Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/3230302e3231382e3235312e302f32342d3234203d3e203238353934.roa
File:                     3230302e3231382e3235312e302f32342d3234203d3e203238353934.roa (raw, json)
Hash identifier:          yk3soXH1/oo4uh1FZv/ahspeGqJbjHdvCC42pJ4kCjc=
Subject key identifier:   E5:BB:22:18:1B:93:B3:37:B9:CC:7B:79:95:AE:C6:A7:EC:3C:51:90
Certificate issuer:       /CN=9C0B0F9C917C39C4E0A392991B6A86E0D4917406
Certificate serial:       67E4A84D27A28068A6792513ED7BAF4098CFD938
Authority key identifier: 9C:0B:0F:9C:91:7C:39:C4:E0:A3:92:99:1B:6A:86:E0:D4:91:74:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/3230302e3231382e3235312e302f32342d3234203d3e203238353934.roa
Signing time:             Thu 06 Mar 2025 01:39:19 +0000
ROA not before:           Thu 06 Mar 2025 01:34:19 +0000
ROA not after:            Thu 05 Mar 2026 01:39:19 +0000
asID:                     28594
IP address blocks:        200.218.251.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.crl
                          rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:e4:a8:4d:27:a2:80:68:a6:79:25:13:ed:7b:af:40:98:cf:d9:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C0B0F9C917C39C4E0A392991B6A86E0D4917406
        Validity
            Not Before: Mar  6 01:34:19 2025 GMT
            Not After : Mar  5 01:39:19 2026 GMT
        Subject: CN=E5BB22181B93B337B9CC7B7995AEC6A7EC3C5190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:87:46:cf:8f:44:fd:fb:36:f1:75:79:b8:f5:
                    76:6d:1d:24:fc:34:5e:1f:22:40:12:87:48:84:77:
                    6a:72:ea:a2:86:7f:dc:fc:7b:41:8f:b2:fc:1a:95:
                    9d:07:cc:e4:f2:85:88:cf:89:0e:e9:1c:5c:0c:0e:
                    0e:23:43:a7:61:1c:09:4d:3a:d5:81:80:4f:41:c1:
                    b3:df:4c:13:93:12:ac:09:35:9b:92:c7:56:b0:43:
                    df:5d:1b:97:a0:27:ff:f3:d9:34:31:90:67:96:c8:
                    cd:d9:08:cf:7d:50:6b:83:f0:c7:78:4d:39:9d:90:
                    9b:09:f7:a7:d6:9a:89:e4:ec:1c:a2:d9:09:1f:ac:
                    63:62:33:f9:1e:87:5d:8d:c0:d9:08:12:25:56:22:
                    30:09:16:4b:03:4f:ba:95:83:bc:27:e1:fc:ec:86:
                    c1:1e:8a:b4:fe:1a:6c:3c:72:7b:cd:06:07:88:61:
                    49:bf:13:b2:7c:22:3f:a8:9a:a3:54:3f:cb:6c:40:
                    80:2f:7c:10:14:95:81:84:28:2e:36:6c:26:f9:16:
                    63:bd:68:46:d8:3d:6d:42:0f:16:e1:b1:f2:9f:58:
                    6c:c6:bb:c8:04:a9:47:f8:f1:99:b4:24:09:bc:f3:
                    1c:92:5e:06:21:4b:db:47:e4:36:b7:d5:8a:dd:8a:
                    cf:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:BB:22:18:1B:93:B3:37:B9:CC:7B:79:95:AE:C6:A7:EC:3C:51:90
            X509v3 Authority Key Identifier:
                keyid:9C:0B:0F:9C:91:7C:39:C4:E0:A3:92:99:1B:6A:86:E0:D4:91:74:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/3230302e3231382e3235312e302f32342d3234203d3e203238353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.218.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:e8:d2:b1:8f:ec:6c:48:8d:21:3b:fb:77:c3:2b:a1:d3:5d:
         0a:ec:45:43:7f:0c:dd:f1:0b:ec:9d:cf:1b:5d:64:28:49:f8:
         d3:4a:23:49:11:ed:57:5b:eb:07:b9:da:21:8a:9e:50:e1:2d:
         c7:e6:6c:44:b7:a5:a0:97:fb:e0:0f:89:38:95:83:e3:bc:f3:
         db:ef:2e:71:15:a7:74:63:21:73:e8:5c:9d:d4:67:23:7b:cd:
         c2:0f:d3:f4:42:5f:98:52:ea:40:53:cd:1b:63:37:80:17:ba:
         33:e7:de:c4:4e:ff:7f:d7:56:6a:06:35:67:28:af:a6:52:30:
         09:05:95:67:aa:96:a1:6e:29:a3:15:c8:d5:a1:48:46:be:7b:
         38:83:5c:7a:83:bf:db:6e:31:12:3e:89:ca:ee:43:7b:e6:cd:
         9f:a3:f2:12:48:1f:ac:0d:2c:4e:21:22:7f:d1:86:81:e6:f1:
         f6:07:fc:f7:0d:29:10:28:47:0d:d8:a8:4e:c1:4d:b3:1b:92:
         7f:b3:f8:e3:cc:28:d5:15:c6:21:93:2a:9c:cb:64:1c:47:f1:
         bd:74:1c:a5:42:42:ae:37:8f:d5:b8:90:1e:fd:dd:5b:b7:2a:
         bc:fb:a9:31:d4:af:ad:28:a7:1c:04:65:68:12:4b:cd:76:4e:
         36:87:cb:ae
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUZ+SoTSeigGimeSUT7XuvQJjP2TgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUMwQjBGOUM5MTdDMzlDNEUwQTM5Mjk5MUI2QTg2RTBE
NDkxNzQwNjAeFw0yNTAzMDYwMTM0MTlaFw0yNjAzMDUwMTM5MTlaMDMxMTAvBgNV
BAMTKEU1QkIyMjE4MUI5M0IzMzdCOUNDN0I3OTk1QUVDNkE3RUMzQzUxOTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChh0bPj0T9+zbxdXm49XZtHST8
NF4fIkASh0iEd2py6qKGf9z8e0GPsvwalZ0HzOTyhYjPiQ7pHFwMDg4jQ6dhHAlN
OtWBgE9BwbPfTBOTEqwJNZuSx1awQ99dG5egJ//z2TQxkGeWyM3ZCM99UGuD8Md4
TTmdkJsJ96fWmonk7Byi2QkfrGNiM/keh12NwNkIEiVWIjAJFksDT7qVg7wn4fzs
hsEeirT+Gmw8cnvNBgeIYUm/E7J8Ij+omqNUP8tsQIAvfBAUlYGEKC42bCb5FmO9
aEbYPW1CDxbhsfKfWGzGu8gEqUf48Zm0JAm88xySXgYhS9tH5Da31Yrdis/lAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU5bsiGBuTsze5zHt5la7Gp+w8UZAwHwYDVR0j
BBgwFoAUnAsPnJF8OcTgo5KZG2qG4NSRdAYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTNqampURGZVQWVSQ3FSd1lKNkZNcjlCb3l5dWNVOGNpd25QSzRNaEx5
d3ovMi85QzBCMEY5QzkxN0MzOUM0RTBBMzkyOTkxQjZBODZFMEQ0OTE3NDA2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlDMEIwRjlDOTE3QzM5QzRF
MEEzOTI5OTFCNkE4NkUwRDQ5MTc0MDYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzUzampqVERmVUFlUkNxUndZSjZGTXI5Qm95eXVjVThjaXduUEs0TWhMeXd6LzIv
MzIzMDMwMmUzMjMxMzgyZTMyMzUzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzgzNTM5MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADI2vswDQYJKoZIhvcNAQELBQADggEBACXo0rGP
7GxIjSE7+3fDK6HTXQrsRUN/DN3xC+ydzxtdZChJ+NNKI0kR7Vdb6we52iGKnlDh
LcfmbES3paCX++APiTiVg+O889vvLnEVp3RjIXPoXJ3UZyN7zcIP0/RCX5hS6kBT
zRtjN4AXujPn3sRO/3/XVmoGNWcor6ZSMAkFlWeqlqFuKaMVyNWhSEa+eziDXHqD
v9tuMRI+icruQ3vmzZ+j8hJIH6wNLE4hIn/RhoHm8fYH/PcNKRAoRw3YqE7BTbMb
kn+z+OPMKNUVxiGTKpzLZBxH8b10HKVCQq43j9W4kB793Vu3Krz7qTHUr60opxwE
ZWgSS812TjaHy64=
-----END CERTIFICATE-----
Generated at Mon Apr 28 10:49:18 2025 by rpki-client on console.sobornost.net