Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/3230302e3232302e3135322e302f32312d3234203d3e203238353736.roa
File:                     3230302e3232302e3135322e302f32312d3234203d3e203238353736.roa (raw, json)
Hash identifier:          PZqck0FmSPeeei58AgyPvBpA4pqGr5DrJNlHOuGlAxU=
Subject key identifier:   2D:97:E1:89:4C:F6:89:7F:C0:92:D7:B9:83:CC:26:4B:5C:30:C6:4D
Certificate issuer:       /CN=BD1E87C8514998E362292741C70F693178FDD20E
Certificate serial:       674774F02D11BA244BD44FA44D6B8BFA3D8CB57E
Authority key identifier: BD:1E:87:C8:51:49:98:E3:62:29:27:41:C7:0F:69:31:78:FD:D2:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/3230302e3232302e3135322e302f32312d3234203d3e203238353736.roa
Signing time:             Fri 25 Apr 2025 23:30:51 +0000
ROA not before:           Fri 25 Apr 2025 23:25:51 +0000
ROA not after:            Fri 24 Apr 2026 23:30:51 +0000
asID:                     28576
IP address blocks:        200.220.152.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.crl
                          rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 22:25:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:47:74:f0:2d:11:ba:24:4b:d4:4f:a4:4d:6b:8b:fa:3d:8c:b5:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD1E87C8514998E362292741C70F693178FDD20E
        Validity
            Not Before: Apr 25 23:25:51 2025 GMT
            Not After : Apr 24 23:30:51 2026 GMT
        Subject: CN=2D97E1894CF6897FC092D7B983CC264B5C30C64D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f8:3b:8b:a1:cf:7c:82:9b:6d:57:04:4a:76:
                    bd:a7:52:53:e2:dc:01:99:f6:9e:3a:0e:57:6f:21:
                    ed:12:73:ca:1e:89:36:03:b9:fa:17:14:cd:04:26:
                    e3:7e:ed:41:7c:6c:0c:5e:51:02:a2:a0:16:45:5b:
                    86:b6:b1:fc:44:bc:71:f0:80:b6:2e:5b:17:8c:1a:
                    30:de:ce:89:b1:ad:29:fc:53:66:dc:9a:6e:3d:40:
                    82:88:8d:1e:d8:f1:6f:59:46:3c:31:84:a2:a4:2d:
                    22:d8:a8:3b:be:68:f7:fe:d5:d8:93:61:1d:c2:0b:
                    b6:b5:cc:4e:78:a3:4b:b9:10:83:3e:33:01:15:50:
                    06:a1:74:a1:e0:2d:30:94:29:2c:ae:cc:15:68:27:
                    7f:81:92:68:27:0c:d1:7b:08:5a:3f:0e:96:3d:a2:
                    35:91:53:b8:78:8e:d1:1a:f8:64:47:30:1e:cd:fa:
                    8d:5a:fc:4a:78:e2:72:b4:f6:0c:0d:27:93:ea:2a:
                    9c:11:cf:91:b5:1f:52:cf:ee:5f:a6:29:2b:16:ad:
                    33:fc:63:c8:ab:cb:8d:2a:8c:73:f4:42:0d:72:bb:
                    36:2f:95:f0:d1:cc:08:50:8d:5c:37:de:87:11:1a:
                    65:ac:b8:a3:3e:86:33:50:4c:f9:a1:b8:da:e4:16:
                    cd:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:97:E1:89:4C:F6:89:7F:C0:92:D7:B9:83:CC:26:4B:5C:30:C6:4D
            X509v3 Authority Key Identifier:
                keyid:BD:1E:87:C8:51:49:98:E3:62:29:27:41:C7:0F:69:31:78:FD:D2:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/3230302e3232302e3135322e302f32312d3234203d3e203238353736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.220.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         62:50:f5:13:86:b8:15:b9:ea:ef:33:d9:8e:cd:da:ee:76:c2:
         a3:63:95:e1:bd:d1:3b:b7:7c:97:54:c1:77:79:5c:7f:61:38:
         28:61:83:2c:eb:64:a1:82:d6:3b:da:08:d5:87:b7:6a:42:b6:
         b3:ae:d2:ac:1f:66:74:7a:2e:78:c3:6c:5d:c8:a6:37:a5:0c:
         cd:7e:06:db:fe:6c:e3:36:8f:7d:56:e5:96:18:9c:b3:42:72:
         28:b7:1e:80:d8:10:43:bb:6b:c8:aa:5c:de:a7:2d:95:7e:ce:
         64:c2:21:88:be:bb:63:3d:d4:5a:20:73:8b:31:da:4e:06:4c:
         67:cb:e5:36:e0:dc:4c:f4:ec:02:e2:41:4e:00:08:5b:17:58:
         98:89:18:3a:e2:cc:3d:00:e8:af:b0:ca:2e:d5:a2:1f:53:29:
         98:0e:b8:32:cd:91:83:1c:28:4f:9e:a9:bd:97:d8:bf:37:01:
         85:66:09:eb:27:a9:e6:c2:43:76:0f:cd:43:7e:22:bb:d4:05:
         24:d0:09:ad:03:2d:94:16:47:e9:e5:57:ed:d0:46:7d:1e:9a:
         e4:4e:9f:f9:2f:cd:e7:23:a0:33:a0:fd:ea:f6:a5:cf:a0:1e:
         a9:b4:e5:35:96:78:60:bb:92:45:af:07:59:0b:70:b1:d5:87:
         21:45:13:04
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUZ0d08C0RuiRL1E+kTWuL+j2MtX4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkQxRTg3Qzg1MTQ5OThFMzYyMjkyNzQxQzcwRjY5MzE3
OEZERDIwRTAeFw0yNTA0MjUyMzI1NTFaFw0yNjA0MjQyMzMwNTFaMDMxMTAvBgNV
BAMTKDJEOTdFMTg5NENGNjg5N0ZDMDkyRDdCOTgzQ0MyNjRCNUMzMEM2NEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw+DuLoc98gpttVwRKdr2nUlPi
3AGZ9p46DldvIe0Sc8oeiTYDufoXFM0EJuN+7UF8bAxeUQKioBZFW4a2sfxEvHHw
gLYuWxeMGjDezomxrSn8U2bcmm49QIKIjR7Y8W9ZRjwxhKKkLSLYqDu+aPf+1diT
YR3CC7a1zE54o0u5EIM+MwEVUAahdKHgLTCUKSyuzBVoJ3+BkmgnDNF7CFo/DpY9
ojWRU7h4jtEa+GRHMB7N+o1a/Ep44nK09gwNJ5PqKpwRz5G1H1LP7l+mKSsWrTP8
Y8iry40qjHP0Qg1yuzYvlfDRzAhQjVw33ocRGmWsuKM+hjNQTPmhuNrkFs0XAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQULZfhiUz2iX/Akte5g8wmS1wwxk0wHwYDVR0j
BBgwFoAUvR6HyFFJmONiKSdBxw9pMXj90g4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0NHV0x1YW1XQlJTWnJ6eUFWZzZyd1BhOGQ2NWhvN2FnNEY5Wnl4WkJj
NU4vMC9CRDFFODdDODUxNDk5OEUzNjIyOTI3NDFDNzBGNjkzMTc4RkREMjBFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JEMUU4N0M4NTE0OTk4RTM2
MjI5Mjc0MUM3MEY2OTMxNzhGREQyMEUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdDR1dMdWFtV0JSU1pyenlBVmc2cndQYThkNjVobzdhZzRGOVp5eFpCYzVOLzAv
MzIzMDMwMmUzMjMyMzAyZTMxMzUzMjJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDMy
MzgzNTM3MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAPI3JgwDQYJKoZIhvcNAQELBQADggEBAGJQ9ROG
uBW56u8z2Y7N2u52wqNjleG90Tu3fJdUwXd5XH9hOChhgyzrZKGC1jvaCNWHt2pC
trOu0qwfZnR6LnjDbF3IpjelDM1+Btv+bOM2j31W5ZYYnLNCcii3HoDYEEO7a8iq
XN6nLZV+zmTCIYi+u2M91Fogc4sx2k4GTGfL5Tbg3Ez07ALiQU4ACFsXWJiJGDri
zD0A6K+wyi7Voh9TKZgOuDLNkYMcKE+eqb2X2L83AYVmCesnqebCQ3YPzUN+IrvU
BSTQCa0DLZQWR+nlV+3QRn0emuROn/kvzecjoDOg/er2pc+gHqm05TWWeGC7kkWv
B1kLcLHVhyFFEwQ=
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:58 2025 by rpki-client on console.sobornost.net