Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5yQJ3eeN27HHZKx1tMtFGcJDmmEy3SWG2z5QaSw8xR5V/0/3138392e38352e3132312e302f32342d3234203d3e20323733353930.roa
File:                     3138392e38352e3132312e302f32342d3234203d3e20323733353930.roa (raw, json)
Hash identifier:          bphIwDugTYD5UOGrfkC0F6Jx/mtshipJQ8IQdtWr9Ds=
Subject key identifier:   41:D0:04:11:1B:F3:E6:A5:7A:CC:78:DE:1D:E0:CE:35:46:B1:35:9D
Certificate issuer:       /CN=624E4C478FEA89FB6279398C403AD178972E10A6
Certificate serial:       46542F330030E3F3A97C1AD14A86C01161EF2998
Authority key identifier: 62:4E:4C:47:8F:EA:89:FB:62:79:39:8C:40:3A:D1:78:97:2E:10:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/624E4C478FEA89FB6279398C403AD178972E10A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5yQJ3eeN27HHZKx1tMtFGcJDmmEy3SWG2z5QaSw8xR5V/0/3138392e38352e3132312e302f32342d3234203d3e20323733353930.roa
Signing time:             Thu 26 Jun 2025 18:17:45 +0000
ROA not before:           Thu 26 Jun 2025 18:12:45 +0000
ROA not after:            Thu 25 Jun 2026 18:17:45 +0000
asID:                     273590
IP address blocks:        189.85.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5yQJ3eeN27HHZKx1tMtFGcJDmmEy3SWG2z5QaSw8xR5V/0/624E4C478FEA89FB6279398C403AD178972E10A6.crl
                          rsync://rpki-repo.registro.br/repo/5yQJ3eeN27HHZKx1tMtFGcJDmmEy3SWG2z5QaSw8xR5V/0/624E4C478FEA89FB6279398C403AD178972E10A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/624E4C478FEA89FB6279398C403AD178972E10A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 12:03:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:54:2f:33:00:30:e3:f3:a9:7c:1a:d1:4a:86:c0:11:61:ef:29:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=624E4C478FEA89FB6279398C403AD178972E10A6
        Validity
            Not Before: Jun 26 18:12:45 2025 GMT
            Not After : Jun 25 18:17:45 2026 GMT
        Subject: CN=41D004111BF3E6A57ACC78DE1DE0CE3546B1359D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c7:34:04:e3:3e:c9:84:64:22:c4:33:d6:78:
                    47:53:aa:2c:11:53:1a:2a:46:37:6f:52:14:ee:db:
                    14:de:dc:53:a9:bf:43:11:97:89:6e:23:19:2d:1a:
                    0c:6e:63:89:87:17:4f:41:fd:e3:86:41:7a:fc:89:
                    6a:02:59:4e:4c:97:e8:93:c2:ec:54:b3:24:61:f9:
                    cb:ac:0f:2b:01:67:da:4d:ee:78:2c:71:ae:d9:7d:
                    d7:ac:10:35:0d:11:31:36:f5:26:ea:01:b3:85:8f:
                    21:01:a6:e5:15:0e:75:60:db:f8:6a:38:ea:e7:bd:
                    f2:40:99:72:62:a3:b9:63:a0:02:0e:41:e9:c6:0b:
                    a6:5f:3f:50:96:14:06:4e:10:34:1e:26:e9:dd:93:
                    65:9a:0c:6c:f1:3a:2a:6f:ec:f2:28:af:ac:37:b0:
                    3a:f6:43:30:c9:b7:42:05:99:46:58:78:7d:55:ff:
                    3c:85:c0:5e:ef:ba:16:1c:45:d3:28:ab:30:44:a6:
                    0b:b0:f2:b7:4b:70:11:d6:b3:43:cf:a3:06:3a:4d:
                    d5:f9:72:01:92:c6:79:5b:af:3a:87:49:15:01:73:
                    83:aa:7d:56:c1:99:c9:f6:01:d4:ca:e5:fa:19:a8:
                    6f:9f:26:31:ae:d3:27:7e:66:49:f3:c5:82:cb:ad:
                    d2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:D0:04:11:1B:F3:E6:A5:7A:CC:78:DE:1D:E0:CE:35:46:B1:35:9D
            X509v3 Authority Key Identifier:
                keyid:62:4E:4C:47:8F:EA:89:FB:62:79:39:8C:40:3A:D1:78:97:2E:10:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5yQJ3eeN27HHZKx1tMtFGcJDmmEy3SWG2z5QaSw8xR5V/0/624E4C478FEA89FB6279398C403AD178972E10A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/624E4C478FEA89FB6279398C403AD178972E10A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5yQJ3eeN27HHZKx1tMtFGcJDmmEy3SWG2z5QaSw8xR5V/0/3138392e38352e3132312e302f32342d3234203d3e20323733353930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.85.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:79:c4:75:43:85:27:8c:44:96:66:4e:d2:b1:d9:96:d3:77:
         5a:b0:69:21:81:4a:68:ae:8a:b9:ae:29:e9:52:a0:15:c2:f7:
         30:6c:12:c2:34:66:14:03:7a:9b:3e:bc:a6:36:f6:09:0e:af:
         31:0a:d5:de:e9:12:91:ef:97:66:94:3c:30:70:14:02:44:eb:
         ea:1d:87:91:03:f2:31:1b:cf:38:87:7b:c6:cf:14:c5:ac:5d:
         ca:97:9a:2f:d7:95:c0:eb:74:d5:a8:5f:08:d3:db:ff:2b:9b:
         57:f4:3c:37:c9:aa:8c:c7:f1:67:9c:e7:ce:75:da:75:12:cd:
         d5:0e:c7:57:99:ff:6b:9b:80:2e:a7:e5:b0:1f:a5:1f:0f:de:
         4a:86:51:48:83:f5:22:93:23:14:ab:e0:d1:5a:33:b6:1c:bb:
         96:ca:9b:f2:d0:23:d1:b2:6a:30:de:5d:86:a0:9b:75:81:2a:
         a0:22:b0:d2:a0:6f:7e:e1:83:ff:c5:ae:b1:cc:b6:7e:c0:89:
         90:86:b1:60:ee:37:d3:1d:05:83:10:84:c3:f1:2a:6f:16:b0:
         08:f0:2b:4d:68:c4:f0:cb:79:0e:d2:da:bd:62:f6:9d:8c:2b:
         d4:18:59:14:e8:de:5b:59:87:54:71:da:5a:d6:72:61:44:8f:
         4d:62:04:95
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIURlQvMwAw4/OpfBrRSobAEWHvKZgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjI0RTRDNDc4RkVBODlGQjYyNzkzOThDNDAzQUQxNzg5
NzJFMTBBNjAeFw0yNTA2MjYxODEyNDVaFw0yNjA2MjUxODE3NDVaMDMxMTAvBgNV
BAMTKDQxRDAwNDExMUJGM0U2QTU3QUNDNzhERTFERTBDRTM1NDZCMTM1OUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcxzQE4z7JhGQixDPWeEdTqiwR
UxoqRjdvUhTu2xTe3FOpv0MRl4luIxktGgxuY4mHF09B/eOGQXr8iWoCWU5Ml+iT
wuxUsyRh+cusDysBZ9pN7ngsca7ZfdesEDUNETE29SbqAbOFjyEBpuUVDnVg2/hq
OOrnvfJAmXJio7ljoAIOQenGC6ZfP1CWFAZOEDQeJundk2WaDGzxOipv7PIor6w3
sDr2QzDJt0IFmUZYeH1V/zyFwF7vuhYcRdMoqzBEpguw8rdLcBHWs0PPowY6TdX5
cgGSxnlbrzqHSRUBc4OqfVbBmcn2AdTK5foZqG+fJjGu0yd+ZknzxYLLrdKTAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUQdAEERvz5qV6zHjeHeDONUaxNZ0wHwYDVR0j
BBgwFoAUYk5MR4/qiftieTmMQDrReJcuEKYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXlRSjNlZU4yN0hIWkt4MXRNdEZHY0pEbW1FeTNTV0cyejVRYVN3OHhS
NVYvMC82MjRFNEM0NzhGRUE4OUZCNjI3OTM5OEM0MDNBRDE3ODk3MkUxMEE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYyNEU0QzQ3OEZFQTg5RkI2
Mjc5Mzk4QzQwM0FEMTc4OTcyRTEwQTYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV5UUozZWVOMjdISFpLeDF0TXRGR2NKRG1tRXkzU1dHMno1UWFTdzh4UjVWLzAv
MzEzODM5MmUzODM1MmUzMTMyMzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzMzNTM5MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC9VXkwDQYJKoZIhvcNAQELBQADggEBAIN5xHVD
hSeMRJZmTtKx2ZbTd1qwaSGBSmiuirmuKelSoBXC9zBsEsI0ZhQDeps+vKY29gkO
rzEK1d7pEpHvl2aUPDBwFAJE6+odh5ED8jEbzziHe8bPFMWsXcqXmi/XlcDrdNWo
XwjT2/8rm1f0PDfJqozH8Wec58512nUSzdUOx1eZ/2ubgC6n5bAfpR8P3kqGUUiD
9SKTIxSr4NFaM7Ycu5bKm/LQI9GyajDeXYagm3WBKqAisNKgb37hg//FrrHMtn7A
iZCGsWDuN9MdBYMQhMPxKm8WsAjwK01oxPDLeQ7S2r1i9p2MK9QYWRTo3ltZh1Rx
2lrWcmFEj01iBJU=
-----END CERTIFICATE-----
Generated at Fri Jul 4 20:42:46 2025 by rpki-client