Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/3137302e3235342e3133382e302f32332d3233203d3e203631353837.roa
File:                     3137302e3235342e3133382e302f32332d3233203d3e203631353837.roa (raw, json)
Hash identifier:          GA1eW2CwrqA1c5foy5lJK+/vqzXAnytpyRLm6sb/UAI=
Subject key identifier:   DA:7B:88:09:6D:53:8A:91:D0:DC:D7:9E:E0:DA:F4:F9:80:8D:E0:A3
Certificate issuer:       /CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
Certificate serial:       5C5E596D7E1EB3A4C7134A1DA59CF135051DB897
Authority key identifier: 1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/3137302e3235342e3133382e302f32332d3233203d3e203631353837.roa
Signing time:             Tue 31 Dec 2024 18:11:59 +0000
ROA not before:           Tue 31 Dec 2024 18:06:59 +0000
ROA not after:            Tue 30 Dec 2025 18:11:59 +0000
asID:                     61587
IP address blocks:        170.254.138.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl
                          rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 06:04:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:5e:59:6d:7e:1e:b3:a4:c7:13:4a:1d:a5:9c:f1:35:05:1d:b8:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
        Validity
            Not Before: Dec 31 18:06:59 2024 GMT
            Not After : Dec 30 18:11:59 2025 GMT
        Subject: CN=DA7B88096D538A91D0DCD79EE0DAF4F9808DE0A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:97:4b:07:8d:41:df:77:cc:7e:30:6f:3f:33:
                    bd:36:8b:ad:e9:c6:4c:d2:35:ae:f7:0f:a2:9f:43:
                    44:6c:99:a7:62:19:1d:06:c3:73:72:94:75:3a:c4:
                    fe:4f:be:11:2e:ec:0b:b0:27:01:8a:f3:11:66:b3:
                    c7:04:a7:f0:65:19:fa:b0:72:b1:fd:f8:9b:3c:10:
                    24:48:09:db:32:56:31:0d:19:63:c4:5b:68:31:c5:
                    92:5f:bf:62:09:48:ce:63:87:04:d1:e0:e7:af:57:
                    d4:6a:eb:f0:f6:ce:16:83:77:ae:c3:bc:1f:ef:b0:
                    0c:61:b3:26:0a:15:35:06:cd:5d:af:c1:30:6e:a9:
                    a8:86:4c:7f:13:ee:a5:38:49:e1:20:05:75:de:88:
                    0e:b2:f6:b8:bb:0a:4e:99:2f:00:ec:30:0a:07:5c:
                    a4:cf:89:62:90:91:35:75:c4:ba:6a:26:48:90:d2:
                    92:4c:47:5d:f1:b9:b4:a8:a6:b7:a8:a8:3d:1a:ca:
                    a5:45:6e:8a:5d:e7:94:4e:9a:a1:2d:44:2e:06:49:
                    fa:5b:86:84:c0:a5:58:4f:43:58:df:88:a8:76:6c:
                    c9:b4:7c:4c:2e:a0:d4:2f:5e:61:f6:6e:8b:d9:8d:
                    3a:de:82:97:76:33:b9:6c:60:82:d6:d3:51:f0:4e:
                    07:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:7B:88:09:6D:53:8A:91:D0:DC:D7:9E:E0:DA:F4:F9:80:8D:E0:A3
            X509v3 Authority Key Identifier:
                keyid:1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/3137302e3235342e3133382e302f32332d3233203d3e203631353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:ec:65:cb:d6:f8:e6:68:ef:bb:97:f1:23:6e:93:f7:b7:3a:
         65:d4:fa:6e:36:df:63:0d:3b:94:87:29:66:e7:a8:00:9c:58:
         d7:c3:9c:da:1e:ba:46:44:cf:64:da:da:de:d9:63:36:32:98:
         42:1d:ec:02:a6:8a:38:a8:fd:c9:80:cf:63:5b:00:45:19:8f:
         2b:7e:8c:3d:ec:39:c3:ee:7a:a7:04:63:0a:be:20:3b:5f:a2:
         30:7c:0c:39:14:d8:b8:95:46:97:12:97:60:e1:b2:31:68:2a:
         d2:92:0d:50:1c:1d:16:e6:16:34:71:22:ba:ac:86:d9:ab:49:
         f0:a6:59:46:47:04:4a:a8:b8:07:07:f5:f4:c6:60:f8:5a:f9:
         71:69:03:41:24:9d:9b:b2:6e:92:f7:0c:be:da:a5:a1:ee:ae:
         27:5e:67:b5:39:b5:c5:ec:4e:7b:6a:a3:62:87:06:e2:a1:de:
         c0:d9:e5:b8:8c:8f:8f:a7:56:56:71:85:45:8b:3b:df:7e:25:
         bd:ee:69:46:f0:05:09:88:4b:53:98:2c:03:14:26:79:f0:73:
         4c:e0:36:78:7e:cd:76:c5:b4:fe:a6:0d:f2:fd:7f:f3:62:36:
         61:8a:fc:6b:8e:42:72:86:bb:67:89:df:7e:7f:1e:71:ff:e8:
         4d:fd:51:99
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUXF5ZbX4es6THE0odpZzxNQUduJcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUYxMUU1NThGQzc1RDlEQTE1MDM5RUE1OEQ1QTE2NkE2
RjVFRjEwQjAeFw0yNDEyMzExODA2NTlaFw0yNTEyMzAxODExNTlaMDMxMTAvBgNV
BAMTKERBN0I4ODA5NkQ1MzhBOTFEMERDRDc5RUUwREFGNEY5ODA4REUwQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSl0sHjUHfd8x+MG8/M702i63p
xkzSNa73D6KfQ0RsmadiGR0Gw3NylHU6xP5PvhEu7AuwJwGK8xFms8cEp/BlGfqw
crH9+Js8ECRICdsyVjENGWPEW2gxxZJfv2IJSM5jhwTR4OevV9Rq6/D2zhaDd67D
vB/vsAxhsyYKFTUGzV2vwTBuqaiGTH8T7qU4SeEgBXXeiA6y9ri7Ck6ZLwDsMAoH
XKTPiWKQkTV1xLpqJkiQ0pJMR13xubSopreoqD0ayqVFbopd55ROmqEtRC4GSfpb
hoTApVhPQ1jfiKh2bMm0fEwuoNQvXmH2bovZjTregpd2M7lsYILW01HwTgfDAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU2nuICW1TipHQ3Nee4Nr0+YCN4KMwHwYDVR0j
BBgwFoAUHxHlWPx12doVA56ljVoWam9e8QswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjVtYXpYcXl3NFVjcGN3a1BkUWJQMVdqeWt3UDdraGpYRmQ5MXd6eExY
ZTYvMC8xRjExRTU1OEZDNzVEOURBMTUwMzlFQTU4RDVBMTY2QTZGNUVGMTBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFGMTFFNTU4RkM3NUQ5REEx
NTAzOUVBNThENUExNjZBNkY1RUYxMEIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzI1bWF6WHF5dzRVY3Bjd2tQZFFiUDFXanlrd1A3a2hqWEZkOTF3enhMWGU2LzAv
MzEzNzMwMmUzMjM1MzQyZTMxMzMzODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM2
MzEzNTM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGq/oowDQYJKoZIhvcNAQELBQADggEBAH3sZcvW
+OZo77uX8SNuk/e3OmXU+m4232MNO5SHKWbnqACcWNfDnNoeukZEz2Ta2t7ZYzYy
mEId7AKmijio/cmAz2NbAEUZjyt+jD3sOcPueqcEYwq+IDtfojB8DDkU2LiVRpcS
l2DhsjFoKtKSDVAcHRbmFjRxIrqshtmrSfCmWUZHBEqouAcH9fTGYPha+XFpA0Ek
nZuybpL3DL7apaHurideZ7U5tcXsTntqo2KHBuKh3sDZ5biMj4+nVlZxhUWLO99+
Jb3uaUbwBQmIS1OYLAMUJnnwc0zgNnh+zXbFtP6mDfL9f/NiNmGK/GuOQnKGu2eJ
335/HnH/6E39UZk=
-----END CERTIFICATE-----
Generated at Fri Apr 18 13:25:57 2025 by rpki-client