Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HyY9XAg9uTww8e6VfriAbwX7AVNzKXjN7DVAGfks6LYF/0/3230302e32342e3130312e302f32342d3234203d3e20323731363038.roa
File:                     3230302e32342e3130312e302f32342d3234203d3e20323731363038.roa (raw, json)
Hash identifier:          eUmRy+yG4bSCvfgohpJd4ABQMi8JsPt57XkcHheNv6o=
Subject key identifier:   C2:D4:D2:16:CB:F2:C1:F8:B0:93:F0:82:B8:FC:6C:F0:9B:41:0E:57
Certificate issuer:       /CN=272D4C56DE64C83FE291166829B6E1D3581F58FF
Certificate serial:       2F4C7E71363A3833EC1FC7D7E1AC3BE429E48868
Authority key identifier: 27:2D:4C:56:DE:64:C8:3F:E2:91:16:68:29:B6:E1:D3:58:1F:58:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/272D4C56DE64C83FE291166829B6E1D3581F58FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HyY9XAg9uTww8e6VfriAbwX7AVNzKXjN7DVAGfks6LYF/0/3230302e32342e3130312e302f32342d3234203d3e20323731363038.roa
Signing time:             Mon 28 Jul 2025 23:10:09 +0000
ROA not before:           Mon 28 Jul 2025 23:05:09 +0000
ROA not after:            Mon 27 Jul 2026 23:10:09 +0000
asID:                     271608
IP address blocks:        200.24.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HyY9XAg9uTww8e6VfriAbwX7AVNzKXjN7DVAGfks6LYF/0/272D4C56DE64C83FE291166829B6E1D3581F58FF.crl
                          rsync://rpki-repo.registro.br/repo/HyY9XAg9uTww8e6VfriAbwX7AVNzKXjN7DVAGfks6LYF/0/272D4C56DE64C83FE291166829B6E1D3581F58FF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/272D4C56DE64C83FE291166829B6E1D3581F58FF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:4c:7e:71:36:3a:38:33:ec:1f:c7:d7:e1:ac:3b:e4:29:e4:88:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=272D4C56DE64C83FE291166829B6E1D3581F58FF
        Validity
            Not Before: Jul 28 23:05:09 2025 GMT
            Not After : Jul 27 23:10:09 2026 GMT
        Subject: CN=C2D4D216CBF2C1F8B093F082B8FC6CF09B410E57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:43:15:81:11:8a:5d:98:6d:5b:01:15:b5:d5:
                    1f:38:42:23:9c:bb:e8:58:69:a5:da:b2:2a:93:e2:
                    dd:0c:ad:e9:13:cb:42:b1:3c:bc:84:aa:83:87:9f:
                    5a:4d:14:9c:e3:26:4e:07:f6:97:aa:f6:fa:9d:16:
                    b5:1a:4a:0f:5c:d8:2d:a5:90:30:82:bd:f5:81:fe:
                    fc:df:35:c3:20:f6:92:15:03:c6:de:55:56:bd:3b:
                    bc:7d:85:1c:f6:37:a0:f3:10:47:af:3f:ca:74:5c:
                    f9:3b:fb:ce:15:1d:24:b8:ea:39:21:18:5c:e6:87:
                    af:d3:55:e6:57:4e:73:68:27:b9:d6:8a:59:ec:80:
                    7f:47:e1:38:cf:76:7a:da:1a:72:18:79:20:97:9a:
                    ab:d6:0c:dd:80:37:c0:d7:9f:35:8f:cb:ec:c8:04:
                    1f:05:87:51:60:f3:83:93:2b:46:36:71:da:01:50:
                    5d:8d:0f:39:df:32:0a:96:56:64:00:a6:69:50:0b:
                    95:9c:4d:83:e2:18:c0:b3:41:ff:bf:9f:7f:7b:37:
                    e8:a9:4f:09:8e:7f:3a:1f:4b:1b:15:85:1c:c7:3b:
                    14:6b:f9:8d:21:4e:37:99:76:29:1c:6b:7f:79:13:
                    95:7f:74:a5:02:50:e6:4b:c2:63:85:be:42:07:09:
                    28:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:D4:D2:16:CB:F2:C1:F8:B0:93:F0:82:B8:FC:6C:F0:9B:41:0E:57
            X509v3 Authority Key Identifier:
