Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3138362e3232372e37322e302f32332d3233203d3e20323637353133.roa
File:                     3138362e3232372e37322e302f32332d3233203d3e20323637353133.roa (raw, json)
Hash identifier:          QzuaG0Mc4lLCBI1F38kHDiUqegbTgqm3QgllLkebbjk=
Subject key identifier:   AA:F9:07:90:4F:FC:95:F0:5F:A6:DE:94:5E:4C:79:DC:EF:EA:78:37
Certificate issuer:       /CN=319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C
Certificate serial:       0318D18C18AC138E79ED92A447D9D515567667
Authority key identifier: 31:9D:AF:6D:91:7A:6B:C7:6D:7A:CC:FE:49:E2:8A:ED:8F:63:AB:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3138362e3232372e37322e302f32332d3233203d3e20323637353133.roa
Signing time:             Tue 24 Dec 2024 13:49:27 +0000
ROA not before:           Tue 24 Dec 2024 13:44:27 +0000
ROA not after:            Tue 23 Dec 2025 13:49:27 +0000
asID:                     267513
IP address blocks:        186.227.72.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.crl
                          rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 13:48:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:18:d1:8c:18:ac:13:8e:79:ed:92:a4:47:d9:d5:15:56:76:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C
        Validity
            Not Before: Dec 24 13:44:27 2024 GMT
            Not After : Dec 23 13:49:27 2025 GMT
        Subject: CN=AAF907904FFC95F05FA6DE945E4C79DCEFEA7837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:1f:2e:fd:3f:b2:6a:a1:a7:ca:d0:c7:ac:04:
                    4e:5a:5c:02:fd:8a:94:bb:71:60:41:dc:1d:8b:75:
                    29:c5:31:14:45:20:a6:f2:03:7f:e8:82:5d:68:44:
                    1c:3e:fd:ed:0e:46:f2:ca:c7:37:96:4a:a7:3b:22:
                    0c:09:69:1f:26:0e:7e:1d:e5:64:7a:4e:62:eb:89:
                    d7:5a:de:19:a1:7e:a1:d2:1e:cc:93:f7:c6:c9:4d:
                    6b:b7:9e:17:f8:c2:54:ee:90:98:31:f7:0f:d7:16:
                    b4:af:d1:d2:ba:30:ec:6c:be:44:df:35:bd:f1:99:
                    03:86:ea:f3:e0:ed:7a:2d:59:b6:34:e8:63:65:48:
                    43:e0:7c:af:3b:c3:09:b4:28:e2:68:77:22:16:e0:
                    49:ce:81:91:99:d3:85:be:91:c9:9f:8c:96:25:fe:
                    79:2e:5a:cf:dd:cb:2b:35:d1:2a:ed:8a:1e:5d:cb:
                    2f:17:2a:f4:69:dc:9a:56:a3:65:02:63:39:74:9d:
                    59:3a:22:a9:15:92:07:c1:1b:38:75:35:3b:cb:6c:
                    44:b9:79:38:5c:2b:c0:2f:dd:3f:2b:f4:48:5c:35:
                    db:9b:f7:45:c4:81:f8:16:12:eb:8c:e2:86:3e:3a:
                    13:73:16:a6:57:42:35:c8:27:24:50:18:56:b1:9f:
                    e1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:F9:07:90:4F:FC:95:F0:5F:A6:DE:94:5E:4C:79:DC:EF:EA:78:37
            X509v3 Authority Key Identifier:
                keyid:31:9D:AF:6D:91:7A:6B:C7:6D:7A:CC:FE:49:E2:8A:ED:8F:63:AB:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3138362e3232372e37322e302f32332d3233203d3e20323637353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:7e:45:91:dc:d2:3a:fc:c5:f8:1b:c1:29:4f:5f:7a:ed:3d:
