Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BoKn2e2gibQwrqQe5VdNYCvZXUv4tUfi6PHgMVtkt1ad/0/3230312e3135382e32302e302f32322d3332203d3e203631373631.roa
File:                     3230312e3135382e32302e302f32322d3332203d3e203631373631.roa (raw, json)
Hash identifier:          D+BmbotEMRuhgcf/8juLcrwkiiy0a0xn/fvzywyRNaA=
Subject key identifier:   6D:BF:76:E4:92:2C:DD:90:0E:AC:51:98:3E:A6:F8:7D:47:D8:FC:7E
Certificate issuer:       /CN=F89C05D89E9A8F66D8758D1F8B5E7F00AC7A2B76
Certificate serial:       76FBF83992E9D6B95B1DC2D6B4BC85EE6842519F
Authority key identifier: F8:9C:05:D8:9E:9A:8F:66:D8:75:8D:1F:8B:5E:7F:00:AC:7A:2B:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F89C05D89E9A8F66D8758D1F8B5E7F00AC7A2B76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BoKn2e2gibQwrqQe5VdNYCvZXUv4tUfi6PHgMVtkt1ad/0/3230312e3135382e32302e302f32322d3332203d3e203631373631.roa
Signing time:             Thu 08 May 2025 13:35:04 +0000
ROA not before:           Thu 08 May 2025 13:30:04 +0000
ROA not after:            Thu 07 May 2026 13:35:04 +0000
asID:                     61761
IP address blocks:        201.158.20.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BoKn2e2gibQwrqQe5VdNYCvZXUv4tUfi6PHgMVtkt1ad/0/F89C05D89E9A8F66D8758D1F8B5E7F00AC7A2B76.crl
                          rsync://rpki-repo.registro.br/repo/BoKn2e2gibQwrqQe5VdNYCvZXUv4tUfi6PHgMVtkt1ad/0/F89C05D89E9A8F66D8758D1F8B5E7F00AC7A2B76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F89C05D89E9A8F66D8758D1F8B5E7F00AC7A2B76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 12:26:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:fb:f8:39:92:e9:d6:b9:5b:1d:c2:d6:b4:bc:85:ee:68:42:51:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F89C05D89E9A8F66D8758D1F8B5E7F00AC7A2B76
        Validity
            Not Before: May  8 13:30:04 2025 GMT
            Not After : May  7 13:35:04 2026 GMT
        Subject: CN=6DBF76E4922CDD900EAC51983EA6F87D47D8FC7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:16:91:af:b9:25:1a:e5:4e:ef:89:e0:07:91:
                    d7:f9:6e:61:63:a9:2e:bb:66:31:79:67:dd:6c:f9:
                    3d:bd:97:72:5e:e7:78:70:df:38:f2:17:d4:de:8a:
                    2c:09:9b:b3:0d:3d:3b:2e:1c:f3:5c:b3:4f:67:37:
                    f2:4f:1b:33:69:31:a0:a9:f9:27:3d:04:d6:5f:27:
                    da:95:3f:b0:75:80:36:9d:9c:82:35:2b:41:bd:76:
                    88:6a:e1:4a:3b:44:1d:19:85:60:3d:1a:eb:92:0d:
                    2d:b1:3a:cb:fd:c3:40:6a:a8:98:43:40:eb:3a:2b:
                    5e:27:c7:e4:14:b1:ac:6a:05:dd:5b:90:30:e5:54:
                    4b:7f:20:53:3e:05:a4:75:d4:44:95:29:4f:59:eb:
                    0e:01:9e:2d:37:81:3f:c0:21:5b:9b:fd:ef:38:bf:
                    ec:8b:ec:07:d4:ee:d3:c5:30:bc:bd:cb:84:b8:05:
                    ae:ad:a9:11:df:b7:43:8b:4c:44:b9:29:9d:fc:3e:
                    3e:1b:63:16:49:ad:2a:9f:60:72:ca:42:26:86:91:
                    48:c9:fb:6d:4b:86:93:49:a4:c1:39:6b:c6:b7:26:
                    4c:b3:b5:65:4f:08:26:de:ec:7d:72:ad:af:c3:a8:
                    74:f4:58:46:50:78:dd:c5:54:ff:e2:b6:8c:33:b2:
                    4d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:BF:76:E4:92:2C:DD:90:0E:AC:51:98:3E:A6:F8:7D:47:D8:FC:7E
            X509v3 Authority Key Identifier:
