Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/3138392e35302e3232342e302f31392d3234203d3e203238333334.roa
File:                     3138392e35302e3232342e302f31392d3234203d3e203238333334.roa (raw, json)
Hash identifier:          0oCO5z3FprGuhSLc5dn263bOouL+eHY+61Llwm2MUbY=
Subject key identifier:   CF:DE:67:E1:DF:09:10:E3:84:08:72:50:8F:4A:38:69:8C:FC:7A:4C
Certificate issuer:       /CN=FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1
Certificate serial:       0D0F2C757D7ED359D16AA095F612F9E24A64B2B7
Authority key identifier: FB:44:51:EF:F9:D1:A7:4F:2B:A6:C3:7C:E6:09:E7:16:2C:C4:76:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/3138392e35302e3232342e302f31392d3234203d3e203238333334.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     28334
IP address blocks:        189.50.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.crl
                          rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 19:36:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:0f:2c:75:7d:7e:d3:59:d1:6a:a0:95:f6:12:f9:e2:4a:64:b2:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=CFDE67E1DF0910E3840872508F4A38698CFC7A4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e0:d8:58:a0:ea:ec:d7:bf:f7:6d:ae:bd:cc:
                    de:b4:c1:53:ef:2d:90:2c:86:40:59:a4:42:18:c1:
                    13:7d:5b:f9:c0:50:57:1e:b9:63:36:7d:52:37:d1:
                    f3:e8:3c:ba:69:e4:df:50:5b:0c:a1:13:a8:8f:63:
                    0a:0e:fa:df:ca:a0:30:35:b2:5f:88:38:c3:c8:ee:
                    ee:fb:ee:96:b7:06:91:b7:02:79:fa:a6:65:7d:ad:
                    7f:47:7b:d6:46:55:b4:db:9c:86:b6:16:b8:42:fa:
                    30:09:61:b7:a7:dd:b7:c0:8a:3b:ae:9b:c1:60:4b:
                    79:1d:c1:a6:dd:9b:ac:c1:23:cd:aa:80:67:83:32:
                    33:3c:1c:9f:d9:61:46:f9:2c:50:92:cf:d0:de:d5:
                    36:03:7d:fb:03:f6:da:f2:40:c4:1a:09:ec:06:a9:
                    23:6d:d9:29:ab:b8:3d:85:d4:81:b6:8a:d1:16:c3:
                    04:7e:da:ac:23:bb:16:48:b1:ad:4a:92:67:a3:06:
                    b3:e6:7a:91:06:c5:78:7a:04:16:37:e4:99:a7:6e:
                    4a:74:82:79:c4:3a:ee:f2:fa:2b:c9:01:47:a2:2a:
                    51:a7:a1:77:97:b4:87:5a:93:34:1c:52:5d:e0:bd:
                    27:39:0f:9c:ba:eb:38:cc:c5:41:b9:f9:24:d2:21:
                    2f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:DE:67:E1:DF:09:10:E3:84:08:72:50:8F:4A:38:69:8C:FC:7A:4C
            X509v3 Authority Key Identifier:
                keyid:FB:44:51:EF:F9:D1:A7:4F:2B:A6:C3:7C:E6:09:E7:16:2C:C4:76:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/3138392e35302e3232342e302f31392d3234203d3e203238333334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.50.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         ba:30:70:62:8b:8f:ad:d0:4a:d3:f0:51:c3:6f:72:1f:80:54:
         c6:6b:66:d4:c9:00:45:f0:79:3c:38:96:74:c3:a9:47:e8:a3:
         6a:2f:be:e9:c4:f8:11:3c:38:a4:d3:bd:77:c5:c1:c2:cd:f2:
         8c:4b:d7:d6:4b:33:03:17:9c:0c:03:f9:ed:e2:60:2c:61:58:
         d3:f0:ab:d0:66:d9:55:cd:32:3f:71:8e:6c:ef:3f:b0:06:ad:
         c6:b8:0c:fe:d3:a8:72:05:8d:18:cc:f1:d0:36:f9:75:f6:64:
         31:5d:0a:28:50:82:7c:c2:d1:3d:7a:89:91:f1:cb:9a:08:56:
         00:5b:3e:c0:2c:97:37:bf:00:e7:4a:36:21:34:6b:6a:1b:e2:
         14:3a:29:0d:9d:a1:86:ee:a2:b8:ad:ea:2c:17:bc:fc:33:83:
         40:9e:7a:5f:d2:dd:87:2a:c2:b8:36:5b:f4:8d:39:78:bf:a0:
         7f:0e:11:01:9d:c0:ad:0f:4e:03:8a:59:3c:42:e6:8c:80:cf:
         f8:02:3a:e5:7a:68:fe:a4:67:80:44:ce:96:4b:6d:2d:5e:df:
         9d:18:02:3f:f0:9c:f9:49:f6:81:5b:11:be:23:81:f0:71:aa:
         65:2e:8c:de:d5:4a:84:b2:52:23:c7:59:30:89:96:d1:56:74:
         cd:9a:31:a9
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUDQ8sdX1+01nRaqCV9hL54kpksrcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkI0NDUxRUZGOUQxQTc0RjJCQTZDMzdDRTYwOUU3MTYy
Q0M0NzZFMTAeFw0yNTAzMDUxODU1MDBaFw0yNjAzMDQxOTAwMDBaMDMxMTAvBgNV
BAMTKENGREU2N0UxREYwOTEwRTM4NDA4NzI1MDhGNEEzODY5OENGQzdBNEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC74NhYoOrs17/3ba69zN60wVPv
LZAshkBZpEIYwRN9W/nAUFceuWM2fVI30fPoPLpp5N9QWwyhE6iPYwoO+t/KoDA1
sl+IOMPI7u777pa3BpG3Ann6pmV9rX9He9ZGVbTbnIa2FrhC+jAJYben3bfAijuu
m8FgS3kdwabdm6zBI82qgGeDMjM8HJ/ZYUb5LFCSz9De1TYDffsD9tryQMQaCewG
qSNt2SmruD2F1IG2itEWwwR+2qwjuxZIsa1KkmejBrPmepEGxXh6BBY35Jmnbkp0
gnnEOu7y+ivJAUeiKlGnoXeXtIdakzQcUl3gvSc5D5y66zjMxUG5+STSIS8JAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUz95n4d8JEOOECHJQj0o4aYz8ekwwHwYDVR0j
BBgwFoAU+0RR7/nRp08rpsN85gnnFizEduEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUtvYjNaWG9tMlVWMlFDVEpGQ1VhdkxQTkdKcUhuaEJlb0VvQTk1ajVo
UjUvMS9GQjQ0NTFFRkY5RDFBNzRGMkJBNkMzN0NFNjA5RTcxNjJDQzQ3NkUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZCNDQ1MUVGRjlEMUE3NEYy
QkE2QzM3Q0U2MDlFNzE2MkNDNDc2RTEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FLb2IzWlhvbTJVVjJRQ1RKRkNVYXZMUE5HSnFIbmhCZW9Fb0E5NWo1aFI1LzEv
MzEzODM5MmUzNTMwMmUzMjMyMzQyZTMwMmYzMTM5MmQzMjM0MjAzZDNlMjAzMjM4
MzMzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQFvTLgMA0GCSqGSIb3DQEBCwUAA4IBAQC6MHBii4+t
0ErT8FHDb3IfgFTGa2bUyQBF8Hk8OJZ0w6lH6KNqL77pxPgRPDik0713xcHCzfKM
S9fWSzMDF5wMA/nt4mAsYVjT8KvQZtlVzTI/cY5s7z+wBq3GuAz+06hyBY0YzPHQ
Nvl19mQxXQooUIJ8wtE9eomR8cuaCFYAWz7ALJc3vwDnSjYhNGtqG+IUOikNnaGG
7qK4reosF7z8M4NAnnpf0t2HKsK4Nlv0jTl4v6B/DhEBncCtD04Dilk8QuaMgM/4
Ajrlemj+pGeARM6WS20tXt+dGAI/8Jz5SfaBWxG+I4HwcaplLoze1UqEslIjx1kw
iZbRVnTNmjGp
-----END CERTIFICATE-----
Generated at Fri Apr 18 07:50:46 2025 by rpki-client