Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/1/3139302e3130332e3136322e302f32342d3332203d3e20323632393839.roa
File:                     3139302e3130332e3136322e302f32342d3332203d3e20323632393839.roa (raw, json)
Hash identifier:          QJvnUCNjdEc8QdDDx6gEX/y8hLd+L+DoRu+nVBAqdho=
Subject key identifier:   82:60:52:7C:27:5B:F4:8B:39:17:5A:61:33:37:F0:4F:85:A4:33:C6
Certificate issuer:       /CN=D322281463F194BEAD29926EC73A0E7378D1F259
Certificate serial:       6E3A66E53C48F99E44170146BC5BAF10EE22BC0B
Authority key identifier: D3:22:28:14:63:F1:94:BE:AD:29:92:6E:C7:3A:0E:73:78:D1:F2:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D322281463F194BEAD29926EC73A0E7378D1F259.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/1/3139302e3130332e3136322e302f32342d3332203d3e20323632393839.roa
Signing time:             Thu 06 Mar 2025 20:58:10 +0000
ROA not before:           Thu 06 Mar 2025 20:53:10 +0000
ROA not after:            Thu 05 Mar 2026 20:58:10 +0000
asID:                     262989
IP address blocks:        190.103.162.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/1/D322281463F194BEAD29926EC73A0E7378D1F259.crl
                          rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/1/D322281463F194BEAD29926EC73A0E7378D1F259.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D322281463F194BEAD29926EC73A0E7378D1F259.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 21:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:3a:66:e5:3c:48:f9:9e:44:17:01:46:bc:5b:af:10:ee:22:bc:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D322281463F194BEAD29926EC73A0E7378D1F259
        Validity
            Not Before: Mar  6 20:53:10 2025 GMT
            Not After : Mar  5 20:58:10 2026 GMT
        Subject: CN=8260527C275BF48B39175A613337F04F85A433C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1d:06:6c:1d:00:4f:c0:f4:e6:18:74:99:55:
                    ae:4e:5a:f0:88:65:82:87:a9:36:ab:3f:20:8c:43:
                    6f:5e:66:a7:a8:1a:f9:ad:d8:39:d6:28:61:6a:47:
                    61:96:bb:07:bd:f9:fc:49:73:08:25:d0:b8:50:c6:
                    bc:e9:bf:6c:b8:ce:c3:97:c2:65:5e:4d:b8:4b:89:
                    12:95:8a:c2:40:34:86:cd:1c:f0:ac:5b:cf:3f:c3:
                    3a:39:22:9d:d2:bf:13:6d:c3:f3:3c:f6:0a:11:bd:
                    87:98:70:e4:29:2b:05:31:20:9b:55:f4:e6:3e:b2:
                    b6:73:3a:0c:dd:77:ab:ba:6a:b6:89:36:e0:fb:a7:
                    21:0b:a4:88:f1:67:b3:6c:65:ac:07:59:c7:49:17:
                    4b:36:18:64:47:89:c6:3c:52:2f:58:e4:26:88:3c:
                    dd:ed:42:29:34:05:f8:50:d1:2a:7e:54:64:34:32:
                    49:23:52:42:6b:37:03:6e:46:85:92:fc:41:9a:af:
                    1c:ba:de:34:50:35:2d:dd:3e:9c:7e:3b:66:af:d9:
                    73:ac:f8:3b:cf:d3:f5:96:c3:da:6a:0d:08:56:74:
                    6d:4b:bf:11:a8:04:89:88:25:2a:07:9d:02:88:95:
                    2d:16:6b:c6:44:dd:22:77:ba:99:bc:8b:13:8d:23:
                    18:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:60:52:7C:27:5B:F4:8B:39:17:5A:61:33:37:F0:4F:85:A4:33:C6
            X509v3 Authority Key Identifier:
