Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/3230302e3137302e38302e302f32302d3234203d3e203232333536.roa
File:                     3230302e3137302e38302e302f32302d3234203d3e203232333536.roa (raw, json)
Hash identifier:          XohZhw/qfHKZPzmoxfjStIrmnl3pqxRNfLqhu9QyNn0=
Subject key identifier:   F8:0C:8C:9E:09:0C:88:CD:FB:77:F8:BA:0A:02:56:68:38:8A:A9:F9
Certificate issuer:       /CN=968400C9DFC16D643EF5C94C34F993F17C7568AA
Certificate serial:       3894721F1F1AF70FFCCE5EE7D9D8CDBBC427173F
Authority key identifier: 96:84:00:C9:DF:C1:6D:64:3E:F5:C9:4C:34:F9:93:F1:7C:75:68:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/968400C9DFC16D643EF5C94C34F993F17C7568AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/3230302e3137302e38302e302f32302d3234203d3e203232333536.roa
Signing time:             Fri 18 Apr 2025 14:30:50 +0000
ROA not before:           Fri 18 Apr 2025 14:25:50 +0000
ROA not after:            Fri 17 Apr 2026 14:30:50 +0000
asID:                     22356
IP address blocks:        200.170.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/968400C9DFC16D643EF5C94C34F993F17C7568AA.crl
                          rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/968400C9DFC16D643EF5C94C34F993F17C7568AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/968400C9DFC16D643EF5C94C34F993F17C7568AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 05:42:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:94:72:1f:1f:1a:f7:0f:fc:ce:5e:e7:d9:d8:cd:bb:c4:27:17:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=968400C9DFC16D643EF5C94C34F993F17C7568AA
        Validity
            Not Before: Apr 18 14:25:50 2025 GMT
            Not After : Apr 17 14:30:50 2026 GMT
        Subject: CN=F80C8C9E090C88CDFB77F8BA0A025668388AA9F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:98:ef:cb:70:57:13:55:22:15:9a:5c:1f:0b:
                    fe:65:e3:aa:1a:0f:f7:e6:ca:e6:74:15:f0:0c:34:
                    69:38:de:58:ba:c7:cd:02:16:fa:9e:3f:85:ca:2d:
                    dc:e8:63:d8:b8:01:89:f5:8c:31:47:c2:f8:3f:56:
                    a1:a2:11:16:22:ee:ad:e2:68:2e:67:37:52:01:54:
                    8e:92:ba:f7:38:bf:93:69:47:44:97:7f:7a:98:c9:
                    59:c3:aa:9b:db:58:c7:0b:57:48:81:22:c9:12:b4:
                    54:f6:f5:2f:81:48:63:2f:3e:00:a5:d9:1f:37:18:
                    e5:a6:15:4c:84:46:48:c3:99:26:08:7d:57:9e:de:
                    7c:a1:ce:b1:94:26:40:32:cd:cf:5d:e8:9c:43:06:
                    cb:29:10:4a:da:4f:80:10:6e:a2:88:64:ce:b1:5d:
                    1e:27:dd:74:7f:cc:65:e4:7a:72:48:fb:5a:a4:2b:
                    2c:7f:51:de:43:0b:23:1b:a6:b2:86:60:b2:b4:44:
                    72:12:9e:62:9d:2e:ad:40:12:a7:fb:63:9c:c0:6f:
                    00:b5:33:53:3a:d9:c5:8e:8d:40:52:7d:43:b9:9a:
                    31:21:34:7c:0f:6b:77:96:5d:da:f8:51:99:7f:93:
                    04:d3:38:0e:e6:6d:c1:b2:9b:8d:7f:bd:77:9b:07:
                    40:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:0C:8C:9E:09:0C:88:CD:FB:77:F8:BA:0A:02:56:68:38:8A:A9:F9
            X509v3 Authority Key Identifier:
                keyid:96:84:00:C9:DF:C1:6D:64:3E:F5:C9:4C:34:F9:93:F1:7C:75:68:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/968400C9DFC16D643EF5C94C34F993F17C7568AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/968400C9DFC16D643EF5C94C34F993F17C7568AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/3230302e3137302e38302e302f32302d3234203d3e203232333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.170.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         95:77:cb:db:15:fa:8a:47:2c:98:5f:b2:55:2b:9d:b5:7e:0e:
         cc:73:b0:ff:f1:3e:b2:ad:90:1f:1f:e5:bc:39:f2:c4:d8:da:
         99:9d:95:d4:13:20:4a:12:0b:9e:32:fd:a9:b4:6f:af:8a:6f:
         91:18:cf:3a:ea:81:95:42:c6:67:cc:ca:3b:8d:0c:33:04:ee:
         a4:41:65:58:91:3b:ca:16:f4:cf:79:10:23:09:4c:7b:b0:ba:
         2a:a5:bd:57:5a:06:d4:9e:21:51:56:c1:8a:ea:a5:6b:2c:34:
         fe:07:4c:e4:01:f5:32:9d:9f:6e:15:c6:fe:5b:e3:c8:f5:f9:
         e1:9a:36:32:46:c4:39:e2:ae:b5:d6:66:f5:9d:69:bb:4a:5a:
         b9:4f:86:40:13:75:9a:8e:9c:cf:d1:3e:d8:5b:44:2b:80:d2:
         3b:84:69:6d:08:01:50:d4:a3:f2:63:de:a5:e2:bd:33:27:c4:
         bd:fa:ce:b2:7a:2e:a1:67:c9:fe:9c:b3:2c:b3:6f:7a:82:e2:
         29:72:cc:89:f4:e7:72:af:d4:a5:1e:60:58:ac:9b:cf:2e:5a:
         59:6e:43:29:da:11:97:83:47:41:ef:0c:7f:a9:20:35:6a:9a:
         a4:ca:cd:9d:b5:9a:20:9b:e0:1a:b2:91:68:28:6a:b0:3b:4e:
         97:2e:c5:3c
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUOJRyHx8a9w/8zl7n2djNu8QnFz8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTY4NDAwQzlERkMxNkQ2NDNFRjVDOTRDMzRGOTkzRjE3
Qzc1NjhBQTAeFw0yNTA0MTgxNDI1NTBaFw0yNjA0MTcxNDMwNTBaMDMxMTAvBgNV
BAMTKEY4MEM4QzlFMDkwQzg4Q0RGQjc3RjhCQTBBMDI1NjY4Mzg4QUE5RjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQmO/LcFcTVSIVmlwfC/5l46oa
D/fmyuZ0FfAMNGk43li6x80CFvqeP4XKLdzoY9i4AYn1jDFHwvg/VqGiERYi7q3i
aC5nN1IBVI6Suvc4v5NpR0SXf3qYyVnDqpvbWMcLV0iBIskStFT29S+BSGMvPgCl
2R83GOWmFUyERkjDmSYIfVee3nyhzrGUJkAyzc9d6JxDBsspEEraT4AQbqKIZM6x
XR4n3XR/zGXkenJI+1qkKyx/Ud5DCyMbprKGYLK0RHISnmKdLq1AEqf7Y5zAbwC1
M1M62cWOjUBSfUO5mjEhNHwPa3eWXdr4UZl/kwTTOA7mbcGym41/vXebB0BdAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU+AyMngkMiM37d/i6CgJWaDiKqfkwHwYDVR0j
BBgwFoAUloQAyd/BbWQ+9clMNPmT8Xx1aKowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2U0NTlKcDlFcW9NcldOTmtWaGdNNzh4MWtENE1LZGpmRHI5MnczdWhR
b3IvMC85Njg0MDBDOURGQzE2RDY0M0VGNUM5NEMzNEY5OTNGMTdDNzU2OEFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk2ODQwMEM5REZDMTZENjQz
RUY1Qzk0QzM0Rjk5M0YxN0M3NTY4QUEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dlNDU5SnA5RXFvTXJXTk5rVmhnTTc4eDFrRDRNS2RqZkRyOTJ3M3VoUW9yLzAv
MzIzMDMwMmUzMTM3MzAyZTM4MzAyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjMy
MzMzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEyKpQMA0GCSqGSIb3DQEBCwUAA4IBAQCVd8vbFfqK
RyyYX7JVK521fg7Mc7D/8T6yrZAfH+W8OfLE2NqZnZXUEyBKEgueMv2ptG+vim+R
GM866oGVQsZnzMo7jQwzBO6kQWVYkTvKFvTPeRAjCUx7sLoqpb1XWgbUniFRVsGK
6qVrLDT+B0zkAfUynZ9uFcb+W+PI9fnhmjYyRsQ54q611mb1nWm7Slq5T4ZAE3Wa
jpzP0T7YW0QrgNI7hGltCAFQ1KPyY96l4r0zJ8S9+s6yei6hZ8n+nLMss296guIp
csyJ9Odyr9SlHmBYrJvPLlpZbkMp2hGXg0dB7wx/qSA1apqkys2dtZogm+AaspFo
KGqwO06XLsU8
-----END CERTIFICATE-----
Generated at Wed Apr 30 12:30:28 2025 by rpki-client