Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/3137392e3130392e3131362e302f32332d3233203d3e20323730373630.roa
File:                     3137392e3130392e3131362e302f32332d3233203d3e20323730373630.roa (raw, json)
Hash identifier:          KBHS3U85sNBoZR5I84DAP1p5655DR/5bWD3xk8nv87M=
Subject key identifier:   54:E9:8C:B7:98:B1:76:EF:41:7C:19:4D:80:7F:38:E9:10:CE:56:77
Certificate issuer:       /CN=BDF984AA7B5F31ECB2ECE2B568883C09865443CB
Certificate serial:       7C77A27F7D902B7E41C2B4E76358D38B5B44D39A
Authority key identifier: BD:F9:84:AA:7B:5F:31:EC:B2:EC:E2:B5:68:88:3C:09:86:54:43:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDF984AA7B5F31ECB2ECE2B568883C09865443CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/3137392e3130392e3131362e302f32332d3233203d3e20323730373630.roa
Signing time:             Fri 16 May 2025 13:17:48 +0000
ROA not before:           Fri 16 May 2025 13:12:48 +0000
ROA not after:            Fri 15 May 2026 13:17:48 +0000
asID:                     270760
IP address blocks:        179.109.116.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/BDF984AA7B5F31ECB2ECE2B568883C09865443CB.crl
                          rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/BDF984AA7B5F31ECB2ECE2B568883C09865443CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDF984AA7B5F31ECB2ECE2B568883C09865443CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Jun 2025 03:10:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:77:a2:7f:7d:90:2b:7e:41:c2:b4:e7:63:58:d3:8b:5b:44:d3:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDF984AA7B5F31ECB2ECE2B568883C09865443CB
        Validity
            Not Before: May 16 13:12:48 2025 GMT
            Not After : May 15 13:17:48 2026 GMT
        Subject: CN=54E98CB798B176EF417C194D807F38E910CE5677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:5b:e0:dd:26:b1:f9:0e:06:79:37:d8:a0:3e:
                    35:51:00:5f:3c:e6:00:ee:a8:07:0e:47:d6:f7:02:
                    42:10:f1:61:27:3b:82:fd:61:4a:5e:b1:61:a6:b5:
                    59:90:a1:2a:b0:49:00:23:ab:3a:4a:5d:ba:84:73:
                    57:32:15:d0:58:0e:df:62:a7:d4:d6:9f:dc:73:9e:
                    bc:20:58:32:53:2e:b0:e1:1a:b8:74:85:43:c1:50:
                    8b:ec:a7:3d:cd:2d:03:21:87:08:2e:6e:a6:cc:eb:
                    28:2c:ad:a4:de:7b:dd:4c:d9:c4:ba:7c:1d:e8:91:
                    05:7f:74:48:94:cb:ba:a6:6b:76:90:e6:45:69:28:
                    50:88:f9:9b:15:7b:3a:db:fb:75:94:8f:9f:1f:ff:
                    e4:dd:b8:6f:ad:9e:f7:86:3c:28:e2:b1:07:5b:39:
                    ab:15:b0:63:d7:66:83:34:d5:26:ed:da:24:b6:b2:
                    8a:51:13:49:e6:2d:cf:47:2b:ce:82:bb:bf:34:6f:
                    27:55:4c:5f:1d:42:b0:6a:a2:a2:48:8a:11:b7:80:
                    6f:ea:fb:2f:cb:bb:29:90:74:78:02:8d:16:fd:b4:
                    a2:71:01:91:33:b1:b4:ea:cc:bc:5e:a3:e3:e3:52:
                    76:fa:b9:fc:02:06:e1:ce:36:67:e1:f1:14:a2:ef:
                    d8:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:E9:8C:B7:98:B1:76:EF:41:7C:19:4D:80:7F:38:E9:10:CE:56:77
            X509v3 Authority Key Identifier:
                keyid:BD:F9:84:AA:7B:5F:31:EC:B2:EC:E2:B5:68:88:3C:09:86:54:43:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/BDF984AA7B5F31ECB2ECE2B568883C09865443CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDF984AA7B5F31ECB2ECE2B568883C09865443CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/3137392e3130392e3131362e302f32332d3233203d3e20323730373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:77:a8:93:16:e4:fe:4b:cf:60:ed:94:bb:a0:31:de:36:1c:
         22:d9:32:1a:19:6f:d1:db:d1:e2:b1:f0:2d:02:f1:36:46:0e:
         da:4b:da:f2:b5:94:6b:49:43:f7:ec:41:d1:97:a3:33:ba:4f:
         34:fb:7b:20:1a:13:2b:c9:9c:f2:7c:ee:71:65:fc:0e:ed:46:
         ca:ba:c5:0b:83:9e:14:43:53:e5:8b:d4:ba:cd:c1:a4:cc:dc:
         53:3d:90:ed:10:be:76:95:96:32:d1:fa:c6:a4:6d:99:2c:1d:
         58:b3:27:29:3a:d8:c7:2c:35:c9:e7:f5:87:6a:36:8b:59:99:
         5e:c5:8e:f0:7a:09:0f:cd:65:72:8e:5f:a6:5a:e1:df:ec:96:
         d1:57:6a:9d:e3:90:1e:ea:66:e6:5a:79:90:cd:cf:c2:ab:b5:
         e3:97:11:56:e6:9b:86:72:6c:0f:8d:34:32:f0:5c:1a:cd:17:
         cf:90:14:13:64:7d:e3:fa:6f:3e:bd:89:50:7d:c9:03:38:af:
         8c:30:d1:79:8b:15:4f:80:5e:c0:9e:52:33:5f:b8:c1:5b:12:
         7d:55:e1:b5:39:fb:86:e5:61:d8:cb:67:54:ba:18:39:4b:9d:
         e4:e4:99:94:7a:29:23:f9:ae:20:54:a5:61:ee:de:34:6e:72:
         e7:2d:be:9a
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUfHeif32QK35BwrTnY1jTi1tE05owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkRGOTg0QUE3QjVGMzFFQ0IyRUNFMkI1Njg4ODNDMDk4
NjU0NDNDQjAeFw0yNTA1MTYxMzEyNDhaFw0yNjA1MTUxMzE3NDhaMDMxMTAvBgNV
BAMTKDU0RTk4Q0I3OThCMTc2RUY0MTdDMTk0RDgwN0YzOEU5MTBDRTU2NzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgW+DdJrH5DgZ5N9igPjVRAF88
5gDuqAcOR9b3AkIQ8WEnO4L9YUpesWGmtVmQoSqwSQAjqzpKXbqEc1cyFdBYDt9i
p9TWn9xznrwgWDJTLrDhGrh0hUPBUIvspz3NLQMhhwgubqbM6ygsraTee91M2cS6
fB3okQV/dEiUy7qma3aQ5kVpKFCI+ZsVezrb+3WUj58f/+TduG+tnveGPCjisQdb
OasVsGPXZoM01Sbt2iS2sopRE0nmLc9HK86Cu780bydVTF8dQrBqoqJIihG3gG/q
+y/LuymQdHgCjRb9tKJxAZEzsbTqzLxeo+PjUnb6ufwCBuHONmfh8RSi79jzAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUVOmMt5ixdu9BfBlNgH846RDOVncwHwYDVR0j
BBgwFoAUvfmEqntfMeyy7OK1aIg8CYZUQ8swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXgxREJyNXVpajlyVXVjMzlwSlRpMlBCWXpFaXlCalhtWlBpY0t5NUFl
VU0vMC9CREY5ODRBQTdCNUYzMUVDQjJFQ0UyQjU2ODg4M0MwOTg2NTQ0M0NCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JERjk4NEFBN0I1RjMxRUNC
MkVDRTJCNTY4ODgzQzA5ODY1NDQzQ0IuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV4MURCcjV1aWo5clV1YzM5cEpUaTJQQll6RWl5QmpYbVpQaWNLeTVBZVVNLzAv
MzEzNzM5MmUzMTMwMzkyZTMxMzEzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzczMDM3MzYzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAbNtdDANBgkqhkiG9w0BAQsFAAOCAQEAZHeo
kxbk/kvPYO2Uu6Ax3jYcItkyGhlv0dvR4rHwLQLxNkYO2kva8rWUa0lD9+xB0Zej
M7pPNPt7IBoTK8mc8nzucWX8Du1GyrrFC4OeFENT5YvUus3BpMzcUz2Q7RC+dpWW
MtH6xqRtmSwdWLMnKTrYxyw1yef1h2o2i1mZXsWO8HoJD81lco5fplrh3+yW0Vdq
neOQHupm5lp5kM3Pwqu145cRVuabhnJsD400MvBcGs0Xz5AUE2R94/pvPr2JUH3J
AzivjDDReYsVT4BewJ5SM1+4wVsSfVXhtTn7huVh2MtnVLoYOUud5OSZlHopI/mu
IFSlYe7eNG5y5y2+mg==
-----END CERTIFICATE-----
Generated at Thu Jun 12 10:49:35 2025 by rpki-client