Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/3137302e3135302e3137392e302f32342d3234203d3e203533323336.roa
File:                     3137302e3135302e3137392e302f32342d3234203d3e203533323336.roa (raw, json)
Hash identifier:          fVKqKyh7/2+bpaLNbUTQzdMSeesjBpZCuBmuBr1a8AA=
Subject key identifier:   CE:11:F8:A2:26:ED:BF:BD:EC:61:C8:B6:EA:DB:47:8C:89:CF:05:B6
Certificate issuer:       /CN=174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F
Certificate serial:       01BB77ACCA69B1EF273AE6EC30035C156230FEAE
Authority key identifier: 17:4C:40:BD:2D:1D:EF:2E:D8:BF:C1:DE:1B:EA:BB:F5:27:18:4A:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/3137302e3135302e3137392e302f32342d3234203d3e203533323336.roa
Signing time:             Wed 05 Mar 2025 19:00:03 +0000
ROA not before:           Wed 05 Mar 2025 18:55:03 +0000
ROA not after:            Wed 04 Mar 2026 19:00:03 +0000
asID:                     53236
IP address blocks:        170.150.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.crl
                          rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 19:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:bb:77:ac:ca:69:b1:ef:27:3a:e6:ec:30:03:5c:15:62:30:fe:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F
        Validity
            Not Before: Mar  5 18:55:03 2025 GMT
            Not After : Mar  4 19:00:03 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:83:7d:67:41:ae:a2:07:b1:1c:42:64:16:05:
                    c4:ae:b1:e7:cf:e1:eb:66:80:5b:65:53:fd:2e:62:
                    9b:a5:b1:9c:36:14:1e:b5:be:cc:a9:f9:f2:b3:2c:
                    69:44:ef:fa:dc:c3:e5:48:02:c5:57:25:62:53:a1:
                    1f:79:5d:02:cb:37:4d:27:3f:d0:2a:1a:78:73:75:
                    55:04:9c:2a:f7:87:c1:96:41:30:6c:9a:cb:2a:8c:
                    2f:a7:83:dc:17:92:12:05:91:8b:00:df:9e:3c:8a:
                    db:51:65:83:aa:5b:5b:0a:45:54:32:be:cd:9e:83:
                    0c:f5:a8:a7:bb:b5:4c:0f:59:3e:3f:17:76:23:bf:
                    83:e0:ab:cc:d4:34:b8:a8:f7:41:66:c1:1c:3c:f6:
                    b4:7a:d9:ff:9a:fb:cb:04:d6:c5:44:0e:0c:9a:5f:
                    81:5b:6e:fa:b5:c9:be:ec:8f:cf:e9:2c:fa:79:f2:
                    be:bd:75:f7:7a:ed:ea:c8:4d:4c:c8:55:ce:59:0f:
                    ec:84:37:e3:fd:b6:e6:cf:c9:13:70:65:84:20:58:
                    7f:76:d2:40:81:ba:8d:ad:3b:d4:04:6d:2d:15:cf:
                    c2:e7:37:d8:71:f7:7b:a4:18:c0:57:45:a4:39:f3:
                    c9:0b:1c:0d:c9:ed:bb:77:45:22:09:9c:23:fa:6c:
                    92:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:11:F8:A2:26:ED:BF:BD:EC:61:C8:B6:EA:DB:47:8C:89:CF:05:B6
            X509v3 Authority Key Identifier:
                keyid:17:4C:40:BD:2D:1D:EF:2E:D8:BF:C1:DE:1B:EA:BB:F5:27:18:4A:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/3137302e3135302e3137392e302f32342d3234203d3e203533323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:7a:5a:78:45:b6:0b:ce:46:39:0e:82:01:62:ef:d9:8b:c5:
         d8:c5:a7:2e:7a:59:88:0b:95:cb:cc:9e:38:56:56:e3:bd:58:
         90:23:a1:65:7e:0b:b4:26:21:4c:7b:99:18:05:30:2b:fb:75:
         4f:1c:53:65:a2:40:a9:f8:00:3f:5e:74:e4:8d:02:6e:56:35:
