Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/3230302e37312e36342e302f32322d3232203d3e20323636313931.roa
File:                     3230302e37312e36342e302f32322d3232203d3e20323636313931.roa (raw, json)
Hash identifier:          kkgmOvYUGJwCoEzhh6knneyi7masyyVrcruSvH1uCbc=
Subject key identifier:   9A:5F:43:5E:E8:94:C8:2E:30:A2:8B:B9:E2:21:B8:CB:53:C2:6E:B2
Certificate issuer:       /CN=221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA
Certificate serial:       12759FBF03E709D5551AB6B1A170A5A4379B17BD
Authority key identifier: 22:13:38:E9:0C:9C:D3:7D:ED:85:B4:40:9F:CA:B7:BF:4F:5F:E3:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/3230302e37312e36342e302f32322d3232203d3e20323636313931.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     266191
IP address blocks:        200.71.64.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.crl
                          rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:75:9f:bf:03:e7:09:d5:55:1a:b6:b1:a1:70:a5:a4:37:9b:17:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=3082010A0282010100E274D1D55930554FACCA2EEACD565D493BCBBB4579CE32DB275F63598332F6AD035651C9B8802C97814664A62ACB0201986DA844FB8F20E09CFADBEEA317A401F9600672C5022F87311C57A5EA9F904052E286CCBD0A885BDA6B1F3AA34A9545503E4AB46343BA12A1AD330BD68119FB5F83A71C277021D335202D3F8EDBB947A55D5DA63462ED76C3D17E94F56C4575E6A764C6BC98CBB3D74436B720AED6894E15B6127B27D0B04C8BF1046699B742D809F26E49FA7C22A462365DCF74B9893621F5EF9261AFC8C1A24A4CAA8A02D12CF3609D05449DF88C3617CEA3F3637A52CC42E801949F563AF225F463E06032A61563920699A56314CD98DD0A13063B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:74:d1:d5:59:30:55:4f:ac:ca:2e:ea:cd:56:
                    5d:49:3b:cb:bb:45:79:ce:32:db:27:5f:63:59:83:
                    32:f6:ad:03:56:51:c9:b8:80:2c:97:81:46:64:a6:
                    2a:cb:02:01:98:6d:a8:44:fb:8f:20:e0:9c:fa:db:
                    ee:a3:17:a4:01:f9:60:06:72:c5:02:2f:87:31:1c:
                    57:a5:ea:9f:90:40:52:e2:86:cc:bd:0a:88:5b:da:
                    6b:1f:3a:a3:4a:95:45:50:3e:4a:b4:63:43:ba:12:
                    a1:ad:33:0b:d6:81:19:fb:5f:83:a7:1c:27:70:21:
                    d3:35:20:2d:3f:8e:db:b9:47:a5:5d:5d:a6:34:62:
                    ed:76:c3:d1:7e:94:f5:6c:45:75:e6:a7:64:c6:bc:
                    98:cb:b3:d7:44:36:b7:20:ae:d6:89:4e:15:b6:12:
                    7b:27:d0:b0:4c:8b:f1:04:66:99:b7:42:d8:09:f2:
                    6e:49:fa:7c:22:a4:62:36:5d:cf:74:b9:89:36:21:
                    f5:ef:92:61:af:c8:c1:a2:4a:4c:aa:8a:02:d1:2c:
                    f3:60:9d:05:44:9d:f8:8c:36:17:ce:a3:f3:63:7a:
                    52:cc:42:e8:01:94:9f:56:3a:f2:25:f4:63:e0:60:
                    32:a6:15:63:92:06:99:a5:63:14:cd:98:dd:0a:13:
                    06:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:5F:43:5E:E8:94:C8:2E:30:A2:8B:B9:E2:21:B8:CB:53:C2:6E:B2
            X509v3 Authority Key Identifier:
                keyid:22:13:38:E9:0C:9C:D3:7D:ED:85:B4:40:9F:CA:B7:BF:4F:5F:E3:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/3230302e37312e36342e302f32322d3232203d3e20323636313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         aa:8d:54:89:1e:fe:65:22:e9:d8:2d:28:59:e9:37:61:e8:a9:
         c9:ed:9c:d4:60:ea:bd:de:28:da:33:77:4f:78:3e:c4:81:b2:
         f5:72:f3:b7:54:36:23:98:3a:f6:58:60:1d:f4:59:1d:7d:21:
         f4:c3:52:b2:21:12:db:64:59:77:41:5f:6b:0c:c7:80:a0:81:
         27:01:da:ce:3e:81:b4:e7:1a:23:e1:4f:28:0d:37:46:ee:fc:
         de:86:02:6d:78:67:f7:85:ef:68:e2:e9:07:d3:27:b8:21:62:
         36:de:45:75:34:a4:64:50:bf:5b:14:2e:30:23:3b:95:5a:13:
         a8:6d:48:e0:48:4b:3b:24:08:c0:2c:f5:6b:ac:a8:db:d3:1f:
         ed:e2:89:41:f4:dc:b6:8b:17:2f:29:32:d0:b9:45:94:05:8d:
         79:bd:84:14:7b:26:d1:1d:05:70:7d:f1:fc:29:e2:44:01:2a:
         7c:fa:92:1e:f1:1d:80:55:e4:7b:12:82:e1:b3:2c:f2:26:30:
         a6:b8:78:f7:49:2b:75:c0:f6:e2:fa:19:1b:e1:f1:cf:d2:6f:
         93:66:a3:64:0f:55:86:15:61:ad:4a:8c:9a:de:9d:f7:0b:54:
         ec:1a:85:23:2f:a5:48:f2:cc:20:06:74:ac:f3:6a:36:93:4d:
         58:f9:05:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:16 2025 by rpki-client on console.sobornost.net