Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/3230302e3134352e312e302f32342d3234203d3e203533313636.roa
File:                     3230302e3134352e312e302f32342d3234203d3e203533313636.roa (raw, json)
Hash identifier:          N0LVXTXYhaq9xr2y11isdL2Z4FT93YdcoiCYMllVuAE=
Subject key identifier:   95:C4:15:7C:9F:46:01:13:46:34:24:F4:0E:D4:04:F8:93:84:E8:A8
Certificate issuer:       /CN=725BCF70C08F4B2744E301141EF06513A96F28D6
Certificate serial:       2C8A9BA2A70FE3D996CB153A25FA3A60360FD544
Authority key identifier: 72:5B:CF:70:C0:8F:4B:27:44:E3:01:14:1E:F0:65:13:A9:6F:28:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/725BCF70C08F4B2744E301141EF06513A96F28D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/3230302e3134352e312e302f32342d3234203d3e203533313636.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     53166
IP address blocks:        200.145.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/725BCF70C08F4B2744E301141EF06513A96F28D6.crl
                          rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/725BCF70C08F4B2744E301141EF06513A96F28D6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/725BCF70C08F4B2744E301141EF06513A96F28D6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 08:44:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:8a:9b:a2:a7:0f:e3:d9:96:cb:15:3a:25:fa:3a:60:36:0f:d5:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=725BCF70C08F4B2744E301141EF06513A96F28D6
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=95C4157C9F460113463424F40ED404F89384E8A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:74:59:74:43:d7:90:58:53:84:6e:f9:f1:34:
                    7c:4e:4f:2a:bb:11:da:26:01:d0:9f:9f:0f:18:08:
                    43:6a:9c:13:18:53:e8:07:2f:be:09:6e:53:f1:aa:
                    dc:e5:73:74:88:3a:e6:7a:30:ba:94:cf:3f:dc:bd:
                    77:a2:9a:e2:64:f2:80:3c:7d:e7:a0:69:19:c1:b5:
                    77:3b:b9:23:b8:b5:de:e3:d6:b3:b2:b3:02:03:7c:
                    07:37:55:15:34:c1:8f:67:3b:59:c1:9f:7f:28:44:
                    2a:fd:73:76:00:54:8e:67:c9:30:fa:f0:5f:77:0d:
                    cd:87:3d:5a:3c:20:84:6f:c0:c5:32:ce:df:0c:3c:
                    db:ef:d5:06:b4:aa:5a:6b:be:fc:9e:62:c4:4d:9b:
                    58:8f:9b:f7:03:38:dd:e5:10:0f:01:5d:06:50:be:
                    04:a0:6a:71:d8:90:6a:95:bd:c9:90:0e:ab:5f:2c:
                    8a:e6:16:ec:1b:22:b5:f5:3d:aa:55:bc:35:08:e5:
                    4d:02:00:7c:cd:a3:4e:86:c8:48:20:73:ba:14:b1:
                    e7:47:a8:8c:ad:64:e0:6d:c8:9b:18:ac:00:28:91:
                    07:39:5c:1e:ba:82:e0:06:9e:5e:a2:c0:94:37:fa:
                    4e:85:f0:a7:26:01:9c:45:42:eb:cf:84:16:75:4a:
                    c5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:C4:15:7C:9F:46:01:13:46:34:24:F4:0E:D4:04:F8:93:84:E8:A8
            X509v3 Authority Key Identifier:
                keyid:72:5B:CF:70:C0:8F:4B:27:44:E3:01:14:1E:F0:65:13:A9:6F:28:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/725BCF70C08F4B2744E301141EF06513A96F28D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/725BCF70C08F4B2744E301141EF06513A96F28D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E4wWD6iZy9imR2MjhoB47KSmAvPvMici81YjCY9epA2j/1/3230302e3134352e312e302f32342d3234203d3e203533313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.145.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:0d:ec:fc:09:9d:40:e0:f0:20:a6:37:7b:fd:67:24:b1:4f:
         28:fa:c3:4c:5c:ac:c3:8c:2b:b2:6e:5d:cb:89:0b:b4:92:17:
         b1:7d:62:13:b8:63:b3:89:7b:d3:5a:00:ff:d3:4f:99:7d:f7:
         cf:90:5e:76:97:cb:1b:40:ef:cd:7c:01:cd:54:fa:d3:38:05:
         9b:11:1b:0a:ab:48:1a:40:01:65:9e:77:f4:46:11:b7:00:ea:
         e3:8a:cb:b9:64:41:8f:77:d7:cc:f7:e8:fb:be:34:7b:fb:7d:
         a1:2d:a5:d1:0c:cf:70:ce:5f:f8:25:b1:64:de:b9:fa:d3:69:
         0e:19:8f:11:c9:b0:d2:a9:b6:ae:e2:76:bf:21:be:78:02:6a:
         a4:1c:a5:0e:46:96:af:a0:81:e3:60:7a:a4:5a:97:0c:17:f7:
         3a:48:ec:c8:03:49:78:d3:78:32:4d:5e:39:71:b8:47:92:52:
         14:f2:29:66:8c:34:de:5f:62:9a:14:ef:b6:da:31:e3:4d:04:
         61:97:44:2b:65:4b:e7:93:ef:4d:d1:c3:58:bc:76:92:9e:9d:
         fe:48:a4:2b:08:d3:53:fb:38:72:74:19:c5:87:40:c5:77:2c:
         36:1a:a3:15:34:2b:cc:cd:39:8b:0f:b3:76:81:4d:ff:71:72:
         16:cd:f7:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 11:56:27 2025 by rpki-client