Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234342e302f32342d3234203d3e20323730383135.roa
File:                     3230302e3232392e3234342e302f32342d3234203d3e20323730383135.roa (raw, json)
Hash identifier:          hzA08YdCBww7hoVsi9vz1nY8h47YH8i5E1BnFtdfb4M=
Subject key identifier:   64:A9:A0:A3:EC:0E:F0:21:EC:AE:1D:93:3C:87:EE:77:9B:32:30:83
Certificate issuer:       /CN=C67F80DA8A90E92C895CC422DE5A7C9558EC64EC
Certificate serial:       1081E2B781494B6306430EC484DE2E95DC98DD75
Authority key identifier: C6:7F:80:DA:8A:90:E9:2C:89:5C:C4:22:DE:5A:7C:95:58:EC:64:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234342e302f32342d3234203d3e20323730383135.roa
Signing time:             Sat 03 May 2025 16:03:28 +0000
ROA not before:           Sat 03 May 2025 15:58:28 +0000
ROA not after:            Sat 02 May 2026 16:03:28 +0000
asID:                     270815
IP address blocks:        200.229.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.crl
                          rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 May 2025 12:53:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:81:e2:b7:81:49:4b:63:06:43:0e:c4:84:de:2e:95:dc:98:dd:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C67F80DA8A90E92C895CC422DE5A7C9558EC64EC
        Validity
            Not Before: May  3 15:58:28 2025 GMT
            Not After : May  2 16:03:28 2026 GMT
        Subject: CN=64A9A0A3EC0EF021ECAE1D933C87EE779B323083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ea:03:c9:82:46:ae:e5:67:c0:ae:4c:b6:29:
                    68:b8:bb:65:c3:2d:68:f1:2f:5b:55:87:d6:e3:b8:
                    2d:6a:3d:ae:00:fe:6a:5a:ea:19:2f:cf:db:55:91:
                    be:45:10:f4:03:63:68:4a:02:b6:fc:b1:79:62:ef:
                    cb:07:85:76:4a:bf:9e:12:8e:dc:1c:5a:c9:6e:5a:
                    dd:f7:26:55:31:c1:a7:fa:48:8c:f4:50:90:32:3a:
                    fe:69:94:58:1f:f7:81:31:8d:db:a5:5b:c7:bd:18:
                    01:0f:d0:17:35:0e:79:1d:e8:19:70:a9:df:d9:f3:
                    b5:36:e5:6f:78:7c:f0:c7:89:f9:d6:48:18:eb:36:
                    93:63:cd:59:43:84:41:6c:bb:02:19:0d:9e:33:92:
                    dc:92:dc:ab:df:31:e4:5f:3d:d7:5a:40:ed:e9:03:
                    4b:ce:e7:ee:4e:0e:8d:cb:7a:c2:2e:de:fd:68:46:
                    f2:05:90:e9:58:16:4c:21:eb:94:ca:1c:02:66:ec:
                    24:12:64:74:af:c9:ab:7d:03:58:ba:8e:f6:a8:03:
                    12:01:dc:44:86:c5:aa:29:97:42:9b:ca:1b:f3:88:
                    58:02:af:00:97:f2:51:09:1f:aa:01:2c:77:1f:02:
                    d3:b6:9b:66:e4:cb:62:38:c5:01:3a:6b:2e:d9:06:
                    da:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:A9:A0:A3:EC:0E:F0:21:EC:AE:1D:93:3C:87:EE:77:9B:32:30:83
            X509v3 Authority Key Identifier:
                keyid:C6:7F:80:DA:8A:90:E9:2C:89:5C:C4:22:DE:5A:7C:95:58:EC:64:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234342e302f32342d3234203d3e20323730383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:ca:1b:c6:6e:af:24:6d:00:13:be:fa:d7:60:74:0f:0b:8e:
         64:6b:27:ac:e9:32:c1:86:dd:d7:0a:a2:68:6a:86:ca:fc:ba:
         94:42:0a:94:8f:16:8e:85:5a:b6:a1:ff:0a:ee:f4:60:e3:f5:
         b9:51:11:cc:27:c4:b6:13:69:05:cf:b4:1e:49:82:22:f5:98:
         96:c5:53:2c:07:6c:d8:7e:55:55:66:14:1d:01:f2:0d:99:03:
         0a:1c:6e:b4:86:f4:bf:5a:88:a6:c2:56:c7:7c:89:4e:dc:9b:
         24:db:88:3a:29:5f:7d:94:a2:bc:cb:6d:ab:9c:ed:4e:4b:89:
         15:60:5b:75:9a:02:8f:de:27:82:3c:06:96:de:cc:ed:0f:94:
         a0:7a:76:ed:e0:e1:e6:8e:33:5f:aa:94:84:32:67:41:32:c9:
         c8:ef:7a:f7:b7:92:d5:86:e5:4b:90:ba:fb:1d:aa:6b:8e:ae:
         02:6d:fe:5f:30:77:ba:65:70:18:d3:e5:b2:5b:3b:99:71:a1:
         00:4b:a5:aa:69:30:24:c2:0e:b0:f8:46:8b:c3:f6:c4:9a:20:
         d8:5e:d6:a5:8e:83:a0:6a:11:8f:c4:30:28:2f:e2:ce:ea:59:
         6b:6c:73:05:dc:d9:90:9a:64:8d:ce:7b:b4:28:6b:f6:52:1e:
         92:5c:da:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 04:59:33 2025 by rpki-client