Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3v1Ji7ic13cyzDg2Hq5samWpcBxvVZq9d5UoJf8xoEsG/0/3230302e38302e39362e302f32322d3332203d3e20323731373036.roa
File:                     3230302e38302e39362e302f32322d3332203d3e20323731373036.roa (raw, json)
Hash identifier:          AJwfPs9KTES8j3EQEqgV7npNC9So0L1YzkWR6ZDvbyc=
Subject key identifier:   71:EC:F4:3D:8E:29:F5:C0:21:51:30:4A:3C:9E:9E:13:D0:57:B0:99
Certificate issuer:       /CN=9337C74594A1CDBA4648723A66E8B6DAC377B0EA
Certificate serial:       2B6B15B23458BB2ACEA3395AAC752D7C65BFD811
Authority key identifier: 93:37:C7:45:94:A1:CD:BA:46:48:72:3A:66:E8:B6:DA:C3:77:B0:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9337C74594A1CDBA4648723A66E8B6DAC377B0EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3v1Ji7ic13cyzDg2Hq5samWpcBxvVZq9d5UoJf8xoEsG/0/3230302e38302e39362e302f32322d3332203d3e20323731373036.roa
Signing time:             Tue 08 Apr 2025 21:22:26 +0000
ROA not before:           Tue 08 Apr 2025 21:17:26 +0000
ROA not after:            Tue 07 Apr 2026 21:22:26 +0000
asID:                     271706
IP address blocks:        200.80.96.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3v1Ji7ic13cyzDg2Hq5samWpcBxvVZq9d5UoJf8xoEsG/0/9337C74594A1CDBA4648723A66E8B6DAC377B0EA.crl
                          rsync://rpki-repo.registro.br/repo/3v1Ji7ic13cyzDg2Hq5samWpcBxvVZq9d5UoJf8xoEsG/0/9337C74594A1CDBA4648723A66E8B6DAC377B0EA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9337C74594A1CDBA4648723A66E8B6DAC377B0EA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 19:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:6b:15:b2:34:58:bb:2a:ce:a3:39:5a:ac:75:2d:7c:65:bf:d8:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9337C74594A1CDBA4648723A66E8B6DAC377B0EA
        Validity
            Not Before: Apr  8 21:17:26 2025 GMT
            Not After : Apr  7 21:22:26 2026 GMT
        Subject: CN=71ECF43D8E29F5C02151304A3C9E9E13D057B099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6e:9b:af:d0:2a:9a:5e:fe:03:85:a2:7c:dc:
                    fc:0f:0e:18:8c:54:8c:39:d3:dc:02:91:72:d3:11:
                    02:99:70:ef:83:9b:b4:b5:6d:59:d8:be:df:07:37:
                    b2:5a:61:c9:89:12:13:46:c3:9b:5e:3f:be:c6:d8:
                    fc:ea:ec:03:d4:87:d1:6f:c4:43:c8:cb:dc:3d:d4:
                    b7:ce:14:12:67:c5:36:c4:ab:95:b8:7e:fd:a2:ff:
                    0c:18:b9:5a:74:00:9e:a3:08:28:4a:6b:bc:a3:fa:
                    9c:cc:90:8a:f3:52:56:2e:50:5f:96:7b:41:39:6c:
                    89:58:3e:f7:16:67:d1:81:a5:d4:d7:55:9d:56:41:
                    84:68:0f:bb:51:a9:f3:19:03:26:6a:dc:5b:75:d5:
                    bb:98:c4:29:22:b9:77:71:ef:74:a3:40:45:19:d1:
                    2f:41:1b:52:b6:63:3e:2c:10:b2:36:47:b0:87:d5:
                    e1:6c:45:03:20:e7:b9:c8:5a:1b:1c:d0:19:1c:5f:
                    10:08:ae:e4:4e:91:94:bc:17:40:e9:ef:e2:1c:b5:
                    10:d2:39:3b:75:0c:b8:d2:52:e0:0a:6f:35:9f:12:
                    de:7f:58:5f:cb:c9:ed:26:ff:cb:3e:7b:a7:d6:c1:
                    85:3a:91:7c:d5:cb:51:ad:53:1c:01:82:a1:93:ef:
                    28:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:EC:F4:3D:8E:29:F5:C0:21:51:30:4A:3C:9E:9E:13:D0:57:B0:99
            X509v3 Authority Key Identifier:
                keyid:93:37:C7:45:94:A1:CD:BA:46:48:72:3A:66:E8:B6:DA:C3:77:B0:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3v1Ji7ic13cyzDg2Hq5samWpcBxvVZq9d5UoJf8xoEsG/0/9337C74594A1CDBA4648723A66E8B6DAC377B0EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9337C74594A1CDBA4648723A66E8B6DAC377B0EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3v1Ji7ic13cyzDg2Hq5samWpcBxvVZq9d5UoJf8xoEsG/0/3230302e38302e39362e302f32322d3332203d3e20323731373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.80.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:6f:cb:4f:9c:e8:fb:e2:f6:2a:95:8e:f7:b9:a7:4c:40:2a:
         a3:ff:41:e8:41:41:6c:33:3d:37:a6:a5:05:9b:4d:89:c7:83:
         cc:42:f4:d5:ae:98:2d:b0:8a:c9:7a:69:93:2f:39:a3:26:f9:
         32:f5:31:fb:5e:ef:e5:75:e8:52:d4:2e:7d:bc:7a:e2:21:ca:
         1e:fd:84:d1:05:cf:13:e9:b4:dc:f5:c2:a1:4d:eb:aa:f3:19:
         d8:0b:32:75:25:0c:26:6c:dc:89:4e:3e:de:30:8a:ef:62:9a:
         c5:91:b6:e2:91:21:bd:2a:17:d8:c0:be:ac:38:3b:e4:21:82:
         59:ce:06:fb:de:ae:95:bd:dc:40:02:e9:60:c3:68:8a:f5:c3:
         2d:7a:ab:0b:8f:f6:55:c1:9e:a7:3d:d0:1e:5c:22:e1:e1:a2:
         ff:fc:1f:1a:94:92:96:48:9a:30:0a:b9:f4:45:43:3d:e9:dd:
         10:e1:b8:79:22:9e:50:bc:73:73:51:af:41:d1:6b:cb:07:53:
         d9:02:39:f6:4e:5d:c3:0c:50:d0:85:7b:68:85:99:c0:70:6f:
         b9:75:98:64:d3:46:ea:4c:bd:68:2e:d5:e1:dc:d1:f3:82:21:
         75:eb:f5:9a:ef:38:5f:5d:d7:6d:8d:00:9d:a5:0f:92:45:18:
         cb:7b:9f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:07:33 2025 by rpki-client on console.sobornost.net