Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234362e302f32332d3233203d3e20323730383135.roa
File:                     3230302e3232392e3234362e302f32332d3233203d3e20323730383135.roa (raw, json)
Hash identifier:          IXg0wNA8/tJqXTmXODCouapBaCiLOr1aasLjSHW+9xs=
Subject key identifier:   BA:F4:24:C2:E2:6D:BE:BD:2D:A1:A7:1A:8A:3E:33:92:CA:B1:0B:80
Certificate issuer:       /CN=4FDBAE28D54DD4272386040789F376018C19FE37
Certificate serial:       438BAD4F4B5E81DC364CF879A640646B8B787FC9
Authority key identifier: 4F:DB:AE:28:D5:4D:D4:27:23:86:04:07:89:F3:76:01:8C:19:FE:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FDBAE28D54DD4272386040789F376018C19FE37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234362e302f32332d3233203d3e20323730383135.roa
Signing time:             Mon 10 Feb 2025 12:56:34 +0000
ROA not before:           Mon 10 Feb 2025 12:51:34 +0000
ROA not after:            Mon 09 Feb 2026 12:56:34 +0000
asID:                     270815
IP address blocks:        200.229.246.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/4FDBAE28D54DD4272386040789F376018C19FE37.crl
                          rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/4FDBAE28D54DD4272386040789F376018C19FE37.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FDBAE28D54DD4272386040789F376018C19FE37.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 18 Feb 2025 23:43:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:8b:ad:4f:4b:5e:81:dc:36:4c:f8:79:a6:40:64:6b:8b:78:7f:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FDBAE28D54DD4272386040789F376018C19FE37
        Validity
            Not Before: Feb 10 12:51:34 2025 GMT
            Not After : Feb  9 12:56:34 2026 GMT
        Subject: CN=BAF424C2E26DBEBD2DA1A71A8A3E3392CAB10B80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a7:76:4b:c1:6c:89:48:d3:31:c5:19:b8:44:
                    5a:23:28:90:03:c5:e5:b3:0a:29:1a:6a:7b:62:f1:
                    be:27:cc:1a:6d:87:f7:5e:a5:d6:3f:8e:13:40:b7:
                    47:c4:4a:85:70:c5:ac:08:8c:14:9b:6b:15:19:a5:
                    b0:a2:33:c5:6b:49:92:ac:8b:cc:03:be:e0:91:39:
                    9c:45:94:4d:5e:80:7e:15:9c:0a:7f:cf:cc:44:37:
                    03:f9:8e:00:48:32:f1:f3:2f:7f:0c:42:ec:ce:f4:
                    52:13:99:b5:9d:f3:f6:de:34:bc:fa:8f:03:9a:7d:
                    12:9d:38:0b:7d:1f:87:94:64:54:c4:1d:b7:43:91:
                    e5:4d:6f:ed:1e:15:1d:8a:b3:47:00:5f:11:a2:0a:
                    42:1c:40:2f:9c:7b:63:c2:da:d4:cb:b5:44:d4:05:
                    ff:62:08:47:6e:cb:1a:49:72:fa:60:3b:f3:7e:7c:
                    8f:16:ff:2b:96:ff:e7:33:4c:e7:c5:b2:da:4c:3b:
                    39:37:bd:b9:e8:93:20:84:72:ff:5b:db:b8:c9:8c:
                    d1:dd:74:1b:7e:55:50:fe:f2:e0:fa:96:67:06:c8:
                    e1:98:f6:10:fb:5c:92:d6:1f:c7:3e:6f:7c:ea:6e:
                    c0:25:37:a6:56:f8:a3:41:16:91:1b:a9:be:a0:eb:
                    8b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:F4:24:C2:E2:6D:BE:BD:2D:A1:A7:1A:8A:3E:33:92:CA:B1:0B:80
            X509v3 Authority Key Identifier:
                keyid:4F:DB:AE:28:D5:4D:D4:27:23:86:04:07:89:F3:76:01:8C:19:FE:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/4FDBAE28D54DD4272386040789F376018C19FE37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FDBAE28D54DD4272386040789F376018C19FE37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234362e302f32332d3233203d3e20323730383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:2a:7c:f3:7f:fa:f3:7a:85:c6:5b:2d:3c:17:8e:20:9a:49:
         ce:20:9c:3e:e0:c5:58:44:8e:a9:f0:dc:d5:98:f7:67:0f:a1:
         29:ca:80:51:cb:92:7e:9b:90:d5:1f:8d:9a:9d:1b:39:f9:3b:
         99:1b:ba:4d:59:45:ce:06:fa:d3:bb:2d:40:ab:f2:67:a8:52:
         6f:a2:9b:3d:48:f6:87:a0:fe:46:2d:ec:49:3c:8f:f5:2d:e3:
         99:13:c6:e2:7d:17:18:6f:c9:0e:50:1d:40:de:6b:b4:5d:43:
         2c:43:53:61:19:06:aa:c8:47:87:45:db:29:53:f0:4b:a4:04:
         99:0e:51:f4:09:4f:62:d8:34:f3:21:b9:4a:85:b7:2a:48:97:
         a7:89:f3:0c:f3:7c:db:a1:2d:c6:63:da:fd:ad:f5:e0:36:8d:
         a2:65:96:c0:7b:f1:80:7c:2a:49:ac:7e:a1:97:04:b5:a2:be:
         90:40:cf:83:0d:f2:00:45:73:3f:c2:6d:b6:58:b5:5f:80:85:
         df:2a:b1:50:c4:14:00:0e:2a:41:32:59:4e:63:8b:e6:ad:a1:
         47:ef:7e:70:69:22:90:7d:e2:43:86:d3:10:70:8b:e2:9c:69:
         83:1e:da:13:0c:e3:9a:8d:b6:5f:5b:f7:2f:f4:cf:5e:fb:68:
         70:e9:68:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:41:40 2025 by rpki-client