Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AZ2CJc4GcT7Qkbb7XAuXmDKWjwmmFdwq2PMoWxfGsTfR/0/3138312e3139312e3232382e302f32322d3234203d3e20323637343439.roa
File:                     3138312e3139312e3232382e302f32322d3234203d3e20323637343439.roa (raw, json)
Hash identifier:          nSRNKvNDl/hwkalX2TxE07srB5dDHYCqYUf+heau96s=
Subject key identifier:   11:E6:18:D8:EE:A5:03:28:49:D7:26:24:83:BF:4A:C0:99:7C:A7:F6
Certificate issuer:       /CN=057D7B5FB654BC1AD7214C8002C40727B9F7F992
Certificate serial:       68E0C194BD175BF5F32E25E43973BEB52849387F
Authority key identifier: 05:7D:7B:5F:B6:54:BC:1A:D7:21:4C:80:02:C4:07:27:B9:F7:F9:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/057D7B5FB654BC1AD7214C8002C40727B9F7F992.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AZ2CJc4GcT7Qkbb7XAuXmDKWjwmmFdwq2PMoWxfGsTfR/0/3138312e3139312e3232382e302f32322d3234203d3e20323637343439.roa
Signing time:             Wed 05 Feb 2025 13:31:21 +0000
ROA not before:           Wed 05 Feb 2025 13:26:21 +0000
ROA not after:            Wed 04 Feb 2026 13:31:21 +0000
asID:                     267449
IP address blocks:        181.191.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AZ2CJc4GcT7Qkbb7XAuXmDKWjwmmFdwq2PMoWxfGsTfR/0/057D7B5FB654BC1AD7214C8002C40727B9F7F992.crl
                          rsync://rpki-repo.registro.br/repo/AZ2CJc4GcT7Qkbb7XAuXmDKWjwmmFdwq2PMoWxfGsTfR/0/057D7B5FB654BC1AD7214C8002C40727B9F7F992.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/057D7B5FB654BC1AD7214C8002C40727B9F7F992.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 04:52:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:e0:c1:94:bd:17:5b:f5:f3:2e:25:e4:39:73:be:b5:28:49:38:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=057D7B5FB654BC1AD7214C8002C40727B9F7F992
        Validity
            Not Before: Feb  5 13:26:21 2025 GMT
            Not After : Feb  4 13:31:21 2026 GMT
        Subject: CN=11E618D8EEA5032849D7262483BF4AC0997CA7F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b8:71:65:f0:32:ed:5e:e3:79:34:43:3c:af:
                    5e:67:59:40:47:51:ec:19:8e:42:35:8f:d2:ea:55:
                    85:d8:84:0c:b3:44:55:a7:39:7c:4e:4b:e9:9c:f9:
                    d3:35:45:bd:9d:82:2d:d8:a4:e3:c8:9f:15:9d:c1:
                    ae:35:dd:3c:bd:1f:0c:a0:89:2a:73:8c:04:c1:32:
                    8f:7b:b2:b1:9b:8d:87:3e:37:f9:80:1b:69:0c:91:
                    37:ac:f9:ad:a6:00:d2:37:03:b1:20:f4:d7:0d:15:
                    58:ea:b6:3a:01:e4:76:bb:d7:67:12:5c:95:e7:eb:
                    a6:e0:1a:e4:e5:b9:67:c6:7d:5b:49:eb:5a:06:13:
                    f1:4b:4a:97:20:f4:3f:a9:07:b2:11:2e:a1:1d:e9:
                    b9:f4:36:a2:69:41:aa:7a:54:64:5c:5b:1e:ed:51:
                    39:1b:4a:93:9f:12:ac:a4:b7:d1:b8:38:68:f4:c7:
                    44:24:04:7e:18:6f:e6:79:96:b6:13:2d:7d:88:dc:
                    3c:70:b3:34:5c:61:dc:2b:cc:1e:61:8e:39:b3:37:
                    71:46:95:75:b5:50:f3:8f:0b:82:7e:28:33:a4:41:
                    e0:e9:ff:5b:e6:29:5e:93:d6:3f:04:db:fe:44:3b:
                    8b:eb:ca:2e:f6:17:94:64:a2:38:00:f4:aa:07:f0:
                    d8:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:E6:18:D8:EE:A5:03:28:49:D7:26:24:83:BF:4A:C0:99:7C:A7:F6
            X509v3 Authority Key Identifier:
