Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/3138362e3235302e3130312e302f32342d3234203d3e20323634313431.roa
File:                     3138362e3235302e3130312e302f32342d3234203d3e20323634313431.roa (raw, json)
Hash identifier:          8m0UVXVWNR7LexF3eDOsNuD4VqxPO8VCx0rk/TkvrLQ=
Subject key identifier:   14:D9:E8:4C:D1:0D:B2:8C:A2:7D:5E:C4:75:0F:71:22:F5:20:24:DB
Certificate issuer:       /CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
Certificate serial:       251D79AB14033A8CF65E73036028C8E5FD28914B
Authority key identifier: A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/3138362e3235302e3130312e302f32342d3234203d3e20323634313431.roa
Signing time:             Thu 02 Jan 2025 19:27:27 +0000
ROA not before:           Thu 02 Jan 2025 19:22:27 +0000
ROA not after:            Thu 01 Jan 2026 19:27:27 +0000
asID:                     264141
IP address blocks:        186.250.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.crl
                          rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 14:51:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:1d:79:ab:14:03:3a:8c:f6:5e:73:03:60:28:c8:e5:fd:28:91:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
        Validity
            Not Before: Jan  2 19:22:27 2025 GMT
            Not After : Jan  1 19:27:27 2026 GMT
        Subject: CN=14D9E84CD10DB28CA27D5EC4750F7122F52024DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b8:48:52:e0:3a:38:87:33:9c:f9:df:ff:72:
                    5b:96:03:c5:43:f2:3d:4b:5f:4d:b0:fd:f6:9a:f2:
                    48:9a:56:0a:14:02:8d:53:c4:53:93:03:d0:1e:e8:
                    81:e7:53:b4:84:45:0b:98:a5:50:1a:a3:24:f6:44:
                    74:1a:60:b1:a2:02:5f:1c:e5:7b:d5:3f:af:68:37:
                    ae:09:99:ba:53:ab:ea:f5:de:b2:3f:6d:2d:f1:f6:
                    60:7f:34:8a:fa:96:2a:e8:5b:11:7a:61:99:db:13:
                    fc:ac:1a:a8:98:36:b7:78:e9:2b:21:f6:c5:1f:84:
                    ef:e7:06:48:d3:c3:a5:e4:4f:fe:b3:91:f1:26:7f:
                    0c:d4:e0:97:4b:00:2c:c2:ef:d7:78:5a:8e:15:d6:
                    fa:28:93:2a:db:8c:61:c1:9d:5b:8e:10:a6:bb:4c:
                    99:42:31:7e:03:59:c5:fa:91:6e:85:aa:a1:5c:81:
                    c6:1c:48:95:28:d1:ce:5b:33:76:40:b7:21:19:56:
                    cb:33:25:3a:f1:00:80:9b:68:13:7c:3c:5d:6d:53:
                    13:26:bb:39:2e:a5:e4:23:94:1c:80:f0:83:0a:f7:
                    48:f8:60:b0:f9:c5:dc:a5:b0:a0:22:59:1e:f1:c0:
                    42:17:17:d6:b1:fe:2a:bb:30:7c:a8:61:2d:09:74:
                    2d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:D9:E8:4C:D1:0D:B2:8C:A2:7D:5E:C4:75:0F:71:22:F5:20:24:DB
            X509v3 Authority Key Identifier:
