Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/3230312e35352e3136302e302f32302d3233203d3e20323632353835.roa
File:                     3230312e35352e3136302e302f32302d3233203d3e20323632353835.roa (raw, json)
Hash identifier:          8CwicwdiCmEBiMPUb9qPfFYerYjPmqTQrvXRODFVfUc=
Subject key identifier:   3F:BA:FB:35:83:E4:01:4C:C1:F0:D2:C1:A1:19:2F:A1:AE:AC:70:3F
Certificate issuer:       /CN=5AC853AE3F9CB62CC01BAF4379BF8072926B07A7
Certificate serial:       07F0A8F0E3067F78861D7CC030193C4F21C5752E
Authority key identifier: 5A:C8:53:AE:3F:9C:B6:2C:C0:1B:AF:43:79:BF:80:72:92:6B:07:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/3230312e35352e3136302e302f32302d3233203d3e20323632353835.roa
Signing time:             Thu 27 Mar 2025 10:50:09 +0000
ROA not before:           Thu 27 Mar 2025 10:45:09 +0000
ROA not after:            Thu 26 Mar 2026 10:50:09 +0000
asID:                     262585
IP address blocks:        201.55.160.0/20 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.crl
                          rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Apr 2025 04:03:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:f0:a8:f0:e3:06:7f:78:86:1d:7c:c0:30:19:3c:4f:21:c5:75:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AC853AE3F9CB62CC01BAF4379BF8072926B07A7
        Validity
            Not Before: Mar 27 10:45:09 2025 GMT
            Not After : Mar 26 10:50:09 2026 GMT
        Subject: CN=3FBAFB3583E4014CC1F0D2C1A1192FA1AEAC703F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f9:6e:c7:51:fc:de:ad:cc:59:86:bf:d1:bf:
                    d6:fc:e9:f6:6e:30:82:83:28:69:8e:bf:66:f9:f9:
                    4f:2c:b2:07:bd:a0:96:62:5c:04:02:15:c8:fa:03:
                    dd:97:e5:f5:3b:f6:e2:94:0d:e7:1c:81:f5:c2:f8:
                    13:90:2d:7d:ec:a5:a8:08:6a:62:e2:b3:17:e3:79:
                    65:66:dd:e3:cf:89:e1:13:50:f6:18:35:2c:5d:c1:
                    e5:05:a7:73:a3:7f:08:f8:b0:a1:9b:a2:0c:75:79:
                    41:e7:63:bc:d3:fa:4d:1a:6f:59:f8:a8:4a:c8:50:
                    d3:a7:46:25:81:1d:b1:5b:67:fe:28:a8:3a:d4:49:
                    ab:4b:bc:9b:3d:c4:10:c2:c8:ca:5d:5b:5d:6b:0b:
                    22:14:df:e1:1b:3a:2b:0a:ea:b4:a8:16:b1:29:36:
                    ee:21:9e:4f:9b:cd:29:51:96:d7:96:67:aa:5b:8a:
                    f1:c8:04:96:a7:20:51:7b:88:9b:d3:e0:47:36:f0:
                    c9:ba:8f:5c:b0:2a:21:f8:41:78:73:b8:ce:83:cf:
                    2e:6e:02:4c:18:97:53:24:e5:b0:32:05:eb:0a:a4:
                    33:2b:62:39:02:fe:f3:12:b5:b8:08:fe:87:6c:e3:
                    f3:5b:26:2a:35:a1:20:c9:9a:bb:e6:4f:58:2a:bd:
                    f3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:BA:FB:35:83:E4:01:4C:C1:F0:D2:C1:A1:19:2F:A1:AE:AC:70:3F
            X509v3 Authority Key Identifier:
                keyid:5A:C8:53:AE:3F:9C:B6:2C:C0:1B:AF:43:79:BF:80:72:92:6B:07:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/3230312e35352e3136302e302f32302d3233203d3e20323632353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.55.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1f:e0:f7:1f:87:0c:67:c7:21:ed:23:3c:bc:f5:50:4f:ca:7f:
         95:96:99:a6:b0:82:8e:0d:81:bb:a8:15:d7:99:69:05:41:c0:
         fb:1f:92:58:c9:4d:69:c7:96:86:c4:80:ee:04:0e:1e:9a:50:
         05:1d:7e:0c:09:eb:7a:57:23:57:bc:c2:e3:ef:bd:e2:c3:dc:
         20:82:73:05:d7:7e:5d:d2:b1:0d:8e:d5:61:10:11:4c:9c:32:
         1e:da:16:75:d5:20:78:51:b7:b5:05:a2:36:20:cf:24:ca:04:
         a9:54:f2:cb:8f:88:cc:1f:25:c3:be:98:6b:ec:ef:82:8e:cb:
         40:a3:d9:9f:4a:08:3f:e7:68:20:2b:eb:cc:6d:b7:ce:c0:05:
         b1:b0:00:6e:da:b0:8b:a5:67:e0:f3:b6:f6:2e:00:fa:cc:7d:
         c1:44:4d:80:5d:2c:32:2c:4c:76:35:3c:06:eb:47:79:c8:3f:
         92:38:74:8a:4a:75:78:89:9c:6e:12:fa:d4:26:79:44:39:6b:
         41:fb:a2:6f:82:67:3c:36:8d:b2:09:3f:1d:d0:c9:5d:a4:80:
         56:9e:5d:b9:6e:83:53:6f:c9:e0:ba:b1:22:d6:7e:d9:43:95:
         0b:7c:b8:33:00:33:b5:53:ae:52:ae:d7:4e:0e:45:74:9a:fc:
         76:80:a6:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 13:25:21 2025 by rpki-client