Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/3137302e38302e3230342e302f32322d3232203d3e20323733353134.roa
File:                     3137302e38302e3230342e302f32322d3232203d3e20323733353134.roa (raw, json)
Hash identifier:          BDrPR2L+J1IXcsQIHMyHExwL6vESWF8uEmO3raeh02M=
Subject key identifier:   F9:F0:E7:31:1C:56:06:61:F0:E5:EF:9D:84:C8:B4:C4:DE:C5:2B:82
Certificate issuer:       /CN=E43FC22F53F1011D8D213F6EB00C5A472E9235D9
Certificate serial:       1B965F3111AA974EE4C070FC4DFB6FCAEABD0D66
Authority key identifier: E4:3F:C2:2F:53:F1:01:1D:8D:21:3F:6E:B0:0C:5A:47:2E:92:35:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/3137302e38302e3230342e302f32322d3232203d3e20323733353134.roa
Signing time:             Mon 17 Feb 2025 14:43:07 +0000
ROA not before:           Mon 17 Feb 2025 14:38:07 +0000
ROA not after:            Mon 16 Feb 2026 14:43:07 +0000
asID:                     273514
IP address blocks:        170.80.204.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.crl
                          rsync://rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 04:58:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:96:5f:31:11:aa:97:4e:e4:c0:70:fc:4d:fb:6f:ca:ea:bd:0d:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E43FC22F53F1011D8D213F6EB00C5A472E9235D9
        Validity
            Not Before: Feb 17 14:38:07 2025 GMT
            Not After : Feb 16 14:43:07 2026 GMT
        Subject: CN=F9F0E7311C560661F0E5EF9D84C8B4C4DEC52B82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:00:fa:81:4c:4e:1a:3d:01:23:73:e5:31:50:
                    d6:d0:91:80:b0:df:42:d6:74:3b:68:a2:a2:c9:4e:
                    10:7a:3f:6c:5b:f3:f6:35:59:50:f8:e6:c4:40:53:
                    bf:01:07:61:87:ef:23:1d:b3:2e:0a:4b:ec:21:f5:
                    15:b2:8c:22:e1:96:49:ce:18:54:2a:b1:6e:f2:fb:
                    d8:87:cc:8b:7f:06:65:3f:48:18:39:e6:42:0c:a4:
                    44:d7:6a:8d:ce:a8:00:f5:52:fb:47:7f:b4:5e:37:
                    dc:77:2c:d6:23:2d:8a:38:59:58:97:91:2f:b8:19:
                    90:44:b1:fb:60:8d:5f:57:9d:66:93:80:39:84:16:
                    4b:3b:7f:94:68:7d:74:0d:65:00:04:b8:18:1c:29:
                    1a:30:10:9f:1c:9b:f7:93:6f:97:9b:38:0f:ed:66:
                    f9:05:93:39:5a:cb:71:4d:10:ad:bb:7d:62:6e:69:
                    0e:5f:64:e8:c8:8c:53:32:e5:ef:e9:5b:27:98:0d:
                    7c:f3:24:5c:89:10:0c:d8:39:23:18:9b:2d:5f:1e:
                    9f:9d:3e:93:2c:40:a9:bd:46:dc:68:26:f5:52:8d:
                    15:76:df:05:ee:44:9e:c7:36:6c:23:5e:4c:13:3f:
                    d5:ce:90:1a:f5:9c:15:de:9e:3e:6e:5a:60:72:7a:
                    c6:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:F0:E7:31:1C:56:06:61:F0:E5:EF:9D:84:C8:B4:C4:DE:C5:2B:82
            X509v3 Authority Key Identifier:
                keyid:E4:3F:C2:2F:53:F1:01:1D:8D:21:3F:6E:B0:0C:5A:47:2E:92:35:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/3137302e38302e3230342e302f32322d3232203d3e20323733353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:71:75:62:54:09:60:d4:c1:d7:24:86:33:5d:18:57:81:72:
         e1:2e:60:16:45:52:ca:88:11:5d:84:1e:ac:0c:7e:77:4c:af:
         75:33:4f:e3:01:65:92:c6:06:c4:e3:df:1a:5e:8e:89:36:39:
         8d:67:7c:4f:e7:0a:b8:08:ef:59:f7:35:64:b5:a2:89:59:22:
         95:12:18:1a:a5:d9:6f:7a:62:20:80:29:60:ef:53:3f:e2:fc:
         b4:ee:bd:4a:24:05:c9:36:c6:77:ba:b2:9b:35:c8:76:37:22:
         30:eb:84:b7:62:20:58:ba:97:64:66:0a:c1:fa:96:2f:a8:58:
         ca:31:3b:1a:72:64:c1:82:1b:93:95:7b:bb:2e:ee:d0:ec:57:
         de:74:77:ec:94:29:82:72:9e:66:2b:e1:99:53:9c:bd:33:4d:
         a6:1c:f5:35:17:7b:fa:a7:66:f9:ed:87:b8:e2:70:ce:be:eb:
         27:15:cf:49:55:f8:55:3e:e1:03:55:69:3c:6e:20:03:a5:f3:
         35:f8:d8:99:f2:67:ca:8c:3f:b4:9f:7c:bb:1f:46:93:ff:79:
         94:02:f0:c1:38:a3:98:fb:ad:5c:c7:2b:1f:70:8f:8f:06:ac:
         9c:cc:00:fc:d4:22:32:5b:eb:e7:b2:8d:ce:65:95:b7:13:ad:
         b9:03:0f:46
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUG5ZfMRGql07kwHD8Tftvyuq9DWYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTQzRkMyMkY1M0YxMDExRDhEMjEzRjZFQjAwQzVBNDcy
RTkyMzVEOTAeFw0yNTAyMTcxNDM4MDdaFw0yNjAyMTYxNDQzMDdaMDMxMTAvBgNV
BAMTKEY5RjBFNzMxMUM1NjA2NjFGMEU1RUY5RDg0QzhCNEM0REVDNTJCODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClAPqBTE4aPQEjc+UxUNbQkYCw
30LWdDtooqLJThB6P2xb8/Y1WVD45sRAU78BB2GH7yMdsy4KS+wh9RWyjCLhlknO
GFQqsW7y+9iHzIt/BmU/SBg55kIMpETXao3OqAD1UvtHf7ReN9x3LNYjLYo4WViX
kS+4GZBEsftgjV9XnWaTgDmEFks7f5RofXQNZQAEuBgcKRowEJ8cm/eTb5ebOA/t
ZvkFkzlay3FNEK27fWJuaQ5fZOjIjFMy5e/pWyeYDXzzJFyJEAzYOSMYmy1fHp+d
PpMsQKm9RtxoJvVSjRV23wXuRJ7HNmwjXkwTP9XOkBr1nBXenj5uWmByesZxAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQU+fDnMRxWBmHw5e+dhMi0xN7FK4IwHwYDVR0j
BBgwFoAU5D/CL1PxAR2NIT9usAxaRy6SNdkwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby81MUdKWm9RTkJWR1pFc2NvNzZMR2k5TWtwak1COURWaVNRZnZHNGZwUmlk
LzAvRTQzRkMyMkY1M0YxMDExRDhEMjEzRjZFQjAwQzVBNDcyRTkyMzVEOS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9FNDNGQzIyRjUzRjEwMTFEOEQy
MTNGNkVCMDBDNUE0NzJFOTIzNUQ5LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby81
MUdKWm9RTkJWR1pFc2NvNzZMR2k5TWtwak1COURWaVNRZnZHNGZwUmlkLzAvMzEz
NzMwMmUzODMwMmUzMjMwMzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM3MzMz
NTMxMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAKqUMwwDQYJKoZIhvcNAQELBQADggEBACxxdWJUCWDU
wdckhjNdGFeBcuEuYBZFUsqIEV2EHqwMfndMr3UzT+MBZZLGBsTj3xpejok2OY1n
fE/nCrgI71n3NWS1oolZIpUSGBql2W96YiCAKWDvUz/i/LTuvUokBck2xne6sps1
yHY3IjDrhLdiIFi6l2RmCsH6li+oWMoxOxpyZMGCG5OVe7su7tDsV950d+yUKYJy
nmYr4ZlTnL0zTaYc9TUXe/qnZvnth7jicM6+6ycVz0lV+FU+4QNVaTxuIAOl8zX4
2JnyZ8qMP7SffLsfRpP/eZQC8ME4o5j7rVzHKx9wj48GrJzMAPzUIjJb6+eyjc5l
lbcTrbkDD0Y=
-----END CERTIFICATE-----
Generated at Sun Apr 6 07:47:42 2025 by rpki-client