Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/2/3230302e35332e31362e302f32302d3234203d3e20323632333931.roa
File:                     3230302e35332e31362e302f32302d3234203d3e20323632333931.roa (raw, json)
Hash identifier:          obrSbo/Wnm3abygHl3opGbFbRH8Zk9dbqrGFGEdQziI=
Subject key identifier:   38:D5:D2:5F:CC:1E:38:51:97:58:64:66:DF:6C:6D:B7:4A:C1:B8:63
Certificate issuer:       /CN=3B45A474FDBCECA94BB8CBC36E107BC96D7A9194
Certificate serial:       15BBB0D62B3E66FFA2701BF82A8128132575A5E0
Authority key identifier: 3B:45:A4:74:FD:BC:EC:A9:4B:B8:CB:C3:6E:10:7B:C9:6D:7A:91:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B45A474FDBCECA94BB8CBC36E107BC96D7A9194.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/2/3230302e35332e31362e302f32302d3234203d3e20323632333931.roa
Signing time:             Mon 07 Apr 2025 18:12:36 +0000
ROA not before:           Mon 07 Apr 2025 18:07:36 +0000
ROA not after:            Mon 06 Apr 2026 18:12:36 +0000
asID:                     262391
IP address blocks:        200.53.16.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/2/3B45A474FDBCECA94BB8CBC36E107BC96D7A9194.crl
                          rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/2/3B45A474FDBCECA94BB8CBC36E107BC96D7A9194.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B45A474FDBCECA94BB8CBC36E107BC96D7A9194.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 22:47:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:bb:b0:d6:2b:3e:66:ff:a2:70:1b:f8:2a:81:28:13:25:75:a5:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B45A474FDBCECA94BB8CBC36E107BC96D7A9194
        Validity
            Not Before: Apr  7 18:07:36 2025 GMT
            Not After : Apr  6 18:12:36 2026 GMT
        Subject: CN=38D5D25FCC1E385197586466DF6C6DB74AC1B863
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8d:54:e7:a4:59:5f:75:07:18:a7:6e:34:c0:
                    2a:26:0e:fd:7c:bd:26:dc:42:e2:58:1d:1c:86:45:
                    f7:d6:76:fb:3a:16:e1:25:3c:5b:98:85:56:47:43:
                    9b:85:82:c6:e9:67:f2:62:54:d3:40:a4:57:81:af:
                    c4:25:7e:09:7f:13:34:ef:65:cb:a5:2a:2d:f1:c5:
                    27:26:3e:c8:9e:d8:3d:2b:95:b6:0d:a2:f6:61:01:
                    8a:2c:48:0a:8c:d5:07:68:85:53:b9:3f:8c:bd:5f:
                    97:3e:4d:f2:72:35:e6:dd:58:6b:61:3f:63:6a:85:
                    45:01:31:78:37:95:26:ec:d9:e1:9e:e8:45:39:61:
                    4b:2b:1a:a6:24:85:1d:39:56:bc:ac:43:26:b6:66:
                    38:bd:33:76:6a:6f:a5:60:ad:53:a5:54:35:58:9a:
                    3a:26:c5:d1:16:ac:32:7a:a0:f5:1b:5c:ac:cc:45:
                    83:7e:4f:a7:5f:1b:7c:9a:b1:14:f7:aa:30:c5:f3:
                    2f:49:8b:38:c1:82:e7:84:3a:bd:4f:88:a4:a6:2d:
                    94:7b:4e:36:3e:67:fd:52:dc:88:6b:ed:f9:77:dc:
                    a9:4a:2f:5f:77:43:bf:2f:8f:d4:c5:a3:2a:d6:40:
                    72:06:b4:7f:7d:0e:52:8c:b7:b9:39:a1:c0:35:2b:
                    4c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:D5:D2:5F:CC:1E:38:51:97:58:64:66:DF:6C:6D:B7:4A:C1:B8:63
            X509v3 Authority Key Identifier:
