Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/1/3231362e39382e3231382e302f32342d3234203d3e20323636323236.roa
File:                     3231362e39382e3231382e302f32342d3234203d3e20323636323236.roa (raw, json)
Hash identifier:          LwI+QB/TjMVf8G/QgSFG16qXD7El/5C8Z42mnNFNJW8=
Subject key identifier:   83:5E:D3:44:85:37:AB:3C:63:6A:EC:45:2C:0C:0E:3C:1D:8C:DB:B3
Certificate issuer:       /CN=049A7D9E6745910CF5F3435E31224EA7BBDE9280
Certificate serial:       24540BC49CE83BBEDF69034829DA0933B031746A
Authority key identifier: 04:9A:7D:9E:67:45:91:0C:F5:F3:43:5E:31:22:4E:A7:BB:DE:92:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/049A7D9E6745910CF5F3435E31224EA7BBDE9280.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/1/3231362e39382e3231382e302f32342d3234203d3e20323636323236.roa
Signing time:             Thu 06 Mar 2025 15:53:46 +0000
ROA not before:           Thu 06 Mar 2025 15:48:46 +0000
ROA not after:            Thu 05 Mar 2026 15:53:46 +0000
asID:                     266226
IP address blocks:        216.98.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/1/049A7D9E6745910CF5F3435E31224EA7BBDE9280.crl
                          rsync://rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/1/049A7D9E6745910CF5F3435E31224EA7BBDE9280.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/049A7D9E6745910CF5F3435E31224EA7BBDE9280.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 20 Apr 2025 01:25:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:54:0b:c4:9c:e8:3b:be:df:69:03:48:29:da:09:33:b0:31:74:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=049A7D9E6745910CF5F3435E31224EA7BBDE9280
        Validity
            Not Before: Mar  6 15:48:46 2025 GMT
            Not After : Mar  5 15:53:46 2026 GMT
        Subject: CN=835ED3448537AB3C636AEC452C0C0E3C1D8CDBB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:aa:ab:6e:8c:7f:9a:f6:df:62:0e:ac:0b:59:
                    8b:da:13:f3:b0:5c:2e:a8:95:06:b0:28:3a:bd:63:
                    f1:ad:60:ab:d0:7f:6f:ca:fa:79:0e:8b:bd:25:62:
                    74:a8:8e:ce:83:c2:3f:9b:cf:36:b3:3e:4a:63:b9:
                    55:2d:c7:d6:95:95:a3:55:44:7c:1b:b9:96:19:d6:
                    5d:39:1d:1c:e5:6c:fb:af:04:86:ea:11:57:f2:2f:
                    21:f3:f7:07:83:29:1c:c2:b6:47:e1:1c:22:c0:0d:
                    ba:85:d4:d8:fa:99:be:51:1e:51:f1:31:f5:0f:c4:
                    9b:d8:cf:8d:cd:74:7a:dc:13:52:ea:63:af:e4:36:
                    d0:5a:d3:07:3e:55:5c:22:7f:f3:ab:10:d3:3d:87:
                    82:9a:dc:a0:cd:95:bb:ad:52:0f:6e:9e:fe:6f:63:
                    d5:f9:ad:1f:5e:ac:05:cf:5d:b1:12:87:85:cc:28:
                    2c:3f:6e:6d:93:94:d5:09:08:81:0b:f8:71:ad:81:
                    6d:9d:c5:ff:35:3c:9d:87:ff:57:e4:69:06:0a:85:
                    40:da:34:72:9f:78:29:98:db:65:93:e7:3f:bd:30:
                    03:1c:23:da:49:95:27:59:f1:65:ce:e7:1d:1b:fb:
                    9f:63:74:df:3c:d1:b9:c4:c2:41:7d:8d:43:69:c8:
                    bb:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:5E:D3:44:85:37:AB:3C:63:6A:EC:45:2C:0C:0E:3C:1D:8C:DB:B3
            X509v3 Authority Key Identifier:
