Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234342e302f32342d3234203d3e20323730383135.roa
File:                     3230302e3232392e3234342e302f32342d3234203d3e20323730383135.roa (raw, json)
Hash identifier:          RRi75E1hRfkSXIAb6eeVNaDnLdRTot3md6P8PUuSAdQ=
Subject key identifier:   8B:2B:D2:55:81:3F:14:CD:EC:8F:D3:07:28:E2:26:C0:A8:6F:34:C8
Certificate issuer:       /CN=4FDBAE28D54DD4272386040789F376018C19FE37
Certificate serial:       6D4689B0E04E480289374B18571FED28B1144667
Authority key identifier: 4F:DB:AE:28:D5:4D:D4:27:23:86:04:07:89:F3:76:01:8C:19:FE:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FDBAE28D54DD4272386040789F376018C19FE37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234342e302f32342d3234203d3e20323730383135.roa
Signing time:             Mon 10 Feb 2025 12:56:35 +0000
ROA not before:           Mon 10 Feb 2025 12:51:35 +0000
ROA not after:            Mon 09 Feb 2026 12:56:35 +0000
asID:                     270815
IP address blocks:        200.229.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/4FDBAE28D54DD4272386040789F376018C19FE37.crl
                          rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/4FDBAE28D54DD4272386040789F376018C19FE37.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FDBAE28D54DD4272386040789F376018C19FE37.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 15 Mar 2025 02:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:46:89:b0:e0:4e:48:02:89:37:4b:18:57:1f:ed:28:b1:14:46:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FDBAE28D54DD4272386040789F376018C19FE37
        Validity
            Not Before: Feb 10 12:51:35 2025 GMT
            Not After : Feb  9 12:56:35 2026 GMT
        Subject: CN=8B2BD255813F14CDEC8FD30728E226C0A86F34C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:af:fb:da:a2:8d:85:b5:ef:f3:e6:6a:db:78:
                    a9:79:83:f0:61:23:1b:7e:58:f5:69:cf:67:f2:4d:
                    d9:35:a3:9d:9f:02:bf:e2:7c:d9:1d:e0:08:1a:23:
                    0e:89:0f:84:8c:9d:5f:aa:3f:c6:7c:68:a6:cd:ac:
                    79:34:20:bc:f0:e4:5f:31:53:01:87:58:97:3b:69:
                    bf:fc:15:38:45:50:ae:d6:5e:8d:d6:85:fa:54:85:
                    32:7c:07:c3:f1:eb:90:34:b2:8b:09:4d:13:7c:9a:
                    1f:d5:77:49:b1:41:1b:40:e3:b7:49:08:b0:d1:3e:
                    2a:11:4d:9c:28:ff:5b:16:a6:6c:bc:0c:06:e6:aa:
                    44:42:78:96:7a:75:c9:2d:13:08:5f:e5:c6:cc:2a:
                    60:65:a1:54:96:72:0f:5e:95:d2:52:fc:d6:a3:dd:
                    a3:f4:f3:c4:47:c7:07:26:e0:8c:5b:9d:79:25:a4:
                    73:cd:aa:59:38:8b:53:13:74:35:99:fb:d1:fd:09:
                    c2:c9:43:7a:de:a1:cd:cc:f8:05:53:7c:a9:51:ef:
                    47:aa:88:8d:de:4d:29:a3:2a:8d:f2:55:fb:63:23:
                    b9:c9:5c:6b:a1:c9:71:f8:3d:11:56:75:c9:1d:38:
                    d0:f7:b7:5a:97:96:5c:59:de:8a:58:8f:9c:04:0e:
                    72:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:2B:D2:55:81:3F:14:CD:EC:8F:D3:07:28:E2:26:C0:A8:6F:34:C8
            X509v3 Authority Key Identifier:
                keyid:4F:DB:AE:28:D5:4D:D4:27:23:86:04:07:89:F3:76:01:8C:19:FE:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/4FDBAE28D54DD4272386040789F376018C19FE37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FDBAE28D54DD4272386040789F376018C19FE37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234342e302f32342d3234203d3e20323730383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:91:f2:8b:22:76:cb:1e:95:f4:20:eb:6f:f9:8f:8d:d5:eb:
         48:e9:05:d1:58:ae:75:0e:42:00:d9:e1:f5:a9:50:9f:b7:cd:
         c9:be:e3:d7:83:e6:74:33:63:f1:73:6b:86:8b:14:1c:d7:fb:
         a1:ee:53:01:61:53:5a:64:8b:54:7b:1d:23:87:72:20:ec:df:
         6e:69:ab:f9:ca:4e:8c:43:44:26:67:67:95:c5:65:da:67:92:
         c4:5c:65:59:92:12:2c:54:87:d4:68:95:6a:73:5e:b6:70:03:
         87:cb:8d:99:4c:84:f6:d5:98:57:22:bf:6a:a3:75:f2:2c:75:
         3a:e3:f8:8d:06:23:87:9d:6e:8b:c4:48:61:29:99:20:a3:92:
         5e:0b:34:b4:8f:57:69:78:64:b9:36:7e:83:5b:36:ca:b3:6b:
         22:93:d1:70:be:b0:06:53:50:4f:a4:f0:44:98:14:49:ee:fa:
         e2:f0:b0:4c:5d:17:e1:ad:7d:f1:26:e2:6d:a3:7e:07:e5:c4:
         be:00:83:7e:73:03:48:c7:39:ed:7d:ae:f5:b3:b9:3c:df:7d:
         fd:c2:45:08:c2:86:31:0d:77:2e:01:87:08:63:f8:3e:55:09:
         55:39:81:0d:5d:42:2b:d2:80:f9:47:3a:a1:ae:c7:45:c6:3e:
         76:86:0a:87
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUbUaJsOBOSAKJN0sYVx/tKLEURmcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEZEQkFFMjhENTRERDQyNzIzODYwNDA3ODlGMzc2MDE4
QzE5RkUzNzAeFw0yNTAyMTAxMjUxMzVaFw0yNjAyMDkxMjU2MzVaMDMxMTAvBgNV
BAMTKDhCMkJEMjU1ODEzRjE0Q0RFQzhGRDMwNzI4RTIyNkMwQTg2RjM0QzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBr/vaoo2Fte/z5mrbeKl5g/Bh
Ixt+WPVpz2fyTdk1o52fAr/ifNkd4AgaIw6JD4SMnV+qP8Z8aKbNrHk0ILzw5F8x
UwGHWJc7ab/8FThFUK7WXo3WhfpUhTJ8B8Px65A0sosJTRN8mh/Vd0mxQRtA47dJ
CLDRPioRTZwo/1sWpmy8DAbmqkRCeJZ6dcktEwhf5cbMKmBloVSWcg9eldJS/Naj
3aP088RHxwcm4IxbnXklpHPNqlk4i1MTdDWZ+9H9CcLJQ3reoc3M+AVTfKlR70eq
iI3eTSmjKo3yVftjI7nJXGuhyXH4PRFWdckdOND3t1qXllxZ3opYj5wEDnIRAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUiyvSVYE/FM3sj9MHKOImwKhvNMgwHwYDVR0j
BBgwFoAUT9uuKNVN1CcjhgQHifN2AYwZ/jcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEdueEgzaDhvWWg2cWlmMlRrcXh5NXpCOWFYMVBtQXlFUjJ4RTR1ZXht
dVcvMC80RkRCQUUyOEQ1NERENDI3MjM4NjA0MDc4OUYzNzYwMThDMTlGRTM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRGREJBRTI4RDU0REQ0Mjcy
Mzg2MDQwNzg5RjM3NjAxOEMxOUZFMzcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hHbnhIM2g4b1loNnFpZjJUa3F4eTV6QjlhWDFQbUF5RVIyeEU0dWV4bXVXLzAv
MzIzMDMwMmUzMjMyMzkyZTMyMzQzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczMDM4MzEzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAMjl9DANBgkqhkiG9w0BAQsFAAOCAQEAdJHy
iyJ2yx6V9CDrb/mPjdXrSOkF0ViudQ5CANnh9alQn7fNyb7j14PmdDNj8XNrhosU
HNf7oe5TAWFTWmSLVHsdI4dyIOzfbmmr+cpOjENEJmdnlcVl2meSxFxlWZISLFSH
1GiVanNetnADh8uNmUyE9tWYVyK/aqN18ix1OuP4jQYjh51ui8RIYSmZIKOSXgs0
tI9XaXhkuTZ+g1s2yrNrIpPRcL6wBlNQT6TwRJgUSe764vCwTF0X4a198SbibaN+
B+XEvgCDfnMDSMc57X2u9bO5PN99/cJFCMKGMQ13LgGHCGP4PlUJVTmBDV1CK9KA
+Uc6oa7HRcY+doYKhw==
-----END CERTIFICATE-----
Generated at Fri Mar 14 04:03:58 2025 by rpki-client