Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/3136382e3139372e3133362e302f32322d3234203d3e203532383732.roa
File:                     3136382e3139372e3133362e302f32322d3234203d3e203532383732.roa (raw, json)
Hash identifier:          KCQrXBq4C+WEYzcjojJ0BzDUiHqgV8uf48xewEmsCbM=
Subject key identifier:   EB:A8:C3:AC:E0:F3:03:31:7A:07:D5:F8:94:93:66:83:D4:A5:2F:E6
Certificate issuer:       /CN=67F46E91955DB6CC22A4F3A0BA0A45DDEBAE0A44
Certificate serial:       2A2C185DD516416863B8FBC3D24E5789A810114E
Authority key identifier: 67:F4:6E:91:95:5D:B6:CC:22:A4:F3:A0:BA:0A:45:DD:EB:AE:0A:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67F46E91955DB6CC22A4F3A0BA0A45DDEBAE0A44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/3136382e3139372e3133362e302f32322d3234203d3e203532383732.roa
Signing time:             Wed 29 Jan 2025 19:02:32 +0000
ROA not before:           Wed 29 Jan 2025 18:57:32 +0000
ROA not after:            Wed 28 Jan 2026 19:02:32 +0000
asID:                     52872
IP address blocks:        168.197.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/67F46E91955DB6CC22A4F3A0BA0A45DDEBAE0A44.crl
                          rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/67F46E91955DB6CC22A4F3A0BA0A45DDEBAE0A44.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67F46E91955DB6CC22A4F3A0BA0A45DDEBAE0A44.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 13:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:2c:18:5d:d5:16:41:68:63:b8:fb:c3:d2:4e:57:89:a8:10:11:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67F46E91955DB6CC22A4F3A0BA0A45DDEBAE0A44
        Validity
            Not Before: Jan 29 18:57:32 2025 GMT
            Not After : Jan 28 19:02:32 2026 GMT
        Subject: CN=EBA8C3ACE0F303317A07D5F894936683D4A52FE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a1:fc:17:a0:53:2d:2c:16:0f:40:21:95:2c:
                    e9:54:01:80:56:a9:2c:6d:9d:08:dc:38:7b:18:3f:
                    29:03:81:7d:b6:f0:0f:a3:22:7a:0e:33:c1:45:71:
                    2c:8f:8a:ad:b9:9d:fa:58:09:c8:79:8c:52:11:af:
                    fb:5f:69:fd:34:59:09:b8:26:3e:a3:ed:6b:fd:d2:
                    5d:d1:f3:5a:25:d2:94:f3:a1:41:67:be:63:6f:a7:
                    22:80:46:78:c4:fa:b6:c9:34:25:e2:3a:28:70:c6:
                    f8:bf:19:da:7c:41:b7:35:30:24:74:eb:5e:4f:57:
                    6e:2c:8b:ac:84:49:96:fc:72:f8:a9:4f:34:29:f4:
                    97:98:71:a1:8c:7c:23:fb:29:3c:e3:b1:7a:6a:41:
                    dd:d4:de:c7:d4:59:67:72:22:6f:b3:af:ac:dc:03:
                    e7:c5:85:89:c4:b5:1c:0d:98:c1:e7:00:27:91:8d:
                    8a:c2:56:27:01:0c:0f:21:a5:34:cd:4f:1a:e8:2e:
                    04:f0:52:da:4a:50:5c:e7:71:fc:5b:3c:f6:f9:7d:
                    1f:82:04:9f:5e:21:e6:40:2f:50:bd:c9:0a:ce:4e:
                    8a:46:65:44:4e:a7:bf:99:de:66:27:04:e3:a7:32:
                    69:5c:e5:60:92:49:18:ca:72:1e:6e:db:32:67:d9:
                    3d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:A8:C3:AC:E0:F3:03:31:7A:07:D5:F8:94:93:66:83:D4:A5:2F:E6
            X509v3 Authority Key Identifier:
                keyid:67:F4:6E:91:95:5D:B6:CC:22:A4:F3:A0:BA:0A:45:DD:EB:AE:0A:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/67F46E91955DB6CC22A4F3A0BA0A45DDEBAE0A44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67F46E91955DB6CC22A4F3A0BA0A45DDEBAE0A44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/3136382e3139372e3133362e302f32322d3234203d3e203532383732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:ca:22:ff:9f:d3:11:34:80:23:00:37:f3:7b:73:12:c8:ae:
         d5:d1:5f:3f:20:13:5c:d7:6d:6b:28:25:de:cb:2d:5a:46:e1:
         f9:46:c5:a1:07:c9:fa:3c:25:10:8d:3b:ca:08:35:4d:45:a4:
         d5:d7:bb:27:93:2c:5a:af:5f:b5:74:d5:d4:47:ac:68:7f:22:
         7d:04:21:ab:f9:d2:23:20:da:2f:5f:fb:51:f0:13:4f:95:f5:
         fa:8c:7c:1b:70:3a:b3:e0:69:a1:77:0a:f7:d1:15:88:30:07:
         d8:8e:53:bb:d4:42:63:c2:3b:27:e5:80:d2:1a:94:28:d9:9f:
         f3:0e:47:84:3d:74:7c:8b:34:e2:82:22:0c:95:cf:77:46:f3:
         6d:00:46:c3:7a:7e:37:93:de:65:87:8f:9c:bb:3b:09:61:87:
         15:42:74:b5:0e:f0:1f:74:25:14:dd:66:f2:c2:ba:55:a7:c8:
         10:e4:98:33:33:89:57:a9:af:f0:ef:7d:98:36:18:bb:dd:3c:
         6e:39:ce:8d:40:44:e9:37:12:f1:94:39:19:e3:53:0c:68:83:
         b1:97:b4:7f:f8:03:c8:f3:e9:c5:b4:72:79:e4:cf:c0:da:36:
         34:4c:67:64:b8:c7:6b:be:b3:d2:38:81:f2:ae:48:de:35:68:
         47:16:ad:74
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUKiwYXdUWQWhjuPvD0k5XiagQEU4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjdGNDZFOTE5NTVEQjZDQzIyQTRGM0EwQkEwQTQ1RERF
QkFFMEE0NDAeFw0yNTAxMjkxODU3MzJaFw0yNjAxMjgxOTAyMzJaMDMxMTAvBgNV
BAMTKEVCQThDM0FDRTBGMzAzMzE3QTA3RDVGODk0OTM2NjgzRDRBNTJGRTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFofwXoFMtLBYPQCGVLOlUAYBW
qSxtnQjcOHsYPykDgX228A+jInoOM8FFcSyPiq25nfpYCch5jFIRr/tfaf00WQm4
Jj6j7Wv90l3R81ol0pTzoUFnvmNvpyKARnjE+rbJNCXiOihwxvi/Gdp8Qbc1MCR0
615PV24si6yESZb8cvipTzQp9JeYcaGMfCP7KTzjsXpqQd3U3sfUWWdyIm+zr6zc
A+fFhYnEtRwNmMHnACeRjYrCVicBDA8hpTTNTxroLgTwUtpKUFzncfxbPPb5fR+C
BJ9eIeZAL1C9yQrOTopGZUROp7+Z3mYnBOOnMmlc5WCSSRjKch5u2zJn2T1bAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU66jDrODzAzF6B9X4lJNmg9SlL+YwHwYDVR0j
BBgwFoAUZ/RukZVdtswipPOgugpF3euuCkQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHhjTFdYQzdoZFFUa0pyY2FicFRxUDV3QTFoUnBIWnZmUUdVblhLZEFH
M1cvMC82N0Y0NkU5MTk1NURCNkNDMjJBNEYzQTBCQTBBNDVEREVCQUUwQTQ0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY3RjQ2RTkxOTU1REI2Q0My
MkE0RjNBMEJBMEE0NURERUJBRTBBNDQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzR4Y0xXWEM3aGRRVGtKcmNhYnBUcVA1d0ExaFJwSFp2ZlFHVW5YS2RBRzNXLzAv
MzEzNjM4MmUzMTM5MzcyZTMxMzMzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM1
MzIzODM3MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKoxYgwDQYJKoZIhvcNAQELBQADggEBABnKIv+f
0xE0gCMAN/N7cxLIrtXRXz8gE1zXbWsoJd7LLVpG4flGxaEHyfo8JRCNO8oINU1F
pNXXuyeTLFqvX7V01dRHrGh/In0EIav50iMg2i9f+1HwE0+V9fqMfBtwOrPgaaF3
CvfRFYgwB9iOU7vUQmPCOyflgNIalCjZn/MOR4Q9dHyLNOKCIgyVz3dG820ARsN6
fjeT3mWHj5y7OwlhhxVCdLUO8B90JRTdZvLCulWnyBDkmDMziVepr/DvfZg2GLvd
PG45zo1AROk3EvGUORnjUwxog7GXtH/4A8jz6cW0cnnkz8DaNjRMZ2S4x2u+s9I4
gfKuSN41aEcWrXQ=
-----END CERTIFICATE-----
Generated at Tue Apr 8 15:29:28 2025 by rpki-client