Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/3230302e3135302e3235322e302f32322d3332203d3e203532353237.roa
File:                     3230302e3135302e3235322e302f32322d3332203d3e203532353237.roa (raw, json)
Hash identifier:          TQ07dwLnff467M5+uxDdEBL4XwW64e9MnafCw5OQUmk=
Subject key identifier:   00:0E:30:CC:A1:F4:34:E4:9D:CA:D6:E5:B2:9E:91:35:B8:C1:20:8C
Certificate issuer:       /CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
Certificate serial:       5D37243D517B3A8AE9D7605BA2C30A9DA664D3A6
Authority key identifier: 7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/3230302e3135302e3235322e302f32322d3332203d3e203532353237.roa
Signing time:             Mon 10 Feb 2025 16:06:15 +0000
ROA not before:           Mon 10 Feb 2025 16:01:15 +0000
ROA not after:            Mon 09 Feb 2026 16:06:15 +0000
asID:                     52527
IP address blocks:        200.150.252.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.crl
                          rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 19:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:37:24:3d:51:7b:3a:8a:e9:d7:60:5b:a2:c3:0a:9d:a6:64:d3:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
        Validity
            Not Before: Feb 10 16:01:15 2025 GMT
            Not After : Feb  9 16:06:15 2026 GMT
        Subject: CN=000E30CCA1F434E49DCAD6E5B29E9135B8C1208C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:52:c9:64:8c:28:eb:fa:b1:9c:9d:32:40:ed:
                    ac:f7:c6:d6:46:b7:c8:6d:8c:6c:fe:5d:5b:12:3c:
                    a6:77:ff:3c:ca:b8:ee:c4:4d:aa:22:27:af:53:9b:
                    75:45:57:e3:4e:b9:c8:a7:b6:8d:d1:5f:4b:f1:d9:
                    ae:7b:31:1a:e1:4b:33:fd:f0:60:80:97:da:72:a2:
                    ba:84:a6:1d:1a:0a:77:c6:e5:72:29:a6:fb:44:27:
                    41:d7:93:b4:58:91:2e:19:b9:d2:d2:7c:ce:9b:93:
                    f6:a3:2d:2a:73:22:c7:cc:33:5d:8e:e5:5b:fb:ec:
                    01:8f:23:a3:cc:53:1a:d2:8a:81:e0:af:73:13:69:
                    29:92:7d:9c:d2:57:ac:f4:89:dd:9a:5c:b3:8b:33:
                    9e:5a:b1:bd:b5:3b:a3:ff:8e:7f:47:39:35:b7:f8:
                    cd:32:a5:00:86:be:14:54:96:bb:db:ae:b9:92:1a:
                    25:3c:ad:00:94:cb:1b:c9:e9:2b:b8:54:6a:44:aa:
                    73:ab:fd:20:4d:63:f6:99:2b:ce:a7:18:6e:89:d4:
                    44:9b:71:be:de:32:ce:ed:c6:8b:2e:56:49:e1:09:
                    3d:0c:24:68:84:c4:73:22:a8:af:38:30:9d:fa:82:
                    e6:70:2e:bb:91:f1:02:b3:56:28:12:02:dd:e5:c4:
                    86:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:0E:30:CC:A1:F4:34:E4:9D:CA:D6:E5:B2:9E:91:35:B8:C1:20:8C
            X509v3 Authority Key Identifier:
