Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LRbqsXBEPv3bCu2zA7c4V3w1gzUTQGXHErC2hZ9asY/1/3138312e3232342e35362e302f32342d3234203d3e20323731353332.roa
File:                     3138312e3232342e35362e302f32342d3234203d3e20323731353332.roa (raw, json)
Hash identifier:          ablaNuG6kVGlT9OGHDnc16tKitg9CyCdYdxxWNK7d4w=
Subject key identifier:   F9:BB:1D:E4:50:6A:9E:54:08:2F:A1:A2:7C:D5:49:08:D3:A6:7F:57
Certificate issuer:       /CN=6982D51872DC91BEC06EE371CAE70C62F710F7BA
Certificate serial:       59603BC8839D868FB3D2A32742F1C2100CBED24A
Authority key identifier: 69:82:D5:18:72:DC:91:BE:C0:6E:E3:71:CA:E7:0C:62:F7:10:F7:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6982D51872DC91BEC06EE371CAE70C62F710F7BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LRbqsXBEPv3bCu2zA7c4V3w1gzUTQGXHErC2hZ9asY/1/3138312e3232342e35362e302f32342d3234203d3e20323731353332.roa
Signing time:             Thu 06 Mar 2025 04:05:59 +0000
ROA not before:           Thu 06 Mar 2025 04:00:59 +0000
ROA not after:            Thu 05 Mar 2026 04:05:59 +0000
asID:                     271532
IP address blocks:        181.224.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5LRbqsXBEPv3bCu2zA7c4V3w1gzUTQGXHErC2hZ9asY/1/6982D51872DC91BEC06EE371CAE70C62F710F7BA.crl
                          rsync://rpki-repo.registro.br/repo/5LRbqsXBEPv3bCu2zA7c4V3w1gzUTQGXHErC2hZ9asY/1/6982D51872DC91BEC06EE371CAE70C62F710F7BA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6982D51872DC91BEC06EE371CAE70C62F710F7BA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 12:35:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:60:3b:c8:83:9d:86:8f:b3:d2:a3:27:42:f1:c2:10:0c:be:d2:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6982D51872DC91BEC06EE371CAE70C62F710F7BA
        Validity
            Not Before: Mar  6 04:00:59 2025 GMT
            Not After : Mar  5 04:05:59 2026 GMT
        Subject: CN=F9BB1DE4506A9E54082FA1A27CD54908D3A67F57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5a:1f:a7:89:37:81:ad:bc:fa:59:a0:c4:fa:
                    ba:df:80:ab:cd:f6:e4:3a:93:27:af:6e:c1:20:72:
                    5a:f2:22:49:47:5b:60:b3:97:9b:d1:78:32:20:10:
                    02:f7:f1:64:c4:44:ca:dc:11:44:29:64:f0:c7:d5:
                    23:32:20:07:07:12:f4:08:d9:f2:3f:ce:67:91:15:
                    b7:9b:71:1f:2e:8b:fd:a9:60:64:43:1a:dd:f1:16:
                    f3:f5:26:77:6e:cc:e2:d6:45:d5:fe:91:a8:84:f3:
                    6c:89:35:31:a2:37:39:18:e2:f1:3b:b9:91:b5:c0:
                    39:65:7f:37:e7:43:ba:60:11:f5:dc:2e:28:03:05:
                    d4:ba:9f:1f:c9:21:70:70:06:06:5a:d3:3e:67:de:
                    2c:2d:d1:e5:d4:47:8b:7a:6a:de:c3:b8:49:e0:76:
                    a0:f7:73:c0:b6:10:73:7c:33:83:c1:cb:1d:34:40:
                    fa:55:cf:62:1f:23:14:e7:c8:d5:76:24:4e:2b:f1:
                    fe:a1:a8:a0:43:de:ab:94:3c:22:b5:db:c1:82:cd:
                    3c:c8:45:5b:03:04:b4:dc:56:d0:e1:5e:7c:57:e3:
                    c5:be:2f:d3:ad:32:36:87:06:7e:19:a8:54:15:ce:
                    b1:e2:4f:49:d3:95:59:01:56:ae:66:9c:a4:81:21:
                    63:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:BB:1D:E4:50:6A:9E:54:08:2F:A1:A2:7C:D5:49:08:D3:A6:7F:57
            X509v3 Authority Key Identifier:
                keyid:69:82:D5:18:72:DC:91:BE:C0:6E:E3:71:CA:E7:0C:62:F7:10:F7:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LRbqsXBEPv3bCu2zA7c4V3w1gzUTQGXHErC2hZ9asY/1/6982D51872DC91BEC06EE371CAE70C62F710F7BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6982D51872DC91BEC06EE371CAE70C62F710F7BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LRbqsXBEPv3bCu2zA7c4V3w1gzUTQGXHErC2hZ9asY/1/3138312e3232342e35362e302f32342d3234203d3e20323731353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:c6:84:bf:01:5b:f5:1b:48:87:87:26:19:8b:4f:da:00:08:
         f6:a1:dc:19:c3:23:88:ff:59:f2:4d:03:e0:8b:fa:34:81:93:
         ee:d5:c2:bb:fa:0e:b7:01:e8:b1:5b:d3:14:69:22:60:07:84:
         68:d2:c5:84:69:1b:77:e7:f7:68:ae:2b:a6:d5:f4:cc:5c:10:
         2c:2f:54:1f:6e:60:2d:27:f5:92:60:d1:12:a6:4f:49:87:8e:
         5e:53:9c:57:4d:88:22:fe:c1:f5:58:b7:ea:95:93:28:3c:20:
         e9:fb:3a:0a:13:59:2a:ce:b2:5c:9b:d0:2f:23:03:fb:33:0f:
         32:09:94:cf:3c:0c:2f:44:d7:93:d5:3e:e5:b4:4f:cb:47:7f:
         c4:e5:27:af:43:53:64:c5:93:27:cb:c1:e6:dd:e0:be:d1:d3:
         d6:b1:20:47:81:48:91:c9:34:47:0d:c4:48:34:75:4a:33:e0:
         75:8c:2b:05:0b:e5:3a:5b:9c:0a:20:0a:ef:3a:3d:b1:7d:8a:
         9c:e2:9e:42:73:f8:26:47:f6:c3:e5:7d:8b:03:57:25:84:2d:
         6a:a1:c6:a0:a0:d3:de:9d:56:0e:ae:f0:bf:91:be:96:52:9e:
         64:7d:a2:48:36:1b:d1:c3:7e:17:77:be:e6:c7:0d:f2:3e:30:
         64:af:94:bf
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUWWA7yIOdho+z0qMnQvHCEAy+0kowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjk4MkQ1MTg3MkRDOTFCRUMwNkVFMzcxQ0FFNzBDNjJG
NzEwRjdCQTAeFw0yNTAzMDYwNDAwNTlaFw0yNjAzMDUwNDA1NTlaMDMxMTAvBgNV
BAMTKEY5QkIxREU0NTA2QTlFNTQwODJGQTFBMjdDRDU0OTA4RDNBNjdGNTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Wh+niTeBrbz6WaDE+rrfgKvN
9uQ6kyevbsEgclryIklHW2Czl5vReDIgEAL38WTERMrcEUQpZPDH1SMyIAcHEvQI
2fI/zmeRFbebcR8ui/2pYGRDGt3xFvP1JnduzOLWRdX+kaiE82yJNTGiNzkY4vE7
uZG1wDllfzfnQ7pgEfXcLigDBdS6nx/JIXBwBgZa0z5n3iwt0eXUR4t6at7DuEng
dqD3c8C2EHN8M4PByx00QPpVz2IfIxTnyNV2JE4r8f6hqKBD3quUPCK128GCzTzI
RVsDBLTcVtDhXnxX48W+L9OtMjaHBn4ZqFQVzrHiT0nTlVkBVq5mnKSBIWNbAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQU+bsd5FBqnlQIL6GifNVJCNOmf1cwHwYDVR0j
BBgwFoAUaYLVGHLckb7AbuNxyucMYvcQ97owDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby81TFJicXNYQkVQdjNiQ3UyekE3YzRWM3cxZ3pVVFFHWEhFckMyaFo5YXNZ
LzEvNjk4MkQ1MTg3MkRDOTFCRUMwNkVFMzcxQ0FFNzBDNjJGNzEwRjdCQS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS82OTgyRDUxODcyREM5MUJFQzA2
RUUzNzFDQUU3MEM2MkY3MTBGN0JBLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby81
TFJicXNYQkVQdjNiQ3UyekE3YzRWM3cxZ3pVVFFHWEhFckMyaFo5YXNZLzEvMzEz
ODMxMmUzMjMyMzQyZTM1MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzEz
NTMzMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAC14DgwDQYJKoZIhvcNAQELBQADggEBAAjGhL8BW/Ub
SIeHJhmLT9oACPah3BnDI4j/WfJNA+CL+jSBk+7Vwrv6DrcB6LFb0xRpImAHhGjS
xYRpG3fn92iuK6bV9MxcECwvVB9uYC0n9ZJg0RKmT0mHjl5TnFdNiCL+wfVYt+qV
kyg8IOn7OgoTWSrOslyb0C8jA/szDzIJlM88DC9E15PVPuW0T8tHf8TlJ69DU2TF
kyfLwebd4L7R09axIEeBSJHJNEcNxEg0dUoz4HWMKwUL5TpbnAogCu86PbF9ipzi
nkJz+CZH9sPlfYsDVyWELWqhxqCg096dVg6u8L+RvpZSnmR9okg2G9HDfhd3vubH
DfI+MGSvlL8=
-----END CERTIFICATE-----
Generated at Sun Apr 13 04:48:27 2025 by rpki-client