Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/1/3137302e3234352e39322e302f32322d3234203d3e20323636353230.roa
File:                     3137302e3234352e39322e302f32322d3234203d3e20323636353230.roa (raw, json)
Hash identifier:          UXdHA797b5kGmZTBMIoKW3ejH3LItHlI0iAJwdYv0OA=
Subject key identifier:   3B:DA:26:8D:DC:3A:B8:00:73:67:5B:99:C6:CD:2A:56:A0:21:C3:56
Certificate issuer:       /CN=9A8CDCA9443D140D02860AA0070928656A172CE1
Certificate serial:       565914A1DFA22950FC2E5493249A94D4C585E62A
Authority key identifier: 9A:8C:DC:A9:44:3D:14:0D:02:86:0A:A0:07:09:28:65:6A:17:2C:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A8CDCA9443D140D02860AA0070928656A172CE1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/1/3137302e3234352e39322e302f32322d3234203d3e20323636353230.roa
Signing time:             Thu 06 Mar 2025 04:00:16 +0000
ROA not before:           Thu 06 Mar 2025 03:55:16 +0000
ROA not after:            Thu 05 Mar 2026 04:00:16 +0000
asID:                     266520
IP address blocks:        170.245.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/1/9A8CDCA9443D140D02860AA0070928656A172CE1.crl
                          rsync://rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/1/9A8CDCA9443D140D02860AA0070928656A172CE1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A8CDCA9443D140D02860AA0070928656A172CE1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 16:26:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:59:14:a1:df:a2:29:50:fc:2e:54:93:24:9a:94:d4:c5:85:e6:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A8CDCA9443D140D02860AA0070928656A172CE1
        Validity
            Not Before: Mar  6 03:55:16 2025 GMT
            Not After : Mar  5 04:00:16 2026 GMT
        Subject: CN=3BDA268DDC3AB80073675B99C6CD2A56A021C356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:08:1e:4f:7f:f3:3c:e9:70:34:f5:1d:ad:eb:
                    59:6b:4e:91:36:30:da:b8:a3:8c:9a:32:58:13:53:
                    dd:74:e0:b0:bc:f5:91:e6:4c:3e:f3:0f:4b:ef:74:
                    46:a3:e4:58:dc:00:6d:f0:09:14:bd:62:4f:ad:15:
                    52:21:60:64:3b:d4:03:8d:cf:fe:87:95:53:53:a8:
                    a7:a6:d7:bb:a4:1d:43:ce:9d:46:a4:25:32:b5:64:
                    ca:37:c5:21:a2:14:5f:cb:e4:79:9e:1e:84:84:85:
                    22:fd:19:df:5f:0e:16:55:26:09:e3:70:f2:22:b3:
                    e4:ef:cd:61:18:a5:b0:c8:8d:57:62:0c:d1:6c:9e:
                    97:a7:1b:5a:bc:96:d5:aa:ef:48:a0:5e:f0:62:57:
                    26:76:eb:61:62:52:6e:c5:b1:d8:87:f2:3e:48:08:
                    9c:ce:da:6d:0d:22:40:42:ee:ef:e9:dd:e9:e4:6d:
                    ab:66:19:50:51:e9:28:93:3f:7f:b3:1b:ae:09:85:
                    77:9c:97:11:24:79:bc:86:5c:4d:5b:24:4e:3e:a6:
                    dc:43:c6:ef:47:8d:8f:c0:39:e3:e5:6f:48:37:67:
                    f9:6a:41:a6:e3:c1:3f:0c:cf:59:da:42:04:2d:2b:
                    80:36:f2:8f:21:03:62:ac:d1:39:5c:19:f4:98:f5:
                    4b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:DA:26:8D:DC:3A:B8:00:73:67:5B:99:C6:CD:2A:56:A0:21:C3:56
            X509v3 Authority Key Identifier:
                keyid:9A:8C:DC:A9:44:3D:14:0D:02:86:0A:A0:07:09:28:65:6A:17:2C:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/1/9A8CDCA9443D140D02860AA0070928656A172CE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A8CDCA9443D140D02860AA0070928656A172CE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/1/3137302e3234352e39322e302f32322d3234203d3e20323636353230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ad:ca:e5:09:59:e2:70:a2:d4:a2:9c:0a:b5:f7:3e:59:73:e9:
         7a:10:e8:4e:f5:99:a4:a5:ce:6d:81:67:3e:3a:cc:b8:b9:57:
         25:c9:d5:c9:9d:d8:73:79:a2:f5:0f:b6:e8:64:7a:d7:fa:09:
         cb:31:99:7d:9d:d0:0d:02:7a:6f:4c:b9:64:ca:7e:77:75:56:
         62:1c:7d:8a:1c:db:0e:b8:65:94:cf:53:b3:5d:fb:d7:98:e9:
         d3:c8:17:b5:93:60:32:38:e9:d1:f6:79:30:de:0b:1f:1f:cf:
         4c:d1:3c:bc:ac:ef:fe:e6:3e:77:9b:ef:a6:b3:1a:cb:fe:64:
         de:40:2a:f3:c4:38:8a:3a:9a:5d:14:77:db:2c:04:46:bf:94:
         42:78:2f:e6:49:df:75:ba:19:48:01:86:a5:32:17:c1:4a:5e:
         01:2e:b0:4f:bd:46:76:4d:50:3a:2c:33:b1:f2:b3:5c:47:11:
         87:be:32:dd:89:a3:9b:09:5c:8f:d6:d5:af:c8:8b:1e:3b:b9:
         d6:de:bd:62:ad:85:63:32:6f:01:17:ee:59:25:fd:73:25:9b:
         e7:42:31:17:e1:6d:93:41:27:ca:c7:6c:c9:bd:f8:3b:c4:73:
         6d:0f:92:d5:86:d1:67:53:90:0f:df:c9:b6:83:55:0f:9c:a1:
         fe:1d:b0:1b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUVlkUod+iKVD8LlSTJJqU1MWF5iowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUE4Q0RDQTk0NDNEMTQwRDAyODYwQUEwMDcwOTI4NjU2
QTE3MkNFMTAeFw0yNTAzMDYwMzU1MTZaFw0yNjAzMDUwNDAwMTZaMDMxMTAvBgNV
BAMTKDNCREEyNjhEREMzQUI4MDA3MzY3NUI5OUM2Q0QyQTU2QTAyMUMzNTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1CB5Pf/M86XA09R2t61lrTpE2
MNq4o4yaMlgTU9104LC89ZHmTD7zD0vvdEaj5FjcAG3wCRS9Yk+tFVIhYGQ71AON
z/6HlVNTqKem17ukHUPOnUakJTK1ZMo3xSGiFF/L5HmeHoSEhSL9Gd9fDhZVJgnj
cPIis+TvzWEYpbDIjVdiDNFsnpenG1q8ltWq70igXvBiVyZ262FiUm7FsdiH8j5I
CJzO2m0NIkBC7u/p3enkbatmGVBR6SiTP3+zG64JhXeclxEkebyGXE1bJE4+ptxD
xu9HjY/AOePlb0g3Z/lqQabjwT8Mz1naQgQtK4A28o8hA2Ks0TlcGfSY9UsPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUO9omjdw6uABzZ1uZxs0qVqAhw1YwHwYDVR0j
BBgwFoAUmozcqUQ9FA0ChgqgBwkoZWoXLOEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmd5TllXTjlyOGZQV003d0NmZHB6M1JOaEh3aEFaeUNrQkhjcVh1OWlC
VW0vMS85QThDRENBOTQ0M0QxNDBEMDI4NjBBQTAwNzA5Mjg2NTZBMTcyQ0UxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlBOENEQ0E5NDQzRDE0MEQw
Mjg2MEFBMDA3MDkyODY1NkExNzJDRTEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JneU5ZV045cjhmUFdNN3dDZmRwejNSTmhId2hBWnlDa0JIY3FYdTlpQlVtLzEv
MzEzNzMwMmUzMjM0MzUyZTM5MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzYzNTMyMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKq9VwwDQYJKoZIhvcNAQELBQADggEBAK3K5QlZ
4nCi1KKcCrX3Pllz6XoQ6E71maSlzm2BZz46zLi5VyXJ1cmd2HN5ovUPtuhketf6
CcsxmX2d0A0Cem9MuWTKfnd1VmIcfYoc2w64ZZTPU7Nd+9eY6dPIF7WTYDI46dH2
eTDeCx8fz0zRPLys7/7mPneb76azGsv+ZN5AKvPEOIo6ml0Ud9ssBEa/lEJ4L+ZJ
33W6GUgBhqUyF8FKXgEusE+9RnZNUDosM7Hys1xHEYe+Mt2Jo5sJXI/W1a/Iix47
udbevWKthWMybwEX7lkl/XMlm+dCMRfhbZNBJ8rHbMm9+DvEc20PktWG0WdTkA/f
ybaDVQ+cof4dsBs=
-----END CERTIFICATE-----
Generated at Sun Apr 13 04:41:12 2025 by rpki-client