Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/zmifjf37mnPqsJzfc7ZebzZCPA7GXAK7YLS6XGj7aCE/0/3230302e3131352e36362e302f32332d3233203d3e20323730383932.roa
File:                     3230302e3131352e36362e302f32332d3233203d3e20323730383932.roa (raw, json)
Hash identifier:          Umdb+KAs359pFboxUh6CsHAYjGTllGS22gQ9xoOSSdw=
Subject key identifier:   C6:A7:29:A6:B1:8B:9B:34:3F:0D:32:26:41:2A:17:47:82:ED:82:61
Certificate issuer:       /CN=23C0ACADA70321EB3942F0FF030B70AD9904DCAD
Certificate serial:       532CD8F02B4EAF56AE9FAE810DAC8597D7199729
Authority key identifier: 23:C0:AC:AD:A7:03:21:EB:39:42:F0:FF:03:0B:70:AD:99:04:DC:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23C0ACADA70321EB3942F0FF030B70AD9904DCAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zmifjf37mnPqsJzfc7ZebzZCPA7GXAK7YLS6XGj7aCE/0/3230302e3131352e36362e302f32332d3233203d3e20323730383932.roa
Signing time:             Tue 11 Mar 2025 16:03:29 +0000
ROA not before:           Tue 11 Mar 2025 15:58:29 +0000
ROA not after:            Tue 10 Mar 2026 16:03:29 +0000
asID:                     270892
IP address blocks:        200.115.66.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/zmifjf37mnPqsJzfc7ZebzZCPA7GXAK7YLS6XGj7aCE/0/23C0ACADA70321EB3942F0FF030B70AD9904DCAD.crl
                          rsync://rpki-repo.registro.br/repo/zmifjf37mnPqsJzfc7ZebzZCPA7GXAK7YLS6XGj7aCE/0/23C0ACADA70321EB3942F0FF030B70AD9904DCAD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23C0ACADA70321EB3942F0FF030B70AD9904DCAD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 04:24:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:2c:d8:f0:2b:4e:af:56:ae:9f:ae:81:0d:ac:85:97:d7:19:97:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23C0ACADA70321EB3942F0FF030B70AD9904DCAD
        Validity
            Not Before: Mar 11 15:58:29 2025 GMT
            Not After : Mar 10 16:03:29 2026 GMT
        Subject: CN=C6A729A6B18B9B343F0D3226412A174782ED8261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:1d:7c:cc:c9:02:e2:19:fb:a5:25:bf:8f:91:
                    ab:23:28:a8:11:dd:c3:f8:31:60:60:b2:6a:32:3f:
                    77:af:4a:18:c7:62:1b:60:00:3b:a1:4e:f7:f2:c7:
                    24:f6:86:0b:66:b6:53:da:e0:06:e9:1d:51:7c:fb:
                    59:02:39:b6:04:3c:e7:24:cf:1b:f1:66:ef:5d:1e:
                    12:12:76:57:e2:8b:31:e1:25:e5:c9:5c:2f:cb:ce:
                    37:ed:a0:53:8d:63:bf:e7:b4:be:e4:13:a3:f0:e6:
                    69:c1:ef:81:db:3e:e9:37:12:74:68:5f:91:d6:ae:
                    79:27:84:c1:55:7e:48:a3:3a:b6:a1:98:3c:41:03:
                    b1:56:af:1f:00:f3:85:48:be:40:64:a1:12:73:0b:
                    fd:0d:6b:f8:9d:aa:96:02:3f:ab:ac:0a:30:39:56:
                    73:cd:d4:3d:44:7f:96:12:5c:7c:49:e1:70:3a:d4:
                    43:a9:75:47:3d:18:b0:21:61:a4:f9:4b:64:cf:85:
                    34:a5:91:9f:8f:c7:23:47:8f:ac:b2:7a:2a:cd:b4:
                    5d:d4:9f:78:72:15:d7:b7:98:e6:8e:ae:18:71:0b:
                    69:41:fb:8d:bc:fe:90:12:d5:ac:d9:52:d7:a2:fd:
                    f3:7d:13:90:a3:4d:99:3b:88:f9:cd:46:c3:eb:3b:
                    fe:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:A7:29:A6:B1:8B:9B:34:3F:0D:32:26:41:2A:17:47:82:ED:82:61
            X509v3 Authority Key Identifier:
                keyid:23:C0:AC:AD:A7:03:21:EB:39:42:F0:FF:03:0B:70:AD:99:04:DC:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zmifjf37mnPqsJzfc7ZebzZCPA7GXAK7YLS6XGj7aCE/0/23C0ACADA70321EB3942F0FF030B70AD9904DCAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23C0ACADA70321EB3942F0FF030B70AD9904DCAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zmifjf37mnPqsJzfc7ZebzZCPA7GXAK7YLS6XGj7aCE/0/3230302e3131352e36362e302f32332d3233203d3e20323730383932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:d8:ca:0d:87:ae:12:7a:d5:10:8e:b5:76:e5:a0:f2:74:ee:
         a7:4a:c2:38:2a:c3:1f:53:a8:23:fd:eb:6f:b8:31:d9:f0:23:
         f9:af:06:59:da:5a:8a:42:77:18:6a:91:b0:4b:8c:fe:97:26:
         70:fb:18:9b:57:3f:3d:dc:9a:74:39:04:a9:c7:5e:20:57:c7:
         e6:17:44:a6:49:86:db:ef:50:d9:b7:10:6b:77:c5:82:b4:fd:
         98:f2:c7:e8:23:a9:90:2f:0d:e4:77:b4:77:97:63:88:a2:42:
         34:79:8d:c9:0a:ff:0b:c1:90:50:2a:7e:3f:97:ea:83:eb:6c:
         2e:5e:a3:06:9c:d7:f6:c4:b7:4c:34:5a:55:2e:1d:de:34:8d:
         64:cf:8c:47:9e:bb:1d:de:70:8b:f7:1d:a2:08:24:ea:53:89:
         ce:fe:89:a1:9c:ab:9a:c9:d8:70:80:9b:3b:85:b5:85:a9:55:
         6c:3a:f7:27:0d:4f:91:13:92:13:e4:7c:20:6f:cb:83:ea:80:
         68:e2:f5:e2:67:b4:3e:d2:8d:e5:8b:af:cd:7d:3a:2e:f7:48:
         25:ea:f6:87:4c:9c:4a:80:21:d2:93:2b:87:8a:f8:c0:f3:f7:
         ac:df:2b:e1:51:de:3c:f0:8e:c6:dd:7f:c9:f9:20:71:03:5f:
         f4:38:24:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:15:23 2025 by rpki-client