Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234362e302f32342d3234203d3e20323730383135.roa
File:                     3230302e3232392e3234362e302f32342d3234203d3e20323730383135.roa (raw, json)
Hash identifier:          i+cm2ibBLMxT0KFWP6JBh9hoASdogEOQRRrnyiXbGOE=
Subject key identifier:   E5:1F:5A:66:D3:E4:AC:F1:D4:82:30:9C:FE:04:AB:79:E8:DF:62:47
Certificate issuer:       /CN=C67F80DA8A90E92C895CC422DE5A7C9558EC64EC
Certificate serial:       285A26D641021E811C748488D307E8D25BABF9E5
Authority key identifier: C6:7F:80:DA:8A:90:E9:2C:89:5C:C4:22:DE:5A:7C:95:58:EC:64:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234362e302f32342d3234203d3e20323730383135.roa
Signing time:             Sat 03 May 2025 16:03:26 +0000
ROA not before:           Sat 03 May 2025 15:58:26 +0000
ROA not after:            Sat 02 May 2026 16:03:26 +0000
asID:                     270815
IP address blocks:        200.229.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.crl
                          rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 May 2025 05:02:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:5a:26:d6:41:02:1e:81:1c:74:84:88:d3:07:e8:d2:5b:ab:f9:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C67F80DA8A90E92C895CC422DE5A7C9558EC64EC
        Validity
            Not Before: May  3 15:58:26 2025 GMT
            Not After : May  2 16:03:26 2026 GMT
        Subject: CN=E51F5A66D3E4ACF1D482309CFE04AB79E8DF6247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:77:1a:2e:91:97:ef:4b:ba:d2:65:e8:ca:54:
                    3a:b9:c9:3c:bd:e2:e0:8f:9a:c0:60:58:17:2b:90:
                    6f:07:51:fc:60:73:49:4c:b4:75:b9:34:22:45:6e:
                    25:e2:b8:8a:e1:e9:ac:39:ef:cd:72:2a:78:42:5c:
                    a8:7a:14:7c:1c:43:25:81:e7:20:4f:3e:4a:36:70:
                    c7:05:cb:d5:45:4a:26:e8:b6:a5:2e:6b:02:b3:e7:
                    c6:32:53:f8:c3:84:54:53:5a:fa:b5:6a:e6:4d:03:
                    d5:5c:e4:e9:82:51:d7:bc:00:cd:cf:1d:99:80:fd:
                    89:69:31:e9:1f:f4:8f:10:96:94:23:c0:8f:01:88:
                    39:67:71:af:16:4b:f5:b1:03:ec:f8:7a:34:b6:05:
                    45:e7:c4:db:47:48:c3:bd:17:d6:96:7f:d0:03:ba:
                    96:e6:85:4d:c9:03:f6:dc:10:eb:f1:86:cf:48:60:
                    4e:ec:e8:c7:13:be:9c:1f:59:14:99:0b:6b:3e:81:
                    4b:f7:b0:b6:91:8f:d3:4c:7d:fa:68:bb:2a:08:03:
                    56:b2:64:86:8a:b2:51:24:76:f8:3e:2b:a4:08:0b:
                    b2:80:e5:c8:cc:53:cf:e0:32:31:68:3b:c5:58:77:
                    c5:4d:a8:a9:95:7b:32:69:55:fb:ee:a5:e4:cc:95:
                    3d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:1F:5A:66:D3:E4:AC:F1:D4:82:30:9C:FE:04:AB:79:E8:DF:62:47
            X509v3 Authority Key Identifier:
                keyid:C6:7F:80:DA:8A:90:E9:2C:89:5C:C4:22:DE:5A:7C:95:58:EC:64:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3230302e3232392e3234362e302f32342d3234203d3e20323730383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:c8:59:62:de:d8:1a:b0:50:db:2d:59:ff:45:79:a7:00:08:
         37:02:7a:ca:e5:60:86:a2:2a:70:ff:82:02:c9:0c:10:c9:96:
         f4:93:05:79:16:84:5f:81:de:a6:70:a4:6b:16:b4:20:3f:87:
         ee:f7:5d:97:20:ac:ae:e0:98:5e:1a:93:1b:34:e1:98:39:96:
         52:27:82:7d:20:ae:42:ce:9b:09:0d:cb:a8:c4:b7:e2:c1:61:
         3f:93:62:dd:2f:65:27:c7:03:e2:3f:ea:e6:1a:24:97:e0:67:
         34:57:ef:3c:97:d4:fc:e0:8a:f0:cf:e1:07:50:1a:b1:11:83:
         24:19:9f:e6:ce:1c:6d:54:13:4d:99:6e:ea:43:f0:2b:0e:98:
         d9:bc:ce:0e:b1:00:c0:1a:10:92:fc:97:6b:82:4b:01:cb:c4:
         67:e6:c9:89:3e:2d:b5:4b:bb:ad:a3:f5:f2:7f:50:ed:be:19:
         e8:ed:4e:c6:09:08:c3:51:74:16:0e:a8:f9:2d:09:a9:41:98:
         ee:c5:e3:1e:67:63:3d:97:81:5d:33:f3:16:13:49:ef:a1:24:
         95:d8:51:ea:8f:4f:b3:46:db:73:d6:b9:0c:b6:2f:cc:2a:16:
         e3:6f:b7:72:f6:c9:f9:97:31:40:55:1f:b2:33:d6:6c:cc:ca:
         2f:31:3c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 14:55:34 2025 by rpki-client