Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8hgGAdCbS3u5VtXfhrv6omPLXyrGYAA3aketkL2ZZiy4/1/3230302e3139362e3230312e302f32342d3234203d3e20333936393832.roa
File:                     3230302e3139362e3230312e302f32342d3234203d3e20333936393832.roa (raw, json)
Hash identifier:          JYnl1AgEzv6A3emKqsNV2wjxR3GaDMd7rmxFgZDBx14=
Subject key identifier:   FD:DB:65:C5:1A:50:DA:84:B6:92:1A:25:05:AD:D5:FF:29:6C:10:C6
Certificate issuer:       /CN=591A5E28538FC2E6A42ED311941B9D128D78D596
Certificate serial:       158015C642DA11589730C928FA0603B8C273E3CE
Authority key identifier: 59:1A:5E:28:53:8F:C2:E6:A4:2E:D3:11:94:1B:9D:12:8D:78:D5:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/591A5E28538FC2E6A42ED311941B9D128D78D596.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hgGAdCbS3u5VtXfhrv6omPLXyrGYAA3aketkL2ZZiy4/1/3230302e3139362e3230312e302f32342d3234203d3e20333936393832.roa
Signing time:             Thu 06 Mar 2025 18:29:41 +0000
ROA not before:           Thu 06 Mar 2025 18:24:41 +0000
ROA not after:            Thu 05 Mar 2026 18:29:41 +0000
asID:                     396982
IP address blocks:        200.196.201.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8hgGAdCbS3u5VtXfhrv6omPLXyrGYAA3aketkL2ZZiy4/1/591A5E28538FC2E6A42ED311941B9D128D78D596.crl
                          rsync://rpki-repo.registro.br/repo/8hgGAdCbS3u5VtXfhrv6omPLXyrGYAA3aketkL2ZZiy4/1/591A5E28538FC2E6A42ED311941B9D128D78D596.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/591A5E28538FC2E6A42ED311941B9D128D78D596.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 13:37:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:80:15:c6:42:da:11:58:97:30:c9:28:fa:06:03:b8:c2:73:e3:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=591A5E28538FC2E6A42ED311941B9D128D78D596
        Validity
            Not Before: Mar  6 18:24:41 2025 GMT
            Not After : Mar  5 18:29:41 2026 GMT
        Subject: CN=FDDB65C51A50DA84B6921A2505ADD5FF296C10C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c4:28:de:b8:af:10:8c:b6:d0:39:fe:13:9c:
                    7f:b3:28:7f:08:da:bc:a3:42:89:a0:b3:80:de:ad:
                    c3:ae:b1:2c:1c:08:9b:fd:c8:e4:44:c5:8a:a0:44:
                    a0:ad:c6:74:db:40:06:f2:67:9f:26:4e:8b:1c:dc:
                    85:a2:db:95:6a:8a:15:da:e9:40:26:05:70:39:24:
                    6c:d2:c7:10:87:29:c3:fe:94:90:1c:33:89:62:2d:
                    2f:db:35:19:83:bf:1e:50:74:5c:04:04:e2:de:d2:
                    5f:40:a5:28:a8:5a:e8:0c:2f:4c:cd:f0:53:fb:0e:
                    71:49:dc:26:2d:2a:38:45:56:24:77:aa:6e:2e:b3:
                    aa:c9:80:6d:77:15:5d:3c:08:61:06:ce:f5:00:d0:
                    ed:f7:7f:00:66:28:f2:80:f8:ed:34:31:80:20:8c:
                    77:bc:17:45:47:95:7c:f8:56:1f:12:dc:bf:42:77:
                    d2:5a:31:46:ac:f1:45:c6:e1:cb:8a:00:0b:43:93:
                    85:6d:ff:06:fe:3e:56:0c:78:5b:ee:8e:da:82:b0:
                    c6:68:d8:77:72:01:28:5a:9b:a0:44:a8:90:00:d8:
                    f3:6d:33:63:e2:14:af:65:78:7b:b3:86:4e:e8:3c:
                    6b:47:00:1f:6e:34:25:2d:82:a8:be:0b:5b:c5:5d:
                    a9:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:DB:65:C5:1A:50:DA:84:B6:92:1A:25:05:AD:D5:FF:29:6C:10:C6
            X509v3 Authority Key Identifier:
                keyid:59:1A:5E:28:53:8F:C2:E6:A4:2E:D3:11:94:1B:9D:12:8D:78:D5:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hgGAdCbS3u5VtXfhrv6omPLXyrGYAA3aketkL2ZZiy4/1/591A5E28538FC2E6A42ED311941B9D128D78D596.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/591A5E28538FC2E6A42ED311941B9D128D78D596.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hgGAdCbS3u5VtXfhrv6omPLXyrGYAA3aketkL2ZZiy4/1/3230302e3139362e3230312e302f32342d3234203d3e20333936393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.196.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:df:ca:0b:4f:fc:67:fc:96:c9:04:37:3e:14:86:24:ef:f6:
         ed:8f:9a:62:4b:08:8f:cc:c0:59:2f:1b:22:56:77:43:68:15:
         fb:a1:9b:f0:67:79:20:b8:54:54:2d:07:24:33:3d:8d:9c:e0:
         4c:91:b9:c7:5c:15:12:14:95:37:86:08:46:8c:ea:30:39:de:
         19:f2:e8:46:44:c4:a5:0a:94:cb:36:11:20:e2:c6:98:35:7a:
         08:8c:4a:ad:0a:70:df:ff:f2:22:ed:3d:51:55:51:15:e9:38:
         c3:1a:46:ed:92:df:aa:9f:49:7c:b7:54:c5:a6:35:03:91:ad:
         62:49:a9:38:d0:7b:d2:60:2c:45:5d:7b:73:1a:99:d1:ce:9a:
         e7:18:e6:73:c3:ab:aa:f3:4d:7d:86:db:7d:cb:fe:f3:fa:f3:
         58:74:63:c5:b1:3f:40:3f:83:c1:40:9f:b9:61:90:82:36:5f:
         65:65:e6:d7:90:74:e9:d8:9a:d6:a2:9e:8c:b7:5e:bc:0e:cc:
         d2:ed:69:4e:00:6f:4c:47:9f:3f:22:4a:00:44:22:dd:ea:53:
         aa:f1:ee:53:cd:c6:33:e4:b6:0a:b0:40:3e:39:a4:d7:4a:8e:
         22:85:70:4d:f4:33:46:87:79:6c:ef:5d:d7:4d:a5:d9:c7:86:
         5e:b7:f8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:18 2025 by rpki-client on console.sobornost.net