                keyid:A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/3138362e3235302e3130312e302f32342d3234203d3e20323634313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:f1:ef:f0:fc:6a:df:ba:3e:9d:16:51:8d:e2:c6:d0:f4:f6:
         1e:70:f6:3a:68:f2:20:be:c0:d8:d8:56:67:58:06:d8:75:b1:
         fa:f5:f9:55:dd:f4:6e:5d:67:a6:7c:0b:5c:60:6b:70:8d:38:
         71:b8:6e:0f:cb:84:21:f1:3d:92:8d:1b:c6:62:2d:d8:35:37:
         a6:02:15:96:47:f1:2e:a9:79:66:c1:7f:97:ee:75:d6:22:b8:
         89:fb:2b:d1:7d:a7:64:ac:b8:31:6d:04:a1:c9:f6:62:e7:86:
         7d:20:b1:c3:15:4c:69:29:9b:bc:66:a0:8e:b7:fb:55:2b:b1:
         51:02:9c:e5:2b:9f:35:7f:b0:65:27:70:d6:42:2e:55:51:f7:
         22:f8:51:f8:46:03:98:ef:6b:4e:e6:f0:a2:6d:11:e3:42:7e:
         60:af:0b:2a:5a:fb:c3:f6:cf:f9:47:89:9f:df:1f:4c:ee:fa:
         f5:43:32:b0:a4:e5:04:11:94:0e:d8:32:2e:b3:8c:2b:bf:b1:
         e3:8b:75:08:4e:7e:69:1c:8e:54:17:e0:aa:a9:14:74:eb:7a:
         cd:b2:a8:90:4d:1f:e7:63:1f:de:13:46:ef:fb:00:54:3a:eb:
         e3:b0:1a:05:82:a3:62:3d:5e:82:3b:75:f2:f4:b1:9d:cf:db:
         91:1b:e3:2d
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUJR15qxQDOoz2XnMDYCjI5f0okUswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTJCOTZGOEI1M0IwNkVFNDQ4QTUxNzA5QjhEMjMwQUU0
OURCRjMwRDAeFw0yNTAxMDIxOTIyMjdaFw0yNjAxMDExOTI3MjdaMDMxMTAvBgNV
BAMTKDE0RDlFODRDRDEwREIyOENBMjdENUVDNDc1MEY3MTIyRjUyMDI0REIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpuEhS4Do4hzOc+d//cluWA8VD
8j1LX02w/faa8kiaVgoUAo1TxFOTA9Ae6IHnU7SERQuYpVAaoyT2RHQaYLGiAl8c
5XvVP69oN64JmbpTq+r13rI/bS3x9mB/NIr6liroWxF6YZnbE/ysGqiYNrd46Ssh
9sUfhO/nBkjTw6XkT/6zkfEmfwzU4JdLACzC79d4Wo4V1vookyrbjGHBnVuOEKa7
TJlCMX4DWcX6kW6FqqFcgcYcSJUo0c5bM3ZAtyEZVsszJTrxAICbaBN8PF1tUxMm
uzkupeQjlByA8IMK90j4YLD5xdylsKAiWR7xwEIXF9ax/iq7MHyoYS0JdC3FAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUFNnoTNENsoyifV7EdQ9xIvUgJNswHwYDVR0j
BBgwFoAUorlvi1OwbuRIpRcJuNIwrknb8w0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjVrQVVZanBwS2ppOWNWY01kTlR4d052ZGtZbzEzejJqRnV5Wm81OHVY
ZmkvMC9BMkI5NkY4QjUzQjA2RUU0NDhBNTE3MDlCOEQyMzBBRTQ5REJGMzBELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EyQjk2RjhCNTNCMDZFRTQ0
OEE1MTcwOUI4RDIzMEFFNDlEQkYzMEQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0I1a0FVWWpwcEtqaTljVmNNZE5UeHdOdmRrWW8xM3oyakZ1eVpvNTh1WGZpLzAv
MzEzODM2MmUzMjM1MzAyZTMxMzAzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNDMxMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALr6ZTANBgkqhkiG9w0BAQsFAAOCAQEAffHv
8Pxq37o+nRZRjeLG0PT2HnD2OmjyIL7A2NhWZ1gG2HWx+vX5Vd30bl1npnwLXGBr
cI04cbhuD8uEIfE9ko0bxmIt2DU3pgIVlkfxLql5ZsF/l+511iK4ifsr0X2nZKy4
MW0Eocn2YueGfSCxwxVMaSmbvGagjrf7VSuxUQKc5SufNX+wZSdw1kIuVVH3IvhR
+EYDmO9rTubwom0R40J+YK8LKlr7w/bP+UeJn98fTO769UMysKTlBBGUDtgyLrOM
K7+x44t1CE5+aRyOVBfgqqkUdOt6zbKokE0f52Mf3hNG7/sAVDrr47AaBYKjYj1e
gjt18vSxnc/bkRvjLQ==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:35:09 2025 by rpki-client