                keyid:3B:45:A4:74:FD:BC:EC:A9:4B:B8:CB:C3:6E:10:7B:C9:6D:7A:91:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/2/3B45A474FDBCECA94BB8CBC36E107BC96D7A9194.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B45A474FDBCECA94BB8CBC36E107BC96D7A9194.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/2/3230302e35332e31362e302f32302d3234203d3e20323632333931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         af:ed:f8:6d:27:cf:91:ac:bd:c4:d7:b1:5c:a5:de:e9:e7:89:
         15:f8:9d:95:de:48:27:57:ac:4b:5d:dd:d8:11:5b:83:eb:7b:
         fe:fd:4a:2a:42:71:c2:3a:a9:04:6d:2a:76:24:7e:8f:db:28:
         b8:5a:07:8b:8c:36:69:67:33:a2:27:a4:8d:09:f4:4f:ae:4d:
         bc:4f:32:72:71:63:c9:c6:34:91:73:41:3b:3a:f5:d6:9e:2f:
         c6:ad:39:16:00:9d:91:d9:d3:86:fe:52:b3:b4:73:67:08:85:
         cf:6d:bd:19:07:b1:22:5a:46:62:4e:a3:64:b2:33:7c:20:5d:
         08:de:54:24:b3:12:e2:a5:a6:95:f1:35:43:19:3f:89:01:e7:
         49:d3:c0:70:03:cc:22:17:97:4e:7f:54:e2:89:95:bd:d2:52:
         6e:6b:c7:c5:c7:6c:25:ed:aa:5b:eb:a5:58:bd:20:b5:2c:62:
         99:44:00:91:fa:4d:fd:d6:5e:a2:2e:93:4a:43:de:ba:7a:99:
         38:1b:fe:70:db:65:47:38:85:13:00:f8:2f:de:a4:62:3c:4f:
         5b:55:cd:51:0d:a6:03:31:34:dd:6f:3f:a8:f8:7f:cc:91:b6:
         2c:ca:5d:27:b6:4c:fe:f4:9d:46:81:e7:e4:67:93:c4:da:eb:
         89:f1:f6:77
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUFbuw1is+Zv+icBv4KoEoEyV1peAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0I0NUE0NzRGREJDRUNBOTRCQjhDQkMzNkUxMDdCQzk2
RDdBOTE5NDAeFw0yNTA0MDcxODA3MzZaFw0yNjA0MDYxODEyMzZaMDMxMTAvBgNV
BAMTKDM4RDVEMjVGQ0MxRTM4NTE5NzU4NjQ2NkRGNkM2REI3NEFDMUI4NjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcjVTnpFlfdQcYp240wComDv18
vSbcQuJYHRyGRffWdvs6FuElPFuYhVZHQ5uFgsbpZ/JiVNNApFeBr8Qlfgl/EzTv
ZculKi3xxScmPsie2D0rlbYNovZhAYosSAqM1QdohVO5P4y9X5c+TfJyNebdWGth
P2NqhUUBMXg3lSbs2eGe6EU5YUsrGqYkhR05VrysQya2Zji9M3Zqb6VgrVOlVDVY
mjomxdEWrDJ6oPUbXKzMRYN+T6dfG3yasRT3qjDF8y9JizjBgueEOr1PiKSmLZR7
TjY+Z/1S3Ihr7fl33KlKL193Q78vj9TFoyrWQHIGtH99DlKMt7k5ocA1K0zXAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUONXSX8weOFGXWGRm32xtt0rBuGMwHwYDVR0j
BBgwFoAUO0WkdP287KlLuMvDbhB7yW16kZQwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9zeWpZN2l0VjZRMWl2QnFaUFY5R0ZlRXlFaHBoZk5vSDFab0U0S3VuV1k5
LzIvM0I0NUE0NzRGREJDRUNBOTRCQjhDQkMzNkUxMDdCQzk2RDdBOTE5NC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8zQjQ1QTQ3NEZEQkNFQ0E5NEJC
OENCQzM2RTEwN0JDOTZEN0E5MTk0LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9z
eWpZN2l0VjZRMWl2QnFaUFY5R0ZlRXlFaHBoZk5vSDFab0U0S3VuV1k5LzIvMzIz
MDMwMmUzNTMzMmUzMTM2MmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzIzNjMyMzMz
OTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQEyDUQMA0GCSqGSIb3DQEBCwUAA4IBAQCv7fhtJ8+RrL3E
17Fcpd7p54kV+J2V3kgnV6xLXd3YEVuD63v+/UoqQnHCOqkEbSp2JH6P2yi4WgeL
jDZpZzOiJ6SNCfRPrk28TzJycWPJxjSRc0E7OvXWni/GrTkWAJ2R2dOG/lKztHNn
CIXPbb0ZB7EiWkZiTqNksjN8IF0I3lQksxLipaaV8TVDGT+JAedJ08BwA8wiF5dO
f1TiiZW90lJua8fFx2wl7apb66VYvSC1LGKZRACR+k391l6iLpNKQ966epk4G/5w
22VHOIUTAPgv3qRiPE9bVc1RDaYDMTTdbz+o+H/MkbYsyl0ntkz+9J1GgefkZ5PE
2uuJ8fZ3
-----END CERTIFICATE-----
Generated at Sat Apr 26 06:16:29 2025 by rpki-client on console.sobornost.net