Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/3137302e3135302e3137382e302f32342d3234203d3e203533323336.roa
File:                     3137302e3135302e3137382e302f32342d3234203d3e203533323336.roa (raw, json)
Hash identifier:          zUyJlqTwfUHaWlOZUySFabPuotBcHJ9IfuAK37dikA0=
Subject key identifier:   1E:73:8E:8B:E4:D5:FE:51:73:57:15:EC:0A:5E:80:54:DC:47:E0:CB
Certificate issuer:       /CN=174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F
Certificate serial:       34E2EA676AD393F601855B679FEDBA9A629BD7B8
Authority key identifier: 17:4C:40:BD:2D:1D:EF:2E:D8:BF:C1:DE:1B:EA:BB:F5:27:18:4A:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/3137302e3135302e3137382e302f32342d3234203d3e203533323336.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     53236
IP address blocks:        170.150.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.crl
                          rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 19:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:e2:ea:67:6a:d3:93:f6:01:85:5b:67:9f:ed:ba:9a:62:9b:d7:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5f:9f:9e:4a:da:b1:b3:16:6c:68:2d:74:30:
                    1d:a4:1e:a5:f9:ae:90:e9:28:b0:b8:37:c8:da:da:
                    da:04:f8:f5:e8:be:92:6c:73:04:0e:ee:5c:37:ba:
                    0a:b0:e2:1f:d5:ab:6d:78:52:b3:0c:0d:b6:4a:54:
                    21:e9:ff:0c:79:c4:d6:43:0e:61:f4:24:37:5f:26:
                    5c:19:69:a6:01:12:8d:e9:45:df:e1:75:79:39:96:
                    59:c1:ef:4a:dc:95:52:25:35:31:c9:bd:4b:5e:23:
                    3c:51:68:b3:30:a8:9d:0e:2e:73:96:cb:42:1b:f4:
                    74:db:58:1d:fc:a7:f0:ab:b9:a9:d5:11:0e:5e:57:
                    50:4f:94:ea:50:65:b7:09:30:8d:03:25:81:5a:ee:
                    71:6e:1c:22:f2:ee:51:20:1f:e5:fb:3c:da:25:d9:
                    b7:02:d8:51:a9:93:c0:bd:19:81:38:17:36:7f:15:
                    26:3a:c5:ee:ad:21:7b:be:b4:32:eb:96:2a:74:fb:
                    19:dc:95:cd:d6:3d:2a:13:00:3d:f1:ab:5f:40:13:
                    0a:67:0d:15:4b:f6:1a:95:0a:e6:97:30:85:13:86:
                    4a:ba:a1:15:f3:12:ec:0b:a8:25:e7:c4:c9:53:6a:
                    f5:02:8a:33:d6:56:e7:40:ce:20:73:e4:b5:8d:af:
                    37:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:73:8E:8B:E4:D5:FE:51:73:57:15:EC:0A:5E:80:54:DC:47:E0:CB
            X509v3 Authority Key Identifier:
                keyid:17:4C:40:BD:2D:1D:EF:2E:D8:BF:C1:DE:1B:EA:BB:F5:27:18:4A:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/3137302e3135302e3137382e302f32342d3234203d3e203533323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:ee:61:c3:d8:cc:61:85:67:60:78:b8:b1:a4:fb:da:3a:66:
         30:81:a4:d4:be:22:7e:da:2b:f7:cf:d1:08:12:e6:0d:29:16:
         cc:c9:4a:e3:04:ee:af:30:ac:ca:01:22:e5:91:96:ad:21:7a:
         b4:92:6d:4c:c5:63:b8:54:7e:a3:38:02:3f:98:ba:ea:da:e6:
         79:5a:2b:bf:53:ca:0b:54:ae:0d:9c:7b:c8:d2:96:83:5b:4a:
         7a:13:d0:f8:fb:02:d5:7d:af:63:85:cb:7a:8e:19:42:d6:93:
         89:eb:8a:aa:ef:b8:20:82:9e:db:41:97:fc:cc:88:00:71:0e:
         40:05:df:32:15:dc:6b:33:4e:7e:b0:4e:71:d6:ff:23:d1:b5:
         ec:15:9f:45:a2:2a:63:96:25:88:30:13:c4:78:a5:de:0b:c8:
         f0:a6:97:b7:25:1f:f5:e4:c6:14:c5:6b:16:d8:e7:f8:da:24:
         70:a7:b8:78:04:ff:0d:00:52:80:a8:39:83:9f:04:01:4d:db:
         83:c0:ce:84:14:45:28:c2:e2:aa:16:d1:e5:4e:e5:dc:a5:66:
         2c:b5:c4:63:0f:ff:53:17:ff:8f:70:3b:34:d6:c6:f7:26:cb:
         b9:04:18:56:01:a3:e5:32:b6:a9:fa:78:16:b6:46:76:b8:00:
         9a:eb:7b:0b
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUNOLqZ2rTk/YBhVtnn+26mmKb17gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTc0QzQwQkQyRDFERUYyRUQ4QkZDMURFMUJFQUJCRjUy
NzE4NEEwRjAeFw0yNTAzMDUxODU1MDBaFw0yNjAzMDQxOTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzk1RjlGOUU0QURBQjFCMzE2
NkM2ODJENzQzMDFEQTQxRUE1RjlBRTkwRTkyOEIwQjgzN0M4REFEQURBMDRGOEY1
RThCRTkyNkM3MzA0MEVFRTVDMzdCQTBBQjBFMjFGRDVBQjZENzg1MkIzMEMwREI2
NEE1NDIxRTlGRjBDNzlDNEQ2NDMwRTYxRjQyNDM3NUYyNjVDMTk2OUE2MDExMjhE
RTk0NURGRTE3NTc5Mzk5NjU5QzFFRjRBREM5NTUyMjUzNTMxQzlCRDRCNUUyMzND
NTE2OEIzMzBBODlEMEUyRTczOTZDQjQyMUJGNDc0REI1ODFERkNBN0YwQUJCOUE5
RDUxMTBFNUU1NzUwNEY5NEVBNTA2NUI3MDkzMDhEMDMyNTgxNUFFRTcxNkUxQzIy
RjJFRTUxMjAxRkU1RkIzQ0RBMjVEOUI3MDJEODUxQTk5M0MwQkQxOTgxMzgxNzM2
N0YxNTI2M0FDNUVFQUQyMTdCQkVCNDMyRUI5NjJBNzRGQjE5REM5NUNERDYzRDJB
MTMwMDNERjFBQjVGNDAxMzBBNjcwRDE1NEJGNjFBOTUwQUU2OTczMDg1MTM4NjRB
QkFBMTE1RjMxMkVDMEJBODI1RTdDNEM5NTM2QUY1MDI4QTMzRDY1NkU3NDBDRTIw
NzNFNEI1OERBRjM3QzcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAyV+fnkrasbMWbGgtdDAdpB6l+a6Q6SiwuDfI2traBPj16L6SbHME
Du5cN7oKsOIf1atteFKzDA22SlQh6f8MecTWQw5h9CQ3XyZcGWmmARKN6UXf4XV5
OZZZwe9K3JVSJTUxyb1LXiM8UWizMKidDi5zlstCG/R021gd/Kfwq7mp1REOXldQ
T5TqUGW3CTCNAyWBWu5xbhwi8u5RIB/l+zzaJdm3AthRqZPAvRmBOBc2fxUmOsXu
rSF7vrQy65YqdPsZ3JXN1j0qEwA98atfQBMKZw0VS/YalQrmlzCFE4ZKuqEV8xLs
C6gl58TJU2r1Aooz1lbnQM4gc+S1ja83xwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FB5zjovk1f5Rc1cV7ApegFTcR+DLMB8GA1UdIwQYMBaAFBdMQL0tHe8u2L/B3hvq
u/UnGEoPMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JUV2VDRU1xVm83aXRX
dHppNWs4OG52UUFMa0pncFB2RU50RHdnaTFveG9kLzEvMTc0QzQwQkQyRDFERUYy
RUQ4QkZDMURFMUJFQUJCRjUyNzE4NEEwRi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8xNzRDNDBCRDJEMURFRjJFRDhCRkMxREUxQkVBQkJGNTI3MTg0
QTBGLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9CVFdlQ0VNcVZvN2l0V3R6aTVr
ODhudlFBTGtKZ3BQdkVOdER3Z2kxb3hvZC8xLzMxMzczMDJlMzEzNTMwMmUzMTM3
MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMzMzIzMzM2LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
qpayMA0GCSqGSIb3DQEBCwUAA4IBAQA67mHD2MxhhWdgeLixpPvaOmYwgaTUviJ+
2iv3z9EIEuYNKRbMyUrjBO6vMKzKASLlkZatIXq0km1MxWO4VH6jOAI/mLrq2uZ5
Wiu/U8oLVK4NnHvI0paDW0p6E9D4+wLVfa9jhct6jhlC1pOJ64qq77gggp7bQZf8
zIgAcQ5ABd8yFdxrM05+sE5x1v8j0bXsFZ9FoipjliWIMBPEeKXeC8jwppe3JR/1
5MYUxWsW2Of42iRwp7h4BP8NAFKAqDmDnwQBTduDwM6EFEUowuKqFtHlTuXcpWYs
tcRjD/9TF/+PcDs01sb3Jsu5BBhWAaPlMrap+ngWtkZ2uACa63sL
-----END CERTIFICATE-----
Generated at Sun Apr 13 02:32:29 2025 by rpki-client