Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234342e302f32322d3232203d3e20323730383135.roa
File:                     3230302e3232392e3234342e302f32322d3232203d3e20323730383135.roa (raw, json)
Hash identifier:          ULIGhmA6lGWQjEeLTMKcyK2UuFJvaEa7X3+uJlfSvoE=
Subject key identifier:   96:CA:48:A0:BF:3B:E4:56:AC:AC:A3:02:CC:22:7D:E7:FB:0B:F9:86
Certificate issuer:       /CN=C67F80DA8A90E92C895CC422DE5A7C9558EC64EC
Certificate serial:       78BBA00845762FDE7BD5CDB138BEB7B25DE70F72
Authority key identifier: C6:7F:80:DA:8A:90:E9:2C:89:5C:C4:22:DE:5A:7C:95:58:EC:64:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234342e302f32322d3232203d3e20323730383135.roa
Signing time:             Sat 03 May 2025 16:03:30 +0000
ROA not before:           Sat 03 May 2025 15:58:30 +0000
ROA not after:            Sat 02 May 2026 16:03:30 +0000
asID:                     270815
IP address blocks:        200.229.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.crl
                          rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 05 May 2025 11:59:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:bb:a0:08:45:76:2f:de:7b:d5:cd:b1:38:be:b7:b2:5d:e7:0f:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C67F80DA8A90E92C895CC422DE5A7C9558EC64EC
        Validity
            Not Before: May  3 15:58:30 2025 GMT
            Not After : May  2 16:03:30 2026 GMT
        Subject: CN=96CA48A0BF3BE456ACACA302CC227DE7FB0BF986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:a8:37:3d:f0:09:09:f3:80:d7:77:07:8f:6e:
                    b5:af:f8:04:d5:64:a4:a5:2b:28:6a:41:50:f6:5f:
                    89:dc:c8:21:ad:09:18:e6:27:b5:e4:a7:da:36:68:
                    f5:16:21:d3:20:31:67:66:fd:bc:0c:29:3b:93:08:
                    d2:bc:9e:1f:98:bb:c3:50:9e:d2:47:c9:3b:e3:7c:
                    43:76:5e:d6:eb:0b:ff:8d:61:fa:fc:14:46:ae:e9:
                    0f:1c:36:31:6d:d1:8b:81:cd:3a:31:90:fd:ef:0f:
                    fa:f3:7d:ad:ac:c7:5b:58:b0:4b:65:90:60:b3:e8:
                    2d:83:44:fb:4d:06:17:09:31:da:d0:e0:36:23:ff:
                    60:b9:37:4b:da:7a:e1:3d:1d:51:b9:c0:ee:fd:2c:
                    6b:43:ad:9c:52:25:91:92:3b:2f:75:85:c5:fc:b0:
                    17:57:7c:13:a8:82:41:e1:90:95:9e:b0:ae:3d:f9:
                    ec:3e:1b:7f:d1:d1:98:15:2f:76:a0:a5:a6:fb:0d:
                    96:9c:2c:40:f2:bd:4c:be:71:53:cd:05:05:e8:dd:
                    f1:cb:3a:d9:d0:7b:39:aa:ae:04:fa:37:c5:5c:56:
                    bc:e1:c7:d5:f9:fd:b3:24:c9:78:0a:28:85:30:1b:
                    f6:50:d9:9f:d1:6a:d7:49:f1:93:83:3b:36:56:4f:
                    6c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:CA:48:A0:BF:3B:E4:56:AC:AC:A3:02:CC:22:7D:E7:FB:0B:F9:86
            X509v3 Authority Key Identifier:
                keyid:C6:7F:80:DA:8A:90:E9:2C:89:5C:C4:22:DE:5A:7C:95:58:EC:64:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234342e302f32322d3232203d3e20323730383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:23:62:19:47:e0:e0:0b:f9:3f:63:7a:df:59:38:95:f7:5e:
         3d:53:cd:9c:78:7a:bb:4c:c5:a7:48:ac:e7:34:f3:98:36:a1:
         e3:9d:88:0e:2b:aa:95:4e:0e:1f:a1:ff:e9:f9:63:10:4d:71:
         2d:7e:f1:6d:ee:88:ab:02:cc:3d:01:ba:98:8b:5e:c7:8a:44:
         4b:9e:82:4c:4d:07:be:35:72:48:c1:e8:c4:94:eb:25:bc:19:
         49:f4:b8:30:78:3d:c7:79:43:32:7f:42:8a:71:30:66:23:22:
         b4:41:d3:ae:41:f7:ea:94:07:2c:39:65:85:44:13:13:88:d9:
         fd:0d:13:79:c8:85:78:4f:28:fe:6f:bc:fb:47:3b:18:99:29:
         d4:b7:3f:2b:50:e0:80:f9:f1:e7:1d:5d:17:82:92:ec:1c:fd:
         85:cb:87:7d:12:11:39:a6:4d:e1:6f:59:0f:68:16:b7:6c:7b:
         b7:a3:7f:df:fd:b0:d6:70:fc:f6:d1:ec:bc:7a:dd:d0:cd:b2:
         88:79:8f:96:d9:5e:1d:2b:76:96:db:bf:ef:19:d0:3d:50:50:
         83:08:28:e5:4a:3a:d1:34:61:f3:d9:cb:7e:c3:62:68:41:67:
         d1:b5:67:5f:a4:18:d9:12:0d:e9:62:6e:ae:b5:a1:48:fb:1c:
         c6:71:0a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 19:58:02 2025 by rpki-client