Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GyLVzFMWSPvpkLVDSUVfuRZ89Y5jsddoVMTpENVouy2w/0/3230312e37312e3232322e302f32342d3234203d3e20323731313135.roa
File:                     3230312e37312e3232322e302f32342d3234203d3e20323731313135.roa (raw, json)
Hash identifier:          bUjVf9ASP98Txb4fA+HD2LvnqUggQb2qTnKziF9jJGs=
Subject key identifier:   D7:82:5D:55:0B:35:75:20:6E:9B:3F:C0:47:E4:38:00:ED:DB:E0:FB
Certificate issuer:       /CN=6539CB44C8990B2AF26518E46D7AB6964B8D23B4
Certificate serial:       680BDE51EE2DC313E0102F6FA60FB59CE0DB3EB2
Authority key identifier: 65:39:CB:44:C8:99:0B:2A:F2:65:18:E4:6D:7A:B6:96:4B:8D:23:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6539CB44C8990B2AF26518E46D7AB6964B8D23B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GyLVzFMWSPvpkLVDSUVfuRZ89Y5jsddoVMTpENVouy2w/0/3230312e37312e3232322e302f32342d3234203d3e20323731313135.roa
Signing time:             Tue 18 Mar 2025 17:05:09 +0000
ROA not before:           Tue 18 Mar 2025 17:00:09 +0000
ROA not after:            Tue 17 Mar 2026 17:05:09 +0000
asID:                     271115
IP address blocks:        201.71.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GyLVzFMWSPvpkLVDSUVfuRZ89Y5jsddoVMTpENVouy2w/0/6539CB44C8990B2AF26518E46D7AB6964B8D23B4.crl
                          rsync://rpki-repo.registro.br/repo/GyLVzFMWSPvpkLVDSUVfuRZ89Y5jsddoVMTpENVouy2w/0/6539CB44C8990B2AF26518E46D7AB6964B8D23B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6539CB44C8990B2AF26518E46D7AB6964B8D23B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 05:36:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:0b:de:51:ee:2d:c3:13:e0:10:2f:6f:a6:0f:b5:9c:e0:db:3e:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6539CB44C8990B2AF26518E46D7AB6964B8D23B4
        Validity
            Not Before: Mar 18 17:00:09 2025 GMT
            Not After : Mar 17 17:05:09 2026 GMT
        Subject: CN=D7825D550B3575206E9B3FC047E43800EDDBE0FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:de:08:d8:78:cb:c2:0c:6c:a9:de:49:01:29:
                    71:89:a6:96:1c:ff:3d:9c:ff:3e:db:90:ed:bc:5f:
                    0f:28:c8:49:cd:2b:29:d5:7f:2e:5b:54:cb:05:a8:
                    2d:53:23:07:15:8c:f9:9d:5e:d9:93:0d:ae:9e:ac:
                    99:77:41:77:97:80:2f:eb:bb:d9:28:c9:c0:a9:5c:
                    17:2d:de:ba:1a:ac:76:8b:0b:f5:ca:51:59:79:ba:
                    b7:9c:7a:60:c9:c8:4e:5e:20:a0:62:a6:55:2c:d6:
                    99:49:c2:5a:d9:15:9e:63:66:7f:10:3d:6f:ea:53:
                    a3:c7:10:44:a6:d0:b1:e4:ef:37:12:66:29:3c:a1:
                    21:42:1b:2e:65:0b:6e:f3:70:4d:40:f0:5b:ff:28:
                    85:06:0e:19:0d:a2:03:e9:49:f4:76:8b:b1:5d:33:
                    77:da:22:93:d8:20:4f:7a:21:59:b0:31:8f:e1:0e:
                    77:43:e6:f3:c4:7e:0c:ab:1b:69:41:2f:14:79:71:
                    33:cb:12:39:63:d9:57:35:10:21:97:cc:7f:6c:05:
                    c2:bd:07:56:1f:86:cf:85:a8:3c:31:ef:60:c0:c7:
                    07:88:fe:b7:0b:21:76:8b:22:65:a6:0c:7c:1b:c4:
                    42:e0:14:19:ce:bd:30:62:24:47:ce:96:59:42:0a:
                    47:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:82:5D:55:0B:35:75:20:6E:9B:3F:C0:47:E4:38:00:ED:DB:E0:FB
            X509v3 Authority Key Identifier:
                keyid:65:39:CB:44:C8:99:0B:2A:F2:65:18:E4:6D:7A:B6:96:4B:8D:23:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GyLVzFMWSPvpkLVDSUVfuRZ89Y5jsddoVMTpENVouy2w/0/6539CB44C8990B2AF26518E46D7AB6964B8D23B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6539CB44C8990B2AF26518E46D7AB6964B8D23B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GyLVzFMWSPvpkLVDSUVfuRZ89Y5jsddoVMTpENVouy2w/0/3230312e37312e3232322e302f32342d3234203d3e20323731313135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.71.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:e4:09:b3:11:6b:20:0f:d7:5d:1f:08:45:9e:fb:c5:29:3c:
         38:7a:85:bd:78:89:a5:40:20:1e:94:14:14:33:97:e1:7c:fa:
         f8:09:13:ae:f7:6b:54:8a:bf:fa:47:58:43:f8:94:b1:ac:cc:
         ab:e8:b9:da:24:b3:43:79:58:98:49:3d:84:57:28:e0:95:f0:
         37:87:91:4d:29:d4:e6:7d:f1:d9:13:53:42:b0:39:f4:aa:3a:
         08:06:7b:e9:c2:94:c0:f0:84:a8:15:7f:4b:ed:45:c3:d4:22:
         f9:e9:b9:26:91:58:d0:57:d0:b8:0e:96:a7:93:a2:34:c7:89:
         4e:f5:db:c0:99:a0:6d:17:b8:a7:91:5d:9f:1b:9c:fa:07:85:
         48:e4:66:31:8e:04:0e:a1:e7:84:08:63:3a:7c:bd:39:69:b6:
         e2:7c:68:5b:f0:e7:51:47:1d:db:3a:14:6e:a1:32:bc:27:62:
         ed:f0:6a:17:db:9a:4b:28:27:0b:ef:33:a8:ec:91:4d:e0:fc:
         d3:f5:e3:88:de:f4:1d:a4:19:d7:b9:77:b4:ff:a7:76:5b:05:
         67:f3:1f:0c:71:d3:7a:d1:16:58:60:0b:61:47:9c:39:28:43:
         91:cb:32:10:ff:89:08:b5:d2:ac:4e:3f:d9:db:a4:68:2a:55:
         36:7c:0d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 11:52:52 2025 by rpki-client