Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/3137302e3234352e3233372e302f32342d3234203d3e20323636303230.roa
File:                     3137302e3234352e3233372e302f32342d3234203d3e20323636303230.roa (raw, json)
Hash identifier:          rJhXVqLpsYkngwan8Z+HVH8q5X4aOVj3SVdMUso2xGQ=
Subject key identifier:   6B:20:76:7A:05:CA:3E:55:B2:26:D0:0C:EA:2D:2B:F3:D4:8E:4B:32
Certificate issuer:       /CN=2BB312B3051F7EC4E3021CE21956D0A2A50F76EF
Certificate serial:       603F3F32861ADD4B2BE24160418DECF8752F1516
Authority key identifier: 2B:B3:12:B3:05:1F:7E:C4:E3:02:1C:E2:19:56:D0:A2:A5:0F:76:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/3137302e3234352e3233372e302f32342d3234203d3e20323636303230.roa
Signing time:             Wed 08 Jan 2025 02:08:14 +0000
ROA not before:           Wed 08 Jan 2025 02:03:14 +0000
ROA not after:            Wed 07 Jan 2026 02:08:14 +0000
asID:                     266020
IP address blocks:        170.245.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.crl
                          rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 00:36:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:3f:3f:32:86:1a:dd:4b:2b:e2:41:60:41:8d:ec:f8:75:2f:15:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BB312B3051F7EC4E3021CE21956D0A2A50F76EF
        Validity
            Not Before: Jan  8 02:03:14 2025 GMT
            Not After : Jan  7 02:08:14 2026 GMT
        Subject: CN=6B20767A05CA3E55B226D00CEA2D2BF3D48E4B32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:92:bc:ce:c0:4c:95:32:5f:21:fb:32:a3:d3:
                    d1:8a:56:97:09:34:13:ec:2a:1f:28:c9:c2:fb:f4:
                    b0:b9:4f:d5:3e:92:25:14:4a:3b:c3:4a:2d:55:39:
                    a3:a6:1f:ef:32:6a:b4:e4:c9:ee:0b:a4:76:5c:a8:
                    ca:6d:f9:8b:e5:e4:9b:f0:dc:55:2c:6f:71:ed:db:
                    6b:d9:d0:34:2e:60:70:6a:3f:0b:10:b7:75:72:27:
                    3c:94:1d:9a:4b:08:28:96:a0:a1:86:f1:71:0b:a2:
                    af:f4:eb:dc:83:1a:be:92:6d:3d:1e:aa:a5:1b:9f:
                    6c:0f:65:ab:12:be:29:0d:9f:1f:3a:ee:28:87:7e:
                    ea:cf:f5:8c:b6:5f:39:d2:8d:03:3b:75:07:68:5c:
                    25:0b:10:a1:b3:5e:1f:87:b3:df:fb:b0:53:6b:1f:
                    11:d6:58:d0:a6:8f:a2:8d:fd:25:25:df:eb:3f:27:
                    99:b5:86:67:6c:8d:49:af:b5:09:ce:a4:ed:52:43:
                    00:f8:49:60:ba:b9:9a:dd:22:b1:35:81:6e:8d:21:
                    c8:55:2e:fc:02:5e:ac:08:a3:64:ec:25:dd:a1:ed:
                    b2:3a:8b:9d:5e:35:cb:13:9e:ab:1d:45:64:ca:c9:
                    04:a1:5d:c4:bb:5d:ee:06:a6:01:85:84:83:a6:b3:
                    26:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:20:76:7A:05:CA:3E:55:B2:26:D0:0C:EA:2D:2B:F3:D4:8E:4B:32
            X509v3 Authority Key Identifier:
                keyid:2B:B3:12:B3:05:1F:7E:C4:E3:02:1C:E2:19:56:D0:A2:A5:0F:76:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/3137302e3234352e3233372e302f32342d3234203d3e20323636303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:d0:ce:3d:07:71:f6:11:5e:20:ff:1e:60:bd:ec:da:f4:a7:
         ad:67:34:9f:e4:80:cc:29:77:6b:3f:77:25:10:de:ad:49:8d:
         44:d1:b4:6f:23:04:a8:49:a3:85:74:0d:d4:f6:80:73:9a:92:
         f0:b8:74:9f:e8:0a:e3:ea:3d:57:60:c5:87:de:0d:05:cf:dd:
         04:17:1b:c7:81:55:b8:c1:36:c4:e9:45:74:83:86:06:23:cb:
         88:74:dc:3b:f9:16:f7:13:0a:b1:69:bb:0e:4d:75:5b:02:d6:
         7d:ee:57:92:4e:bb:b9:ad:e9:04:53:df:cc:1b:5c:e0:bf:f5:
         67:ef:c4:8e:1f:a2:63:d2:8a:03:73:2c:29:54:c9:a8:10:54:
         4e:fa:27:db:c2:7a:e2:c7:b4:46:c9:7a:52:38:e2:0f:d4:8c:
         3a:e6:c8:25:f1:56:55:ae:07:bd:5e:44:6c:1c:58:21:99:d7:
         bd:0c:9b:f6:03:bf:fe:db:52:05:2d:bc:01:6a:5a:5e:0c:2a:
         a5:cd:bc:71:b4:dd:26:84:77:49:48:4d:f5:9c:ee:fd:07:70:
         48:47:81:56:ad:44:97:a5:20:73:d7:78:ae:0e:76:21:b3:48:
         4f:53:b1:22:84:c9:53:e5:71:0e:c1:62:c8:05:6e:65:0d:71:
         25:f3:1d:51
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUYD8/MoYa3Usr4kFgQY3s+HUvFRYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkJCMzEyQjMwNTFGN0VDNEUzMDIxQ0UyMTk1NkQwQTJB
NTBGNzZFRjAeFw0yNTAxMDgwMjAzMTRaFw0yNjAxMDcwMjA4MTRaMDMxMTAvBgNV
BAMTKDZCMjA3NjdBMDVDQTNFNTVCMjI2RDAwQ0VBMkQyQkYzRDQ4RTRCMzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+krzOwEyVMl8h+zKj09GKVpcJ
NBPsKh8oycL79LC5T9U+kiUUSjvDSi1VOaOmH+8yarTkye4LpHZcqMpt+Yvl5Jvw
3FUsb3Ht22vZ0DQuYHBqPwsQt3VyJzyUHZpLCCiWoKGG8XELoq/069yDGr6SbT0e
qqUbn2wPZasSvikNnx867iiHfurP9Yy2XznSjQM7dQdoXCULEKGzXh+Hs9/7sFNr
HxHWWNCmj6KN/SUl3+s/J5m1hmdsjUmvtQnOpO1SQwD4SWC6uZrdIrE1gW6NIchV
LvwCXqwIo2TsJd2h7bI6i51eNcsTnqsdRWTKyQShXcS7Xe4GpgGFhIOmsyZdAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUayB2egXKPlWyJtAM6i0r89SOSzIwHwYDVR0j
BBgwFoAUK7MSswUffsTjAhziGVbQoqUPdu8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0FUeXFEdXBkcXA2Vzd3VUhkM3o0SFBIUWdyNlZTSGVoWllkdFRWckVB
RU4vMC8yQkIzMTJCMzA1MUY3RUM0RTMwMjFDRTIxOTU2RDBBMkE1MEY3NkVGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCQjMxMkIzMDUxRjdFQzRF
MzAyMUNFMjE5NTZEMEEyQTUwRjc2RUYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNBVHlxRHVwZHFwNlc3d1VIZDN6NEhQSFFncjZWU0hlaFpZZHRUVnJFQUVOLzAv
MzEzNzMwMmUzMjM0MzUyZTMyMzMzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNjMwMzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKr17TANBgkqhkiG9w0BAQsFAAOCAQEAe9DO
PQdx9hFeIP8eYL3s2vSnrWc0n+SAzCl3az93JRDerUmNRNG0byMEqEmjhXQN1PaA
c5qS8Lh0n+gK4+o9V2DFh94NBc/dBBcbx4FVuME2xOlFdIOGBiPLiHTcO/kW9xMK
sWm7Dk11WwLWfe5Xkk67ua3pBFPfzBtc4L/1Z+/Ejh+iY9KKA3MsKVTJqBBUTvon
28J64se0Rsl6UjjiD9SMOubIJfFWVa4HvV5EbBxYIZnXvQyb9gO//ttSBS28AWpa
Xgwqpc28cbTdJoR3SUhN9Zzu/QdwSEeBVq1El6Ugc9d4rg52IbNIT1OxIoTJU+Vx
DsFiyAVuZQ1xJfMdUQ==
-----END CERTIFICATE-----
Generated at Wed Apr 9 10:56:19 2025 by rpki-client