Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/1/3230302e31372e3139322e302f31382d3234203d3e203130383831.roa
File:                     3230302e31372e3139322e302f31382d3234203d3e203130383831.roa (raw, json)
Hash identifier:          u4bLjuVXDa9Rq9UR54870oC8J8+TetV0EboyJh9CCTg=
Subject key identifier:   A3:AB:84:19:BD:20:03:E8:1A:73:79:47:A1:4A:E9:D0:C4:4C:62:9E
Certificate issuer:       /CN=470BFABD451A375BCBD5E6F088E3BC9AFB00642A
Certificate serial:       215FA074819DF90C8C425FB49320229C084A8D5C
Authority key identifier: 47:0B:FA:BD:45:1A:37:5B:CB:D5:E6:F0:88:E3:BC:9A:FB:00:64:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/1/3230302e31372e3139322e302f31382d3234203d3e203130383831.roa
Signing time:             Thu 06 Mar 2025 15:13:43 +0000
ROA not before:           Thu 06 Mar 2025 15:08:43 +0000
ROA not after:            Thu 05 Mar 2026 15:13:43 +0000
asID:                     10881
IP address blocks:        200.17.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.crl
                          rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 08:33:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:5f:a0:74:81:9d:f9:0c:8c:42:5f:b4:93:20:22:9c:08:4a:8d:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=470BFABD451A375BCBD5E6F088E3BC9AFB00642A
        Validity
            Not Before: Mar  6 15:08:43 2025 GMT
            Not After : Mar  5 15:13:43 2026 GMT
        Subject: CN=A3AB8419BD2003E81A737947A14AE9D0C44C629E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:74:47:40:f2:9e:c6:6c:f4:9c:4e:6c:75:f6:
                    6e:d7:e7:87:7b:de:1d:f2:e0:ca:b9:41:66:60:18:
                    0f:74:da:1b:3a:82:d5:a9:99:4c:b3:d6:b5:84:cd:
                    f2:dc:85:3a:50:05:20:70:e4:98:99:32:c5:16:3f:
                    b9:4b:2a:78:3d:e3:d6:0d:f2:93:d4:d7:e1:6c:12:
                    a7:58:85:26:9f:b9:ea:15:08:e1:3b:b0:e9:b4:c4:
                    f7:d1:4d:10:4f:27:8a:9d:e3:00:68:6c:d2:7a:5e:
                    15:0f:b1:b2:a9:56:25:b8:76:1d:f1:82:e7:e5:58:
                    8e:d9:04:d5:1f:bd:c7:cf:18:c6:c3:9d:d7:a3:76:
                    06:c1:6a:19:64:47:47:c2:96:ce:b2:7c:b0:ae:85:
                    fb:88:7e:59:6f:5c:32:99:9c:bb:87:0c:1f:15:31:
                    49:34:0a:d3:b9:41:8f:54:9c:df:a3:55:80:f7:45:
                    f7:57:b1:f4:55:f0:ac:f4:d7:7f:27:ca:bf:7f:0e:
                    17:04:ef:58:f2:a8:3d:e1:82:15:a9:d2:d3:15:85:
                    b9:fe:0f:39:d7:53:22:de:4c:f9:13:27:7e:58:c0:
                    28:a8:81:e8:3d:e7:30:00:b3:72:ea:5e:a6:4e:2d:
                    36:62:6c:78:84:4a:a3:22:de:6e:2f:e1:9c:80:17:
                    11:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:AB:84:19:BD:20:03:E8:1A:73:79:47:A1:4A:E9:D0:C4:4C:62:9E
            X509v3 Authority Key Identifier:
                keyid:47:0B:FA:BD:45:1A:37:5B:CB:D5:E6:F0:88:E3:BC:9A:FB:00:64:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/1/3230302e31372e3139322e302f31382d3234203d3e203130383831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.17.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         29:8a:15:33:94:a1:a4:97:c1:cf:8f:6d:d9:55:75:7e:6c:4b:
         c5:42:a9:a0:c5:d0:4b:3b:42:c6:89:aa:df:b4:5b:9e:0f:a2:
         a7:0d:90:d3:57:05:bb:78:1a:8d:d8:2d:38:7f:61:a1:4b:48:
         ed:18:99:f3:96:c4:e0:ac:5d:c1:0f:67:9b:09:be:cf:20:0c:
         d7:05:c4:cd:3e:1d:30:87:e3:88:1e:f9:da:28:f5:75:02:bc:
         ca:f8:83:4f:bf:74:38:54:ea:5d:b6:d9:b6:bc:bf:67:29:20:
         68:1a:a6:c7:a0:45:89:da:b4:14:1c:34:1d:4b:86:b3:be:d9:
         dc:58:21:4a:08:d4:77:43:3c:bc:7d:72:78:0d:9d:2c:06:cf:
         7c:1e:41:c7:54:c6:d4:6f:45:6f:f2:ec:bb:4e:bd:4f:1e:58:
         a5:f0:8a:d9:83:7f:de:e2:3a:26:d3:fe:26:9b:c6:98:1e:ed:
         d7:d1:39:03:3d:fa:b1:d5:35:ee:bd:ab:9a:6f:7d:b6:da:d0:
         9b:5f:01:5a:7a:28:03:86:3c:c3:0c:97:7a:6a:69:93:0c:9d:
         53:78:15:ab:75:1b:c3:a6:6e:d8:1b:3b:cf:a1:3d:c1:9d:55:
         bd:13:38:85:5f:0d:9e:b4:fb:8c:19:de:69:1a:be:cd:12:2a:
         34:79:03:53
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUIV+gdIGd+QyMQl+0kyAinAhKjVwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDcwQkZBQkQ0NTFBMzc1QkNCRDVFNkYwODhFM0JDOUFG
QjAwNjQyQTAeFw0yNTAzMDYxNTA4NDNaFw0yNjAzMDUxNTEzNDNaMDMxMTAvBgNV
BAMTKEEzQUI4NDE5QkQyMDAzRTgxQTczNzk0N0ExNEFFOUQwQzQ0QzYyOUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIdEdA8p7GbPScTmx19m7X54d7
3h3y4Mq5QWZgGA902hs6gtWpmUyz1rWEzfLchTpQBSBw5JiZMsUWP7lLKng949YN
8pPU1+FsEqdYhSafueoVCOE7sOm0xPfRTRBPJ4qd4wBobNJ6XhUPsbKpViW4dh3x
guflWI7ZBNUfvcfPGMbDndejdgbBahlkR0fCls6yfLCuhfuIfllvXDKZnLuHDB8V
MUk0CtO5QY9UnN+jVYD3RfdXsfRV8Kz0138nyr9/DhcE71jyqD3hghWp0tMVhbn+
DznXUyLeTPkTJ35YwCiogeg95zAAs3LqXqZOLTZibHiESqMi3m4v4ZyAFxF/AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUo6uEGb0gA+gac3lHoUrp0MRMYp4wHwYDVR0j
BBgwFoAURwv6vUUaN1vL1ebwiOO8mvsAZCowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEdXamlhV2hmeTl6MTNKNHJ3UjdIcWR2bXo3TkY0RkR0aWZzMUJmU2g0
UHgvMS80NzBCRkFCRDQ1MUEzNzVCQ0JENUU2RjA4OEUzQkM5QUZCMDA2NDJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ3MEJGQUJENDUxQTM3NUJD
QkQ1RTZGMDg4RTNCQzlBRkIwMDY0MkEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hHV2ppYVdoZnk5ejEzSjRyd1I3SHFkdm16N05GNEZEdGlmczFCZlNoNFB4LzEv
MzIzMDMwMmUzMTM3MmUzMTM5MzIyZTMwMmYzMTM4MmQzMjM0MjAzZDNlMjAzMTMw
MzgzODMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQGyBHAMA0GCSqGSIb3DQEBCwUAA4IBAQApihUzlKGk
l8HPj23ZVXV+bEvFQqmgxdBLO0LGiarftFueD6KnDZDTVwW7eBqN2C04f2GhS0jt
GJnzlsTgrF3BD2ebCb7PIAzXBcTNPh0wh+OIHvnaKPV1ArzK+INPv3Q4VOpdttm2
vL9nKSBoGqbHoEWJ2rQUHDQdS4azvtncWCFKCNR3Qzy8fXJ4DZ0sBs98HkHHVMbU
b0Vv8uy7Tr1PHlil8IrZg3/e4jom0/4mm8aYHu3X0TkDPfqx1TXuvauab3222tCb
XwFaeigDhjzDDJd6ammTDJ1TeBWrdRvDpm7YGzvPoT3BnVW9EziFXw2etPuMGd5p
Gr7NEio0eQNT
-----END CERTIFICATE-----
Generated at Sat Apr 12 09:00:57 2025 by rpki-client