                keyid:05:7D:7B:5F:B6:54:BC:1A:D7:21:4C:80:02:C4:07:27:B9:F7:F9:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AZ2CJc4GcT7Qkbb7XAuXmDKWjwmmFdwq2PMoWxfGsTfR/0/057D7B5FB654BC1AD7214C8002C40727B9F7F992.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/057D7B5FB654BC1AD7214C8002C40727B9F7F992.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AZ2CJc4GcT7Qkbb7XAuXmDKWjwmmFdwq2PMoWxfGsTfR/0/3138312e3139312e3232382e302f32322d3234203d3e20323637343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a5:2a:ad:93:20:0b:c2:7a:ef:46:c8:70:e5:51:4a:d6:77:e1:
         5b:b2:18:af:8a:23:da:62:43:15:a1:04:ac:7a:c5:ed:28:42:
         e2:37:7e:fb:d1:3d:da:0a:d5:ad:a1:40:8c:ac:91:dd:05:51:
         75:f7:f1:35:a8:d6:8c:f4:10:ce:87:fe:79:59:41:f0:c2:81:
         e6:3e:bd:6c:32:f5:13:0b:4e:96:19:59:a7:95:b8:7c:7a:89:
         5f:a0:e8:0a:57:a2:a8:b6:56:2b:bb:f3:b4:80:3a:1f:fa:0f:
         ce:84:b8:b3:9a:43:7d:c3:b4:b4:0f:99:74:e1:c0:e0:ac:5b:
         e4:2b:4d:d3:f9:06:4d:92:48:aa:a2:83:68:c7:0b:8c:a5:17:
         25:70:40:c7:cb:0d:3b:f2:43:08:92:13:84:30:29:68:f6:81:
         62:6d:b2:17:14:19:fa:2e:ae:bf:9a:cc:69:19:4b:94:12:65:
         12:8b:12:b1:22:e4:dc:a9:c8:f2:28:de:68:63:77:e8:0a:cb:
         bd:f0:e8:e5:84:39:e1:0d:f7:a4:03:5b:5e:12:13:dc:43:18:
         35:0e:ca:24:52:f3:7c:fb:82:a6:19:21:2e:07:d6:d4:27:8d:
         82:6f:2a:dc:a4:05:16:53:96:0f:8b:86:65:4d:56:1d:25:e2:
         0c:91:63:bd
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUaODBlL0XW/XzLiXkOXO+tShJOH8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDU3RDdCNUZCNjU0QkMxQUQ3MjE0QzgwMDJDNDA3MjdC
OUY3Rjk5MjAeFw0yNTAyMDUxMzI2MjFaFw0yNjAyMDQxMzMxMjFaMDMxMTAvBgNV
BAMTKDExRTYxOEQ4RUVBNTAzMjg0OUQ3MjYyNDgzQkY0QUMwOTk3Q0E3RjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLuHFl8DLtXuN5NEM8r15nWUBH
UewZjkI1j9LqVYXYhAyzRFWnOXxOS+mc+dM1Rb2dgi3YpOPInxWdwa413Ty9Hwyg
iSpzjATBMo97srGbjYc+N/mAG2kMkTes+a2mANI3A7Eg9NcNFVjqtjoB5Ha712cS
XJXn66bgGuTluWfGfVtJ61oGE/FLSpcg9D+pB7IRLqEd6bn0NqJpQap6VGRcWx7t
UTkbSpOfEqykt9G4OGj0x0QkBH4Yb+Z5lrYTLX2I3DxwszRcYdwrzB5hjjmzN3FG
lXW1UPOPC4J+KDOkQeDp/1vmKV6T1j8E2/5EO4vryi72F5RkojgA9KoH8NhXAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUEeYY2O6lAyhJ1yYkg79KwJl8p/YwHwYDVR0j
BBgwFoAUBX17X7ZUvBrXIUyAAsQHJ7n3+ZIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVoyQ0pjNEdjVDdRa2JiN1hBdVhtREtXandtbUZkd3EyUE1vV3hmR3NU
ZlIvMC8wNTdEN0I1RkI2NTRCQzFBRDcyMTRDODAwMkM0MDcyN0I5RjdGOTkyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA1N0Q3QjVGQjY1NEJDMUFE
NzIxNEM4MDAyQzQwNzI3QjlGN0Y5OTIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FaMkNKYzRHY1Q3UWtiYjdYQXVYbURLV2p3bW1GZHdxMlBNb1d4ZkdzVGZSLzAv
MzEzODMxMmUzMTM5MzEyZTMyMzIzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzNzM0MzQzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArW/5DANBgkqhkiG9w0BAQsFAAOCAQEApSqt
kyALwnrvRshw5VFK1nfhW7IYr4oj2mJDFaEErHrF7ShC4jd++9E92grVraFAjKyR
3QVRdffxNajWjPQQzof+eVlB8MKB5j69bDL1EwtOlhlZp5W4fHqJX6DoCleiqLZW
K7vztIA6H/oPzoS4s5pDfcO0tA+ZdOHA4Kxb5CtN0/kGTZJIqqKDaMcLjKUXJXBA
x8sNO/JDCJIThDApaPaBYm2yFxQZ+i6uv5rMaRlLlBJlEosSsSLk3KnI8ijeaGN3
6ArLvfDo5YQ54Q33pANbXhIT3EMYNQ7KJFLzfPuCphkhLgfW1CeNgm8q3KQFFlOW
D4uGZU1WHSXiDJFjvQ==
-----END CERTIFICATE-----
Generated at Tue Apr 8 16:35:34 2025 by rpki-client