Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234352e302f32342d3234203d3e20323730383135.roa
File:                     3230302e3232392e3234352e302f32342d3234203d3e20323730383135.roa (raw, json)
Hash identifier:          tZ4zLEO5ntuC4by9ch3fsQ0sdLbRRjAXZCsj41jKwbg=
Subject key identifier:   EC:CC:CF:53:04:80:2A:BF:B5:0D:E0:D3:9F:DD:14:9E:09:BC:11:93
Certificate issuer:       /CN=C67F80DA8A90E92C895CC422DE5A7C9558EC64EC
Certificate serial:       10A52B92AAA8CA672857E6EA9E4B47EF7E6FEFF7
Authority key identifier: C6:7F:80:DA:8A:90:E9:2C:89:5C:C4:22:DE:5A:7C:95:58:EC:64:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234352e302f32342d3234203d3e20323730383135.roa
Signing time:             Sat 03 May 2025 16:03:34 +0000
ROA not before:           Sat 03 May 2025 15:58:34 +0000
ROA not after:            Sat 02 May 2026 16:03:34 +0000
asID:                     270815
IP address blocks:        200.229.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.crl
                          rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 06 May 2025 23:19:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:a5:2b:92:aa:a8:ca:67:28:57:e6:ea:9e:4b:47:ef:7e:6f:ef:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C67F80DA8A90E92C895CC422DE5A7C9558EC64EC
        Validity
            Not Before: May  3 15:58:34 2025 GMT
            Not After : May  2 16:03:34 2026 GMT
        Subject: CN=ECCCCF5304802ABFB50DE0D39FDD149E09BC1193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:db:e6:61:5a:76:36:c8:9e:f3:d3:aa:0e:ad:
                    7b:64:31:4a:96:fe:fb:bf:4d:f1:43:da:78:06:fc:
                    77:db:e6:6d:3a:c7:77:16:41:b0:b2:42:d7:3a:4e:
                    92:02:ce:c5:33:aa:76:6a:43:79:84:4e:6a:b1:f6:
                    0e:b8:56:6c:da:f9:b6:6a:17:19:bd:9d:2d:5d:3c:
                    bd:9c:58:89:aa:df:1d:5b:aa:2a:ae:b1:20:ef:b4:
                    ee:f0:21:f8:22:09:f3:a0:4b:6a:d8:55:5d:26:09:
                    a9:b8:a0:53:5c:eb:06:8f:4b:c7:0a:c8:7e:0c:15:
                    11:6e:80:cb:b6:26:2a:d8:ab:b0:85:cc:3e:67:d6:
                    6c:dc:11:70:7d:a3:20:51:23:ce:03:c5:39:b1:c7:
                    fa:7d:3f:61:88:15:df:86:8b:a7:12:04:9e:85:ee:
                    9c:6d:17:f5:01:28:1c:97:55:7a:b5:b6:90:a0:ae:
                    8d:64:9c:e0:30:5f:9e:3d:53:67:70:71:a9:5f:af:
                    c9:0f:e5:e9:46:e6:47:81:9c:44:65:38:a5:46:fc:
                    b9:79:5d:44:12:73:03:0d:a3:25:36:3d:d4:80:49:
                    2a:87:21:fc:e8:d5:2b:3f:05:d9:37:c3:ec:b9:7a:
                    cc:77:28:a3:1b:96:11:b1:ad:77:94:51:57:97:ae:
                    0c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:CC:CF:53:04:80:2A:BF:B5:0D:E0:D3:9F:DD:14:9E:09:BC:11:93
            X509v3 Authority Key Identifier:
                keyid:C6:7F:80:DA:8A:90:E9:2C:89:5C:C4:22:DE:5A:7C:95:58:EC:64:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234352e302f32342d3234203d3e20323730383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:be:66:df:f2:36:75:ad:2f:81:02:a9:e7:b4:22:bd:bc:3d:
         f0:8c:32:1f:b7:cb:c5:51:65:f8:fe:62:84:3a:a1:5e:80:6c:
         20:e5:17:94:91:68:e3:7d:cf:9d:64:e0:c7:b4:c7:a9:87:57:
         c7:50:38:a3:b2:4a:f8:6f:ff:93:9c:fd:50:f7:e2:29:75:4d:
         e0:7c:b2:ea:ab:02:bf:4e:16:6b:23:8d:95:05:1e:9b:1b:ac:
         7b:d6:64:cc:31:a0:26:f1:8c:7e:04:3b:70:74:5c:6b:5d:fa:
         da:40:87:81:d1:30:63:3e:ea:57:55:78:21:31:4d:ea:0e:56:
         55:b9:ca:f0:ac:ee:da:91:f3:8f:d0:01:57:11:4a:88:fb:9d:
         1d:cb:b7:84:85:25:1f:e4:f4:82:e0:54:9e:e4:ec:5d:98:eb:
         1a:b2:3e:72:06:59:a1:cc:e7:3b:58:7f:0f:8d:1a:f4:7c:f1:
         17:f9:5c:41:31:3e:0f:3a:bb:34:16:0b:43:08:43:d4:9c:6e:
         ab:87:17:27:1f:59:7a:82:0c:55:56:82:4c:ba:83:ae:7f:36:
         89:2d:bf:80:91:dd:84:5b:c4:bb:45:53:87:7a:2a:0f:7c:28:
         58:62:ea:fb:64:27:23:c3:15:fe:a7:79:2e:59:4d:87:2d:57:
         55:3c:e6:bf
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUEKUrkqqoymcoV+bqnktH735v7/cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzY3RjgwREE4QTkwRTkyQzg5NUNDNDIyREU1QTdDOTU1
OEVDNjRFQzAeFw0yNTA1MDMxNTU4MzRaFw0yNjA1MDIxNjAzMzRaMDMxMTAvBgNV
BAMTKEVDQ0NDRjUzMDQ4MDJBQkZCNTBERTBEMzlGREQxNDlFMDlCQzExOTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd2+ZhWnY2yJ7z06oOrXtkMUqW
/vu/TfFD2ngG/Hfb5m06x3cWQbCyQtc6TpICzsUzqnZqQ3mETmqx9g64Vmza+bZq
Fxm9nS1dPL2cWImq3x1bqiqusSDvtO7wIfgiCfOgS2rYVV0mCam4oFNc6waPS8cK
yH4MFRFugMu2JirYq7CFzD5n1mzcEXB9oyBRI84DxTmxx/p9P2GIFd+Gi6cSBJ6F
7pxtF/UBKByXVXq1tpCgro1knOAwX549U2dwcalfr8kP5elG5keBnERlOKVG/Ll5
XUQScwMNoyU2PdSASSqHIfzo1Ss/Bdk3w+y5esx3KKMblhGxrXeUUVeXrgzvAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU7MzPUwSAKr+1DeDTn90Ungm8EZMwHwYDVR0j
BBgwFoAUxn+A2oqQ6SyJXMQi3lp8lVjsZOwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEdueEgzaDhvWWg2cWlmMlRrcXh5NXpCOWFYMVBtQXlFUjJ4RTR1ZXht
dVcvMC9DNjdGODBEQThBOTBFOTJDODk1Q0M0MjJERTVBN0M5NTU4RUM2NEVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M2N0Y4MERBOEE5MEU5MkM4
OTVDQzQyMkRFNUE3Qzk1NThFQzY0RUMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hHbnhIM2g4b1loNnFpZjJUa3F4eTV6QjlhWDFQbUF5RVIyeEU0dWV4bXVXLzAv
MzIzMDMwMmUzMjMyMzkyZTMyMzQzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczMDM4MzEzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAMjl9TANBgkqhkiG9w0BAQsFAAOCAQEAdr5m
3/I2da0vgQKp57Qivbw98IwyH7fLxVFl+P5ihDqhXoBsIOUXlJFo433PnWTgx7TH
qYdXx1A4o7JK+G//k5z9UPfiKXVN4Hyy6qsCv04WayONlQUemxuse9ZkzDGgJvGM
fgQ7cHRca1362kCHgdEwYz7qV1V4ITFN6g5WVbnK8Kzu2pHzj9ABVxFKiPudHcu3
hIUlH+T0guBUnuTsXZjrGrI+cgZZocznO1h/D40a9HzxF/lcQTE+Dzq7NBYLQwhD
1Jxuq4cXJx9ZeoIMVVaCTLqDrn82iS2/gJHdhFvEu0VTh3oqD3woWGLq+2QnI8MV
/qd5LllNhy1XVTzmvw==
-----END CERTIFICATE-----
Generated at Tue May 6 04:45:10 2025 by rpki-client