Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234362e302f32332d3233203d3e20323730383135.roa
File:                     3230302e3232392e3234362e302f32332d3233203d3e20323730383135.roa (raw, json)
Hash identifier:          fqbI4oGsZWYKHmnW4T+3zjcUgy00qSaq/agKvC0p8HI=
Subject key identifier:   B1:2C:21:C8:D7:50:DF:F8:67:79:72:DE:A3:6B:F9:76:66:A8:89:36
Certificate issuer:       /CN=C67F80DA8A90E92C895CC422DE5A7C9558EC64EC
Certificate serial:       33F8845C72A3A30335D75CD4E6A1AFB894AC9CCB
Authority key identifier: C6:7F:80:DA:8A:90:E9:2C:89:5C:C4:22:DE:5A:7C:95:58:EC:64:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234362e302f32332d3233203d3e20323730383135.roa
Signing time:             Sat 03 May 2025 16:03:34 +0000
ROA not before:           Sat 03 May 2025 15:58:34 +0000
ROA not after:            Sat 02 May 2026 16:03:34 +0000
asID:                     270815
IP address blocks:        200.229.246.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.crl
                          rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 05 May 2025 11:59:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:f8:84:5c:72:a3:a3:03:35:d7:5c:d4:e6:a1:af:b8:94:ac:9c:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C67F80DA8A90E92C895CC422DE5A7C9558EC64EC
        Validity
            Not Before: May  3 15:58:34 2025 GMT
            Not After : May  2 16:03:34 2026 GMT
        Subject: CN=B12C21C8D750DFF8677972DEA36BF97666A88936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:fd:51:f5:b2:a6:b7:ab:22:00:95:43:d1:7f:
                    1a:95:de:af:98:91:5b:7a:c0:7e:43:4f:1a:9f:6f:
                    42:b8:6e:de:e3:52:6d:ec:d3:e5:dc:3d:2f:3e:e9:
                    27:dd:9a:86:70:fe:a7:0a:19:40:18:4c:be:2b:2f:
                    2d:57:80:52:00:e0:3a:29:35:00:97:9d:c9:57:22:
                    57:3f:2b:8c:18:a1:4b:8c:03:d0:73:32:92:01:2c:
                    9e:d3:37:00:e3:e3:5f:cc:7a:fd:04:8b:86:05:49:
                    20:a4:dc:02:3d:1f:60:2b:de:72:b4:4f:56:57:8c:
                    1e:f5:5f:cd:4f:54:69:5b:9e:6e:47:17:d7:8e:1f:
                    35:ad:fe:3f:7a:8c:9d:a8:4f:c0:05:3a:22:18:0a:
                    78:08:72:f8:32:f6:73:70:ff:2f:35:b2:9e:2f:bc:
                    84:27:80:d1:1a:2e:01:da:66:7a:e2:d2:ea:8e:a7:
                    32:5c:7c:81:71:8b:11:26:1b:1f:5a:fb:7b:98:70:
                    74:38:a9:94:36:b8:be:42:51:ad:77:35:c8:dd:f0:
                    7b:6f:ae:00:2e:7f:3a:24:38:d7:7f:dd:b9:7a:13:
                    ce:b5:73:b3:a4:fe:09:6a:f7:7a:3c:35:a8:e2:e7:
                    01:70:48:06:85:78:ba:df:e0:0f:21:2a:d7:52:fa:
                    3a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:2C:21:C8:D7:50:DF:F8:67:79:72:DE:A3:6B:F9:76:66:A8:89:36
            X509v3 Authority Key Identifier:
                keyid:C6:7F:80:DA:8A:90:E9:2C:89:5C:C4:22:DE:5A:7C:95:58:EC:64:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234362e302f32332d3233203d3e20323730383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:80:a2:b4:09:cc:83:dc:c9:a5:32:85:86:15:d9:46:30:45:
         69:21:93:d7:b1:30:c1:01:c0:c0:c2:7e:0c:bd:44:92:7a:77:
         e2:08:c3:47:b9:20:cf:07:2d:25:9b:c2:21:98:1e:7e:a8:69:
         40:d7:b1:45:52:66:2e:95:47:58:c3:d7:f3:f4:bd:36:97:9d:
         3a:f9:bb:e1:e1:d5:82:15:ec:0b:4d:6a:31:d5:cc:04:b7:c7:
         da:a2:00:cf:38:46:50:41:71:be:33:81:f4:6c:c8:03:ae:a0:
         ab:2c:de:c3:79:7a:dc:68:7a:0a:4f:e7:13:51:73:16:4c:a3:
         ac:07:0f:9c:f4:43:15:7f:8f:d9:98:ee:ab:81:c0:ac:8a:9d:
         c1:a5:56:07:c6:15:97:1c:8f:1f:3a:d4:3d:26:89:e3:2f:24:
         10:dc:74:69:77:fd:e7:89:b5:76:58:72:75:59:69:70:2c:20:
         ce:b1:a0:96:f8:48:04:23:5d:dc:7a:9d:f0:8d:41:96:00:5e:
         b6:31:93:fa:7f:f0:d9:8a:6c:ee:09:55:cd:57:84:a2:e6:57:
         5f:7d:f6:8e:ca:66:82:6b:a0:4a:a7:44:e2:5b:bb:b3:f4:70:
         31:b4:0a:98:6f:9b:72:fb:cc:3f:c4:e2:9a:ca:61:81:18:6e:
         38:bd:18:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 18:02:45 2025 by rpki-client