Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/0/3230302e3138392e34382e302f32312d3234203d3e203134323034.roa
File:                     3230302e3138392e34382e302f32312d3234203d3e203134323034.roa (raw, json)
Hash identifier:          6PobUS84q68CLi8brdnRD1MQRvgU0FrbKFgk8bG54wM=
Subject key identifier:   DC:F5:01:60:81:33:41:98:80:A9:9D:F6:BB:D5:68:48:F4:DC:B0:3D
Certificate issuer:       /CN=E3A05660BB6F81841BB49DE532F64F592B23928E
Certificate serial:       2E2E235ED26C161ADC7CA28F83E28342154C0025
Authority key identifier: E3:A0:56:60:BB:6F:81:84:1B:B4:9D:E5:32:F6:4F:59:2B:23:92:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3A05660BB6F81841BB49DE532F64F592B23928E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/0/3230302e3138392e34382e302f32312d3234203d3e203134323034.roa
Signing time:             Fri 18 Apr 2025 14:30:50 +0000
ROA not before:           Fri 18 Apr 2025 14:25:50 +0000
ROA not after:            Fri 17 Apr 2026 14:30:50 +0000
asID:                     14204
IP address blocks:        200.189.48.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/0/E3A05660BB6F81841BB49DE532F64F592B23928E.crl
                          rsync://rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/0/E3A05660BB6F81841BB49DE532F64F592B23928E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3A05660BB6F81841BB49DE532F64F592B23928E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:2e:23:5e:d2:6c:16:1a:dc:7c:a2:8f:83:e2:83:42:15:4c:00:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3A05660BB6F81841BB49DE532F64F592B23928E
        Validity
            Not Before: Apr 18 14:25:50 2025 GMT
            Not After : Apr 17 14:30:50 2026 GMT
        Subject: CN=DCF501608133419880A99DF6BBD56848F4DCB03D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:25:fa:b9:4e:03:d4:69:07:31:b5:5f:a7:f4:
                    5b:80:98:4a:fe:44:b8:09:9d:45:cd:73:b2:cb:d2:
                    31:12:32:92:85:ab:b4:d4:44:3a:6a:cc:cf:83:3e:
                    fa:2c:02:10:5b:d2:f4:b5:a6:1e:e0:95:81:21:18:
                    90:43:74:cf:f9:73:af:48:df:7a:6f:32:9e:34:00:
                    b9:37:b0:fd:3e:62:6a:1a:27:2f:24:66:72:35:e2:
                    3f:a4:9d:b3:7a:52:1f:87:08:c4:11:7f:a8:5e:4f:
                    fc:8c:bd:81:64:75:73:44:9d:d1:92:d3:1a:6b:fb:
                    86:b0:45:08:d8:e0:a4:12:4e:be:a9:38:db:7c:41:
                    4a:d1:4c:9b:62:98:42:d0:30:68:59:bc:0e:8e:4e:
                    2c:72:c8:a2:03:d2:18:3d:e2:1e:b1:bf:b2:2c:de:
                    4f:82:eb:6c:b8:98:84:41:53:ac:ad:75:be:83:7c:
                    ac:ef:cf:4a:42:2b:0c:ca:40:c9:93:76:11:38:0a:
                    97:23:11:4d:eb:a0:06:47:64:33:33:40:d7:65:2f:
                    2b:5d:bb:6a:78:c1:56:7f:e0:55:62:da:cf:55:c9:
                    93:a2:5f:7a:eb:c0:d7:29:11:36:61:52:2a:4c:d8:
                    0c:0f:9b:8c:3a:2c:fd:c4:34:19:fb:d2:d9:aa:45:
                    c5:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F5:01:60:81:33:41:98:80:A9:9D:F6:BB:D5:68:48:F4:DC:B0:3D
            X509v3 Authority Key Identifier:
                keyid:E3:A0:56:60:BB:6F:81:84:1B:B4:9D:E5:32:F6:4F:59:2B:23:92:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/0/E3A05660BB6F81841BB49DE532F64F592B23928E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3A05660BB6F81841BB49DE532F64F592B23928E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/0/3230302e3138392e34382e302f32312d3234203d3e203134323034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.189.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1f:0d:a4:06:05:6d:34:c6:69:eb:27:35:8f:80:b6:ee:cd:04:
         2d:02:f8:45:37:43:26:6b:3a:a6:1d:15:08:8b:f3:04:2b:4c:
         30:42:96:6e:70:00:72:54:d9:6c:97:5e:00:57:ee:b8:eb:e9:
         75:f4:c6:a2:c8:13:b7:84:00:2f:93:2a:18:62:a2:5a:81:b6:
         87:99:b2:78:20:f9:7d:52:b0:5a:03:ce:ff:9e:e6:51:62:dd:
         99:97:18:c3:1b:97:75:45:95:ba:ea:97:0c:72:d6:bd:c5:e8:
         84:22:01:ee:be:4b:fb:73:53:db:0a:5c:f7:b6:91:ee:28:53:
         50:2b:63:fd:36:87:2e:cf:f8:7b:ff:b1:71:4f:78:81:fa:a2:
         15:c1:ab:90:24:cf:69:60:9c:4f:1b:f8:ae:81:7c:ba:23:7b:
         81:08:08:bd:e5:fa:3f:6b:48:14:82:f2:96:26:73:1a:c4:32:
         e7:54:5d:88:03:24:22:e4:98:98:a9:4d:36:68:2d:5a:6d:b0:
         0d:b6:29:75:a4:b0:c1:f0:2b:56:63:58:62:17:50:7f:9b:1a:
         11:cd:93:b3:8c:ee:06:dc:2d:51:e3:5a:19:a4:f3:68:bb:a6:
         22:4e:e6:a2:15:26:b6:eb:ee:3e:e6:dc:2b:84:c9:9a:4f:22:
         dc:03:f4:3e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIULi4jXtJsFhrcfKKPg+KDQhVMACUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTNBMDU2NjBCQjZGODE4NDFCQjQ5REU1MzJGNjRGNTky
QjIzOTI4RTAeFw0yNTA0MTgxNDI1NTBaFw0yNjA0MTcxNDMwNTBaMDMxMTAvBgNV
BAMTKERDRjUwMTYwODEzMzQxOTg4MEE5OURGNkJCRDU2ODQ4RjREQ0IwM0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQJfq5TgPUaQcxtV+n9FuAmEr+
RLgJnUXNc7LL0jESMpKFq7TURDpqzM+DPvosAhBb0vS1ph7glYEhGJBDdM/5c69I
33pvMp40ALk3sP0+YmoaJy8kZnI14j+knbN6Uh+HCMQRf6heT/yMvYFkdXNEndGS
0xpr+4awRQjY4KQSTr6pONt8QUrRTJtimELQMGhZvA6OTixyyKID0hg94h6xv7Is
3k+C62y4mIRBU6ytdb6DfKzvz0pCKwzKQMmTdhE4CpcjEU3roAZHZDMzQNdlLytd
u2p4wVZ/4FVi2s9VyZOiX3rrwNcpETZhUipM2AwPm4w6LP3ENBn70tmqRcVdAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU3PUBYIEzQZiAqZ32u9VoSPTcsD0wHwYDVR0j
BBgwFoAU46BWYLtvgYQbtJ3lMvZPWSsjko4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjdYS1paQVV2UjluUFBFbjhOZ1cxNVRiYll6Vm85Nnl3cnh1YUx0MnU2
ZGYvMC9FM0EwNTY2MEJCNkY4MTg0MUJCNDlERTUzMkY2NEY1OTJCMjM5MjhFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UzQTA1NjYwQkI2RjgxODQx
QkI0OURFNTMyRjY0RjU5MkIyMzkyOEUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Y3WEtaWkFVdlI5blBQRW44TmdXMTVUYmJZelZvOTZ5d3J4dWFMdDJ1NmRmLzAv
MzIzMDMwMmUzMTM4MzkyZTM0MzgyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMTM0
MzIzMDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDyL0wMA0GCSqGSIb3DQEBCwUAA4IBAQAfDaQGBW00
xmnrJzWPgLbuzQQtAvhFN0MmazqmHRUIi/MEK0wwQpZucAByVNlsl14AV+646+l1
9MaiyBO3hAAvkyoYYqJagbaHmbJ4IPl9UrBaA87/nuZRYt2ZlxjDG5d1RZW66pcM
cta9xeiEIgHuvkv7c1PbClz3tpHuKFNQK2P9Nocuz/h7/7FxT3iB+qIVwauQJM9p
YJxPG/iugXy6I3uBCAi95fo/a0gUgvKWJnMaxDLnVF2IAyQi5JiYqU02aC1abbAN
til1pLDB8CtWY1hiF1B/mxoRzZOzjO4G3C1R41oZpPNou6YiTuaiFSa26+4+5twr
hMmaTyLcA/Q+
-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:40 2025 by rpki-client on console.sobornost.net