Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/3230302e3232302e3139322e302f31392d3332203d3e20323632353839.roa
File:                     3230302e3232302e3139322e302f31392d3332203d3e20323632353839.roa (raw, json)
Hash identifier:          NKiV8kxqpvp55mTvFxkmjzDHdS7FDhV0knj4B56TDCo=
Subject key identifier:   B1:09:3A:6B:07:B7:C7:F0:FA:F0:9A:FF:23:60:B3:F0:FA:43:A6:8A
Certificate issuer:       /CN=C693E96398CDA5F5A4E242A3FD09B13E8AED7697
Certificate serial:       89FD1BDAEF4A169F3031897B8357347F4FC306
Authority key identifier: C6:93:E9:63:98:CD:A5:F5:A4:E2:42:A3:FD:09:B1:3E:8A:ED:76:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/3230302e3232302e3139322e302f31392d3332203d3e20323632353839.roa
Signing time:             Fri 07 Mar 2025 20:11:45 +0000
ROA not before:           Fri 07 Mar 2025 20:06:45 +0000
ROA not after:            Fri 06 Mar 2026 20:11:45 +0000
asID:                     262589
IP address blocks:        200.220.192.0/19 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.crl
                          rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 16:28:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            89:fd:1b:da:ef:4a:16:9f:30:31:89:7b:83:57:34:7f:4f:c3:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C693E96398CDA5F5A4E242A3FD09B13E8AED7697
        Validity
            Not Before: Mar  7 20:06:45 2025 GMT
            Not After : Mar  6 20:11:45 2026 GMT
        Subject: CN=B1093A6B07B7C7F0FAF09AFF2360B3F0FA43A68A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:46:a5:c9:c5:e5:73:82:6b:70:c1:a6:0f:3a:
                    81:2d:d8:d5:a5:06:3d:75:68:2a:b9:6e:4b:50:1c:
                    08:45:bc:9a:9c:6e:ce:26:ee:f6:dd:f3:0f:63:86:
                    3f:d3:c9:c7:f0:2d:e2:83:11:ff:28:e9:e2:e8:72:
                    d6:39:1f:48:f7:ab:6a:b1:39:9f:26:b3:12:41:b8:
                    ff:01:f0:44:02:c5:6f:16:e6:56:50:55:0d:46:b8:
                    d5:a7:83:45:be:7c:d1:63:36:39:70:42:8f:58:b6:
                    76:f9:2e:21:cd:99:ba:57:a5:74:94:c4:46:16:64:
                    b8:3a:7e:7b:30:93:39:d6:c9:88:f8:06:3a:da:42:
                    6a:cf:63:b6:a7:ec:24:6d:b6:ca:de:1a:10:18:4c:
                    54:aa:24:8b:4f:57:40:47:ec:32:aa:84:0c:6f:a0:
                    4f:72:97:ca:11:af:85:e7:fc:d1:ea:be:51:d2:57:
                    87:0e:1d:5a:e3:f4:73:2d:34:f5:22:4e:53:00:3d:
                    85:ae:fd:36:f9:b3:66:8b:af:6d:5d:13:ce:aa:22:
                    cd:d5:fa:59:30:49:1d:90:95:51:5d:2f:28:1f:5e:
                    25:85:65:e4:61:01:eb:5b:36:fc:fb:24:22:85:28:
                    6e:fa:4c:cd:82:6f:77:b1:7d:c9:ef:c9:a0:44:ed:
                    c2:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:09:3A:6B:07:B7:C7:F0:FA:F0:9A:FF:23:60:B3:F0:FA:43:A6:8A
            X509v3 Authority Key Identifier:
                keyid:C6:93:E9:63:98:CD:A5:F5:A4:E2:42:A3:FD:09:B1:3E:8A:ED:76:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/3230302e3232302e3139322e302f31392d3332203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.220.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9c:91:30:cb:4a:71:bd:b3:0b:8c:df:bc:26:74:e9:57:f3:e3:
         83:5f:43:06:61:16:cc:95:15:c5:49:91:75:31:3c:2b:5b:88:
         c4:08:cb:34:59:43:0f:cb:ec:94:ef:5d:fd:01:c4:b8:58:1a:
         91:43:66:3f:62:91:7a:4b:e4:3b:e4:03:4f:08:d0:69:db:a9:
         41:1c:0a:0d:41:81:26:b4:63:dc:cb:6b:00:58:e8:e9:dc:26:
         4a:9a:fc:39:21:d8:b4:7f:ad:58:a4:85:8f:30:fe:bf:6a:05:
         3d:5f:29:82:3c:ae:ef:85:91:54:dd:09:30:51:93:65:3b:6e:
         e4:1e:50:48:ae:ce:46:40:b5:87:0c:0c:e0:b3:61:e1:dd:3d:
         f7:8a:0c:10:64:03:bd:11:61:cc:c0:ab:48:ba:26:e2:1e:5a:
         19:4d:9c:ef:a4:6b:6b:e0:1c:c7:10:88:b5:7c:13:81:c3:6f:
         06:c0:a0:b8:61:c5:eb:a1:97:60:21:e2:83:d8:78:3e:7f:12:
         83:78:10:42:87:dc:4a:1a:a4:65:38:72:b1:d8:34:4e:6d:8c:
         6a:0c:e5:2a:cd:14:90:c9:9f:db:7d:f4:f5:01:47:67:39:c2:
         4e:ed:e3:6c:b6:a0:b5:a6:c7:82:ef:72:9f:2f:ee:b4:ce:70:
         85:f9:00:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:41:56 2025 by rpki-client