Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LRbqsXBEPv3bCu2zA7c4V3w1gzUTQGXHErC2hZ9asY/1/3138312e3232342e35382e302f32342d3234203d3e20323731353332.roa
File:                     3138312e3232342e35382e302f32342d3234203d3e20323731353332.roa (raw, json)
Hash identifier:          suLtFQUk0zL/EO8XA1SnIhTjr6OUEW5yg/DPuM/EqSM=
Subject key identifier:   82:1D:56:8D:AE:1F:03:55:F3:D2:A4:24:89:8E:3B:97:A3:FA:81:2F
Certificate issuer:       /CN=6982D51872DC91BEC06EE371CAE70C62F710F7BA
Certificate serial:       45F6D0E778F8A79818369500DBFF191ACDB7A9F5
Authority key identifier: 69:82:D5:18:72:DC:91:BE:C0:6E:E3:71:CA:E7:0C:62:F7:10:F7:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6982D51872DC91BEC06EE371CAE70C62F710F7BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LRbqsXBEPv3bCu2zA7c4V3w1gzUTQGXHErC2hZ9asY/1/3138312e3232342e35382e302f32342d3234203d3e20323731353332.roa
Signing time:             Thu 06 Mar 2025 04:05:59 +0000
ROA not before:           Thu 06 Mar 2025 04:00:59 +0000
ROA not after:            Thu 05 Mar 2026 04:05:59 +0000
asID:                     271532
IP address blocks:        181.224.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5LRbqsXBEPv3bCu2zA7c4V3w1gzUTQGXHErC2hZ9asY/1/6982D51872DC91BEC06EE371CAE70C62F710F7BA.crl
                          rsync://rpki-repo.registro.br/repo/5LRbqsXBEPv3bCu2zA7c4V3w1gzUTQGXHErC2hZ9asY/1/6982D51872DC91BEC06EE371CAE70C62F710F7BA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6982D51872DC91BEC06EE371CAE70C62F710F7BA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 12:35:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:f6:d0:e7:78:f8:a7:98:18:36:95:00:db:ff:19:1a:cd:b7:a9:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6982D51872DC91BEC06EE371CAE70C62F710F7BA
        Validity
            Not Before: Mar  6 04:00:59 2025 GMT
            Not After : Mar  5 04:05:59 2026 GMT
        Subject: CN=821D568DAE1F0355F3D2A424898E3B97A3FA812F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:69:cb:a4:82:91:92:c0:3c:96:ea:b0:84:09:
                    84:a5:e8:8c:cb:92:63:72:18:6d:67:7d:c1:3b:7c:
                    17:3d:f2:87:44:cd:c6:e9:b8:77:5f:53:0c:50:c8:
                    be:06:9f:3c:23:68:6b:7d:c5:b6:e5:11:0f:56:e5:
                    66:9b:27:53:9d:d2:a4:67:68:7e:dd:78:d5:48:51:
                    85:fb:9f:d6:15:2c:ed:11:9e:ea:88:68:d3:36:91:
                    3a:92:9b:9d:a8:c3:5d:b6:ef:74:14:e3:23:01:46:
                    c4:bf:ae:7b:a6:3c:f4:87:0e:2f:e7:77:fb:bb:9b:
                    64:f1:3e:90:6b:c9:ed:6b:8d:a9:17:b6:a3:9b:a4:
                    2f:2e:0c:c0:84:61:5f:aa:90:85:0f:28:e8:9c:9d:
                    a8:4a:51:a5:6b:39:2e:ea:cb:af:70:2a:c4:52:36:
                    f9:4d:ae:5c:8c:69:82:80:7b:0c:f9:ae:8c:d3:10:
                    c3:df:e8:2c:df:30:5c:34:29:fc:37:1d:2c:49:20:
                    bd:92:86:53:83:68:b1:80:56:ee:6b:90:d5:cc:56:
                    16:85:69:11:d2:cf:cf:61:02:26:7a:67:57:f6:4c:
                    af:0e:f7:d7:3b:e9:a9:d4:24:35:80:f2:f9:f1:0b:
                    22:ca:5a:60:0c:3f:ca:d9:eb:bd:c9:fb:b9:2a:4e:
                    e7:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:1D:56:8D:AE:1F:03:55:F3:D2:A4:24:89:8E:3B:97:A3:FA:81:2F
            X509v3 Authority Key Identifier:
                keyid:69:82:D5:18:72:DC:91:BE:C0:6E:E3:71:CA:E7:0C:62:F7:10:F7:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LRbqsXBEPv3bCu2zA7c4V3w1gzUTQGXHErC2hZ9asY/1/6982D51872DC91BEC06EE371CAE70C62F710F7BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6982D51872DC91BEC06EE371CAE70C62F710F7BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LRbqsXBEPv3bCu2zA7c4V3w1gzUTQGXHErC2hZ9asY/1/3138312e3232342e35382e302f32342d3234203d3e20323731353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:f9:91:d0:44:73:af:6e:08:20:d6:17:0b:f9:5a:bd:5b:1f:
         ca:bc:1b:ea:dc:8d:1c:31:62:33:10:ee:d6:e0:c7:63:49:dd:
         c9:1c:e6:36:9a:28:df:dc:9e:ae:71:e2:e2:1d:73:a6:8a:e0:
         64:ac:f7:56:a8:d0:f3:6d:12:c9:d0:df:33:12:b5:01:de:3c:
         e5:d0:27:74:31:8a:a8:f6:6e:1a:57:8a:16:8b:66:b5:4d:c6:
         80:b8:e8:a9:99:98:7a:4a:1b:f4:37:39:80:52:f4:14:9d:54:
         67:08:09:e9:4a:70:0a:08:82:f9:f4:57:ec:01:70:b6:21:91:
         e0:f9:6b:61:80:7d:f6:bf:e5:7e:22:10:7e:e1:58:97:cb:73:
         2d:a8:9b:93:95:04:fe:17:bf:cd:73:ff:1a:b0:35:ab:26:4e:
         dc:af:12:64:60:ed:ff:cd:2d:57:7c:b1:ab:a4:86:21:1e:e6:
         f0:bc:66:ee:5e:ea:48:6c:17:f1:54:93:c3:9a:bf:c6:b0:e5:
         fe:23:56:04:ef:c7:f8:b2:b7:cc:c3:a9:53:e8:74:08:ef:38:
         97:5a:24:d9:e1:9a:b6:85:08:bb:6a:31:53:88:ae:2e:02:63:
         99:7c:4b:49:c2:df:f8:7b:0e:36:ef:09:62:31:58:8e:fb:b5:
         8d:4f:90:8b
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIURfbQ53j4p5gYNpUA2/8ZGs23qfUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjk4MkQ1MTg3MkRDOTFCRUMwNkVFMzcxQ0FFNzBDNjJG
NzEwRjdCQTAeFw0yNTAzMDYwNDAwNTlaFw0yNjAzMDUwNDA1NTlaMDMxMTAvBgNV
BAMTKDgyMUQ1NjhEQUUxRjAzNTVGM0QyQTQyNDg5OEUzQjk3QTNGQTgxMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiacukgpGSwDyW6rCECYSl6IzL
kmNyGG1nfcE7fBc98odEzcbpuHdfUwxQyL4GnzwjaGt9xbblEQ9W5WabJ1Od0qRn
aH7deNVIUYX7n9YVLO0RnuqIaNM2kTqSm52ow12273QU4yMBRsS/rnumPPSHDi/n
d/u7m2TxPpBrye1rjakXtqObpC8uDMCEYV+qkIUPKOicnahKUaVrOS7qy69wKsRS
NvlNrlyMaYKAewz5rozTEMPf6CzfMFw0Kfw3HSxJIL2ShlODaLGAVu5rkNXMVhaF
aRHSz89hAiZ6Z1f2TK8O99c76anUJDWA8vnxCyLKWmAMP8rZ673J+7kqTucXAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUgh1Wja4fA1Xz0qQkiY47l6P6gS8wHwYDVR0j
BBgwFoAUaYLVGHLckb7AbuNxyucMYvcQ97owDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby81TFJicXNYQkVQdjNiQ3UyekE3YzRWM3cxZ3pVVFFHWEhFckMyaFo5YXNZ
LzEvNjk4MkQ1MTg3MkRDOTFCRUMwNkVFMzcxQ0FFNzBDNjJGNzEwRjdCQS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS82OTgyRDUxODcyREM5MUJFQzA2
RUUzNzFDQUU3MEM2MkY3MTBGN0JBLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby81
TFJicXNYQkVQdjNiQ3UyekE3YzRWM3cxZ3pVVFFHWEhFckMyaFo5YXNZLzEvMzEz
ODMxMmUzMjMyMzQyZTM1MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzEz
NTMzMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAC14DowDQYJKoZIhvcNAQELBQADggEBAFX5kdBEc69u
CCDWFwv5Wr1bH8q8G+rcjRwxYjMQ7tbgx2NJ3ckc5jaaKN/cnq5x4uIdc6aK4GSs
91ao0PNtEsnQ3zMStQHePOXQJ3Qxiqj2bhpXihaLZrVNxoC46KmZmHpKG/Q3OYBS
9BSdVGcICelKcAoIgvn0V+wBcLYhkeD5a2GAffa/5X4iEH7hWJfLcy2om5OVBP4X
v81z/xqwNasmTtyvEmRg7f/NLVd8saukhiEe5vC8Zu5e6khsF/FUk8Oav8aw5f4j
VgTvx/iyt8zDqVPodAjvOJdaJNnhmraFCLtqMVOIri4CY5l8S0nC3/h7DjbvCWIx
WI77tY1PkIs=
-----END CERTIFICATE-----
Generated at Sun Apr 13 04:50:46 2025 by rpki-client