Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3230302e3135392e3136302e302f32302d3234203d3e203238353834.roa
File:                     3230302e3135392e3136302e302f32302d3234203d3e203238353834.roa (raw, json)
Hash identifier:          XYnAn/lStOTH2G5MqZy6+2C+tp5Ssa3VFrg4zQ+HAsU=
Subject key identifier:   4A:C1:CE:83:E7:78:D7:7C:99:5A:05:EE:06:C3:B0:58:77:96:73:E4
Certificate issuer:       /CN=1233961E0559F239AED4F50437087EF6837DC5E3
Certificate serial:       1B735BA8B85733600C03A5519CCAD94FAB4A65C6
Authority key identifier: 12:33:96:1E:05:59:F2:39:AE:D4:F5:04:37:08:7E:F6:83:7D:C5:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1233961E0559F239AED4F50437087EF6837DC5E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3230302e3135392e3136302e302f32302d3234203d3e203238353834.roa
Signing time:             Tue 08 Apr 2025 19:20:24 +0000
ROA not before:           Tue 08 Apr 2025 19:15:24 +0000
ROA not after:            Tue 07 Apr 2026 19:20:24 +0000
asID:                     28584
IP address blocks:        200.159.160.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/1233961E0559F239AED4F50437087EF6837DC5E3.crl
                          rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/1233961E0559F239AED4F50437087EF6837DC5E3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1233961E0559F239AED4F50437087EF6837DC5E3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 13:13:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:73:5b:a8:b8:57:33:60:0c:03:a5:51:9c:ca:d9:4f:ab:4a:65:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1233961E0559F239AED4F50437087EF6837DC5E3
        Validity
            Not Before: Apr  8 19:15:24 2025 GMT
            Not After : Apr  7 19:20:24 2026 GMT
        Subject: CN=4AC1CE83E778D77C995A05EE06C3B058779673E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a1:25:c4:e3:25:a9:8e:38:c3:e1:06:07:89:
                    8a:bb:ec:4c:a2:f8:f7:ef:62:85:72:76:08:c9:32:
                    10:f6:d6:6e:f1:dc:01:f7:53:fa:dd:0e:66:e4:c1:
                    e2:65:a0:3c:31:53:39:cc:2b:d4:3d:d3:0c:4e:1a:
                    26:f8:37:69:ae:11:6f:66:17:f3:a2:7a:3f:2a:c5:
                    d3:43:b2:44:d8:b9:12:39:0a:9a:b1:59:7a:59:39:
                    c5:fd:79:01:86:14:48:65:d1:56:c9:d2:77:8a:1b:
                    8e:e8:bd:a6:62:d6:3a:1d:c3:89:ef:72:37:0c:8a:
                    6c:8b:ec:d1:78:0e:a3:35:c2:e0:b6:59:7f:e8:2f:
                    c6:1e:e6:83:4d:2e:a2:af:1c:03:11:09:7f:f4:03:
                    f2:f3:18:ca:7e:e5:2f:69:c7:34:5f:f7:c3:ad:ae:
                    ff:fd:c4:c5:b4:c0:a9:3d:77:a3:3f:7a:76:67:2a:
                    19:8d:2d:0d:d2:cd:6c:95:c8:69:17:52:3b:b8:64:
                    71:14:7e:b9:3b:81:cf:b6:f2:f6:5a:05:0b:b5:7e:
                    55:88:83:61:28:ea:d4:23:a4:b6:dd:57:89:a4:a7:
                    92:76:dc:1f:e1:e8:11:d1:88:37:ab:a4:34:43:da:
                    a0:8c:77:70:64:90:45:20:ff:97:14:47:d5:ba:c0:
                    35:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:C1:CE:83:E7:78:D7:7C:99:5A:05:EE:06:C3:B0:58:77:96:73:E4
            X509v3 Authority Key Identifier:
                keyid:12:33:96:1E:05:59:F2:39:AE:D4:F5:04:37:08:7E:F6:83:7D:C5:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/1233961E0559F239AED4F50437087EF6837DC5E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1233961E0559F239AED4F50437087EF6837DC5E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3230302e3135392e3136302e302f32302d3234203d3e203238353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.159.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         85:06:7c:dd:59:11:fe:7b:1a:8f:00:dc:93:c2:ec:8c:1e:af:
         d4:db:a2:26:4d:ce:ee:fb:9e:29:27:a3:52:6d:db:4b:96:fb:
         55:42:95:1f:8f:6a:3d:0f:e6:48:76:6c:44:8f:39:11:21:3a:
         b6:85:04:55:35:49:d5:29:9f:db:e2:f2:a0:23:b3:3a:ca:d3:
         5a:c9:1d:b5:f7:15:b4:b0:0a:8a:de:50:5d:22:0b:11:84:a8:
         98:22:0d:b4:94:39:a7:33:33:8d:d5:ca:6d:23:6c:f7:31:62:
         80:f9:b7:d2:17:ee:02:83:9a:a9:56:36:c3:ce:d7:35:ae:0e:
         ad:4b:b9:86:1f:f1:a2:4e:f9:69:89:7d:81:9c:77:18:60:2d:
         ff:43:ef:20:37:e2:72:42:2c:11:95:d5:b2:f9:46:61:ad:5b:
         33:96:aa:c8:6c:45:8a:6e:cf:0c:06:34:e1:c4:71:55:a7:90:
         a7:d4:ac:22:a5:41:a8:fc:ad:2e:88:2a:00:8e:a3:54:83:5c:
         c8:1d:2e:41:70:5f:5b:52:de:05:0c:9b:fb:9d:60:31:6a:40:
         6d:92:c9:03:46:81:2b:ba:53:1e:3e:92:72:27:4f:84:53:d9:
         52:95:c8:58:13:29:87:3a:6a:b5:62:0b:71:af:71:c4:28:00:
         08:bb:96:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:04:53 2025 by rpki-client on console.sobornost.net