Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/3230312e38372e3230382e302f32302d3332203d3e20323632353839.roa
File:                     3230312e38372e3230382e302f32302d3332203d3e20323632353839.roa (raw, json)
Hash identifier:          pET60IPP2wBPU4q9JeK0NBqFBOlN+8svAXVZlTaRGpk=
Subject key identifier:   E4:E2:5C:C2:B0:0C:39:62:E2:60:40:97:E7:80:66:35:1B:51:C4:1D
Certificate issuer:       /CN=C693E96398CDA5F5A4E242A3FD09B13E8AED7697
Certificate serial:       3515692E0A69DA10F15DF3245B8A90BB918D9185
Authority key identifier: C6:93:E9:63:98:CD:A5:F5:A4:E2:42:A3:FD:09:B1:3E:8A:ED:76:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/3230312e38372e3230382e302f32302d3332203d3e20323632353839.roa
Signing time:             Fri 07 Mar 2025 19:52:25 +0000
ROA not before:           Fri 07 Mar 2025 19:47:25 +0000
ROA not after:            Fri 06 Mar 2026 19:52:25 +0000
asID:                     262589
IP address blocks:        201.87.208.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.crl
                          rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 16:28:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:15:69:2e:0a:69:da:10:f1:5d:f3:24:5b:8a:90:bb:91:8d:91:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C693E96398CDA5F5A4E242A3FD09B13E8AED7697
        Validity
            Not Before: Mar  7 19:47:25 2025 GMT
            Not After : Mar  6 19:52:25 2026 GMT
        Subject: CN=E4E25CC2B00C3962E2604097E78066351B51C41D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:9c:f5:c5:0c:4a:8f:5b:58:9f:5c:5f:1d:39:
                    97:97:c4:9a:b1:5c:cc:7b:64:c4:f5:7d:f9:29:a1:
                    79:1d:1b:aa:7f:56:2b:e6:ed:3c:e2:4d:ce:4c:8f:
                    37:00:25:3b:ec:3c:e3:48:27:2d:4a:95:49:6c:a3:
                    91:74:91:e6:03:0c:32:f4:27:c3:e3:e1:6c:4a:9d:
                    74:f9:59:67:b5:9c:39:0b:1d:56:81:b8:80:48:ee:
                    38:93:0a:68:7f:29:75:89:74:ec:d5:6c:41:fa:9d:
                    77:00:73:2e:3d:50:84:3f:51:b4:31:79:1d:a9:89:
                    b2:42:95:da:88:88:f2:42:2f:d7:85:2d:84:e9:6a:
                    ae:77:bc:38:dd:14:75:19:ac:5b:7c:ee:62:2e:e7:
                    c0:9c:8a:4c:90:d4:56:98:0e:96:17:af:42:ab:cd:
                    b0:d3:c4:0e:5b:55:27:4e:dd:89:2b:3d:e2:53:09:
                    da:b8:de:2d:56:ea:82:c4:7a:ce:e7:73:31:88:cb:
                    cc:94:7a:cc:d7:67:bc:c5:d3:6a:71:69:c7:9c:b7:
                    6b:ff:a2:81:36:da:68:fa:2d:af:10:6b:89:73:0a:
                    4b:95:06:d6:3e:a6:c8:12:53:d2:28:da:ef:11:79:
                    7f:17:0c:eb:c6:91:be:a6:01:2f:6a:83:e5:ff:b4:
                    52:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:E2:5C:C2:B0:0C:39:62:E2:60:40:97:E7:80:66:35:1B:51:C4:1D
            X509v3 Authority Key Identifier:
                keyid:C6:93:E9:63:98:CD:A5:F5:A4:E2:42:A3:FD:09:B1:3E:8A:ED:76:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C693E96398CDA5F5A4E242A3FD09B13E8AED7697.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/3230312e38372e3230382e302f32302d3332203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.87.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         67:88:95:87:be:0e:95:a9:ba:c8:ed:b4:ff:59:6b:07:dc:fd:
         42:fb:df:b0:74:21:f2:dd:2f:41:d6:68:14:49:75:f6:c3:bd:
         f2:7b:29:c4:ad:37:2f:a4:8a:41:35:77:cb:8b:1f:14:7f:dc:
         f2:2d:e7:0c:6d:2f:55:d0:6f:27:e3:86:7c:67:47:71:2a:bc:
         10:44:c2:5c:2e:e7:85:84:45:f1:63:62:f8:21:cb:7b:f1:88:
         47:22:ee:0a:f5:57:17:8d:2c:7d:3a:df:75:15:ca:23:6d:62:
         95:cf:3d:e9:84:de:58:99:2d:e0:aa:03:fd:da:1b:ab:59:50:
         e0:2a:a8:85:df:55:e5:b2:fb:e3:7c:2f:fc:ef:7b:3d:ef:e1:
         fe:c5:b8:41:42:ca:1d:73:0a:95:ea:2c:5e:b8:59:d4:e1:df:
         05:f1:f0:14:8c:a2:ab:6c:cf:f8:f0:50:dc:36:8d:92:fb:a5:
         dc:fc:34:59:0e:d1:e2:f6:bb:a2:30:b9:c6:96:94:a0:f7:a0:
         4a:78:3f:c2:35:f4:c3:20:d6:0d:d2:7b:34:ed:3a:e0:6e:1f:
         5f:d3:5d:93:2f:36:81:87:ba:7a:b8:81:fa:73:91:e3:56:4d:
         56:c9:55:05:9e:a3:af:65:cd:d8:a2:16:ab:72:0f:00:6e:fb:
         c6:6b:d9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:23:52 2025 by rpki-client