Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/3138312e3233332e3137362e302f32332d3234203d3e20323731353030.roa
File:                     3138312e3233332e3137362e302f32332d3234203d3e20323731353030.roa (raw, json)
Hash identifier:          QehcrbUqW+25+aE3u12HS8CpPA1nvgIYGJIiidbJdOE=
Subject key identifier:   1F:A9:34:EC:28:9E:E7:94:01:DD:50:CA:CB:2B:FA:4A:A2:29:C2:D1
Certificate issuer:       /CN=249982A414DC7818B3DD0BE08F54211F76DC2061
Certificate serial:       7E018F1248755A8A8AEB3E759169FA691CEAEDC5
Authority key identifier: 24:99:82:A4:14:DC:78:18:B3:DD:0B:E0:8F:54:21:1F:76:DC:20:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/249982A414DC7818B3DD0BE08F54211F76DC2061.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/3138312e3233332e3137362e302f32332d3234203d3e20323731353030.roa
Signing time:             Sat 12 Jul 2025 03:17:41 +0000
ROA not before:           Sat 12 Jul 2025 03:12:41 +0000
ROA not after:            Sat 11 Jul 2026 03:17:41 +0000
asID:                     271500
IP address blocks:        181.233.176.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/249982A414DC7818B3DD0BE08F54211F76DC2061.crl
                          rsync://rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/249982A414DC7818B3DD0BE08F54211F76DC2061.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/249982A414DC7818B3DD0BE08F54211F76DC2061.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 21:19:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:01:8f:12:48:75:5a:8a:8a:eb:3e:75:91:69:fa:69:1c:ea:ed:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249982A414DC7818B3DD0BE08F54211F76DC2061
        Validity
            Not Before: Jul 12 03:12:41 2025 GMT
            Not After : Jul 11 03:17:41 2026 GMT
        Subject: CN=1FA934EC289EE79401DD50CACB2BFA4AA229C2D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:31:91:42:2f:89:e0:93:08:00:6e:21:08:24:
                    f3:e1:76:86:7e:69:80:4f:14:f0:40:28:e7:37:e8:
                    60:41:d6:ad:e9:46:6f:c2:0d:64:42:12:41:f3:cc:
                    50:d0:f9:48:4a:ba:71:b0:8d:b4:14:b1:30:8f:1d:
                    37:74:b0:65:94:03:b1:92:e3:71:65:e6:e0:e5:99:
                    fc:1f:01:f9:f8:dc:8c:5e:88:bd:76:5e:e4:7a:c2:
                    1a:33:d0:66:7c:eb:fe:6a:f6:bc:c2:d0:ec:42:a3:
                    09:d7:3c:3e:8b:e5:37:d1:ca:c5:85:2a:68:dc:b9:
                    21:88:a0:fc:ac:73:25:64:fb:1d:bb:5d:05:64:31:
                    81:e5:9e:41:b5:db:25:52:17:c6:46:fa:45:62:04:
                    5f:ea:1b:02:3f:57:e8:ea:ee:b2:36:5b:31:fe:34:
                    b6:29:54:c4:84:11:86:e8:af:92:c1:79:66:45:5f:
                    63:33:f8:d1:2e:3b:34:f5:84:80:56:22:de:f4:5f:
                    e3:ab:54:63:8a:fa:ac:00:36:f2:d8:13:f6:49:d9:
                    42:8e:ff:a8:e0:c9:3f:a7:7f:91:67:68:6d:7d:4d:
                    8c:4f:20:9d:84:43:56:c9:77:f2:8d:86:95:ba:70:
                    9f:e5:7a:47:de:59:db:da:71:41:4f:86:4b:e0:c6:
                    19:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:A9:34:EC:28:9E:E7:94:01:DD:50:CA:CB:2B:FA:4A:A2:29:C2:D1
            X509v3 Authority Key Identifier:
                keyid:24:99:82:A4:14:DC:78:18:B3:DD:0B:E0:8F:54:21:1F:76:DC:20:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/249982A414DC7818B3DD0BE08F54211F76DC2061.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/249982A414DC7818B3DD0BE08F54211F76DC2061.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/3138312e3233332e3137362e302f32332d3234203d3e20323731353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:31:22:64:50:f7:9e:79:88:d8:72:fe:ff:04:ed:fb:65:18:
         48:3a:af:4a:78:f0:3e:4b:70:1b:f1:4f:54:90:6e:5e:f9:3b:
         31:ea:1c:0a:6e:ec:99:08:c6:61:63:7a:d6:8c:69:7b:fe:79:
         03:b4:2b:47:23:1f:cb:e9:8a:51:7c:7b:d5:fe:e5:36:c2:6c:
         3f:9f:66:3f:48:e2:01:4d:ca:e0:61:e9:15:bb:01:42:52:2d:
         17:59:62:ae:b6:4e:ac:eb:0e:e1:69:4d:c0:8c:d0:ac:79:ce:
         92:cc:6a:f7:46:c0:e9:a2:1d:5f:0d:99:e9:b1:5e:7a:3b:90:
         3b:47:15:ca:72:98:a3:7c:b8:a4:9c:94:e0:9d:e3:ec:cd:4b:
         9b:82:4f:6a:29:87:b1:9c:3f:ea:6b:54:84:f5:cd:81:b6:2c:
         cd:39:b9:5f:ce:c7:7d:1f:d4:07:71:f0:d9:8c:9c:a1:01:c5:
         9b:eb:e4:4e:64:39:d6:1c:7a:8d:78:f2:06:d1:ec:f9:7a:1d:
         af:35:f0:19:dd:41:12:f7:63:bb:0f:43:31:10:6c:d7:b6:28:
         58:d3:c4:cf:1d:bf:2a:6d:08:d3:55:97:7f:34:b8:dc:c0:cf:
         a2:fb:f3:4c:05:d9:43:1c:89:e4:6c:f4:d4:d9:21:9f:2d:b8:
         82:2a:eb:2b
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUfgGPEkh1WoqK6z51kWn6aRzq7cUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjQ5OTgyQTQxNERDNzgxOEIzREQwQkUwOEY1NDIxMUY3
NkRDMjA2MTAeFw0yNTA3MTIwMzEyNDFaFw0yNjA3MTEwMzE3NDFaMDMxMTAvBgNV
BAMTKDFGQTkzNEVDMjg5RUU3OTQwMURENTBDQUNCMkJGQTRBQTIyOUMyRDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXMZFCL4ngkwgAbiEIJPPhdoZ+
aYBPFPBAKOc36GBB1q3pRm/CDWRCEkHzzFDQ+UhKunGwjbQUsTCPHTd0sGWUA7GS
43Fl5uDlmfwfAfn43IxeiL12XuR6whoz0GZ86/5q9rzC0OxCownXPD6L5TfRysWF
KmjcuSGIoPyscyVk+x27XQVkMYHlnkG12yVSF8ZG+kViBF/qGwI/V+jq7rI2WzH+
NLYpVMSEEYbor5LBeWZFX2Mz+NEuOzT1hIBWIt70X+OrVGOK+qwANvLYE/ZJ2UKO
/6jgyT+nf5FnaG19TYxPIJ2EQ1bJd/KNhpW6cJ/lekfeWdvacUFPhkvgxhkbAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUH6k07Cie55QB3VDKyyv6SqIpwtEwHwYDVR0j
BBgwFoAUJJmCpBTceBiz3Qvgj1QhH3bcIGEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHRBOGt5Mm5oOHB0YXNyVW5rcGlNQUF6MUs2ZHd5TTJmNno3czZXeHdK
TDYvMC8yNDk5ODJBNDE0REM3ODE4QjNERDBCRTA4RjU0MjExRjc2REMyMDYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI0OTk4MkE0MTREQzc4MThC
M0REMEJFMDhGNTQyMTFGNzZEQzIwNjEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0R0QThreTJuaDhwdGFzclVua3BpTUFBejFLNmR3eU0yZjZ6N3M2V3h3Skw2LzAv
MzEzODMxMmUzMjMzMzMyZTMxMzczNjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMy
MzczMTM1MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAbXpsDANBgkqhkiG9w0BAQsFAAOCAQEAUTEi
ZFD3nnmI2HL+/wTt+2UYSDqvSnjwPktwG/FPVJBuXvk7MeocCm7smQjGYWN61oxp
e/55A7QrRyMfy+mKUXx71f7lNsJsP59mP0jiAU3K4GHpFbsBQlItF1lirrZOrOsO
4WlNwIzQrHnOksxq90bA6aIdXw2Z6bFeejuQO0cVynKYo3y4pJyU4J3j7M1Lm4JP
aimHsZw/6mtUhPXNgbYszTm5X87HfR/UB3Hw2YycoQHFm+vkTmQ51hx6jXjyBtHs
+XodrzXwGd1BEvdjuw9DMRBs17YoWNPEzx2/Km0I01WXfzS43MDPovvzTAXZQxyJ
5Gz01Nkhny24girrKw==
-----END CERTIFICATE-----
Generated at Sat Jul 26 06:55:51 2025 by rpki-client