         60:62:1f:37:cb:4f:02:55:31:ad:3c:d6:93:e3:d8:32:10:cd:
         0a:25:35:47:e7:7d:5b:0a:9d:bc:ea:c6:05:7e:3e:fa:a3:05:
         04:9d:a3:85:5c:a8:f8:a3:a3:50:84:53:9a:cb:ef:b8:cf:08:
         d3:93:3f:57:65:37:03:37:c3:e2:cd:35:28:3a:1f:53:a9:e5:
         3c:29:b2:7e:76:a5:c2:0f:9d:e9:bb:b2:4f:07:b6:39:b8:e9:
         8e:57:f7:49:d9:36:f8:f6:dc:e6:55:44:6b:eb:89:9e:e3:56:
         b3:e5:38:eb:96:38:1b:d8:eb:7e:e3:95:d1:37:47:86:1c:24:
         b2:03:7e:57:2e:f7:9a:77:ec:76:28:59:cc:c5:fc:7a:f0:a7:
         c6:db:40:54:44:48:74:8d:c3:20:c5:30:d5:53:11:2d:09:ea:
         6a:1f:b1:34:30:64:ad:43:c7:18:33:30:33:e1:fa:7f:f2:de:
         06:13:75:b2:07:a7:7e:92:78:ed:15:38:8f:fa:16:81:31:69:
         40:b8:66:46:05:a9:87:3a:95:9f:a8:d6:95:c8:4f:5c:6a:11:
         ad:05:7e:89:05:f7:94:32:61:c9:a2:3a:87:a9:68:65:e4:d0:
         b9:65:11:c7
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgITAxjRjBisE4557ZKkR9nVFVZ2ZzANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEygzMTlEQUY2RDkxN0E2QkM3NkQ3QUNDRkU0OUUyOEFFRDhG
NjNBQjFDMB4XDTI0MTIyNDEzNDQyN1oXDTI1MTIyMzEzNDkyN1owMzExMC8GA1UE
AxMoQUFGOTA3OTA0RkZDOTVGMDVGQTZERTk0NUU0Qzc5RENFRkVBNzgzNzCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANwfLv0/smqhp8rQx6wETlpcAv2K
lLtxYEHcHYt1KcUxFEUgpvIDf+iCXWhEHD797Q5G8srHN5ZKpzsiDAlpHyYOfh3l
ZHpOYuuJ11reGaF+odIezJP3xslNa7eeF/jCVO6QmDH3D9cWtK/R0row7Gy+RN81
vfGZA4bq8+Dtei1ZtjToY2VIQ+B8rzvDCbQo4mh3IhbgSc6BkZnThb6RyZ+MliX+
eS5az93LKzXRKu2KHl3LLxcq9GncmlajZQJjOXSdWToiqRWSB8EbOHU1O8tsRLl5
OFwrwC/dPyv0SFw125v3RcSB+BYS64zihj46E3MWpldCNcgnJFAYVrGf4ZkCAwEA
AaOCAlEwggJNMB0GA1UdDgQWBBSq+QeQT/yV8F+m3pReTHnc7+p4NzAfBgNVHSME
GDAWgBQxna9tkXprx216zP5J4ortj2OrHDAOBgNVHQ8BAf8EBAMCB4AwgZQGA1Ud
HwSBjDCBiTCBhqCBg6CBgIZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9CdW9jMW9yR2tDNlN2QXV2eEgxSktqd2kzS1B3SFJLUmFMczhzZkJOWHpK
Ry8wLzMxOURBRjZEOTE3QTZCQzc2RDdBQ0NGRTQ5RTI4QUVEOEY2M0FCMUMuY3Js
MHgGCCsGAQUFBwEBBGwwajBoBggrBgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvMzE5REFGNkQ5MTdBNkJDNzZE
N0FDQ0ZFNDlFMjhBRUQ4RjYzQUIxQy5jZXIwga4GCCsGAQUFBwELBIGhMIGeMIGb
BggrBgEFBQcwC4aBjnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QnVvYzFvckdrQzZTdkF1dnhIMUpLandpM0tQd0hSS1JhTHM4c2ZCTlh6SkcvMC8z
MTM4MzYyZTMyMzIzNzJlMzczMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYz
NzM1MzEzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAbrjSDANBgkqhkiG9w0BAQsFAAOCAQEAhn5FkdzS
OvzF+BvBKU9feu09YGIfN8tPAlUxrTzWk+PYMhDNCiU1R+d9WwqdvOrGBX4++qMF
BJ2jhVyo+KOjUIRTmsvvuM8I05M/V2U3AzfD4s01KDofU6nlPCmyfnalwg+d6buy
Twe2Objpjlf3Sdk2+Pbc5lVEa+uJnuNWs+U465Y4G9jrfuOV0TdHhhwksgN+Vy73
mnfsdihZzMX8evCnxttAVERIdI3DIMUw1VMRLQnqah+xNDBkrUPHGDMwM+H6f/Le
BhN1sgenfpJ47RU4j/oWgTFpQLhmRgWphzqVn6jWlchPXGoRrQV+iQX3lDJhyaI6
h6loZeTQuWURxw==
-----END CERTIFICATE-----
Generated at Wed Apr 16 14:33:03 2025 by rpki-client