Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/3139322e31322e3131322e302f32322d3234203d3e203631393432.roa
File:                     3139322e31322e3131322e302f32322d3234203d3e203631393432.roa (raw, json)
Hash identifier:          IAKJb6895LglzeIFJuFhf6p0ZD1onjgQpM2wwWDC/t0=
Subject key identifier:   23:73:49:D4:5B:72:87:E9:A5:84:11:32:60:45:D5:D3:CC:A8:59:88
Certificate issuer:       /CN=0EC8EAC7F1F5A216824B37118697748825F314D9
Certificate serial:       78EA7CA05ABEEDA23C591D297F268ED8A91729F1
Authority key identifier: 0E:C8:EA:C7:F1:F5:A2:16:82:4B:37:11:86:97:74:88:25:F3:14:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EC8EAC7F1F5A216824B37118697748825F314D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/3139322e31322e3131322e302f32322d3234203d3e203631393432.roa
Signing time:             Mon 24 Mar 2025 15:02:32 +0000
ROA not before:           Mon 24 Mar 2025 14:57:32 +0000
ROA not after:            Mon 23 Mar 2026 15:02:32 +0000
asID:                     61942
IP address blocks:        192.12.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/0EC8EAC7F1F5A216824B37118697748825F314D9.crl
                          rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/0EC8EAC7F1F5A216824B37118697748825F314D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EC8EAC7F1F5A216824B37118697748825F314D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 08:08:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:ea:7c:a0:5a:be:ed:a2:3c:59:1d:29:7f:26:8e:d8:a9:17:29:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0EC8EAC7F1F5A216824B37118697748825F314D9
        Validity
            Not Before: Mar 24 14:57:32 2025 GMT
            Not After : Mar 23 15:02:32 2026 GMT
        Subject: CN=237349D45B7287E9A58411326045D5D3CCA85988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:cc:e8:08:e6:40:d5:56:13:d1:62:12:0d:e7:
                    33:dd:ac:4f:e2:a7:63:6c:b1:56:f1:64:1d:f8:f2:
                    94:9c:06:fc:ae:3f:78:a7:3a:ed:7a:75:3b:9c:44:
                    fc:24:4a:71:87:6b:17:30:21:06:43:5c:28:15:bc:
                    3c:12:b5:79:a8:5e:fd:cd:89:0f:b4:67:62:5d:71:
                    ca:c7:94:52:87:95:f8:0d:98:7b:74:32:49:b8:9a:
                    41:c3:15:86:82:d9:79:5c:d8:fe:4a:17:00:f8:ac:
                    3d:60:d9:f7:66:49:74:e7:e9:18:ba:40:d2:5d:a4:
                    a2:68:a2:46:0f:02:45:0a:14:c2:5a:12:92:13:b2:
                    3b:63:aa:a3:d8:30:bb:6f:cc:3f:78:ea:fc:bd:8c:
                    a9:78:52:36:ff:d0:4d:1f:01:0c:e8:89:e9:c9:f8:
                    56:af:f1:a5:7e:bc:f5:93:a6:df:8f:9d:9b:89:20:
                    63:ea:6a:5c:1b:63:dc:56:32:5f:dd:01:83:ec:ce:
                    99:83:55:59:8e:71:6d:f4:0a:ea:3e:4e:30:5a:07:
                    43:ed:fe:cd:5b:6a:a3:a7:69:8b:9c:f9:cd:74:dc:
                    5e:79:a6:d8:bc:fc:79:37:73:5b:21:78:af:d0:18:
                    13:e0:91:40:f0:01:2d:0d:62:fa:f4:3a:20:9e:df:
                    e6:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:73:49:D4:5B:72:87:E9:A5:84:11:32:60:45:D5:D3:CC:A8:59:88
            X509v3 Authority Key Identifier:
                keyid:0E:C8:EA:C7:F1:F5:A2:16:82:4B:37:11:86:97:74:88:25:F3:14:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/0EC8EAC7F1F5A216824B37118697748825F314D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EC8EAC7F1F5A216824B37118697748825F314D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/3139322e31322e3131322e302f32322d3234203d3e203631393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:84:b4:c2:24:f3:50:96:ad:17:4b:71:64:a7:50:50:ac:fd:
         93:f9:c5:5b:4e:a8:c5:1d:44:0e:fe:b5:88:0b:9c:ab:1d:2d:
         eb:2b:45:56:b7:74:d1:3e:1d:86:cf:f6:e9:d2:e0:ad:0f:8c:
         d6:5c:45:fa:cb:b1:8b:45:16:1a:a6:b4:f8:b3:14:d2:d5:fb:
         f3:12:8d:6e:c6:65:6c:7c:5a:79:54:ea:02:03:de:48:d1:da:
         c3:96:4b:a6:12:ae:fb:92:3a:67:37:b4:c2:a8:33:bd:86:35:
         d0:b4:6e:d2:03:47:dd:f5:08:17:6c:a1:6d:d6:75:d9:18:64:
         05:f7:ec:df:fe:2a:d9:f2:77:92:91:4f:95:1b:b5:4d:6a:80:
         ff:2d:49:26:3a:62:f2:1e:47:09:f0:c0:88:70:03:6b:46:e2:
         98:00:5e:0c:64:6d:2e:20:a8:11:24:70:40:ab:5f:2c:69:b6:
         38:67:04:5c:d1:9a:f1:8b:ce:ae:36:5f:c3:1e:29:fe:d6:48:
         01:2e:a4:38:df:12:09:e2:6c:fe:36:94:45:b5:93:81:de:de:
         7a:b4:62:7f:18:fb:e1:1f:c4:0b:d1:b9:e0:83:32:fe:b2:c3:
         e8:2d:cc:78:74:ca:cd:ee:23:65:84:1f:29:fd:da:6d:54:27:
         20:b8:cb:96
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUeOp8oFq+7aI8WR0pfyaO2KkXKfEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEVDOEVBQzdGMUY1QTIxNjgyNEIzNzExODY5Nzc0ODgy
NUYzMTREOTAeFw0yNTAzMjQxNDU3MzJaFw0yNjAzMjMxNTAyMzJaMDMxMTAvBgNV
BAMTKDIzNzM0OUQ0NUI3Mjg3RTlBNTg0MTEzMjYwNDVENUQzQ0NBODU5ODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDszOgI5kDVVhPRYhIN5zPdrE/i
p2NssVbxZB348pScBvyuP3inOu16dTucRPwkSnGHaxcwIQZDXCgVvDwStXmoXv3N
iQ+0Z2JdccrHlFKHlfgNmHt0Mkm4mkHDFYaC2Xlc2P5KFwD4rD1g2fdmSXTn6Ri6
QNJdpKJookYPAkUKFMJaEpITsjtjqqPYMLtvzD946vy9jKl4Ujb/0E0fAQzoienJ
+Fav8aV+vPWTpt+PnZuJIGPqalwbY9xWMl/dAYPszpmDVVmOcW30Cuo+TjBaB0Pt
/s1baqOnaYuc+c103F55pti8/Hk3c1sheK/QGBPgkUDwAS0NYvr0OiCe3+YJAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUI3NJ1Ftyh+mlhBEyYEXV08yoWYgwHwYDVR0j
BBgwFoAUDsjqx/H1ohaCSzcRhpd0iCXzFNkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0hqNmsyWWVDdnVMSHhYOVl5QzZBZms1ZGdIaXdQNmZ5S1l3akZ4TEF0
Z04vMC8wRUM4RUFDN0YxRjVBMjE2ODI0QjM3MTE4Njk3NzQ4ODI1RjMxNEQ5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBFQzhFQUM3RjFGNUEyMTY4
MjRCMzcxMTg2OTc3NDg4MjVGMzE0RDkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNIajZrMlllQ3Z1TEh4WDlZeUM2QWZrNWRnSGl3UDZmeUtZd2pGeExBdGdOLzAv
MzEzOTMyMmUzMTMyMmUzMTMxMzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNjMx
MzkzNDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCwAxwMA0GCSqGSIb3DQEBCwUAA4IBAQAuhLTCJPNQ
lq0XS3Fkp1BQrP2T+cVbTqjFHUQO/rWIC5yrHS3rK0VWt3TRPh2Gz/bp0uCtD4zW
XEX6y7GLRRYaprT4sxTS1fvzEo1uxmVsfFp5VOoCA95I0drDlkumEq77kjpnN7TC
qDO9hjXQtG7SA0fd9QgXbKFt1nXZGGQF9+zf/irZ8neSkU+VG7VNaoD/LUkmOmLy
HkcJ8MCIcANrRuKYAF4MZG0uIKgRJHBAq18sabY4ZwRc0Zrxi86uNl/DHin+1kgB
LqQ43xIJ4mz+NpRFtZOB3t56tGJ/GPvhH8QL0bnggzL+ssPoLcx4dMrN7iNlhB8p
/dptVCcguMuW
-----END CERTIFICATE-----
Generated at Fri Apr 18 13:15:19 2025 by rpki-client