Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/1/3137372e3130352e3136302e302f32302d3234203d3e20323632363435.roa
File:                     3137372e3130352e3136302e302f32302d3234203d3e20323632363435.roa (raw, json)
Hash identifier:          /hPiqIouCk+lSAe/+qci+RjPprHQDUt47Hy93panJrU=
Subject key identifier:   71:5F:7A:ED:5D:31:71:DB:7C:60:0D:DE:D4:D8:3B:8F:53:10:41:AE
Certificate issuer:       /CN=E09F2B81ED12D4B02A5B104DB200DEF0A03303AD
Certificate serial:       40DAAD2FC7CE99E6F2F6AC235D3BD2402086C4F9
Authority key identifier: E0:9F:2B:81:ED:12:D4:B0:2A:5B:10:4D:B2:00:DE:F0:A0:33:03:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E09F2B81ED12D4B02A5B104DB200DEF0A03303AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/1/3137372e3130352e3136302e302f32302d3234203d3e20323632363435.roa
Signing time:             Thu 06 Mar 2025 07:45:46 +0000
ROA not before:           Thu 06 Mar 2025 07:40:46 +0000
ROA not after:            Thu 05 Mar 2026 07:45:46 +0000
asID:                     262645
IP address blocks:        177.105.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/1/E09F2B81ED12D4B02A5B104DB200DEF0A03303AD.crl
                          rsync://rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/1/E09F2B81ED12D4B02A5B104DB200DEF0A03303AD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E09F2B81ED12D4B02A5B104DB200DEF0A03303AD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 05:15:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:da:ad:2f:c7:ce:99:e6:f2:f6:ac:23:5d:3b:d2:40:20:86:c4:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E09F2B81ED12D4B02A5B104DB200DEF0A03303AD
        Validity
            Not Before: Mar  6 07:40:46 2025 GMT
            Not After : Mar  5 07:45:46 2026 GMT
        Subject: CN=715F7AED5D3171DB7C600DDED4D83B8F531041AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f5:27:a4:56:f0:49:1f:9b:33:96:1b:22:87:
                    0f:62:40:b5:12:b4:4a:dc:11:34:56:16:c7:89:f4:
                    8e:bc:88:b2:de:ac:5f:c8:09:80:65:f5:69:02:61:
                    f7:09:de:0c:0a:dd:df:a9:af:b4:b3:70:67:71:15:
                    03:d3:a5:cb:a1:14:d4:68:26:00:0e:b9:6a:c6:ea:
                    39:12:9d:41:de:3d:38:44:1c:89:55:e8:b4:5f:f4:
                    04:18:5a:c8:5e:11:14:5a:e6:52:37:d8:96:21:94:
                    7c:6e:13:59:f9:9a:b1:e3:16:91:91:8e:12:c2:eb:
                    c4:dd:ea:3e:a7:b0:22:3c:69:dd:72:d2:d0:5f:06:
                    63:f6:de:0a:d6:da:0a:5f:79:52:a2:e6:11:7c:42:
                    bc:46:82:52:b9:ee:51:7a:e8:0b:fd:a2:96:53:a4:
                    54:24:39:03:4c:d1:17:00:ae:55:26:54:4f:01:25:
                    35:59:aa:36:d9:45:07:52:9e:c8:d9:f0:2f:e3:db:
                    18:58:91:fd:22:7f:ae:70:4b:a0:f2:55:1b:81:c8:
                    99:38:5a:3b:a9:a8:7a:b2:81:67:17:28:3d:ac:1a:
                    b2:36:41:13:3c:00:1f:03:fa:ce:42:93:85:0a:ed:
                    6e:e0:ae:ab:2d:3a:c8:9c:49:f1:a4:ae:27:4f:42:
                    2a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:5F:7A:ED:5D:31:71:DB:7C:60:0D:DE:D4:D8:3B:8F:53:10:41:AE
            X509v3 Authority Key Identifier:
                keyid:E0:9F:2B:81:ED:12:D4:B0:2A:5B:10:4D:B2:00:DE:F0:A0:33:03:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/1/E09F2B81ED12D4B02A5B104DB200DEF0A03303AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E09F2B81ED12D4B02A5B104DB200DEF0A03303AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/1/3137372e3130352e3136302e302f32302d3234203d3e20323632363435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         70:00:94:80:38:aa:65:88:d9:cc:17:9b:18:4a:a0:7c:6a:2a:
         f8:cf:b9:6f:ef:f1:4c:2f:7c:1a:8f:fe:25:fc:ed:d0:e0:c9:
         cb:a1:a4:5d:c4:d9:a1:7d:f3:bd:18:e6:58:2c:9a:67:d9:45:
         65:ee:f4:51:c3:18:a2:5b:42:69:4f:74:f3:84:86:da:b3:75:
         44:63:0e:cd:60:ea:17:ee:79:eb:35:5e:e5:af:a2:e1:b1:1a:
         3d:be:8d:72:9b:70:e9:16:bd:b8:18:43:88:ca:39:c7:e4:ba:
         89:8f:65:0c:05:d9:68:ae:05:93:18:3f:df:a6:cd:95:b4:64:
         12:c5:51:73:d5:ac:71:55:5a:90:a7:79:98:71:5b:9e:49:20:
         30:b8:82:50:49:7a:9f:9a:1c:99:2c:43:f5:79:26:25:ca:fb:
         ac:e7:36:e7:dd:4c:2a:c7:17:d8:7a:36:43:0c:ec:f5:b0:04:
         3a:7f:3c:dc:14:51:ba:9a:b9:5e:95:29:c4:46:74:fb:92:e5:
         4f:d9:fd:52:90:65:51:34:c3:e6:81:14:b4:0c:f8:17:a8:c4:
         df:22:a0:88:17:1d:f2:eb:41:29:85:2a:43:24:27:be:9c:14:
         64:2c:08:4e:5e:ed:52:d0:c8:a4:61:2c:4f:bd:de:5b:38:3f:
         b4:c8:02:e2
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUQNqtL8fOmeby9qwjXTvSQCCGxPkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTA5RjJCODFFRDEyRDRCMDJBNUIxMDREQjIwMERFRjBB
MDMzMDNBRDAeFw0yNTAzMDYwNzQwNDZaFw0yNjAzMDUwNzQ1NDZaMDMxMTAvBgNV
BAMTKDcxNUY3QUVENUQzMTcxREI3QzYwMERERUQ0RDgzQjhGNTMxMDQxQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI9SekVvBJH5szlhsihw9iQLUS
tErcETRWFseJ9I68iLLerF/ICYBl9WkCYfcJ3gwK3d+pr7SzcGdxFQPTpcuhFNRo
JgAOuWrG6jkSnUHePThEHIlV6LRf9AQYWsheERRa5lI32JYhlHxuE1n5mrHjFpGR
jhLC68Td6j6nsCI8ad1y0tBfBmP23grW2gpfeVKi5hF8QrxGglK57lF66Av9opZT
pFQkOQNM0RcArlUmVE8BJTVZqjbZRQdSnsjZ8C/j2xhYkf0if65wS6DyVRuByJk4
WjupqHqygWcXKD2sGrI2QRM8AB8D+s5Ck4UK7W7grqstOsicSfGkridPQipHAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUcV967V0xcdt8YA3e1Ng7j1MQQa4wHwYDVR0j
BBgwFoAU4J8rge0S1LAqWxBNsgDe8KAzA60wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOU1mSFJ6elNaMjY5Y25RYm96Z3lSYk5wd3A0Z0xuV0JOV0ZQV1pFbVdH
WHMvMS9FMDlGMkI4MUVEMTJENEIwMkE1QjEwNERCMjAwREVGMEEwMzMwM0FELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UwOUYyQjgxRUQxMkQ0QjAy
QTVCMTA0REIyMDBERUYwQTAzMzAzQUQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlNZkhSenpTWjI2OWNuUWJvemd5UmJOcHdwNGdMbldCTldGUFdaRW1XR1hzLzEv
MzEzNzM3MmUzMTMwMzUyZTMxMzYzMDJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDMy
MzYzMjM2MzQzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEBLFpoDANBgkqhkiG9w0BAQsFAAOCAQEAcACU
gDiqZYjZzBebGEqgfGoq+M+5b+/xTC98Go/+Jfzt0ODJy6GkXcTZoX3zvRjmWCya
Z9lFZe70UcMYoltCaU9084SG2rN1RGMOzWDqF+556zVe5a+i4bEaPb6Ncptw6Ra9
uBhDiMo5x+S6iY9lDAXZaK4Fkxg/36bNlbRkEsVRc9WscVVakKd5mHFbnkkgMLiC
UEl6n5ocmSxD9XkmJcr7rOc2591MKscX2Ho2Qwzs9bAEOn883BRRupq5XpUpxEZ0
+5LlT9n9UpBlUTTD5oEUtAz4F6jE3yKgiBcd8utBKYUqQyQnvpwUZCwITl7tUtDI
pGEsT73eWzg/tMgC4g==
-----END CERTIFICATE-----
Generated at Sun Apr 6 09:16:47 2025 by rpki-client