Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/3230302e3135352e33322e302f31392d3234203d3e203232363839.roa
File:                     3230302e3135352e33322e302f31392d3234203d3e203232363839.roa (raw, json)
Hash identifier:          z1KKzziNsn5s32gIt5qjxq4FuV9oDZV8ix+6rBer+gU=
Subject key identifier:   85:23:AC:4B:41:29:58:28:62:A5:EA:7C:62:39:D5:3C:2C:79:DD:1B
Certificate issuer:       /CN=B6DD0286E17B756E91475332E495995F85C36F08
Certificate serial:       534B4CC9C0ED41095CB7A249AFB141F1BF258FFA
Authority key identifier: B6:DD:02:86:E1:7B:75:6E:91:47:53:32:E4:95:99:5F:85:C3:6F:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DD0286E17B756E91475332E495995F85C36F08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/3230302e3135352e33322e302f31392d3234203d3e203232363839.roa
Signing time:             Fri 07 Mar 2025 02:18:06 +0000
ROA not before:           Fri 07 Mar 2025 02:13:06 +0000
ROA not after:            Fri 06 Mar 2026 02:18:06 +0000
asID:                     22689
IP address blocks:        200.155.32.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/B6DD0286E17B756E91475332E495995F85C36F08.crl
                          rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/B6DD0286E17B756E91475332E495995F85C36F08.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DD0286E17B756E91475332E495995F85C36F08.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 14:20:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:4b:4c:c9:c0:ed:41:09:5c:b7:a2:49:af:b1:41:f1:bf:25:8f:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6DD0286E17B756E91475332E495995F85C36F08
        Validity
            Not Before: Mar  7 02:13:06 2025 GMT
            Not After : Mar  6 02:18:06 2026 GMT
        Subject: CN=8523AC4B4129582862A5EA7C6239D53C2C79DD1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9d:b7:12:2c:fa:c2:a2:25:a1:2d:89:3c:76:
                    73:35:be:fd:78:09:f7:22:0d:a8:b8:e1:c4:9b:2c:
                    60:1a:e8:07:48:4b:86:51:23:38:3a:ec:7e:c0:65:
                    0c:d2:0c:d8:f3:6c:2d:5c:65:6f:7c:4d:86:36:82:
                    65:42:55:e5:93:8e:81:66:07:ac:8f:66:ff:e3:48:
                    01:f2:e3:a2:86:85:d7:18:2b:29:93:5c:0d:c9:43:
                    e2:5b:3e:1d:87:e2:64:90:5b:5f:e9:3f:e7:25:8e:
                    f4:8c:39:5a:99:e3:a2:2f:62:3c:1c:12:a1:1a:63:
                    1b:75:d7:5f:54:a5:8b:41:d3:4d:a6:32:46:17:2c:
                    9b:89:bd:a4:70:3b:cd:56:57:09:78:cf:8a:89:77:
                    7d:14:77:3e:a1:0c:ab:c1:e5:94:a3:cd:5e:4f:e7:
                    7d:1b:c3:f2:ba:2d:c0:27:6e:f2:1f:4d:f1:fd:f8:
                    52:d8:df:15:26:ec:ff:6f:46:22:c1:ad:49:13:e5:
                    8d:9b:ff:09:54:8d:11:85:c9:f6:96:db:35:58:b7:
                    b7:6c:2a:41:15:ce:27:7d:fb:a8:28:29:25:b5:60:
                    aa:a9:5b:32:ce:f2:08:09:2c:0e:f1:77:02:37:34:
                    ad:7a:5e:29:99:e3:55:4c:2e:6d:34:3d:a9:18:22:
                    31:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:23:AC:4B:41:29:58:28:62:A5:EA:7C:62:39:D5:3C:2C:79:DD:1B
            X509v3 Authority Key Identifier:
                keyid:B6:DD:02:86:E1:7B:75:6E:91:47:53:32:E4:95:99:5F:85:C3:6F:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/B6DD0286E17B756E91475332E495995F85C36F08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DD0286E17B756E91475332E495995F85C36F08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/3230302e3135352e33322e302f31392d3234203d3e203232363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.155.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         04:08:ab:c8:57:3f:95:33:c5:83:47:a1:4d:3f:00:0d:18:fc:
         e5:c0:4b:dd:a7:45:8e:23:0a:74:0c:97:73:23:f4:1d:fe:29:
         52:82:d0:b8:e3:72:9c:62:8a:bc:39:58:a7:1f:74:0a:06:b1:
         25:0a:5c:0f:6c:9b:2c:4e:76:90:2d:df:b2:6b:61:8e:17:7e:
         63:f8:98:fd:b5:cb:d6:6a:8f:08:21:10:69:3d:11:84:b7:52:
         83:16:34:9c:03:fd:97:38:32:e8:65:dc:83:3a:af:09:77:0e:
         3f:1a:98:ab:4b:2e:48:3a:c7:6c:97:02:1d:10:26:10:9f:cb:
         87:98:15:8a:20:31:48:9a:b5:6b:42:69:61:a7:4b:bf:13:67:
         8d:df:46:bd:84:58:23:82:41:61:08:67:6e:7b:3a:76:4b:4a:
         f1:e3:16:76:be:66:db:3f:f7:fc:66:0a:46:64:56:67:36:e6:
         49:52:40:48:c8:4a:5e:55:ec:00:8b:a9:84:f2:75:55:af:d6:
         80:f0:45:b4:65:07:28:12:56:94:a2:b9:c4:5d:17:ba:e0:18:
         d1:d7:f6:8b:a4:24:de:4c:94:b0:f7:62:57:44:e9:ac:e7:03:
         19:5e:20:7b:a1:a9:08:ed:af:c4:c3:87:c8:8d:4c:8e:fb:50:
         d7:91:59:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:15 2025 by rpki-client on console.sobornost.net