                keyid:04:9A:7D:9E:67:45:91:0C:F5:F3:43:5E:31:22:4E:A7:BB:DE:92:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/1/049A7D9E6745910CF5F3435E31224EA7BBDE9280.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/049A7D9E6745910CF5F3435E31224EA7BBDE9280.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/1/3231362e39382e3231382e302f32342d3234203d3e20323636323236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.98.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:36:ac:80:19:c0:ea:7c:ec:c2:bf:b6:22:94:da:f9:7b:43:
         6b:c3:3c:b5:41:6c:5c:97:cc:32:d3:30:e3:06:f6:52:32:0e:
         1c:29:1c:70:c8:83:0c:7c:16:f4:f7:89:9c:37:12:9b:82:c8:
         c6:80:6f:d7:e3:51:e8:8c:01:6c:ee:79:cb:37:f5:30:e7:b4:
         e8:f0:6f:cb:de:01:f6:8b:1d:ea:9c:f8:0d:83:12:2d:84:35:
         32:e6:f4:4a:a3:58:24:04:c2:4b:85:06:8f:64:88:6b:06:21:
         15:95:5f:ff:c0:14:c3:3f:b5:c4:d7:4c:81:aa:37:05:e5:20:
         61:b1:74:9d:f0:53:36:07:6e:81:ab:b1:06:00:69:f3:fb:4e:
         ef:af:b3:62:80:5f:dc:c9:6f:86:63:ae:9f:83:95:aa:2f:4a:
         fb:57:ba:08:5b:e6:7b:0a:af:34:2e:a3:1e:58:95:08:a3:07:
         3d:93:d7:4a:1d:1a:17:59:3c:dd:2f:40:4f:54:8c:b7:c8:3d:
         a0:cb:3a:65:a5:f4:e1:44:4e:46:96:9c:a1:2e:b9:92:a6:2c:
         99:b5:df:9c:45:05:f8:17:61:0f:cb:9a:c3:49:d9:bf:82:c7:
         7b:3b:29:41:fd:85:4d:5f:17:c1:d4:72:c3:d4:d1:c4:1f:56:
         a2:44:73:59
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUJFQLxJzoO77faQNIKdoJM7AxdGowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ5QTdEOUU2NzQ1OTEwQ0Y1RjM0MzVFMzEyMjRFQTdC
QkRFOTI4MDAeFw0yNTAzMDYxNTQ4NDZaFw0yNjAzMDUxNTUzNDZaMDMxMTAvBgNV
BAMTKDgzNUVEMzQ0ODUzN0FCM0M2MzZBRUM0NTJDMEMwRTNDMUQ4Q0RCQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMqqtujH+a9t9iDqwLWYvaE/Ow
XC6olQawKDq9Y/GtYKvQf2/K+nkOi70lYnSojs6Dwj+bzzazPkpjuVUtx9aVlaNV
RHwbuZYZ1l05HRzlbPuvBIbqEVfyLyHz9weDKRzCtkfhHCLADbqF1Nj6mb5RHlHx
MfUPxJvYz43NdHrcE1LqY6/kNtBa0wc+VVwif/OrENM9h4Ka3KDNlbutUg9unv5v
Y9X5rR9erAXPXbESh4XMKCw/bm2TlNUJCIEL+HGtgW2dxf81PJ2H/1fkaQYKhUDa
NHKfeCmY22WT5z+9MAMcI9pJlSdZ8WXO5x0b+59jdN880bnEwkF9jUNpyLudAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUg17TRIU3qzxjauxFLAwOPB2M27MwHwYDVR0j
BBgwFoAUBJp9nmdFkQz180NeMSJOp7vekoAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEJrOFhpdUFpekdCeWpnQjI4Vm5FcU5CbmlTc3luN2NNY1QxNXlDSjFy
eWgvMS8wNDlBN0Q5RTY3NDU5MTBDRjVGMzQzNUUzMTIyNEVBN0JCREU5MjgwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA0OUE3RDlFNjc0NTkxMENG
NUYzNDM1RTMxMjI0RUE3QkJERTkyODAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhCazhYaXVBaXpHQnlqZ0IyOFZuRXFOQm5pU3N5bjdjTWNUMTV5Q0oxcnloLzEv
MzIzMTM2MmUzOTM4MmUzMjMxMzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzYzMjMyMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADYYtowDQYJKoZIhvcNAQELBQADggEBAEc2rIAZ
wOp87MK/tiKU2vl7Q2vDPLVBbFyXzDLTMOMG9lIyDhwpHHDIgwx8FvT3iZw3EpuC
yMaAb9fjUeiMAWzuecs39TDntOjwb8veAfaLHeqc+A2DEi2ENTLm9EqjWCQEwkuF
Bo9kiGsGIRWVX//AFMM/tcTXTIGqNwXlIGGxdJ3wUzYHboGrsQYAafP7Tu+vs2KA
X9zJb4Zjrp+DlaovSvtXughb5nsKrzQuox5YlQijBz2T10odGhdZPN0vQE9UjLfI
PaDLOmWl9OFETkaWnKEuuZKmLJm135xFBfgXYQ/LmsNJ2b+Cx3s7KUH9hU1fF8HU
csPU0cQfVqJEc1k=
-----END CERTIFICATE-----
Generated at Sat Apr 19 04:56:18 2025 by rpki-client