Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7GU7zbypWHSNRvxwqbvG3Bm5CFR4qudfLceogDXaqA3M/1/3138362e3235302e36302e302f32322d3234203d3e20323731303331.roa
File:                     3138362e3235302e36302e302f32322d3234203d3e20323731303331.roa (raw, json)
Hash identifier:          kyAWENgiJqst2FjNQ6ZbFSyi8jqYWk7xBWKWX3A1QqM=
Subject key identifier:   E4:39:BB:59:05:97:FD:38:04:70:E2:77:8D:6B:1E:CA:31:43:31:55
Certificate issuer:       /CN=E116A9492035CFBB15FA99D51C520F4FAD579530
Certificate serial:       29E4377AAF9C7CEC89F4B12DA15772B43BC72FE0
Authority key identifier: E1:16:A9:49:20:35:CF:BB:15:FA:99:D5:1C:52:0F:4F:AD:57:95:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E116A9492035CFBB15FA99D51C520F4FAD579530.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7GU7zbypWHSNRvxwqbvG3Bm5CFR4qudfLceogDXaqA3M/1/3138362e3235302e36302e302f32322d3234203d3e20323731303331.roa
Signing time:             Wed 05 Mar 2025 20:31:05 +0000
ROA not before:           Wed 05 Mar 2025 20:26:05 +0000
ROA not after:            Wed 04 Mar 2026 20:31:05 +0000
asID:                     271031
IP address blocks:        186.250.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7GU7zbypWHSNRvxwqbvG3Bm5CFR4qudfLceogDXaqA3M/1/E116A9492035CFBB15FA99D51C520F4FAD579530.crl
                          rsync://rpki-repo.registro.br/repo/7GU7zbypWHSNRvxwqbvG3Bm5CFR4qudfLceogDXaqA3M/1/E116A9492035CFBB15FA99D51C520F4FAD579530.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E116A9492035CFBB15FA99D51C520F4FAD579530.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 10:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:e4:37:7a:af:9c:7c:ec:89:f4:b1:2d:a1:57:72:b4:3b:c7:2f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E116A9492035CFBB15FA99D51C520F4FAD579530
        Validity
            Not Before: Mar  5 20:26:05 2025 GMT
            Not After : Mar  4 20:31:05 2026 GMT
        Subject: CN=E439BB590597FD380470E2778D6B1ECA31433155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ca:14:47:85:f4:d8:aa:a7:bc:9f:22:51:6f:
                    c2:36:19:54:ef:6e:1b:29:98:d1:0c:60:65:62:08:
                    ab:43:fe:f7:70:43:06:a4:c9:92:a4:33:fb:ea:c6:
                    18:ef:df:ec:36:56:03:4b:75:d7:e2:e1:a7:ae:c4:
                    75:65:ac:7a:2e:49:5b:3b:26:44:8e:6e:81:01:f5:
                    e7:0e:12:04:96:ae:66:d1:ec:56:2b:e9:6e:41:49:
                    5d:53:76:cd:d3:34:92:1d:ca:b8:e7:bf:56:a5:b4:
                    21:7d:c9:56:6a:8b:58:ed:f4:0f:74:50:ee:54:39:
                    b1:a8:c0:9d:47:d2:4e:20:4c:5e:84:66:ad:45:4d:
                    78:22:10:32:79:95:02:7e:bf:62:a7:28:0f:40:23:
                    ab:52:5c:b2:5f:f1:a8:f6:5f:78:cb:72:8a:75:64:
                    56:4a:f6:9b:46:bc:8a:c3:f5:6c:7b:6b:0c:5a:d5:
                    10:0c:3d:be:ec:00:de:78:2d:d0:83:94:3a:34:81:
                    60:80:b8:d1:ad:da:d1:9e:19:ec:a9:14:6c:89:54:
                    19:9e:ad:e7:04:84:86:82:ed:71:05:be:e4:ec:68:
                    7a:f5:97:74:d4:64:0e:d9:94:aa:82:a5:10:9e:d3:
                    9d:84:90:03:18:81:9f:d0:73:69:b0:92:07:33:eb:
                    cb:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:39:BB:59:05:97:FD:38:04:70:E2:77:8D:6B:1E:CA:31:43:31:55
            X509v3 Authority Key Identifier:
