Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/1/3230302e31372e39362e302f32302d3234203d3e203130383831.roa
File:                     3230302e31372e39362e302f32302d3234203d3e203130383831.roa (raw, json)
Hash identifier:          Dd0MNbIQ9MHzANoy93/V9XUFZhqzUx1sUtab3MJ5vQQ=
Subject key identifier:   13:C6:FC:A0:30:68:ED:0B:F0:04:85:E4:C1:1E:FB:85:CB:56:A3:36
Certificate issuer:       /CN=470BFABD451A375BCBD5E6F088E3BC9AFB00642A
Certificate serial:       2B49CEADC84E71FB81BFEF9506C2D5F3B9EE9034
Authority key identifier: 47:0B:FA:BD:45:1A:37:5B:CB:D5:E6:F0:88:E3:BC:9A:FB:00:64:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/1/3230302e31372e39362e302f32302d3234203d3e203130383831.roa
Signing time:             Thu 06 Mar 2025 15:13:43 +0000
ROA not before:           Thu 06 Mar 2025 15:08:43 +0000
ROA not after:            Thu 05 Mar 2026 15:13:43 +0000
asID:                     10881
IP address blocks:        200.17.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.crl
                          rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 03:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:49:ce:ad:c8:4e:71:fb:81:bf:ef:95:06:c2:d5:f3:b9:ee:90:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=470BFABD451A375BCBD5E6F088E3BC9AFB00642A
        Validity
            Not Before: Mar  6 15:08:43 2025 GMT
            Not After : Mar  5 15:13:43 2026 GMT
        Subject: CN=13C6FCA03068ED0BF00485E4C11EFB85CB56A336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:70:8b:bd:7b:cc:7e:22:2c:a3:c8:51:9f:ef:
                    25:8d:5c:92:9b:b1:0e:bd:13:2c:9e:58:01:b6:11:
                    30:d0:12:b6:32:74:bd:8d:1b:bd:98:c6:bb:ca:ae:
                    52:05:78:05:54:d8:a8:0b:30:46:53:bd:aa:a1:86:
                    37:29:1e:f9:70:71:4a:92:78:a9:20:0e:9a:f7:19:
                    37:f9:d9:94:81:91:db:3c:98:0f:b7:73:05:e0:7f:
                    a5:0d:87:8b:b2:b6:e5:65:6f:c8:e4:86:54:ce:0c:
                    da:f1:69:40:f6:1f:ae:03:b3:c9:25:8a:e4:25:20:
                    45:8e:96:4c:b0:54:61:43:00:6f:94:f3:22:a8:a9:
                    59:8e:c5:d9:72:6b:87:47:d3:6f:a6:2d:53:77:3a:
                    eb:d7:ee:61:e1:f8:48:db:c1:9b:41:37:43:05:95:
                    c4:e4:d8:83:8a:9c:71:65:c9:16:7d:cf:51:e4:15:
                    ce:b7:c3:88:9c:7e:22:88:ca:45:28:5f:ee:cf:02:
                    4e:2b:b6:2d:9a:c2:59:ca:8a:d9:b1:c6:bc:05:77:
                    76:4f:20:30:85:b7:52:6f:e5:8a:42:69:cb:c2:e8:
                    f8:7e:50:4e:b5:70:eb:fb:fc:3c:6e:0e:09:61:06:
                    09:d8:9a:fe:37:08:4c:37:3b:36:3c:43:e4:eb:8f:
                    e8:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:C6:FC:A0:30:68:ED:0B:F0:04:85:E4:C1:1E:FB:85:CB:56:A3:36
            X509v3 Authority Key Identifier:
                keyid:47:0B:FA:BD:45:1A:37:5B:CB:D5:E6:F0:88:E3:BC:9A:FB:00:64:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/1/3230302e31372e39362e302f32302d3234203d3e203130383831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.17.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         07:4a:36:79:4c:f3:10:ae:51:a6:e1:20:af:4f:f2:2d:46:2f:
         99:80:ec:20:b6:92:60:80:85:6f:4e:c4:02:0c:8a:72:ed:64:
         61:e4:62:91:32:0f:d1:f5:e6:07:76:d0:64:18:43:44:fc:39:
         a7:eb:c3:e7:69:d0:53:74:db:6c:60:7e:ec:2f:e0:4f:26:9f:
         b6:c6:7f:3b:5c:5a:7a:94:29:c5:e3:49:56:23:e0:34:ea:0b:
         8b:ab:7e:b5:47:e9:dc:f6:dd:73:fc:e9:3d:86:05:90:26:c3:
         1b:a6:bb:cc:a7:82:d4:61:dd:bd:05:4e:f4:f5:d6:50:12:13:
         11:8e:40:1c:c2:82:03:ec:78:a1:11:18:42:9b:c7:e8:21:0a:
         c4:98:6e:7c:e7:59:ea:08:47:2e:04:d7:10:89:97:69:09:9b:
         d8:d1:01:b0:36:15:15:4a:2b:4b:6f:c3:da:30:ee:eb:56:92:
         61:b4:ed:58:31:b2:f5:92:2b:c6:18:f8:06:40:f4:48:59:07:
         f5:35:d7:0a:39:91:1e:b2:be:77:30:39:8b:32:24:62:d8:04:
         91:81:3b:a8:34:10:04:da:72:bb:9b:a2:3f:61:f3:78:99:89:
         52:9b:df:55:6d:7b:85:56:d1:b2:bc:f8:1a:9e:ba:c9:1c:9b:
         fc:83:49:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 06:06:20 2025 by rpki-client