         c6:a5:4e:75:e9:2f:75:06:6b:e1:1b:95:6a:6c:05:ce:06:34:
         78:b7:86:6b:9c:50:cb:df:85:eb:3e:bc:31:f0:b0:4f:24:16:
         e1:86:6e:29:a7:d8:0b:49:b3:ac:83:e9:14:fa:47:c2:7a:3e:
         77:d3:64:54:11:17:2f:3d:ce:0a:5a:14:54:79:f4:cb:7a:77:
         d5:3d:ba:e8:73:d8:f2:6c:e4:08:26:47:f5:df:67:2e:71:13:
         b3:ac:7c:eb:9a:26:0c:e2:38:9f:f6:68:d9:db:09:2f:7d:c7:
         6d:48:24:82:a7:50:ab:0f:e3:ef:fd:18:8f:63:25:ff:f3:91:
         5a:89:ba:35:cc:b9:ab:4e:4c:44:df:9e:65:96:4d:f5:ff:79:
         a8:4e:e9:be:b0:ed:df:af:35:0c:58:30:cd:9d:84:13:dd:16:
         53:89:bf:fe:a5:3c:df:a1:0d:2f:2b:59:55:44:32:15:15:e6:
         8e:b3:55:25
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUAbt3rMppse8nOubsMANcFWIw/q4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTc0QzQwQkQyRDFERUYyRUQ4QkZDMURFMUJFQUJCRjUy
NzE4NEEwRjAeFw0yNTAzMDUxODU1MDNaFw0yNjAzMDQxOTAwMDNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjM4MzdENjc0MUFFQTIwN0Ix
MUM0MjY0MTYwNUM0QUVCMUU3Q0ZFMUVCNjY4MDVCNjU1M0ZEMkU2MjlCQTVCMTlD
MzYxNDFFQjVCRUNDQTlGOUYyQjMyQzY5NDRFRkZBRENDM0U1NDgwMkM1NTcyNTYy
NTNBMTFGNzk1RDAyQ0IzNzREMjczRkQwMkExQTc4NzM3NTU1MDQ5QzJBRjc4N0Mx
OTY0MTMwNkM5QUNCMkE4QzJGQTc4M0RDMTc5MjEyMDU5MThCMDBERjlFM0M4QURC
NTE2NTgzQUE1QjVCMEE0NTU0MzJCRUNEOUU4MzBDRjVBOEE3QkJCNTRDMEY1OTNF
M0YxNzc2MjNCRjgzRTBBQkNDRDQzNEI4QThGNzQxNjZDMTFDM0NGNkI0N0FEOUZG
OUFGQkNCMDRENkM1NDQwRTBDOUE1RjgxNUI2RUZBQjVDOUJFRUM4RkNGRTkyQ0ZB
NzlGMkJFQkQ3NUY3N0FFREVBQzg0RDRDQzg1NUNFNTkwRkVDODQzN0UzRkRCNkU2
Q0ZDOTEzNzA2NTg0MjA1ODdGNzZEMjQwODFCQThEQUQzQkQ0MDQ2RDJEMTVDRkMy
RTczN0Q4NzFGNzdCQTQxOEMwNTc0NUE0MzlGM0M5MEIxQzBEQzlFREJCNzc0NTIy
MDk5QzIzRkE2QzkyN0IwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAs4N9Z0GuogexHEJkFgXErrHnz+HrZoBbZVP9LmKbpbGcNhQetb7M
qfnysyxpRO/63MPlSALFVyViU6EfeV0CyzdNJz/QKhp4c3VVBJwq94fBlkEwbJrL
Kowvp4PcF5ISBZGLAN+ePIrbUWWDqltbCkVUMr7NnoMM9ainu7VMD1k+Pxd2I7+D
4KvM1DS4qPdBZsEcPPa0etn/mvvLBNbFRA4Mml+BW276tcm+7I/P6Sz6efK+vXX3
eu3qyE1MyFXOWQ/shDfj/bbmz8kTcGWEIFh/dtJAgbqNrTvUBG0tFc/C5zfYcfd7
pBjAV0WkOfPJCxwNye27d0UiCZwj+mySewIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FM4R+KIm7b+97GHIturbR4yJzwW2MB8GA1UdIwQYMBaAFBdMQL0tHe8u2L/B3hvq
u/UnGEoPMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JUV2VDRU1xVm83aXRX
dHppNWs4OG52UUFMa0pncFB2RU50RHdnaTFveG9kLzEvMTc0QzQwQkQyRDFERUYy
RUQ4QkZDMURFMUJFQUJCRjUyNzE4NEEwRi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8xNzRDNDBCRDJEMURFRjJFRDhCRkMxREUxQkVBQkJGNTI3MTg0
QTBGLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9CVFdlQ0VNcVZvN2l0V3R6aTVr
ODhudlFBTGtKZ3BQdkVOdER3Z2kxb3hvZC8xLzMxMzczMDJlMzEzNTMwMmUzMTM3
MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMzMzIzMzM2LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
qpazMA0GCSqGSIb3DQEBCwUAA4IBAQBpelp4RbYLzkY5DoIBYu/Zi8XYxacuelmI
C5XLzJ44VlbjvViQI6Flfgu0JiFMe5kYBTAr+3VPHFNlokCp+AA/XnTkjQJuVjXG
pU516S91BmvhG5VqbAXOBjR4t4ZrnFDL34XrPrwx8LBPJBbhhm4pp9gLSbOsg+kU
+kfCej5302RUERcvPc4KWhRUefTLenfVPbroc9jybOQIJkf132cucROzrHzrmiYM
4jif9mjZ2wkvfcdtSCSCp1CrD+Pv/RiPYyX/85Faibo1zLmrTkxE355llk31/3mo
Tum+sO3frzUMWDDNnYQT3RZTib/+pTzfoQ0vK1lVRDIVFeaOs1Ul
-----END CERTIFICATE-----
Generated at Sun Apr 13 02:32:23 2025 by rpki-client