Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/1/3230302e3233382e3132382e302f31382d3234203d3e203130383831.roa
File:                     3230302e3233382e3132382e302f31382d3234203d3e203130383831.roa (raw, json)
Hash identifier:          EqD3FLMgDqM/N5k54C5xgd9XjW29tzS0P2lCbP0478M=
Subject key identifier:   8C:CB:A9:36:9B:34:83:A0:E6:E4:A5:CD:E6:76:31:0E:75:DF:54:D2
Certificate issuer:       /CN=470BFABD451A375BCBD5E6F088E3BC9AFB00642A
Certificate serial:       7FAA01D275571F65EADB3473248DEE1D289FE4A5
Authority key identifier: 47:0B:FA:BD:45:1A:37:5B:CB:D5:E6:F0:88:E3:BC:9A:FB:00:64:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/1/3230302e3233382e3132382e302f31382d3234203d3e203130383831.roa
Signing time:             Thu 06 Mar 2025 15:13:43 +0000
ROA not before:           Thu 06 Mar 2025 15:08:43 +0000
ROA not after:            Thu 05 Mar 2026 15:13:43 +0000
asID:                     10881
IP address blocks:        200.238.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.crl
                          rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 03:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:aa:01:d2:75:57:1f:65:ea:db:34:73:24:8d:ee:1d:28:9f:e4:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=470BFABD451A375BCBD5E6F088E3BC9AFB00642A
        Validity
            Not Before: Mar  6 15:08:43 2025 GMT
            Not After : Mar  5 15:13:43 2026 GMT
        Subject: CN=8CCBA9369B3483A0E6E4A5CDE676310E75DF54D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d0:c9:dd:69:d7:94:7f:fa:f7:e7:6d:52:6a:
                    32:82:b2:b4:59:5e:07:b4:3a:d7:28:4a:22:66:65:
                    38:f1:dc:52:fc:83:86:d9:47:2a:c5:22:98:b3:82:
                    6c:f3:a5:e4:27:52:d6:5c:39:71:aa:1b:f2:5f:61:
                    f4:a3:c7:f6:b8:e9:fc:60:27:be:65:ec:06:ad:14:
                    4d:b9:5a:d5:c0:8a:90:a4:6a:99:b1:06:83:dc:8c:
                    e0:53:9b:9e:66:11:95:04:b2:38:ef:79:c4:8b:86:
                    f7:9e:4f:2d:b3:cf:98:29:07:78:c7:f0:87:c1:97:
                    02:20:8f:f7:9e:75:bb:47:47:77:e2:f8:a1:bc:d9:
                    92:bd:29:50:47:e7:b1:0c:99:dc:49:ea:9d:0c:9d:
                    55:b8:60:33:7d:5d:8f:22:4c:76:a8:23:8c:68:9c:
                    23:fc:c0:6c:a2:b6:81:ee:63:47:8d:93:46:9f:8a:
                    b5:d8:4e:34:99:7d:24:ef:9d:61:38:cd:e7:52:a6:
                    8c:ff:71:12:5f:52:17:85:1f:08:85:c4:93:66:6e:
                    b5:3d:9f:df:49:ef:4c:b2:2a:2c:ee:21:2e:7a:c2:
                    07:2a:06:52:f8:27:ec:29:7c:89:e0:39:01:67:82:
                    b2:a8:ec:79:65:77:f9:ee:a1:3c:0e:31:ab:f1:2c:
                    55:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:CB:A9:36:9B:34:83:A0:E6:E4:A5:CD:E6:76:31:0E:75:DF:54:D2
            X509v3 Authority Key Identifier:
                keyid:47:0B:FA:BD:45:1A:37:5B:CB:D5:E6:F0:88:E3:BC:9A:FB:00:64:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/1/3230302e3233382e3132382e302f31382d3234203d3e203130383831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.238.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         52:bf:cf:00:ce:0d:92:3d:96:c3:ae:88:40:cc:cb:1d:e8:3f:
         16:23:29:ce:75:c5:d9:ae:db:bb:ab:e8:57:93:00:d0:f7:62:
         69:7e:4c:82:7c:72:98:2f:f6:7f:e2:14:5d:48:b3:ee:55:e8:
         e1:f8:82:e8:ca:ef:a8:cb:38:91:75:8a:04:97:dc:ad:ab:ee:
         bf:07:ea:54:8a:16:db:d7:ab:30:a9:b1:11:ba:3e:86:e2:33:
         fc:40:5a:75:35:b4:28:f3:7a:5d:b5:bb:2e:f9:a9:77:57:6b:
         3d:b5:db:a5:13:6e:3b:50:5c:aa:c9:af:14:f8:49:c7:a0:ae:
         7c:22:46:a6:4f:05:f2:cf:6a:9c:a2:d4:33:05:27:a1:fb:f0:
         cf:c4:a1:f0:0b:f3:dd:36:f7:7e:9e:bf:9f:ea:53:52:de:30:
         63:3d:ce:0f:d2:36:55:77:48:19:5e:ca:8e:41:10:56:54:e4:
         f9:b3:f7:06:ea:f3:66:fe:c9:7d:42:89:82:ac:71:f3:91:c4:
         0e:de:35:e8:14:05:43:5e:40:c8:c9:45:05:22:5d:65:07:77:
         9c:b4:26:4c:2f:40:69:0e:6a:40:e1:4b:38:3c:06:5d:19:19:
         51:80:0c:5a:67:d6:0f:e2:14:ad:9e:71:d1:6b:21:06:7a:42:
         39:8a:d9:ae
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUf6oB0nVXH2Xq2zRzJI3uHSif5KUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDcwQkZBQkQ0NTFBMzc1QkNCRDVFNkYwODhFM0JDOUFG
QjAwNjQyQTAeFw0yNTAzMDYxNTA4NDNaFw0yNjAzMDUxNTEzNDNaMDMxMTAvBgNV
BAMTKDhDQ0JBOTM2OUIzNDgzQTBFNkU0QTVDREU2NzYzMTBFNzVERjU0RDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl0MndadeUf/r3521SajKCsrRZ
Xge0OtcoSiJmZTjx3FL8g4bZRyrFIpizgmzzpeQnUtZcOXGqG/JfYfSjx/a46fxg
J75l7AatFE25WtXAipCkapmxBoPcjOBTm55mEZUEsjjvecSLhveeTy2zz5gpB3jH
8IfBlwIgj/eedbtHR3fi+KG82ZK9KVBH57EMmdxJ6p0MnVW4YDN9XY8iTHaoI4xo
nCP8wGyitoHuY0eNk0afirXYTjSZfSTvnWE4zedSpoz/cRJfUheFHwiFxJNmbrU9
n99J70yyKizuIS56wgcqBlL4J+wpfIngOQFngrKo7Hlld/nuoTwOMavxLFVvAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUjMupNps0g6Dm5KXN5nYxDnXfVNIwHwYDVR0j
BBgwFoAURwv6vUUaN1vL1ebwiOO8mvsAZCowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEdXamlhV2hmeTl6MTNKNHJ3UjdIcWR2bXo3TkY0RkR0aWZzMUJmU2g0
UHgvMS80NzBCRkFCRDQ1MUEzNzVCQ0JENUU2RjA4OEUzQkM5QUZCMDA2NDJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ3MEJGQUJENDUxQTM3NUJD
QkQ1RTZGMDg4RTNCQzlBRkIwMDY0MkEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hHV2ppYVdoZnk5ejEzSjRyd1I3SHFkdm16N05GNEZEdGlmczFCZlNoNFB4LzEv
MzIzMDMwMmUzMjMzMzgyZTMxMzIzODJlMzAyZjMxMzgyZDMyMzQyMDNkM2UyMDMx
MzAzODM4MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAbI7oAwDQYJKoZIhvcNAQELBQADggEBAFK/zwDO
DZI9lsOuiEDMyx3oPxYjKc51xdmu27ur6FeTAND3Yml+TIJ8cpgv9n/iFF1Is+5V
6OH4gujK76jLOJF1igSX3K2r7r8H6lSKFtvXqzCpsRG6PobiM/xAWnU1tCjzel21
uy75qXdXaz2126UTbjtQXKrJrxT4ScegrnwiRqZPBfLPapyi1DMFJ6H78M/EofAL
8902936ev5/qU1LeMGM9zg/SNlV3SBleyo5BEFZU5Pmz9wbq82b+yX1CiYKscfOR
xA7eNegUBUNeQMjJRQUiXWUHd5y0JkwvQGkOakDhSzg8Bl0ZGVGADFpn1g/iFK2e
cdFrIQZ6QjmK2a4=
-----END CERTIFICATE-----
Generated at Sat Apr 12 06:06:12 2025 by rpki-client