Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/3230302e3232302e3134342e302f32322d3234203d3e203238353736.roa
File:                     3230302e3232302e3134342e302f32322d3234203d3e203238353736.roa (raw, json)
Hash identifier:          5jpw84eDZm3ONo+5RkljuVhClFgk9Yd238psfrnZgzc=
Subject key identifier:   AA:BE:35:3E:AF:DF:7F:03:9C:04:53:58:46:57:04:4E:71:D4:4A:7B
Certificate issuer:       /CN=BD1E87C8514998E362292741C70F693178FDD20E
Certificate serial:       2EBA23E715B756ADDCA7AEB8552E863DAB0BC3D3
Authority key identifier: BD:1E:87:C8:51:49:98:E3:62:29:27:41:C7:0F:69:31:78:FD:D2:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/3230302e3232302e3134342e302f32322d3234203d3e203238353736.roa
Signing time:             Fri 25 Apr 2025 23:30:51 +0000
ROA not before:           Fri 25 Apr 2025 23:25:51 +0000
ROA not after:            Fri 24 Apr 2026 23:30:51 +0000
asID:                     28576
IP address blocks:        200.220.144.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.crl
                          rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 22:25:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:ba:23:e7:15:b7:56:ad:dc:a7:ae:b8:55:2e:86:3d:ab:0b:c3:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD1E87C8514998E362292741C70F693178FDD20E
        Validity
            Not Before: Apr 25 23:25:51 2025 GMT
            Not After : Apr 24 23:30:51 2026 GMT
        Subject: CN=AABE353EAFDF7F039C0453584657044E71D44A7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2d:7b:b6:08:a5:87:7a:58:87:a2:d2:bf:11:
                    29:cb:ea:c9:81:01:0f:06:57:1e:27:4b:a8:b8:dc:
                    99:ad:01:f2:f1:86:ba:7c:68:0e:2e:cf:6b:24:4a:
                    de:b3:10:b2:96:69:f7:ee:aa:34:88:0f:23:b0:ec:
                    d2:b3:04:bb:a8:5c:7d:fd:fd:66:bb:6a:0e:69:00:
                    ca:49:81:ca:1a:89:fa:a6:5e:27:a8:54:97:56:d0:
                    bf:98:66:16:79:a2:fc:cc:d5:05:bc:c4:a7:7d:87:
                    9f:90:0b:24:e0:d2:b1:14:af:c4:e9:9d:b8:fa:b1:
                    67:b0:4c:d1:b4:3e:84:a4:c8:64:60:1e:7f:b5:c9:
                    e8:4f:65:8d:40:fc:ed:d9:bb:47:2e:de:ac:37:27:
                    f7:84:1e:c7:75:eb:6e:86:11:b8:4c:40:5c:59:ee:
                    7a:69:4c:cb:73:50:0c:74:db:c5:be:fb:ff:42:10:
                    77:2f:bd:41:fa:c4:76:91:24:b5:d4:a0:9d:f7:f5:
                    ae:28:0c:68:0e:a1:08:68:2a:74:4b:44:41:02:14:
                    e1:bd:5e:bf:23:96:57:5e:6b:de:9c:9b:c7:05:cd:
                    d9:83:19:b4:ff:0c:c8:32:5d:15:7a:ad:56:84:fe:
                    29:23:15:2b:0b:b9:e0:25:ed:7b:27:e1:35:4a:75:
                    88:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:BE:35:3E:AF:DF:7F:03:9C:04:53:58:46:57:04:4E:71:D4:4A:7B
            X509v3 Authority Key Identifier:
                keyid:BD:1E:87:C8:51:49:98:E3:62:29:27:41:C7:0F:69:31:78:FD:D2:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/3230302e3232302e3134342e302f32322d3234203d3e203238353736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.220.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:9d:5a:0e:16:3c:09:a5:65:4a:7c:52:34:02:59:75:f0:28:
         95:10:8c:8c:61:05:65:5c:eb:a4:2a:6f:a9:1c:ce:0a:f1:e9:
         a3:1b:dc:de:71:94:bd:ed:53:19:c1:17:02:5d:f5:e1:9f:7a:
         c4:87:f6:11:89:01:9c:5c:f8:dc:6a:fe:31:7c:07:16:7a:0e:
         3c:5c:48:62:1e:13:9f:c9:39:de:0c:ea:2c:46:dd:e9:98:69:
         a5:3e:e0:35:19:a0:b3:62:70:85:32:1c:0f:c4:f7:eb:cb:fa:
         76:f1:94:f2:99:6b:39:97:88:f8:9a:fd:ff:68:fa:d3:c3:1b:
         10:df:96:9f:05:7d:75:eb:df:8a:3f:5b:e1:04:64:0a:67:06:
         ef:aa:4e:b3:34:d1:17:54:41:86:bd:b0:f8:4a:ca:fb:06:83:
         29:ae:6f:f1:24:ac:c6:85:8f:71:ca:c5:22:52:f1:93:fa:20:
         2d:41:23:e3:a1:83:2e:95:3c:1f:8a:80:34:5d:72:18:52:c5:
         48:db:f6:05:59:78:10:17:4e:7b:3e:31:d7:a0:dd:7a:e8:cc:
         31:2b:96:00:cf:71:f5:7f:93:03:53:bd:15:6a:bd:7a:ed:91:
         73:7f:4d:db:65:42:90:dd:dd:da:be:76:70:f2:17:f0:fd:ef:
         fd:ce:f8:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:58 2025 by rpki-client on console.sobornost.net