                keyid:E1:16:A9:49:20:35:CF:BB:15:FA:99:D5:1C:52:0F:4F:AD:57:95:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7GU7zbypWHSNRvxwqbvG3Bm5CFR4qudfLceogDXaqA3M/1/E116A9492035CFBB15FA99D51C520F4FAD579530.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E116A9492035CFBB15FA99D51C520F4FAD579530.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7GU7zbypWHSNRvxwqbvG3Bm5CFR4qudfLceogDXaqA3M/1/3138362e3235302e36302e302f32322d3234203d3e20323731303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:b4:b4:a8:e9:08:cf:35:91:79:cc:09:72:b0:70:b5:35:7c:
         ec:1b:4e:0a:b0:78:76:11:02:0d:6d:80:38:6f:10:2b:69:fe:
         ca:39:bd:45:e4:d1:dd:93:c7:6e:13:3f:20:8c:20:12:04:01:
         bc:aa:f9:86:3f:a7:ac:08:50:38:e9:d6:1e:f9:b0:7e:3c:85:
         12:01:be:91:4d:7c:84:1a:75:6f:31:45:9b:a0:f5:c1:00:62:
         1c:a3:85:26:e3:9f:a3:67:d3:a7:e0:06:e5:6e:4c:c3:a2:22:
         ab:dd:08:22:ec:b4:a4:e7:ae:7c:c3:c7:76:c1:93:93:8b:38:
         2e:68:01:e7:a1:bf:36:ca:6c:68:52:20:d2:ce:3a:1e:b4:2e:
         d5:3e:fd:c5:d8:06:76:72:85:f9:2c:c9:5c:1f:1d:54:7c:94:
         c9:da:6f:c7:90:7c:21:55:a5:93:cb:ce:e6:6d:69:c7:db:75:
         ac:67:0d:c7:5b:fc:53:80:27:37:31:e4:e2:6c:5a:8d:3b:7b:
         f6:33:52:a4:d0:2c:c2:cf:c8:20:45:fe:1d:9f:51:9f:00:35:
         ae:21:c5:0e:0c:f2:e9:ea:86:19:57:93:3d:3c:22:2b:ee:16:
         0e:25:86:f5:0b:96:71:1d:44:13:c2:eb:04:b5:a4:4d:31:09:
         70:c9:fb:d5
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUKeQ3eq+cfOyJ9LEtoVdytDvHL+AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTExNkE5NDkyMDM1Q0ZCQjE1RkE5OUQ1MUM1MjBGNEZB
RDU3OTUzMDAeFw0yNTAzMDUyMDI2MDVaFw0yNjAzMDQyMDMxMDVaMDMxMTAvBgNV
BAMTKEU0MzlCQjU5MDU5N0ZEMzgwNDcwRTI3NzhENkIxRUNBMzE0MzMxNTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClyhRHhfTYqqe8nyJRb8I2GVTv
bhspmNEMYGViCKtD/vdwQwakyZKkM/vqxhjv3+w2VgNLddfi4aeuxHVlrHouSVs7
JkSOboEB9ecOEgSWrmbR7FYr6W5BSV1Tds3TNJIdyrjnv1altCF9yVZqi1jt9A90
UO5UObGowJ1H0k4gTF6EZq1FTXgiEDJ5lQJ+v2KnKA9AI6tSXLJf8aj2X3jLcop1
ZFZK9ptGvIrD9Wx7awxa1RAMPb7sAN54LdCDlDo0gWCAuNGt2tGeGeypFGyJVBme
recEhIaC7XEFvuTsaHr1l3TUZA7ZlKqCpRCe052EkAMYgZ/Qc2mwkgcz68vDAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU5Dm7WQWX/TgEcOJ3jWseyjFDMVUwHwYDVR0j
BBgwFoAU4RapSSA1z7sV+pnVHFIPT61XlTAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0dVN3pieXBXSFNOUnZ4d3FidkczQm01Q0ZSNHF1ZGZMY2VvZ0RYYXFB
M00vMS9FMTE2QTk0OTIwMzVDRkJCMTVGQTk5RDUxQzUyMEY0RkFENTc5NTMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UxMTZBOTQ5MjAzNUNGQkIx
NUZBOTlENTFDNTIwRjRGQUQ1Nzk1MzAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdHVTd6YnlwV0hTTlJ2eHdxYnZHM0JtNUNGUjRxdWRmTGNlb2dEWGFxQTNNLzEv
MzEzODM2MmUzMjM1MzAyZTM2MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3
MzEzMDMzMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK6+jwwDQYJKoZIhvcNAQELBQADggEBACu0tKjp
CM81kXnMCXKwcLU1fOwbTgqweHYRAg1tgDhvECtp/so5vUXk0d2Tx24TPyCMIBIE
Abyq+YY/p6wIUDjp1h75sH48hRIBvpFNfIQadW8xRZug9cEAYhyjhSbjn6Nn06fg
BuVuTMOiIqvdCCLstKTnrnzDx3bBk5OLOC5oAeehvzbKbGhSINLOOh60LtU+/cXY
BnZyhfksyVwfHVR8lMnab8eQfCFVpZPLzuZtacfbdaxnDcdb/FOAJzcx5OJsWo07
e/YzUqTQLMLPyCBF/h2fUZ8ANa4hxQ4M8unqhhlXkz08IivuFg4lhvULlnEdRBPC
6wS1pE0xCXDJ+9U=
-----END CERTIFICATE-----
Generated at Sun Apr 13 00:01:00 2025 by rpki-client