Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5biXs7qRpn9CL4ZPDEyTsFZ2ADzc4CzBFdozhZ2vwHEy/0/3230302e3132332e3232342e302f32322d3234203d3e20323730323632.roa
File:                     3230302e3132332e3232342e302f32322d3234203d3e20323730323632.roa (raw, json)
Hash identifier:          w6r+vHtHZXH5N1dl86vwLs2RfADBzR1g23DZ2Q3lqKo=
Subject key identifier:   B5:C2:B3:53:A0:31:E2:BB:3D:F0:9B:62:45:52:6D:D8:D9:44:BC:79
Certificate issuer:       /CN=4604735AE146206BD46CAEA7DB01B25B210619DE
Certificate serial:       3479A51E78D068C6B4F368BCFBFF35A9C8B0B58A
Authority key identifier: 46:04:73:5A:E1:46:20:6B:D4:6C:AE:A7:DB:01:B2:5B:21:06:19:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4604735AE146206BD46CAEA7DB01B25B210619DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5biXs7qRpn9CL4ZPDEyTsFZ2ADzc4CzBFdozhZ2vwHEy/0/3230302e3132332e3232342e302f32322d3234203d3e20323730323632.roa
Signing time:             Thu 19 Jun 2025 20:03:07 +0000
ROA not before:           Thu 19 Jun 2025 19:58:07 +0000
ROA not after:            Thu 18 Jun 2026 20:03:07 +0000
asID:                     270262
IP address blocks:        200.123.224.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5biXs7qRpn9CL4ZPDEyTsFZ2ADzc4CzBFdozhZ2vwHEy/0/4604735AE146206BD46CAEA7DB01B25B210619DE.crl
                          rsync://rpki-repo.registro.br/repo/5biXs7qRpn9CL4ZPDEyTsFZ2ADzc4CzBFdozhZ2vwHEy/0/4604735AE146206BD46CAEA7DB01B25B210619DE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4604735AE146206BD46CAEA7DB01B25B210619DE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 00:48:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:79:a5:1e:78:d0:68:c6:b4:f3:68:bc:fb:ff:35:a9:c8:b0:b5:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4604735AE146206BD46CAEA7DB01B25B210619DE
        Validity
            Not Before: Jun 19 19:58:07 2025 GMT
            Not After : Jun 18 20:03:07 2026 GMT
        Subject: CN=B5C2B353A031E2BB3DF09B6245526DD8D944BC79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:7e:3a:cd:52:e3:ff:3c:19:4f:df:8f:59:82:
                    3e:71:51:42:98:53:84:e0:3e:44:58:ed:9e:36:7a:
                    d2:53:76:13:b1:94:23:b2:cd:86:fd:a6:33:e2:93:
                    e1:b6:3d:e3:16:8e:d8:c5:c6:d7:7e:d1:77:75:9b:
                    da:e2:2c:e4:29:40:26:6d:98:f0:cc:69:e9:64:f5:
                    04:ce:5b:a5:23:5d:0b:9b:61:b9:7d:47:59:42:b4:
                    45:e0:d5:2c:e9:a9:56:d8:bc:94:68:0d:f4:62:73:
                    be:75:6e:c1:66:63:04:21:65:1c:a5:a0:30:c9:77:
                    db:18:c8:59:eb:99:49:85:2f:98:e6:69:25:d0:d3:
                    84:c3:da:e3:06:a9:2e:7a:63:a7:16:e3:76:3a:50:
                    1c:a5:1a:79:92:59:45:fb:e2:71:ed:9f:bc:0b:0c:
                    36:8b:a2:0a:1a:c1:51:28:d0:df:18:8b:43:44:ce:
                    ed:59:04:50:12:95:80:b8:f3:f4:85:86:c5:1a:49:
                    85:68:a4:c3:cb:74:ca:59:c1:54:b0:71:22:53:49:
                    e5:ce:de:4c:e9:04:6c:da:e4:45:4d:89:1a:d2:58:
                    cf:7b:10:4d:a8:e6:5d:2f:3d:59:04:d5:50:8b:16:
                    ad:b6:c0:27:77:a1:44:be:fc:66:c8:c1:8e:1d:95:
                    c3:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:C2:B3:53:A0:31:E2:BB:3D:F0:9B:62:45:52:6D:D8:D9:44:BC:79
            X509v3 Authority Key Identifier:
                keyid:46:04:73:5A:E1:46:20:6B:D4:6C:AE:A7:DB:01:B2:5B:21:06:19:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5biXs7qRpn9CL4ZPDEyTsFZ2ADzc4CzBFdozhZ2vwHEy/0/4604735AE146206BD46CAEA7DB01B25B210619DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4604735AE146206BD46CAEA7DB01B25B210619DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5biXs7qRpn9CL4ZPDEyTsFZ2ADzc4CzBFdozhZ2vwHEy/0/3230302e3132332e3232342e302f32322d3234203d3e20323730323632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:d0:5f:c0:2d:46:df:05:35:c1:19:fc:86:00:df:d4:db:3c:
         5f:b3:1a:c2:54:7a:9c:34:e5:af:44:61:92:f5:14:4c:c6:9f:
         a2:ae:e6:e3:c3:bb:f7:9e:41:22:5a:4a:ec:8a:c7:8f:02:34:
         03:d2:10:5f:18:e9:e7:40:07:74:12:87:19:5d:a9:66:f2:17:
         13:d4:f9:9b:f0:c8:10:1e:6e:16:a1:bc:87:79:08:7e:f1:7a:
         3c:9d:95:27:92:78:ec:33:02:f2:e8:a5:9a:4a:63:d7:b9:14:
         91:12:6c:5f:94:3f:d3:f1:37:c2:00:e2:10:46:8b:e4:12:7b:
         04:1e:7e:6b:cd:db:2a:5c:6f:d5:55:a0:f6:17:53:56:58:c7:
         2a:c5:2e:41:39:63:34:64:5e:fe:ed:bc:1b:4f:7b:93:98:7f:
         96:96:11:81:49:9e:62:f0:54:a6:ae:57:80:82:d7:95:95:59:
         75:a3:cf:35:f5:94:d6:5a:d7:c7:63:ff:93:40:57:a2:4f:9f:
         2c:61:b3:f5:7f:97:3b:58:13:41:63:4f:03:d4:c1:55:1c:bd:
         2e:26:7d:5f:70:22:cb:88:fc:91:80:5a:33:47:3a:81:d4:e2:
         89:d4:ee:54:79:64:1a:70:5c:04:e6:66:81:af:80:00:bb:b3:
         6b:bf:6e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 07:54:02 2025 by rpki-client