Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/3137392e34382e31322e302f32322d3232203d3e20323731313630.roa
File:                     3137392e34382e31322e302f32322d3232203d3e20323731313630.roa (raw, json)
Hash identifier:          rskIrxxYUExi7PHLwav+dE62vtLiBrj7a6GYBNV+wTI=
Subject key identifier:   60:F3:43:C8:FE:22:11:26:65:50:6F:0E:67:7A:74:20:BB:A4:D4:80
Certificate issuer:       /CN=D1171AF24520C9934655F1D0B335CC88750F0C2F
Certificate serial:       650D55EEDB8D31D2B209578404E66035EA6DA367
Authority key identifier: D1:17:1A:F2:45:20:C9:93:46:55:F1:D0:B3:35:CC:88:75:0F:0C:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1171AF24520C9934655F1D0B335CC88750F0C2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/3137392e34382e31322e302f32322d3232203d3e20323731313630.roa
Signing time:             Mon 14 Apr 2025 19:04:35 +0000
ROA not before:           Mon 14 Apr 2025 18:59:35 +0000
ROA not after:            Mon 13 Apr 2026 19:04:35 +0000
asID:                     271160
IP address blocks:        179.48.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/D1171AF24520C9934655F1D0B335CC88750F0C2F.crl
                          rsync://rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/D1171AF24520C9934655F1D0B335CC88750F0C2F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1171AF24520C9934655F1D0B335CC88750F0C2F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 24 Apr 2025 01:57:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:0d:55:ee:db:8d:31:d2:b2:09:57:84:04:e6:60:35:ea:6d:a3:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1171AF24520C9934655F1D0B335CC88750F0C2F
        Validity
            Not Before: Apr 14 18:59:35 2025 GMT
            Not After : Apr 13 19:04:35 2026 GMT
        Subject: CN=60F343C8FE22112665506F0E677A7420BBA4D480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e8:bd:1c:44:9f:31:da:73:7f:49:b3:b2:ed:
                    b4:e4:ab:7c:cc:63:51:62:76:aa:99:06:cc:04:24:
                    0f:cc:16:95:3a:94:13:da:4b:2f:be:bd:70:50:d4:
                    52:ee:57:da:81:1b:99:7f:2e:02:db:4b:50:8b:42:
                    6c:8d:b3:e4:cb:53:4f:f2:c8:12:4d:0e:18:93:c7:
                    a7:0f:94:34:3e:12:b6:ad:ba:6b:bd:b5:3f:e6:35:
                    2c:bd:ec:fe:7a:1f:99:1d:7b:54:ad:ae:ee:4c:97:
                    a0:64:c7:53:1c:a6:a3:5e:dc:3c:eb:54:f5:49:da:
                    06:de:17:84:9c:3f:30:01:df:1d:17:25:35:0e:2f:
                    ed:89:f0:48:c4:62:8b:08:91:da:76:1f:3b:1d:0d:
                    58:31:21:fe:42:77:01:e0:4e:3c:5d:a3:a4:67:d5:
                    27:47:dd:a9:dd:e9:02:a5:3a:e5:91:60:67:b2:d2:
                    bc:95:b5:01:f6:00:57:cd:70:21:fe:e7:95:67:e4:
                    fe:b3:c0:29:3d:53:f6:c8:24:e3:57:78:a5:ab:99:
                    0b:7d:21:19:93:b4:2d:60:43:01:4f:4e:d3:ea:76:
                    6d:39:c9:0e:f2:4c:81:fd:ab:12:39:7d:bb:f4:2a:
                    6f:13:66:09:29:f4:bb:19:40:85:31:f9:48:3b:ee:
                    12:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:F3:43:C8:FE:22:11:26:65:50:6F:0E:67:7A:74:20:BB:A4:D4:80
            X509v3 Authority Key Identifier:
                keyid:D1:17:1A:F2:45:20:C9:93:46:55:F1:D0:B3:35:CC:88:75:0F:0C:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/D1171AF24520C9934655F1D0B335CC88750F0C2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1171AF24520C9934655F1D0B335CC88750F0C2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/3137392e34382e31322e302f32322d3232203d3e20323731313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:3b:47:a7:63:48:28:a4:88:82:dc:19:ce:2e:4d:39:fd:13:
         a6:bd:85:85:32:5c:1a:0b:9c:06:dd:a5:a1:a6:17:8f:f5:fe:
         25:cc:5c:b1:d1:17:83:8d:0e:ab:18:ad:f9:88:0d:01:71:ed:
         68:88:dc:8b:1d:c7:c6:48:d8:e6:6c:de:a2:3c:1e:0a:73:67:
         a6:7b:c8:ea:51:91:00:36:95:56:86:de:c0:3a:7c:12:20:ff:
         a5:3b:d5:2c:b4:e7:45:28:29:6c:b0:62:3b:17:e2:55:17:fc:
         12:76:3f:80:b8:f4:cc:36:98:0f:43:60:e7:9a:95:cb:67:b8:
         3a:e3:6d:ca:9b:e2:31:6b:8e:9d:04:1f:95:80:38:ef:03:02:
         ff:fd:a0:61:ce:c4:64:0d:75:45:20:3d:53:98:b3:1c:e8:93:
         13:8b:a6:8a:c2:47:53:1a:f7:5c:7f:b2:cd:17:ee:99:fd:41:
         f0:ad:35:28:08:41:bf:d6:3c:f3:f6:2f:60:d5:bc:90:11:80:
         74:f0:c8:d9:b6:e3:d5:a0:87:a5:af:86:d8:ec:d6:9c:81:43:
         a1:d6:d6:c8:27:82:6b:ae:da:dc:fa:e9:10:d5:2b:2b:49:17:
         0a:50:23:d6:e7:55:5f:ba:b8:9c:1e:67:40:65:76:a1:81:18:
         3c:42:58:d4
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUZQ1V7tuNMdKyCVeEBOZgNepto2cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDExNzFBRjI0NTIwQzk5MzQ2NTVGMUQwQjMzNUNDODg3
NTBGMEMyRjAeFw0yNTA0MTQxODU5MzVaFw0yNjA0MTMxOTA0MzVaMDMxMTAvBgNV
BAMTKDYwRjM0M0M4RkUyMjExMjY2NTUwNkYwRTY3N0E3NDIwQkJBNEQ0ODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC26L0cRJ8x2nN/SbOy7bTkq3zM
Y1FidqqZBswEJA/MFpU6lBPaSy++vXBQ1FLuV9qBG5l/LgLbS1CLQmyNs+TLU0/y
yBJNDhiTx6cPlDQ+Eratumu9tT/mNSy97P56H5kde1Stru5Ml6Bkx1McpqNe3Dzr
VPVJ2gbeF4ScPzAB3x0XJTUOL+2J8EjEYosIkdp2HzsdDVgxIf5CdwHgTjxdo6Rn
1SdH3and6QKlOuWRYGey0ryVtQH2AFfNcCH+55Vn5P6zwCk9U/bIJONXeKWrmQt9
IRmTtC1gQwFPTtPqdm05yQ7yTIH9qxI5fbv0Km8TZgkp9LsZQIUx+Ug77hLxAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUYPNDyP4iESZlUG8OZ3p0ILuk1IAwHwYDVR0j
BBgwFoAU0Rca8kUgyZNGVfHQszXMiHUPDC8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEpkSnFGY05heTNkcnJKbTZyOEREczNWR05XZEpMZnJRZTg2WjNkV2Nl
ZlYvMC9EMTE3MUFGMjQ1MjBDOTkzNDY1NUYxRDBCMzM1Q0M4ODc1MEYwQzJGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QxMTcxQUYyNDUyMEM5OTM0
NjU1RjFEMEIzMzVDQzg4NzUwRjBDMkYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhKZEpxRmNOYXkzZHJySm02cjhERHMzVkdOV2RKTGZyUWU4NlozZFdjZWZWLzAv
MzEzNzM5MmUzNDM4MmUzMTMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNzMx
MzEzNjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCszAMMA0GCSqGSIb3DQEBCwUAA4IBAQBKO0enY0go
pIiC3BnOLk05/ROmvYWFMlwaC5wG3aWhpheP9f4lzFyx0ReDjQ6rGK35iA0Bce1o
iNyLHcfGSNjmbN6iPB4Kc2eme8jqUZEANpVWht7AOnwSIP+lO9UstOdFKClssGI7
F+JVF/wSdj+AuPTMNpgPQ2DnmpXLZ7g6423Km+Ixa46dBB+VgDjvAwL//aBhzsRk
DXVFID1TmLMc6JMTi6aKwkdTGvdcf7LNF+6Z/UHwrTUoCEG/1jzz9i9g1byQEYB0
8MjZtuPVoIelr4bY7NacgUOh1tbIJ4Jrrtrc+ukQ1SsrSRcKUCPW51VfuricHmdA
ZXahgRg8QljU
-----END CERTIFICATE-----
Generated at Wed Apr 23 05:45:10 2025 by rpki-client