                keyid:D3:22:28:14:63:F1:94:BE:AD:29:92:6E:C7:3A:0E:73:78:D1:F2:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/1/D322281463F194BEAD29926EC73A0E7378D1F259.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D322281463F194BEAD29926EC73A0E7378D1F259.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/1/3139302e3130332e3136322e302f32342d3332203d3e20323632393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:bf:0e:99:aa:61:6c:5a:ee:11:d6:0c:8a:e4:2c:f1:d3:6c:
         85:d5:b0:f8:b5:e5:ca:61:10:5e:bd:0d:33:f1:9d:63:c9:ef:
         a5:94:8b:fb:68:a8:61:24:74:f0:00:ee:f3:d5:9c:44:dd:ef:
         76:e4:83:8d:cd:e6:24:98:1d:8f:47:5e:07:9a:a4:6c:1f:73:
         67:e0:bc:97:8e:f6:b6:58:2d:99:88:23:b4:d0:96:54:5c:df:
         3a:74:22:56:c4:11:0d:22:da:ee:a9:d6:76:d2:61:da:a5:a9:
         fc:c2:7a:e9:1e:c8:87:90:66:81:54:9c:ca:d3:96:72:d9:84:
         c6:67:19:cf:c8:57:56:e2:8d:86:77:8d:cc:be:2d:b2:d2:d3:
         13:d6:72:36:65:d1:7d:f3:64:5a:ab:f6:cc:3d:b3:4c:c7:3d:
         14:f8:52:4f:8a:d0:22:bb:06:5d:3e:16:7b:67:32:40:e9:38:
         45:ae:de:43:e8:c4:00:e5:61:eb:b8:d3:66:99:7a:63:81:37:
         d7:83:94:92:6a:88:c2:2f:3e:2d:ca:db:4f:9a:3c:05:a8:66:
         60:d2:c6:e6:ba:6e:37:3d:de:73:2e:85:3e:b4:6b:a5:be:1f:
         cd:0c:f2:26:c9:04:4c:66:d1:81:4c:01:57:96:78:21:b6:71:
         06:36:69:7c
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUbjpm5TxI+Z5EFwFGvFuvEO4ivAswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDMyMjI4MTQ2M0YxOTRCRUFEMjk5MjZFQzczQTBFNzM3
OEQxRjI1OTAeFw0yNTAzMDYyMDUzMTBaFw0yNjAzMDUyMDU4MTBaMDMxMTAvBgNV
BAMTKDgyNjA1MjdDMjc1QkY0OEIzOTE3NUE2MTMzMzdGMDRGODVBNDMzQzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuHQZsHQBPwPTmGHSZVa5OWvCI
ZYKHqTarPyCMQ29eZqeoGvmt2DnWKGFqR2GWuwe9+fxJcwgl0LhQxrzpv2y4zsOX
wmVeTbhLiRKVisJANIbNHPCsW88/wzo5Ip3SvxNtw/M89goRvYeYcOQpKwUxIJtV
9OY+srZzOgzdd6u6araJNuD7pyELpIjxZ7NsZawHWcdJF0s2GGRHicY8Ui9Y5CaI
PN3tQik0BfhQ0Sp+VGQ0MkkjUkJrNwNuRoWS/EGarxy63jRQNS3dPpx+O2av2XOs
+DvP0/WWw9pqDQhWdG1LvxGoBImIJSoHnQKIlS0Wa8ZE3SJ3upm8ixONIxh9AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUgmBSfCdb9Is5F1phMzfwT4WkM8YwHwYDVR0j
BBgwFoAU0yIoFGPxlL6tKZJuxzoOc3jR8lkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHYxQXJrZFBjaU1XTlZGTGt4NnhGd3NjYWIxUTNqSEp3QlJIZ1VhUkVx
cU0vMS9EMzIyMjgxNDYzRjE5NEJFQUQyOTkyNkVDNzNBMEU3Mzc4RDFGMjU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QzMjIyODE0NjNGMTk0QkVB
RDI5OTI2RUM3M0EwRTczNzhEMUYyNTkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzR2MUFya2RQY2lNV05WRkxreDZ4RndzY2FiMVEzakhKd0JSSGdVYVJFcXFNLzEv
MzEzOTMwMmUzMTMwMzMyZTMxMzYzMjJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDMy
MzYzMjM5MzgzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAL5nojANBgkqhkiG9w0BAQsFAAOCAQEAZb8O
maphbFruEdYMiuQs8dNshdWw+LXlymEQXr0NM/GdY8nvpZSL+2ioYSR08ADu89Wc
RN3vduSDjc3mJJgdj0deB5qkbB9zZ+C8l472tlgtmYgjtNCWVFzfOnQiVsQRDSLa
7qnWdtJh2qWp/MJ66R7Ih5BmgVScytOWctmExmcZz8hXVuKNhneNzL4tstLTE9Zy
NmXRffNkWqv2zD2zTMc9FPhST4rQIrsGXT4We2cyQOk4Ra7eQ+jEAOVh67jTZpl6
Y4E314OUkmqIwi8+LcrbT5o8BahmYNLG5rpuNz3ecy6FPrRrpb4fzQzyJskETGbR
gUwBV5Z4IbZxBjZpfA==
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:39:11 2025 by rpki-client