                keyid:27:2D:4C:56:DE:64:C8:3F:E2:91:16:68:29:B6:E1:D3:58:1F:58:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HyY9XAg9uTww8e6VfriAbwX7AVNzKXjN7DVAGfks6LYF/0/272D4C56DE64C83FE291166829B6E1D3581F58FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/272D4C56DE64C83FE291166829B6E1D3581F58FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HyY9XAg9uTww8e6VfriAbwX7AVNzKXjN7DVAGfks6LYF/0/3230302e32342e3130312e302f32342d3234203d3e20323731363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.24.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:e3:c8:1d:fe:fd:d4:23:97:f6:0a:42:49:9f:8f:c8:42:f6:
         4c:5a:ac:01:7d:a5:03:db:d0:1d:a2:b5:7b:5f:03:c6:4a:20:
         5e:e0:b9:ba:5c:7c:a1:cf:b5:91:d9:6e:bd:a4:4a:a8:85:5f:
         68:4a:fd:d0:9f:83:dd:a8:49:7d:b5:1c:e9:d4:dd:a1:eb:cb:
         9c:d6:1e:d5:ab:27:9c:ef:46:d0:7e:86:04:be:59:93:95:e3:
         82:3d:dc:c3:65:ad:49:d3:ff:06:64:f8:41:1f:fe:d5:69:e2:
         ca:c4:0e:78:e1:17:f8:9a:22:b5:f4:bc:cb:68:1d:cf:a2:ce:
         94:07:5a:04:86:5f:54:7b:a2:b2:dd:af:67:38:cb:a9:ed:75:
         98:28:1d:3e:1b:f0:7b:92:7d:f9:5a:40:dd:31:ea:cd:d1:ae:
         08:db:49:8a:4a:b5:f1:87:41:62:d5:fc:47:44:08:4f:cd:1d:
         62:c5:2d:f5:6d:2b:e1:f5:a8:a1:81:f1:69:9d:a1:28:ca:5a:
         a9:a9:f4:53:83:ad:fc:7d:e8:25:6f:e5:87:f4:e2:e4:43:6e:
         6f:4e:e0:b9:12:4a:e7:24:72:c5:10:a5:46:50:00:bc:1d:be:
         fb:51:05:9a:fa:be:57:78:89:13:c9:de:61:f9:d7:23:87:1b:
         66:19:4c:e0
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUL0x+cTY6ODPsH8fX4aw75CnkiGgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjcyRDRDNTZERTY0QzgzRkUyOTExNjY4MjlCNkUxRDM1
ODFGNThGRjAeFw0yNTA3MjgyMzA1MDlaFw0yNjA3MjcyMzEwMDlaMDMxMTAvBgNV
BAMTKEMyRDREMjE2Q0JGMkMxRjhCMDkzRjA4MkI4RkM2Q0YwOUI0MTBFNTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoQxWBEYpdmG1bARW11R84QiOc
u+hYaaXasiqT4t0MrekTy0KxPLyEqoOHn1pNFJzjJk4H9peq9vqdFrUaSg9c2C2l
kDCCvfWB/vzfNcMg9pIVA8beVVa9O7x9hRz2N6DzEEevP8p0XPk7+84VHSS46jkh
GFzmh6/TVeZXTnNoJ7nWilnsgH9H4TjPdnraGnIYeSCXmqvWDN2AN8DXnzWPy+zI
BB8Fh1Fg84OTK0Y2cdoBUF2NDznfMgqWVmQApmlQC5WcTYPiGMCzQf+/n397N+ip
TwmOfzofSxsVhRzHOxRr+Y0hTjeZdikca395E5V/dKUCUOZLwmOFvkIHCSjjAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUwtTSFsvywfiwk/CCuPxs8JtBDlcwHwYDVR0j
BBgwFoAUJy1MVt5kyD/ikRZoKbbh01gfWP8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHlZOVhBZzl1VHd3OGU2VmZyaUFid1g3QVZOektYak43RFZBR2ZrczZM
WUYvMC8yNzJENEM1NkRFNjRDODNGRTI5MTE2NjgyOUI2RTFEMzU4MUY1OEZGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI3MkQ0QzU2REU2NEM4M0ZF
MjkxMTY2ODI5QjZFMUQzNTgxRjU4RkYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h5WTlYQWc5dVR3dzhlNlZmcmlBYndYN0FWTnpLWGpON0RWQUdma3M2TFlGLzAv
MzIzMDMwMmUzMjM0MmUzMTMwMzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzEzNjMwMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADIGGUwDQYJKoZIhvcNAQELBQADggEBAEXjyB3+
/dQjl/YKQkmfj8hC9kxarAF9pQPb0B2itXtfA8ZKIF7gubpcfKHPtZHZbr2kSqiF
X2hK/dCfg92oSX21HOnU3aHry5zWHtWrJ5zvRtB+hgS+WZOV44I93MNlrUnT/wZk
+EEf/tVp4srEDnjhF/iaIrX0vMtoHc+izpQHWgSGX1R7orLdr2c4y6ntdZgoHT4b
8HuSfflaQN0x6s3RrgjbSYpKtfGHQWLV/EdECE/NHWLFLfVtK+H1qKGB8WmdoSjK
Wqmp9FODrfx96CVv5Yf04uRDbm9O4LkSSuckcsUQpUZQALwdvvtRBZr6vld4iRPJ
3mH51yOHG2YZTOA=
-----END CERTIFICATE-----
Generated at Sat Aug 9 23:20:40 2025 by rpki-client