Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6bQjfCPwLofcPu5Vbx7KEdEsp1t5QJEurPcyPaiXgcuN/0/3230302e3139362e3134302e302f32322d3232203d3e203532373930.roa
File:                     3230302e3139362e3134302e302f32322d3232203d3e203532373930.roa (raw, json)
Hash identifier:          x6OSJB6bgqwXMFZEXQ3qdVQ6Ta+0uRuQxjMAdMhL/q4=
Subject key identifier:   90:28:E9:16:75:78:3B:7B:28:D2:A2:41:1C:82:D4:9D:CB:05:82:9C
Certificate issuer:       /CN=B8C422F4E7DEB22BF8449A4896DA5B6058DF65AD
Certificate serial:       176164B3B91E74806BC645AD692A664070FB3C14
Authority key identifier: B8:C4:22:F4:E7:DE:B2:2B:F8:44:9A:48:96:DA:5B:60:58:DF:65:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8C422F4E7DEB22BF8449A4896DA5B6058DF65AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6bQjfCPwLofcPu5Vbx7KEdEsp1t5QJEurPcyPaiXgcuN/0/3230302e3139362e3134302e302f32322d3232203d3e203532373930.roa
Signing time:             Thu 24 Apr 2025 02:44:13 +0000
ROA not before:           Thu 24 Apr 2025 02:39:13 +0000
ROA not after:            Thu 23 Apr 2026 02:44:13 +0000
asID:                     52790
IP address blocks:        200.196.140.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6bQjfCPwLofcPu5Vbx7KEdEsp1t5QJEurPcyPaiXgcuN/0/B8C422F4E7DEB22BF8449A4896DA5B6058DF65AD.crl
                          rsync://rpki-repo.registro.br/repo/6bQjfCPwLofcPu5Vbx7KEdEsp1t5QJEurPcyPaiXgcuN/0/B8C422F4E7DEB22BF8449A4896DA5B6058DF65AD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8C422F4E7DEB22BF8449A4896DA5B6058DF65AD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 15:21:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:61:64:b3:b9:1e:74:80:6b:c6:45:ad:69:2a:66:40:70:fb:3c:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8C422F4E7DEB22BF8449A4896DA5B6058DF65AD
        Validity
            Not Before: Apr 24 02:39:13 2025 GMT
            Not After : Apr 23 02:44:13 2026 GMT
        Subject: CN=9028E91675783B7B28D2A2411C82D49DCB05829C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f6:9e:73:6d:a0:2f:47:22:4e:4c:09:fe:e7:
                    61:c9:4e:e1:97:19:4e:3a:d7:f1:d0:a2:a6:e2:ea:
                    7d:1a:0c:b5:13:13:b7:57:b2:3b:83:05:86:cc:68:
                    6d:e6:62:87:30:df:91:d7:21:fa:9d:3f:8a:5b:b9:
                    89:7e:62:1d:a7:6d:19:a4:e5:19:79:6c:d5:9b:5f:
                    4b:06:86:0e:d6:15:e2:18:66:1d:36:3b:65:b0:56:
                    ea:c0:84:e8:93:6e:eb:d6:4c:b3:ac:52:99:a0:a3:
                    62:b6:56:2c:8d:34:05:8b:e2:78:bc:a3:7e:96:16:
                    97:6f:f9:d5:b0:c5:9d:66:95:69:73:bb:a8:7e:fe:
                    6d:38:d5:23:43:cf:3a:4f:33:36:8c:d7:6d:93:f4:
                    4d:13:51:e0:f1:c6:c4:83:b2:9a:56:6e:4d:f2:27:
                    81:46:b1:ee:0f:52:93:83:5a:3c:0d:ec:ee:03:75:
                    65:ed:e4:01:43:9d:5d:c9:31:57:39:a2:a6:74:e3:
                    c7:20:ad:cb:7a:e0:e5:59:c0:06:bd:ea:90:28:dc:
                    4d:e8:a6:66:59:39:c0:14:36:ca:76:a2:7d:31:6a:
                    c1:46:e7:1d:0f:64:0b:75:ea:80:23:ac:b5:2d:b8:
                    4d:4c:9e:52:a9:77:45:0e:fe:1b:b2:26:bf:31:ed:
                    cb:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:28:E9:16:75:78:3B:7B:28:D2:A2:41:1C:82:D4:9D:CB:05:82:9C
            X509v3 Authority Key Identifier:
                keyid:B8:C4:22:F4:E7:DE:B2:2B:F8:44:9A:48:96:DA:5B:60:58:DF:65:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6bQjfCPwLofcPu5Vbx7KEdEsp1t5QJEurPcyPaiXgcuN/0/B8C422F4E7DEB22BF8449A4896DA5B6058DF65AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8C422F4E7DEB22BF8449A4896DA5B6058DF65AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6bQjfCPwLofcPu5Vbx7KEdEsp1t5QJEurPcyPaiXgcuN/0/3230302e3139362e3134302e302f32322d3232203d3e203532373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.196.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:ed:09:8d:14:30:f0:c2:cd:11:00:02:7c:b1:3c:54:54:7e:
         3b:da:62:8c:9c:ed:85:3b:dd:32:51:c5:9c:ba:64:c7:ca:e2:
         64:6c:da:fe:5f:f6:a7:20:f2:53:60:00:36:47:30:52:b8:4b:
         36:a4:c5:fe:66:11:96:a6:02:75:b0:94:90:b8:9b:35:f9:26:
         f7:0b:dd:81:67:a5:ec:28:4e:1b:18:90:9e:22:bd:61:b2:69:
         54:96:00:ef:8c:b0:af:5f:8e:e6:ae:6b:b5:9e:88:18:5b:92:
         53:ae:03:b7:91:7a:83:57:6e:76:6c:b9:d2:b8:6b:b3:ae:6e:
         00:15:b7:f9:b7:d3:b1:5f:79:36:a1:53:d0:3e:50:40:28:c8:
         28:b3:e5:74:45:44:56:71:61:ca:92:17:fa:8c:19:82:f9:db:
         5b:73:11:e1:24:90:af:2b:e8:27:d3:f1:5f:d0:27:01:7d:6b:
         a7:5c:02:dd:0c:e7:e5:95:38:01:77:8e:85:47:72:b5:ce:1f:
         8f:c9:e8:bc:4d:cc:99:c6:54:7b:41:78:bc:a1:c9:b8:d6:c8:
         2a:a0:64:85:a9:13:0f:23:8d:44:3e:93:9d:27:e3:1c:6a:f5:
         9a:b5:1d:e0:6d:4c:06:c8:a7:05:b6:08:72:97:bc:ea:a4:c6:
         0b:e4:c2:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:14 2025 by rpki-client on console.sobornost.net