Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2oYuNGVC3nQwTaREUAxuQkjhMksSSbTusrb4C5ejYMJT/0/3230302e32342e3130382e302f32322d3234203d3e20323731363131.roa
File:                     3230302e32342e3130382e302f32322d3234203d3e20323731363131.roa (raw, json)
Hash identifier:          Zle1pT4AI/XVURn0M0QQ7EmdpqBSZzF1l7ayhaMZBiQ=
Subject key identifier:   68:E4:E4:EF:51:F0:DC:34:DD:9F:18:4C:FC:1B:CB:F4:02:C8:CC:74
Certificate issuer:       /CN=D6BFBE91A9C1216A37227717AD547135C4C3280E
Certificate serial:       0DA6E5C2C47C582956E8633148B161CCAE799C97
Authority key identifier: D6:BF:BE:91:A9:C1:21:6A:37:22:77:17:AD:54:71:35:C4:C3:28:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6BFBE91A9C1216A37227717AD547135C4C3280E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2oYuNGVC3nQwTaREUAxuQkjhMksSSbTusrb4C5ejYMJT/0/3230302e32342e3130382e302f32322d3234203d3e20323731363131.roa
Signing time:             Wed 07 May 2025 20:31:25 +0000
ROA not before:           Wed 07 May 2025 20:26:25 +0000
ROA not after:            Wed 06 May 2026 20:31:25 +0000
asID:                     271611
IP address blocks:        200.24.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2oYuNGVC3nQwTaREUAxuQkjhMksSSbTusrb4C5ejYMJT/0/D6BFBE91A9C1216A37227717AD547135C4C3280E.crl
                          rsync://rpki-repo.registro.br/repo/2oYuNGVC3nQwTaREUAxuQkjhMksSSbTusrb4C5ejYMJT/0/D6BFBE91A9C1216A37227717AD547135C4C3280E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6BFBE91A9C1216A37227717AD547135C4C3280E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 May 2025 23:41:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:a6:e5:c2:c4:7c:58:29:56:e8:63:31:48:b1:61:cc:ae:79:9c:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6BFBE91A9C1216A37227717AD547135C4C3280E
        Validity
            Not Before: May  7 20:26:25 2025 GMT
            Not After : May  6 20:31:25 2026 GMT
        Subject: CN=68E4E4EF51F0DC34DD9F184CFC1BCBF402C8CC74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f0:6b:74:33:11:8e:66:f7:2e:d4:d9:4c:ee:
                    af:1f:15:ea:46:a4:e0:5b:86:90:68:f7:1f:b5:8d:
                    71:3e:36:f1:57:85:b8:24:4a:e6:39:8f:28:9c:07:
                    70:bd:d3:57:91:c5:cf:b9:13:13:b7:f7:42:a8:5c:
                    2b:44:b7:73:15:3d:f3:a9:17:b7:b6:8d:38:8f:2c:
                    91:b8:04:6a:8e:0a:1a:aa:8b:a3:05:7b:bf:cc:45:
                    dc:b1:7a:07:2a:fc:db:46:13:cd:0a:3c:c3:6b:09:
                    5d:c0:59:df:e7:08:e0:13:2c:90:6f:fd:a9:55:82:
                    fa:fa:21:16:73:ae:ea:4c:8b:6a:6c:4f:4e:0d:ac:
                    db:fa:72:91:bf:72:b1:f7:30:4f:9c:7f:e1:42:d1:
                    70:7f:08:3e:ac:9b:e0:aa:70:cc:f0:5c:d0:ed:66:
                    b1:c7:27:ff:bf:d9:a4:22:e4:c7:e0:a4:cc:b0:2a:
                    28:75:d3:d8:ce:4d:f6:b6:a4:81:98:38:69:23:f7:
                    0d:98:f6:a9:00:fc:8d:6e:ad:02:bc:86:40:79:31:
                    a3:fc:69:f9:24:93:7a:d2:5f:66:5d:30:6b:82:9f:
                    52:2f:5a:4b:72:c4:3b:b2:61:3c:bc:f9:bd:19:ac:
                    bb:d2:df:39:0f:63:7f:82:76:49:d9:f1:86:b7:ca:
                    53:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:E4:E4:EF:51:F0:DC:34:DD:9F:18:4C:FC:1B:CB:F4:02:C8:CC:74
            X509v3 Authority Key Identifier:
                keyid:D6:BF:BE:91:A9:C1:21:6A:37:22:77:17:AD:54:71:35:C4:C3:28:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2oYuNGVC3nQwTaREUAxuQkjhMksSSbTusrb4C5ejYMJT/0/D6BFBE91A9C1216A37227717AD547135C4C3280E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6BFBE91A9C1216A37227717AD547135C4C3280E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2oYuNGVC3nQwTaREUAxuQkjhMksSSbTusrb4C5ejYMJT/0/3230302e32342e3130382e302f32322d3234203d3e20323731363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.24.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:f8:58:ab:44:a3:f0:69:d1:6d:6c:90:0e:7d:9c:f6:8d:0f:
         f8:e6:6b:bf:7f:08:ba:4c:bd:bd:79:80:d1:ba:f3:97:06:61:
         bc:20:b6:32:f2:94:05:80:28:bd:8a:28:90:8e:ba:39:5b:23:
         43:ed:54:13:cb:1a:9e:9f:62:c9:94:72:b3:df:93:d1:52:41:
         a1:4b:47:1c:94:ee:80:cc:a7:a9:6e:0e:37:62:23:6b:94:5c:
         a0:b5:0d:ff:8e:4d:c7:0b:8a:20:0d:e4:0a:b6:7f:8e:aa:f7:
         df:ff:7d:16:14:da:01:71:98:51:8b:4f:c5:a6:53:f9:f8:ab:
         89:82:4d:02:73:e7:e6:95:96:0a:33:28:9f:ff:3a:e5:3d:5a:
         d9:a1:ed:83:c1:bd:f2:57:1e:d3:48:d0:74:fd:1b:57:24:ad:
         5f:07:8b:7a:c5:f6:2d:b2:c8:03:22:37:58:e0:95:e9:67:b5:
         33:9d:a0:21:bd:1c:57:bc:1f:35:a7:38:82:f1:96:0e:3a:8c:
         cf:04:5f:e4:c4:d1:4e:83:2f:45:d1:79:09:72:0f:e1:37:fc:
         61:87:d5:ff:a5:a3:f2:a2:72:ca:fb:69:e3:92:a0:a3:41:f1:
         a6:36:58:59:5b:19:76:4a:c0:4a:20:0e:2c:11:ec:c0:2a:f1:
         bb:bd:4e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:53:42 2025 by rpki-client