Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/3136382e3232382e3138352e302f32342d3234203d3e20323634393237.roa
File:                     3136382e3232382e3138352e302f32342d3234203d3e20323634393237.roa (raw, json)
Hash identifier:          ghtQoHvt4JnXmKoDR6xYIMfU4NqHgJS+bWghxA6cnRg=
Subject key identifier:   75:07:1B:FB:92:DC:41:A1:D6:9C:99:84:D9:6E:F7:71:6F:0A:22:9B
Certificate issuer:       /CN=B11605843889B763BDD71C75D79082A16C54D7E7
Certificate serial:       79FFEF0B47351FDA48B6EA71B21690C7A73D1EEF
Authority key identifier: B1:16:05:84:38:89:B7:63:BD:D7:1C:75:D7:90:82:A1:6C:54:D7:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B11605843889B763BDD71C75D79082A16C54D7E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/3136382e3232382e3138352e302f32342d3234203d3e20323634393237.roa
Signing time:             Wed 22 Jan 2025 21:44:37 +0000
ROA not before:           Wed 22 Jan 2025 21:39:37 +0000
ROA not after:            Wed 21 Jan 2026 21:44:37 +0000
asID:                     264927
IP address blocks:        168.228.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/B11605843889B763BDD71C75D79082A16C54D7E7.crl
                          rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/B11605843889B763BDD71C75D79082A16C54D7E7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B11605843889B763BDD71C75D79082A16C54D7E7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 00:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:ff:ef:0b:47:35:1f:da:48:b6:ea:71:b2:16:90:c7:a7:3d:1e:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B11605843889B763BDD71C75D79082A16C54D7E7
        Validity
            Not Before: Jan 22 21:39:37 2025 GMT
            Not After : Jan 21 21:44:37 2026 GMT
        Subject: CN=75071BFB92DC41A1D69C9984D96EF7716F0A229B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:6b:8d:f2:39:9b:11:93:13:5d:a7:15:42:52:
                    ad:b9:1b:61:91:8d:70:cc:a4:c2:93:06:c6:12:4e:
                    ab:59:e8:fe:86:f3:2b:10:45:45:d3:b2:39:b5:46:
                    5a:be:79:5d:06:2c:6e:58:1f:e4:72:f7:a8:7d:cd:
                    14:c4:f6:d3:50:e5:4b:67:fd:b7:a8:ac:78:ea:fc:
                    cf:df:74:94:75:0c:0d:b6:dc:c0:69:57:be:5b:93:
                    07:c6:83:5f:0a:27:83:1d:14:9e:77:bd:d9:7c:c9:
                    9c:ba:3d:26:b1:f1:99:b0:5d:1a:2d:c4:b4:60:b4:
                    a8:0d:cb:32:ce:6a:52:53:1e:a8:d2:30:d8:b3:b7:
                    56:f2:c5:9c:46:9d:a5:83:e3:1a:8f:1e:9c:ba:49:
                    bf:4d:f5:dd:54:45:b3:ef:9a:14:ac:80:0d:b7:28:
                    4b:d6:1a:82:78:53:82:37:6d:3b:66:c3:19:ee:24:
                    c8:62:c9:26:56:32:52:c0:7b:91:6f:f2:b6:9a:5a:
                    2d:9e:a9:8f:d8:c9:fa:99:4a:f1:bc:25:9a:37:cd:
                    5f:b9:ba:fe:59:e4:98:3d:f4:26:e8:cb:14:2e:24:
                    28:a0:e1:a4:d8:2a:5b:c8:80:72:60:ce:38:1e:6c:
                    eb:0a:97:14:5a:d0:b0:6f:94:ee:d8:df:bb:88:cf:
                    99:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:07:1B:FB:92:DC:41:A1:D6:9C:99:84:D9:6E:F7:71:6F:0A:22:9B
            X509v3 Authority Key Identifier:
                keyid:B1:16:05:84:38:89:B7:63:BD:D7:1C:75:D7:90:82:A1:6C:54:D7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/B11605843889B763BDD71C75D79082A16C54D7E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B11605843889B763BDD71C75D79082A16C54D7E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/3136382e3232382e3138352e302f32342d3234203d3e20323634393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:05:6e:eb:fc:c9:dc:02:8b:d0:8c:37:4d:c4:61:3d:e2:1c:
         b8:53:7f:b4:60:70:2a:a9:2b:78:f0:0e:ba:bf:d8:32:94:4c:
         82:ba:f2:11:38:17:50:90:00:04:7b:50:bf:ea:87:55:fe:7b:
         54:d6:00:3e:cd:39:62:d6:9e:eb:62:3c:f2:c2:ec:40:28:cf:
         61:45:86:a7:46:33:89:75:06:b6:b0:2a:09:43:6e:7b:95:a4:
         2c:39:9f:d1:68:fa:b7:c6:3e:da:9e:56:a4:44:bf:04:60:25:
         60:61:c9:eb:d8:72:6a:7b:db:6e:32:04:64:86:82:b9:93:88:
         5d:5d:1f:66:33:9a:f6:1a:cd:8f:1d:ae:5b:93:8c:a3:ec:34:
         bc:70:89:b1:5b:f7:0c:db:5a:c1:4a:4c:42:cc:9f:a0:fa:fa:
         eb:f2:fa:e4:96:68:c4:8b:71:ab:4a:e5:ce:c1:e2:16:43:38:
         6a:5e:77:8c:9b:5d:59:15:17:b7:7c:cd:5e:af:d1:71:f6:cf:
         9d:07:ab:8b:ca:de:ae:a5:cf:76:3e:a6:e9:21:a1:99:31:8b:
         04:bc:fb:cd:04:4c:74:ad:6a:74:bf:24:0f:1c:ee:87:d5:9c:
         27:47:b6:a2:65:a9:34:12:fc:63:6a:77:3a:0b:86:08:5b:fe:
         c5:22:0d:9f
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUef/vC0c1H9pItupxshaQx6c9Hu8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjExNjA1ODQzODg5Qjc2M0JERDcxQzc1RDc5MDgyQTE2
QzU0RDdFNzAeFw0yNTAxMjIyMTM5MzdaFw0yNjAxMjEyMTQ0MzdaMDMxMTAvBgNV
BAMTKDc1MDcxQkZCOTJEQzQxQTFENjlDOTk4NEQ5NkVGNzcxNkYwQTIyOUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDga43yOZsRkxNdpxVCUq25G2GR
jXDMpMKTBsYSTqtZ6P6G8ysQRUXTsjm1Rlq+eV0GLG5YH+Ry96h9zRTE9tNQ5Utn
/beorHjq/M/fdJR1DA223MBpV75bkwfGg18KJ4MdFJ53vdl8yZy6PSax8ZmwXRot
xLRgtKgNyzLOalJTHqjSMNizt1byxZxGnaWD4xqPHpy6Sb9N9d1URbPvmhSsgA23
KEvWGoJ4U4I3bTtmwxnuJMhiySZWMlLAe5Fv8raaWi2eqY/YyfqZSvG8JZo3zV+5
uv5Z5Jg99CboyxQuJCig4aTYKlvIgHJgzjgebOsKlxRa0LBvlO7Y37uIz5m1AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUdQcb+5LcQaHWnJmE2W73cW8KIpswHwYDVR0j
BBgwFoAUsRYFhDiJt2O91xx115CCoWxU1+cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWZScmF6aG9UclZMSFpFQUJjRXBOTHh6eEI0bVhhWnJwaDRlMnkycFRG
WUsvMC9CMTE2MDU4NDM4ODlCNzYzQkRENzFDNzVENzkwODJBMTZDNTREN0U3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IxMTYwNTg0Mzg4OUI3NjNC
REQ3MUM3NUQ3OTA4MkExNkM1NEQ3RTcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FmUnJhemhvVHJWTEhaRUFCY0VwTkx4enhCNG1YYVpycGg0ZTJ5MnBURllLLzAv
MzEzNjM4MmUzMjMyMzgyZTMxMzgzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNDM5MzIzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKjkuTANBgkqhkiG9w0BAQsFAAOCAQEAVwVu
6/zJ3AKL0Iw3TcRhPeIcuFN/tGBwKqkrePAOur/YMpRMgrryETgXUJAABHtQv+qH
Vf57VNYAPs05Ytae62I88sLsQCjPYUWGp0YziXUGtrAqCUNue5WkLDmf0Wj6t8Y+
2p5WpES/BGAlYGHJ69hyanvbbjIEZIaCuZOIXV0fZjOa9hrNjx2uW5OMo+w0vHCJ
sVv3DNtawUpMQsyfoPr66/L65JZoxItxq0rlzsHiFkM4al53jJtdWRUXt3zNXq/R
cfbPnQeri8rerqXPdj6m6SGhmTGLBLz7zQRMdK1qdL8kDxzuh9WcJ0e2omWpNBL8
Y2p3OguGCFv+xSINnw==
-----END CERTIFICATE-----
Generated at Mon Apr 7 04:34:14 2025 by rpki-client