Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/2/3230312e3232322e32342e302f32322d3234203d3e203631383233.roa
File:                     3230312e3232322e32342e302f32322d3234203d3e203631383233.roa (raw, json)
Hash identifier:          DlhO81qrtCCI/SSq45yNREtrfu+6rSWUa6Wffp2kUEE=
Subject key identifier:   82:5D:AB:64:1B:3A:B6:25:FF:2D:64:52:4E:E5:4D:4B:28:85:72:11
Certificate issuer:       /CN=DF1195DA2AA3835ACEB6C0314248212FD90A0F83
Certificate serial:       402EFE19B3BC33E7FEDE8508EA13343E3E51C2F7
Authority key identifier: DF:11:95:DA:2A:A3:83:5A:CE:B6:C0:31:42:48:21:2F:D9:0A:0F:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF1195DA2AA3835ACEB6C0314248212FD90A0F83.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/2/3230312e3232322e32342e302f32322d3234203d3e203631383233.roa
Signing time:             Thu 06 Mar 2025 02:29:35 +0000
ROA not before:           Thu 06 Mar 2025 02:24:35 +0000
ROA not after:            Thu 05 Mar 2026 02:29:35 +0000
asID:                     61823
IP address blocks:        201.222.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/2/DF1195DA2AA3835ACEB6C0314248212FD90A0F83.crl
                          rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/2/DF1195DA2AA3835ACEB6C0314248212FD90A0F83.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF1195DA2AA3835ACEB6C0314248212FD90A0F83.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 12:24:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:2e:fe:19:b3:bc:33:e7:fe:de:85:08:ea:13:34:3e:3e:51:c2:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF1195DA2AA3835ACEB6C0314248212FD90A0F83
        Validity
            Not Before: Mar  6 02:24:35 2025 GMT
            Not After : Mar  5 02:29:35 2026 GMT
        Subject: CN=825DAB641B3AB625FF2D64524EE54D4B28857211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:10:ea:31:f8:50:1d:8a:37:73:fb:7d:d3:a0:
                    27:b3:54:fa:78:7e:f4:de:61:3f:c4:0f:34:44:a4:
                    68:d1:1a:d5:37:28:e1:71:9d:62:b1:d8:59:73:23:
                    2e:8b:33:3c:96:6b:65:8c:9b:29:63:97:fb:62:48:
                    a0:aa:99:59:1c:1f:c8:3b:bf:bf:c6:d6:b7:ee:b8:
                    8f:2e:f0:5c:fc:fe:3c:b3:0c:ac:51:c6:e9:1a:b8:
                    f6:85:7e:f1:c4:89:8d:4a:6c:20:86:11:5e:2e:db:
                    e3:5d:2d:4a:d2:7a:cb:6a:3b:6b:a5:20:08:3d:43:
                    b9:1d:82:cc:e9:26:1e:7f:eb:5e:60:61:39:06:e3:
                    dc:d5:f7:f3:1d:0b:5b:dc:4f:16:8c:6b:94:86:7c:
                    99:68:11:62:85:02:48:9b:1e:2a:dc:d3:29:58:c2:
                    9f:74:f4:4a:a9:ab:58:d8:c5:b7:bc:3a:b7:81:e5:
                    bd:88:3b:0f:d1:76:d2:58:b4:be:7e:30:1f:a8:37:
                    be:da:33:54:ba:b3:a7:32:3c:69:68:3c:39:4b:f2:
                    fd:8f:ec:30:59:be:2b:15:18:b8:bd:1b:f2:81:ed:
                    10:1a:9a:0d:9b:a7:14:5f:b7:c7:c4:50:3e:85:d8:
                    c9:ef:41:35:21:13:b5:99:2b:b0:a3:dd:66:49:bf:
                    bc:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:5D:AB:64:1B:3A:B6:25:FF:2D:64:52:4E:E5:4D:4B:28:85:72:11
            X509v3 Authority Key Identifier:
                keyid:DF:11:95:DA:2A:A3:83:5A:CE:B6:C0:31:42:48:21:2F:D9:0A:0F:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/2/DF1195DA2AA3835ACEB6C0314248212FD90A0F83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF1195DA2AA3835ACEB6C0314248212FD90A0F83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/2/3230312e3232322e32342e302f32322d3234203d3e203631383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.222.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:ec:62:f4:6f:3b:f7:10:f5:6f:ff:b5:60:f8:38:b0:71:7e:
         8e:8a:14:12:a4:f4:22:ec:b2:d6:97:4f:0c:97:7b:fd:d0:db:
         67:29:a7:73:c5:b5:d4:90:61:27:00:7d:0c:d0:3b:02:7f:7e:
         d1:86:06:06:14:63:96:c0:71:e4:66:2f:f6:ae:63:a1:7f:3c:
         e4:83:23:fa:eb:f3:e3:76:4b:c7:06:dd:dd:cc:9d:5e:5c:a4:
         f0:25:ed:05:6d:3a:9f:4b:1a:98:68:72:91:42:74:3d:30:90:
         62:6a:7b:6f:e6:c8:ef:2e:d3:63:a4:94:df:e0:b8:7f:cc:f7:
         21:ae:6d:16:d3:31:11:72:34:a0:b2:ef:ca:82:d2:88:46:0a:
         a4:08:35:3b:3c:2e:47:a5:60:4f:23:b8:f1:61:ba:51:4f:d8:
         68:c2:25:03:48:2a:cd:46:3b:73:04:3d:5f:ac:37:36:55:d7:
         68:1b:2d:52:b5:e9:84:44:d6:5b:a8:e2:4c:c2:77:e6:62:ea:
         49:de:5c:a0:d3:cf:9f:e6:43:4b:5d:a7:72:ef:fa:30:f0:69:
         66:bc:d5:c7:13:6b:81:0e:6f:0a:36:13:ee:6a:cd:24:3c:2e:
         a7:bd:27:bd:50:ba:78:ac:bb:1d:b0:83:a5:47:6e:f8:30:69:
         e8:f9:db:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 22:15:19 2025 by rpki-client