Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/3137302e3233392e3130392e302f32342d3234203d3e20323636333438.roa
File:                     3137302e3233392e3130392e302f32342d3234203d3e20323636333438.roa (raw, json)
Hash identifier:          +Dru7gEAJ4rlpJdA6sUkzVqfVLVvdfuEztV4yG3UwHo=
Subject key identifier:   30:77:5B:38:D8:05:C0:C5:1C:73:11:B3:62:7D:84:B9:B9:22:21:B2
Certificate issuer:       /CN=273782B997878A9415F132214E8D09CFA971572F
Certificate serial:       24E7C95611D1AE38E50B6253EB477A0EC024F6DD
Authority key identifier: 27:37:82:B9:97:87:8A:94:15:F1:32:21:4E:8D:09:CF:A9:71:57:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/273782B997878A9415F132214E8D09CFA971572F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/3137302e3233392e3130392e302f32342d3234203d3e20323636333438.roa
Signing time:             Wed 05 Mar 2025 19:00:07 +0000
ROA not before:           Wed 05 Mar 2025 18:55:07 +0000
ROA not after:            Wed 04 Mar 2026 19:00:07 +0000
asID:                     266348
IP address blocks:        170.239.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/273782B997878A9415F132214E8D09CFA971572F.crl
                          rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/273782B997878A9415F132214E8D09CFA971572F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/273782B997878A9415F132214E8D09CFA971572F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 19:54:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:e7:c9:56:11:d1:ae:38:e5:0b:62:53:eb:47:7a:0e:c0:24:f6:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=273782B997878A9415F132214E8D09CFA971572F
        Validity
            Not Before: Mar  5 18:55:07 2025 GMT
            Not After : Mar  4 19:00:07 2026 GMT
        Subject: CN=30775B38D805C0C51C7311B3627D84B9B92221B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:29:8c:96:20:37:9e:6a:ff:99:11:b8:c7:d5:
                    bd:d3:f5:6c:90:55:d9:0c:0b:fd:8e:aa:60:42:78:
                    fb:99:75:c4:60:29:bb:de:57:15:69:87:35:e6:99:
                    19:d2:69:79:bd:92:df:5a:dc:1f:fe:cc:9d:59:79:
                    f6:ba:d3:c4:14:48:5d:03:e7:f0:59:6e:ce:7a:e2:
                    73:2d:39:aa:3b:06:e1:23:10:27:57:16:71:61:c3:
                    9e:a5:4b:fb:28:11:87:09:ac:21:a8:a3:80:d8:76:
                    a1:ed:45:01:05:ec:11:90:9e:33:74:36:21:3e:2e:
                    6a:f7:65:3b:5b:ea:e2:50:fb:38:cc:75:b8:21:0a:
                    19:2a:4d:ea:1b:f5:69:c8:00:48:d7:71:a7:f5:96:
                    af:48:ed:6c:9f:b3:d4:0e:50:04:6f:8a:a9:fb:57:
                    56:12:42:dc:8d:8c:1b:37:49:d8:4d:8f:37:56:6c:
                    ca:f1:3b:2b:b2:71:2a:be:19:e4:ff:67:6f:94:48:
                    bc:7d:dd:bd:5f:df:bc:1a:6a:15:29:59:6b:bf:6f:
                    70:24:ed:a7:7a:11:47:d1:78:fa:b4:ec:b1:70:8c:
                    b4:e2:e6:b0:f7:02:bb:68:ec:ed:33:ac:e9:4c:d7:
                    f6:d8:5f:3e:6d:88:0c:48:6c:d9:18:d5:05:81:da:
                    7d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:77:5B:38:D8:05:C0:C5:1C:73:11:B3:62:7D:84:B9:B9:22:21:B2
            X509v3 Authority Key Identifier:
                keyid:27:37:82:B9:97:87:8A:94:15:F1:32:21:4E:8D:09:CF:A9:71:57:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/273782B997878A9415F132214E8D09CFA971572F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/273782B997878A9415F132214E8D09CFA971572F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/3137302e3233392e3130392e302f32342d3234203d3e20323636333438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:e4:cd:cf:e1:f9:71:34:4b:f7:e9:91:ec:13:1d:c2:ee:9d:
         da:86:f8:83:dd:b4:bd:f4:13:7a:70:4e:c8:6f:df:81:44:16:
         36:da:96:d9:d0:b4:7a:48:75:f5:09:e2:f4:90:99:cb:33:1d:
         95:e8:ba:53:b5:47:f3:d0:68:3b:8f:0a:2e:33:93:a8:b4:4b:
         a0:c2:21:6b:e4:68:ea:d1:57:b9:55:ba:d1:aa:63:41:6b:6a:
         a4:79:2c:a9:55:de:a6:89:9c:32:c6:e7:9b:e4:16:6c:7d:71:
         e6:7e:01:f0:0a:78:48:ef:58:48:02:67:13:c3:97:3d:42:2d:
         70:c4:70:5e:51:30:12:2e:4b:c3:27:5c:b7:30:a8:22:c6:f8:
         85:89:03:08:86:37:8d:06:42:da:1b:04:62:48:06:14:5c:20:
         fa:bb:6b:bb:ab:36:78:1c:ea:6c:b3:b8:63:d6:6e:9d:27:74:
         0a:d1:9a:12:e3:a0:6c:f1:b5:80:33:64:d7:86:85:99:63:c8:
         18:b9:39:e9:b0:d1:28:fc:77:60:23:cc:67:ee:e5:f5:ae:e8:
         83:01:0c:13:bd:16:a2:29:48:f3:1e:40:be:ac:b7:07:6c:b9:
         74:dd:95:aa:49:b5:57:66:a6:2d:a9:5d:60:41:80:2e:35:52:
         04:b1:d5:6d
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUJOfJVhHRrjjlC2JT60d6DsAk9t0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjczNzgyQjk5Nzg3OEE5NDE1RjEzMjIxNEU4RDA5Q0ZB
OTcxNTcyRjAeFw0yNTAzMDUxODU1MDdaFw0yNjAzMDQxOTAwMDdaMDMxMTAvBgNV
BAMTKDMwNzc1QjM4RDgwNUMwQzUxQzczMTFCMzYyN0Q4NEI5QjkyMjIxQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5KYyWIDeeav+ZEbjH1b3T9WyQ
VdkMC/2OqmBCePuZdcRgKbveVxVphzXmmRnSaXm9kt9a3B/+zJ1Zefa608QUSF0D
5/BZbs564nMtOao7BuEjECdXFnFhw56lS/soEYcJrCGoo4DYdqHtRQEF7BGQnjN0
NiE+Lmr3ZTtb6uJQ+zjMdbghChkqTeob9WnIAEjXcaf1lq9I7Wyfs9QOUARviqn7
V1YSQtyNjBs3SdhNjzdWbMrxOyuycSq+GeT/Z2+USLx93b1f37waahUpWWu/b3Ak
7ad6EUfRePq07LFwjLTi5rD3Arto7O0zrOlM1/bYXz5tiAxIbNkY1QWB2n0PAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUMHdbONgFwMUccxGzYn2EubkiIbIwHwYDVR0j
BBgwFoAUJzeCuZeHipQV8TIhTo0Jz6lxVy8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDF6b2t5WFZmQWNoaGlNR3VjQ3o5OE1YaXE2Tjk5MVFqWWJWOG9HemFp
WkUvMS8yNzM3ODJCOTk3ODc4QTk0MTVGMTMyMjE0RThEMDlDRkE5NzE1NzJGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI3Mzc4MkI5OTc4NzhBOTQx
NUYxMzIyMTRFOEQwOUNGQTk3MTU3MkYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQxem9reVhWZkFjaGhpTUd1Y0N6OThNWGlxNk45OTFRalliVjhvR3phaVpFLzEv
MzEzNzMwMmUzMjMzMzkyZTMxMzAzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNjMzMzQzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKrvbTANBgkqhkiG9w0BAQsFAAOCAQEAOuTN
z+H5cTRL9+mR7BMdwu6d2ob4g920vfQTenBOyG/fgUQWNtqW2dC0ekh19Qni9JCZ
yzMdlei6U7VH89BoO48KLjOTqLRLoMIha+Ro6tFXuVW60apjQWtqpHksqVXepomc
Msbnm+QWbH1x5n4B8Ap4SO9YSAJnE8OXPUItcMRwXlEwEi5LwydctzCoIsb4hYkD
CIY3jQZC2hsEYkgGFFwg+rtru6s2eBzqbLO4Y9ZunSd0CtGaEuOgbPG1gDNk14aF
mWPIGLk56bDRKPx3YCPMZ+7l9a7ogwEME70WoilI8x5Avqy3B2y5dN2Vqkm1V2am
LaldYEGALjVSBLHVbQ==
-----END CERTIFICATE-----
Generated at Fri Apr 18 08:28:01 2025 by rpki-client