                keyid:F8:9C:05:D8:9E:9A:8F:66:D8:75:8D:1F:8B:5E:7F:00:AC:7A:2B:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BoKn2e2gibQwrqQe5VdNYCvZXUv4tUfi6PHgMVtkt1ad/0/F89C05D89E9A8F66D8758D1F8B5E7F00AC7A2B76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F89C05D89E9A8F66D8758D1F8B5E7F00AC7A2B76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BoKn2e2gibQwrqQe5VdNYCvZXUv4tUfi6PHgMVtkt1ad/0/3230312e3135382e32302e302f32322d3332203d3e203631373631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.158.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:e0:60:4c:3c:6b:78:e1:2d:ff:ac:29:2d:83:97:bb:1a:f2:
         43:24:c0:99:0a:9c:3e:44:cc:af:32:24:d3:22:8f:e8:79:53:
         0a:66:ea:74:62:d8:69:55:9e:6d:f0:90:62:24:f4:93:fb:65:
         ee:62:c9:04:08:31:8d:fa:c2:26:b6:6e:9c:f3:43:01:69:2f:
         2b:47:64:af:65:88:4a:5e:10:f3:bf:fc:90:0b:d7:cd:d0:e6:
         60:ef:03:8b:e6:8c:87:7b:7e:5e:4a:a6:60:1f:ad:2c:5a:d3:
         f2:5e:e9:cd:59:67:7f:c5:14:5a:66:b0:88:be:e1:82:27:b0:
         fd:06:00:bf:6a:44:9d:ed:f6:7b:8c:a0:9f:f6:14:7d:35:68:
         8f:42:18:cd:68:fa:c1:cb:32:83:45:70:b3:1e:e3:c0:c8:ce:
         a8:87:10:08:5c:4f:0f:e1:4f:3f:ca:7e:81:ef:34:43:b0:2e:
         4c:a8:79:98:65:ef:cf:7b:9b:0f:8a:3d:26:43:25:a2:d1:2d:
         c8:46:53:58:3b:bd:04:68:ed:44:bd:00:66:68:bb:59:51:0c:
         67:45:91:a1:6c:98:d7:2b:34:bd:54:36:c1:93:3d:15:ee:6b:
         1e:38:64:56:19:60:ca:8a:b9:a1:f1:c1:9d:b5:7c:c5:62:2b:
         1f:66:e7:4a
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUdvv4OZLp1rlbHcLWtLyF7mhCUZ8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjg5QzA1RDg5RTlBOEY2NkQ4NzU4RDFGOEI1RTdGMDBB
QzdBMkI3NjAeFw0yNTA1MDgxMzMwMDRaFw0yNjA1MDcxMzM1MDRaMDMxMTAvBgNV
BAMTKDZEQkY3NkU0OTIyQ0REOTAwRUFDNTE5ODNFQTZGODdENDdEOEZDN0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuFpGvuSUa5U7vieAHkdf5bmFj
qS67ZjF5Z91s+T29l3Je53hw3zjyF9TeiiwJm7MNPTsuHPNcs09nN/JPGzNpMaCp
+Sc9BNZfJ9qVP7B1gDadnII1K0G9dohq4Uo7RB0ZhWA9GuuSDS2xOsv9w0BqqJhD
QOs6K14nx+QUsaxqBd1bkDDlVEt/IFM+BaR11ESVKU9Z6w4Bni03gT/AIVub/e84
v+yL7AfU7tPFMLy9y4S4Ba6tqRHft0OLTES5KZ38Pj4bYxZJrSqfYHLKQiaGkUjJ
+21LhpNJpME5a8a3JkyztWVPCCbe7H1yra/DqHT0WEZQeN3FVP/itowzsk3zAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUbb925JIs3ZAOrFGYPqb4fUfY/H4wHwYDVR0j
BBgwFoAU+JwF2J6aj2bYdY0fi15/AKx6K3YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQm9LbjJlMmdpYlF3cnFRZTVWZE5ZQ3ZaWFV2NHRVZmk2UEhnTVZ0a3Qx
YWQvMC9GODlDMDVEODlFOUE4RjY2RDg3NThEMUY4QjVFN0YwMEFDN0EyQjc2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y4OUMwNUQ4OUU5QThGNjZE
ODc1OEQxRjhCNUU3RjAwQUM3QTJCNzYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JvS24yZTJnaWJRd3JxUWU1VmROWUN2WlhVdjR0VWZpNlBIZ01WdGt0MWFkLzAv
MzIzMDMxMmUzMTM1MzgyZTMyMzAyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzNjMx
MzczNjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCyZ4UMA0GCSqGSIb3DQEBCwUAA4IBAQBE4GBMPGt4
4S3/rCktg5e7GvJDJMCZCpw+RMyvMiTTIo/oeVMKZup0YthpVZ5t8JBiJPST+2Xu
YskECDGN+sImtm6c80MBaS8rR2SvZYhKXhDzv/yQC9fN0OZg7wOL5oyHe35eSqZg
H60sWtPyXunNWWd/xRRaZrCIvuGCJ7D9BgC/akSd7fZ7jKCf9hR9NWiPQhjNaPrB
yzKDRXCzHuPAyM6ohxAIXE8P4U8/yn6B7zRDsC5MqHmYZe/Pe5sPij0mQyWi0S3I
RlNYO70EaO1EvQBmaLtZUQxnRZGhbJjXKzS9VDbBkz0V7mseOGRWGWDKirmh8cGd
tXzFYisfZudK
-----END CERTIFICATE-----
Generated at Sun Jun 8 20:36:36 2025 by rpki-client