Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/3230302e3132342e37382e302f32342d3234203d3e20323733363633.roa
File:                     3230302e3132342e37382e302f32342d3234203d3e20323733363633.roa (raw, json)
Hash identifier:          wfB2AkgtLlxFEAniK48SJ4lY94pHTbucMmdvGitpPLE=
Subject key identifier:   63:96:28:D6:4A:60:D3:E4:DA:87:89:1A:40:82:4A:B7:43:E4:7A:2E
Certificate issuer:       /CN=F10DAA508BBAC5E287A95F8AABB8FA542C15ECCB
Certificate serial:       3035AEDB50C12263CCC756BFB984CBDC521FE0A4
Authority key identifier: F1:0D:AA:50:8B:BA:C5:E2:87:A9:5F:8A:AB:B8:FA:54:2C:15:EC:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F10DAA508BBAC5E287A95F8AABB8FA542C15ECCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/3230302e3132342e37382e302f32342d3234203d3e20323733363633.roa
Signing time:             Thu 08 May 2025 18:32:01 +0000
ROA not before:           Thu 08 May 2025 18:27:01 +0000
ROA not after:            Thu 07 May 2026 18:32:01 +0000
asID:                     273663
IP address blocks:        200.124.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/F10DAA508BBAC5E287A95F8AABB8FA542C15ECCB.crl
                          rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/F10DAA508BBAC5E287A95F8AABB8FA542C15ECCB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F10DAA508BBAC5E287A95F8AABB8FA542C15ECCB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 May 2025 08:03:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:35:ae:db:50:c1:22:63:cc:c7:56:bf:b9:84:cb:dc:52:1f:e0:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F10DAA508BBAC5E287A95F8AABB8FA542C15ECCB
        Validity
            Not Before: May  8 18:27:01 2025 GMT
            Not After : May  7 18:32:01 2026 GMT
        Subject: CN=639628D64A60D3E4DA87891A40824AB743E47A2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:29:91:c0:2f:6d:36:65:e5:37:e7:07:b1:a5:
                    41:dc:d9:ff:e0:49:71:cd:63:75:40:09:82:30:fb:
                    b7:0d:52:0b:cf:9a:40:2c:08:a8:26:a6:31:f8:c4:
                    ef:91:f4:34:c1:ce:f6:07:30:d4:b8:85:be:73:0e:
                    58:d3:4c:ab:d8:23:2f:0f:c5:58:e6:e1:66:a7:81:
                    4b:94:2f:57:89:e8:f9:c3:df:50:0b:b4:2c:e1:e9:
                    24:b0:a1:bb:f3:fa:d2:a1:7f:a8:36:32:fa:4e:30:
                    4a:de:5b:b8:b1:f2:05:27:6e:90:9b:a1:8d:91:41:
                    a1:bd:77:bd:c7:09:34:dc:1e:e8:5d:23:79:a7:53:
                    96:a4:38:cb:97:07:d1:12:c5:a3:58:b1:8d:25:91:
                    57:1c:df:9a:7f:ae:4b:e2:90:36:a3:0c:6b:28:37:
                    4b:3c:5c:95:41:ae:2b:4a:21:79:e0:3d:6b:a4:b7:
                    cc:c9:7e:36:40:98:29:cc:1c:6e:36:78:fb:ad:66:
                    f6:b6:c4:89:a5:63:e7:52:49:b8:22:63:30:1f:6a:
                    10:44:94:25:48:4a:be:c5:5a:4e:0b:30:fd:3f:18:
                    60:ed:dd:30:0e:76:3f:4c:8f:16:fe:00:40:64:4a:
                    8f:37:7a:d7:54:15:2b:66:69:a8:63:c5:87:b5:6f:
                    22:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:96:28:D6:4A:60:D3:E4:DA:87:89:1A:40:82:4A:B7:43:E4:7A:2E
            X509v3 Authority Key Identifier:
                keyid:F1:0D:AA:50:8B:BA:C5:E2:87:A9:5F:8A:AB:B8:FA:54:2C:15:EC:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/F10DAA508BBAC5E287A95F8AABB8FA542C15ECCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F10DAA508BBAC5E287A95F8AABB8FA542C15ECCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/3230302e3132342e37382e302f32342d3234203d3e20323733363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:5a:a3:3e:83:04:2e:9f:51:a6:7a:34:97:10:a8:e8:3d:94:
         04:22:d1:2e:61:86:46:1a:d9:93:b8:f5:f0:11:74:d7:e2:95:
         14:dc:02:94:f0:42:f8:b3:ee:27:8c:6d:34:05:09:0d:17:e6:
         c2:fb:86:81:50:07:f4:12:e2:21:0a:8f:f1:2e:cc:2a:d3:1e:
         43:2a:b1:c8:0c:14:4f:ad:d3:86:13:2b:ce:cd:72:8d:33:d6:
         09:12:3b:0e:bf:d4:6c:ee:17:15:bd:bb:6a:e1:39:1a:e4:8f:
         e3:0d:4d:66:a4:0f:cb:48:ab:c9:22:48:cf:21:5a:9b:91:b2:
         49:de:6f:02:12:14:96:4b:f8:ca:cc:01:ac:24:13:59:f7:93:
         a5:c9:1f:6b:7f:36:d8:f4:31:eb:63:af:d2:cd:66:c6:43:79:
         51:f5:db:08:69:c9:98:8b:00:75:09:55:9b:db:54:c2:19:72:
         f6:ee:84:1b:9b:f5:66:b8:67:34:4b:2e:33:45:1f:b7:09:53:
         b3:5c:4e:7e:49:90:19:1a:b8:e2:3e:da:53:28:0a:57:25:6c:
         68:8f:9e:39:86:ec:67:af:b2:11:82:27:4b:17:38:b1:c4:7f:
         45:06:97:cb:d2:bf:c1:c6:1f:a9:3b:1b:4a:21:84:18:b5:bd:
         b3:57:ed:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 09:36:47 2025 by rpki-client