Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234372e302f32342d3234203d3e20323730383135.roa
File:                     3230302e3232392e3234372e302f32342d3234203d3e20323730383135.roa (raw, json)
Hash identifier:          FRk9CC9jBDV828jaDNWv+SM/yUFOHkclLrHgY1YjjKA=
Subject key identifier:   C6:6A:4A:38:D9:CF:C6:C9:73:D0:A1:FB:CA:E5:03:B9:11:95:F6:BA
Certificate issuer:       /CN=4FDBAE28D54DD4272386040789F376018C19FE37
Certificate serial:       31D3F4FBA9BE65DADA2CB81F3324D90C252DC7FE
Authority key identifier: 4F:DB:AE:28:D5:4D:D4:27:23:86:04:07:89:F3:76:01:8C:19:FE:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FDBAE28D54DD4272386040789F376018C19FE37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234372e302f32342d3234203d3e20323730383135.roa
Signing time:             Mon 10 Feb 2025 12:56:36 +0000
ROA not before:           Mon 10 Feb 2025 12:51:36 +0000
ROA not after:            Mon 09 Feb 2026 12:56:36 +0000
asID:                     270815
IP address blocks:        200.229.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/4FDBAE28D54DD4272386040789F376018C19FE37.crl
                          rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/4FDBAE28D54DD4272386040789F376018C19FE37.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FDBAE28D54DD4272386040789F376018C19FE37.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 20:50:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:d3:f4:fb:a9:be:65:da:da:2c:b8:1f:33:24:d9:0c:25:2d:c7:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FDBAE28D54DD4272386040789F376018C19FE37
        Validity
            Not Before: Feb 10 12:51:36 2025 GMT
            Not After : Feb  9 12:56:36 2026 GMT
        Subject: CN=C66A4A38D9CFC6C973D0A1FBCAE503B91195F6BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:81:e2:c7:3c:a7:3c:77:a4:48:40:5c:a0:96:
                    b2:f2:64:16:19:3d:d0:85:44:c0:c2:79:b4:16:a1:
                    4b:65:a6:a4:61:78:06:9d:44:6f:ea:9b:18:5e:63:
                    b1:b7:53:37:86:ed:62:32:88:86:24:de:b0:5d:d6:
                    71:55:10:c3:b1:1d:9a:f5:11:05:a0:1d:fc:16:5c:
                    50:3e:9d:a9:ff:e8:db:3c:dc:b6:f0:99:ff:80:00:
                    d1:9b:16:e7:5b:e5:2d:68:00:b6:a6:d2:86:df:61:
                    f8:d1:1d:03:48:47:12:a6:8f:71:f1:40:8a:23:e8:
                    27:94:06:1c:38:22:0b:4a:c2:b3:14:39:1b:0a:d5:
                    b2:76:d2:68:d4:38:e2:c2:08:51:79:ee:bd:e4:be:
                    1f:ad:ad:87:73:bb:35:d2:3f:59:4b:39:95:c0:9a:
                    07:cc:5f:0b:c5:a8:bb:8f:c6:22:f2:cc:6d:6c:04:
                    cf:5c:ca:4b:3a:2f:d5:be:06:9f:44:fe:4d:e7:11:
                    d9:82:01:d2:81:72:be:20:9a:2c:48:8f:a0:c9:3c:
                    b8:44:26:2e:ee:ab:ba:21:0c:83:02:97:38:fc:68:
                    3e:f7:a3:94:53:67:6e:3f:32:69:26:b9:b7:04:33:
                    34:30:30:78:f4:76:f6:a5:a7:8d:2b:57:84:23:78:
                    fa:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:6A:4A:38:D9:CF:C6:C9:73:D0:A1:FB:CA:E5:03:B9:11:95:F6:BA
            X509v3 Authority Key Identifier:
                keyid:4F:DB:AE:28:D5:4D:D4:27:23:86:04:07:89:F3:76:01:8C:19:FE:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/4FDBAE28D54DD4272386040789F376018C19FE37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FDBAE28D54DD4272386040789F376018C19FE37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234372e302f32342d3234203d3e20323730383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:73:21:33:f8:b2:1c:f8:9d:82:25:43:9d:84:9a:f3:27:89:
         08:15:2c:92:b9:34:8d:ac:8a:6d:da:88:25:27:31:55:54:46:
         78:e2:e6:32:ba:9d:cf:2a:67:0a:5e:46:9e:32:dc:a7:e4:b3:
         24:29:c9:8e:ea:63:2a:da:41:7d:85:5e:30:87:f5:e8:6b:54:
         e5:a5:3d:9c:e7:42:04:30:10:59:ab:fb:64:86:0d:ec:84:eb:
         86:ff:36:31:79:a6:64:85:ee:52:c3:75:c9:5a:db:ba:9e:62:
         10:26:f0:cf:3c:63:0b:97:f8:00:ce:db:ca:7b:cf:7e:f7:0a:
         91:c1:0f:58:26:e8:6b:c2:8b:19:2d:d4:33:69:a4:d2:6f:bf:
         55:6e:d5:06:75:b5:da:eb:3c:bc:61:13:54:fb:fb:a0:1f:f5:
         ba:2c:6e:62:02:66:ef:1e:e9:e2:22:c6:0c:43:ec:0a:43:88:
         22:ff:44:9b:d8:f2:c8:70:cb:a7:ed:f9:85:cd:84:3d:b8:05:
         82:59:d6:97:46:44:c2:38:b8:35:e0:28:a7:47:4c:2a:e6:9d:
         65:a5:9e:d7:50:c7:1d:85:cf:97:ea:9b:80:2a:20:3d:dd:fd:
         a3:61:fb:cc:3d:46:7d:09:00:98:2f:fc:06:f9:a8:50:48:fe:
         d3:1d:5a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:18:08 2025 by rpki-client