                keyid:7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/3230302e3135302e3235322e302f32322d3332203d3e203532353237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.150.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:92:e4:ae:8e:88:d5:e9:9d:fb:94:45:a5:41:a7:f1:aa:29:
         40:3d:4a:9d:ca:57:da:be:21:7f:38:b0:6e:56:48:b7:ad:86:
         b2:d1:bb:57:9b:74:7c:66:c2:74:e8:34:3a:3d:91:ac:d0:76:
         e9:67:5a:d0:5c:67:34:f8:19:35:e7:87:4b:5f:50:f2:1c:82:
         69:40:8e:ae:a0:34:41:2e:c4:b3:43:12:7f:84:a3:3c:31:ea:
         25:0a:6d:91:3d:4f:87:ee:26:19:ef:be:29:e9:94:a8:ac:d5:
         31:f4:64:46:1c:ec:dd:c7:16:2b:de:1f:92:57:3d:cc:6c:54:
         b9:fa:e5:6d:de:1e:e4:e3:a2:a0:b7:d1:f5:7c:38:99:96:6d:
         03:87:17:12:6d:0c:5a:bf:8e:0f:bf:3e:6c:24:ab:00:e0:8c:
         65:c3:f2:e9:20:47:e5:cc:46:b7:1b:b3:a6:4c:0b:55:41:ac:
         1f:1e:df:ae:95:3a:67:ae:33:49:69:36:4e:d3:b7:c8:79:89:
         b9:17:7f:4b:2a:f0:06:90:36:90:36:b8:2b:cd:e9:61:8e:ae:
         40:1b:b2:0d:a3:a1:a4:f8:00:7b:8e:23:a5:fc:bc:49:a8:aa:
         07:3c:83:b8:4c:45:e6:61:5b:6b:36:0a:78:89:10:dd:9a:cc:
         d7:d3:6e:2e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUXTckPVF7Oorp12BbosMKnaZk06YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0FFQjk1OTE1MDQ1NkVDMTY3NEU5MUUwODRGMkM0RUY1
QjFBN0VCNDAeFw0yNTAyMTAxNjAxMTVaFw0yNjAyMDkxNjA2MTVaMDMxMTAvBgNV
BAMTKDAwMEUzMENDQTFGNDM0RTQ5RENBRDZFNUIyOUU5MTM1QjhDMTIwOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqUslkjCjr+rGcnTJA7az3xtZG
t8htjGz+XVsSPKZ3/zzKuO7ETaoiJ69Tm3VFV+NOucinto3RX0vx2a57MRrhSzP9
8GCAl9pyorqEph0aCnfG5XIppvtEJ0HXk7RYkS4ZudLSfM6bk/ajLSpzIsfMM12O
5Vv77AGPI6PMUxrSioHgr3MTaSmSfZzSV6z0id2aXLOLM55asb21O6P/jn9HOTW3
+M0ypQCGvhRUlrvbrrmSGiU8rQCUyxvJ6Su4VGpEqnOr/SBNY/aZK86nGG6J1ESb
cb7eMs7txosuVknhCT0MJGiExHMiqK84MJ36guZwLruR8QKzVigSAt3lxIYnAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUAA4wzKH0NOSdytblsp6RNbjBIIwwHwYDVR0j
BBgwFoAUeuuVkVBFbsFnTpHghPLE71safrQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSExYWEhFaDZSNEJXQUJ3WjZKdGNSUGl1S0RRaU5aZnM3R1k5V2RlZ2da
SkovMC83QUVCOTU5MTUwNDU2RUMxNjc0RTkxRTA4NEYyQzRFRjVCMUE3RUI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdBRUI5NTkxNTA0NTZFQzE2
NzRFOTFFMDg0RjJDNEVGNUIxQTdFQjQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hMWFhIRWg2UjRCV0FCd1o2SnRjUlBpdUtEUWlOWmZzN0dZOVdkZWdnWkpKLzAv
MzIzMDMwMmUzMTM1MzAyZTMyMzUzMjJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDM1
MzIzNTMyMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALIlvwwDQYJKoZIhvcNAQELBQADggEBAB+S5K6O
iNXpnfuURaVBp/GqKUA9Sp3KV9q+IX84sG5WSLethrLRu1ebdHxmwnToNDo9kazQ
dulnWtBcZzT4GTXnh0tfUPIcgmlAjq6gNEEuxLNDEn+Eozwx6iUKbZE9T4fuJhnv
vinplKis1TH0ZEYc7N3HFiveH5JXPcxsVLn65W3eHuTjoqC30fV8OJmWbQOHFxJt
DFq/jg+/PmwkqwDgjGXD8ukgR+XMRrcbs6ZMC1VBrB8e366VOmeuM0lpNk7Tt8h5
ibkXf0sq8AaQNpA2uCvN6WGOrkAbsg2joaT4AHuOI6X8vEmoqgc8g7hMReZhW2s2
CniJEN2azNfTbi4=
-----END CERTIFICATE-----
Generated at Wed Apr 23 05:56:14 2025 by rpki-client