D663BF2AA7626
Authority key identifier: 3B:92:78:88:7F:13:B2:7A:A1:1B:20:95:4C:B9:18:BC:34:1F:14:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B9278887F13B27AA11B20954CB918BC341F1426.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/3230302e35332e36352e302f32342d3234203d3e20323731353034.roa
Signing time:             Thu 27 Feb 2025 14:51:39 +0000
ROA not before:           Thu 27 Feb 2025 14:46:39 +0000
ROA not after:            Thu 26 Feb 2026 14:51:39 +0000
asID:                     271504
IP address blocks:        200.53.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/3B9278887F13B27AA11B20954CB918BC341F1426.crl
                          rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/3B9278887F13B27AA11B20954CB918BC341F1426.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B9278887F13B27AA11B20954CB918BC341F1426.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Mar 2025 21:54:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:8b:2b:4f:bf:d2:ed:41:4b:a5:2d:30:26:6d:66:3b:f2:aa:76:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B9278887F13B27AA11B20954CB918BC341F1426
        Validity
            Not Before: Feb 27 14:46:39 2025 GMT
            Not After : Feb 26 14:51:39 2026 GMT
        Subject: CN=095596A1DE89B9A0C08A1DD156387F7252B113C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d2:dd:74:e8:ad:b3:45:17:d6:fd:50:35:99:
                    15:a4:68:30:6d:dd:17:48:a9:d5:70:05:21:bb:f1:
                    4f:d3:40:0f:ae:a4:c8:c6:65:79:c3:39:4b:33:11:
                    5c:ae:84:90:b6:c6:2f:04:b2:34:51:e2:e3:1e:96:
                    23:66:11:9a:4c:c7:e8:ac:88:66:24:13:0c:a0:30:
                    75:ba:50:61:00:f8:45:f2:15:54:55:e6:9d:51:65:
                    47:7a:d0:21:12:28:d2:fe:f3:a8:9e:5c:77:82:f5:
                    b9:ef:9c:97:81:72:f9:98:4c:06:c9:fc:40:d3:40:
                    32:f8:65:a1:fd:a3:8e:de:2d:81:dd:12:7a:76:f6:
                    5b:b2:c2:8a:45:d4:f3:08:51:43:bc:04:8e:26:e0:
                    cf:25:64:6d:3f:f8:a2:d0:d1:30:8c:31:45:b4:8b:
                    1a:10:b2:73:35:ed:2c:9d:25:36:a0:f3:b9:f0:60:
                    0d:e8:c0:bd:50:19:28:8b:7b:f9:82:af:36:5b:a4:
                    d2:25:e6:4a:05:e6:ff:36:c4:91:90:c7:c2:6e:f8:
                    6f:e9:f2:cb:b2:73:53:07:e7:d0:b6:85:ad:a9:1f:
                    01:4f:4f:cb:1a:cb:aa:d9:94:e0:a3:6e:35:c3:ff:
                    0f:e3:7a:3c:c7:e2:5a:a2:5e:5b:47:11:59:b5:59:
                    4d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:55:96:A1:DE:89:B9:A0:C0:8A:1D:D1:56:38:7F:72:52:B1:13:C3
            X509v3 Authority Key Identifier:
                keyid:3B:92:78:88:7F:13:B2:7A:A1:1B:20:95:4C:B9:18:BC:34:1F:14:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/3B9278887F13B27AA11B20954CB918BC341F1426.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B9278887F13B27AA11B20954CB918BC341F1426.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/3230302e35332e36352e302f32342d3234203d3e20323731353034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:4a:1d:e4:ca:b4:92:6c:f1:d6:96:5e:2d:e7:f7:ed:70:9f:
         b6:c2:88:14:13:24:32:4f:55:65:7d:07:65:c1:09:c6:c4:7f:
         6e:e5:cb:16:7a:e8:1b:db:61:d5:99:40:f8:31:c5:dd:f6:bc:
         5c:9d:c2:73:56:f5:6e:77:30:91:7f:cb:73:56:34:8f:02:8b:
         4a:aa:5b:22:fc:c7:76:21:13:84:d8:b2:4f:48:30:cc:12:7d:
         a4:b8:1d:dd:2e:27:78:32:cc:5c:66:24:51:da:cd:d3:d5:95:
         ad:22:36:26:c8:dd:49:1a:93:89:2c:cd:f5:5f:d1:6d:0f:03:
         bd:83:54:18:5b:7e:84:6b:df:68:28:74:32:8c:fd:de:a5:67:
         f0:a3:fd:c6:96:14:24:fe:a7:fe:fa:7e:b7:e4:a3:52:e1:72:
         28:14:a0:82:2b:93:67:47:7d:f9:cf:f8:39:f0:3b:d6:f0:e3:
         5a:3d:b6:5f:6b:ee:66:0f:5d:89:a0:ae:9f:24:87:8f:65:f4:
         d2:e8:b6:27:e3:1c:bd:3a:89:fa:30:9f:17:be:5a:d2:ca:d0:
         fb:4a:bc:13:09:01:71:8e:ed:32:2d:e9:9e:70:f8:89:74:35:
         cf:b5:c0:4d:d1:83:0b:69:1a:17:4f:11:72:15:b6:9d:fc:8d:
         8c:d1:4b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 03:41:12 2025 by rpki-client