Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/3137302e38322e31372e302f32342d3234203d3e20323636343337.roa
File:                     3137302e38322e31372e302f32342d3234203d3e20323636343337.roa (raw, json)
Hash identifier:          rWh4C4Z/HgSHIdERN8R6HIFoXG+VNa0Fymi5lzWy5m4=
Subject key identifier:   A7:E0:C0:D8:DA:59:5A:02:58:75:C9:CC:5B:4C:59:6C:08:EB:C4:2B
Certificate issuer:       /CN=1CB2152A8F44BC0B30650B200D8A3BA673D374FD
Certificate serial:       459DC3C514B44ABA4F1114086416840F59B9180A
Authority key identifier: 1C:B2:15:2A:8F:44:BC:0B:30:65:0B:20:0D:8A:3B:A6:73:D3:74:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/3137302e38322e31372e302f32342d3234203d3e20323636343337.roa
Signing time:             Thu 06 Mar 2025 17:28:16 +0000
ROA not before:           Thu 06 Mar 2025 17:23:16 +0000
ROA not after:            Thu 05 Mar 2026 17:28:16 +0000
asID:                     266437
IP address blocks:        170.82.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.crl
                          rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 23:25:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:9d:c3:c5:14:b4:4a:ba:4f:11:14:08:64:16:84:0f:59:b9:18:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CB2152A8F44BC0B30650B200D8A3BA673D374FD
        Validity
            Not Before: Mar  6 17:23:16 2025 GMT
            Not After : Mar  5 17:28:16 2026 GMT
        Subject: CN=A7E0C0D8DA595A025875C9CC5B4C596C08EBC42B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:5c:64:0a:7e:fc:4b:c1:d4:6f:5f:14:2c:f1:
                    55:13:73:15:d8:50:23:81:ec:27:cc:59:84:ac:56:
                    3b:be:ae:ba:db:dd:6b:50:5a:10:29:8c:fc:01:94:
                    74:02:c2:1c:74:3c:9d:d9:65:2c:6d:5f:d6:5e:87:
                    1e:f2:81:8e:98:eb:9a:18:e0:ff:c9:53:0b:2f:ac:
                    3b:14:24:27:dc:34:79:fa:41:8e:aa:77:3f:4a:74:
                    65:8e:2c:6b:58:3b:a7:e5:ad:dd:ea:41:ed:75:7e:
                    89:2e:7d:89:ad:01:26:c7:39:53:55:09:3e:ba:1d:
                    6e:cc:84:25:57:6c:4b:dd:8f:f3:26:76:39:ce:4a:
                    7e:7f:91:0d:97:20:fd:3d:ae:0a:54:49:f1:24:2e:
                    5e:7e:91:0a:e5:f7:08:80:c5:d4:a8:be:37:36:b3:
                    b6:46:a9:43:26:36:3f:72:82:10:7c:18:5a:37:8f:
                    02:85:a8:8f:83:03:7e:39:d0:01:28:5c:f2:58:ee:
                    0a:68:26:65:89:84:d4:0e:89:e3:4c:12:93:b3:ee:
                    d6:57:89:5e:2f:19:dd:6d:3b:63:34:5a:15:6f:59:
                    a3:37:22:07:fb:ba:4c:d7:08:89:13:82:fd:a5:fc:
                    e3:83:a4:c2:5f:ce:83:46:87:12:63:3f:9c:6c:7e:
                    4d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:E0:C0:D8:DA:59:5A:02:58:75:C9:CC:5B:4C:59:6C:08:EB:C4:2B
            X509v3 Authority Key Identifier:
                keyid:1C:B2:15:2A:8F:44:BC:0B:30:65:0B:20:0D:8A:3B:A6:73:D3:74:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/3137302e38322e31372e302f32342d3234203d3e20323636343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:98:e7:9f:f0:43:47:59:de:8d:a7:26:3c:d6:b6:ff:e0:bf:
         cc:c6:33:09:00:23:06:35:9e:65:7f:a4:f7:1e:5b:25:f5:a4:
         df:9e:b1:fb:f2:9b:45:cb:3f:90:dd:78:04:9c:d4:fc:be:18:
         af:cf:b2:46:63:44:6d:56:27:bd:61:73:23:d6:31:3a:10:35:
         ac:74:04:e3:09:f1:b0:02:00:f5:6a:59:a7:bb:75:92:1c:b6:
         63:8f:f2:47:b2:96:cb:db:24:ba:2b:ca:5e:84:9c:1f:8f:19:
         06:9e:82:6f:ab:38:1c:de:78:f1:43:e1:43:60:a6:56:a0:4b:
         c4:6c:c6:1a:2b:33:12:52:2f:28:a7:1e:50:39:1e:83:cf:b0:
         13:ac:6b:6c:fc:43:2b:d3:ea:33:8d:d4:65:96:d9:0f:18:7e:
         dc:4e:bc:a0:0d:ae:4c:84:be:5b:41:c4:f5:2b:fb:9d:40:8d:
         67:db:ab:7a:3b:96:9a:8c:b9:32:11:6f:43:29:82:8f:bb:25:
         39:72:8c:f1:35:a2:2c:48:0f:3b:8a:d2:9a:52:37:c9:99:b6:
         a0:c0:d6:b5:c8:3d:29:5f:d7:c0:7e:31:6d:86:70:d1:03:7d:
         b4:ee:a9:db:70:4a:d1:0e:ec:74:b3:40:84:8d:10:99:49:36:
         42:9b:bc:6e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIURZ3DxRS0SrpPERQIZBaED1m5GAowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUNCMjE1MkE4RjQ0QkMwQjMwNjUwQjIwMEQ4QTNCQTY3
M0QzNzRGRDAeFw0yNTAzMDYxNzIzMTZaFw0yNjAzMDUxNzI4MTZaMDMxMTAvBgNV
BAMTKEE3RTBDMEQ4REE1OTVBMDI1ODc1QzlDQzVCNEM1OTZDMDhFQkM0MkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqXGQKfvxLwdRvXxQs8VUTcxXY
UCOB7CfMWYSsVju+rrrb3WtQWhApjPwBlHQCwhx0PJ3ZZSxtX9Zehx7ygY6Y65oY
4P/JUwsvrDsUJCfcNHn6QY6qdz9KdGWOLGtYO6flrd3qQe11fokufYmtASbHOVNV
CT66HW7MhCVXbEvdj/MmdjnOSn5/kQ2XIP09rgpUSfEkLl5+kQrl9wiAxdSovjc2
s7ZGqUMmNj9yghB8GFo3jwKFqI+DA3450AEoXPJY7gpoJmWJhNQOieNMEpOz7tZX
iV4vGd1tO2M0WhVvWaM3Igf7ukzXCIkTgv2l/OODpMJfzoNGhxJjP5xsfk3HAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUp+DA2NpZWgJYdcnMW0xZbAjrxCswHwYDVR0j
BBgwFoAUHLIVKo9EvAswZQsgDYo7pnPTdP0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM01QcFZvS3FGTVNTMmU0WXVwc3QyN0RXMTgyQ3ZwckM0a2p3U3NaVThB
YVgvMS8xQ0IyMTUyQThGNDRCQzBCMzA2NTBCMjAwRDhBM0JBNjczRDM3NEZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFDQjIxNTJBOEY0NEJDMEIz
MDY1MEIyMDBEOEEzQkE2NzNEMzc0RkQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNNUHBWb0txRk1TUzJlNFl1cHN0MjdEVzE4MkN2cHJDNGtqd1NzWlU4QWFYLzEv
MzEzNzMwMmUzODMyMmUzMTM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM2
MzQzMzM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAqlIRMA0GCSqGSIb3DQEBCwUAA4IBAQChmOef8ENH
Wd6NpyY81rb/4L/MxjMJACMGNZ5lf6T3Hlsl9aTfnrH78ptFyz+Q3XgEnNT8vhiv
z7JGY0RtVie9YXMj1jE6EDWsdATjCfGwAgD1almnu3WSHLZjj/JHspbL2yS6K8pe
hJwfjxkGnoJvqzgc3njxQ+FDYKZWoEvEbMYaKzMSUi8opx5QOR6Dz7ATrGts/EMr
0+ozjdRlltkPGH7cTrygDa5MhL5bQcT1K/udQI1n26t6O5aajLkyEW9DKYKPuyU5
cozxNaIsSA87itKaUjfJmbagwNa1yD0pX9fAfjFthnDRA3207qnbcErRDux0s0CE
jRCZSTZCm7xu
-----END CERTIFICATE-----
Generated at Tue Apr 22 10:28:13 2025 by rpki-client