Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BwU4DDHLNcqper4v9yxamLtnw2Tq9NXCaNitJXCA42Y9/1/3138392e3131332e3134342e302f32302d3234203d3e203238323135.roa
File:                     3138392e3131332e3134342e302f32302d3234203d3e203238323135.roa (raw, json)
Hash identifier:          Jd7rHVaoRvDXUv/NglFwqfWmKf5XCF5/2XCaQ2esrDU=
Subject key identifier:   27:4F:9F:85:95:93:A4:43:C0:F7:DD:8A:6B:2C:10:73:34:D2:54:80
Certificate issuer:       /CN=FBBE40BD3F7A6B589C652ECAE9F7DCC1C064E18E
Certificate serial:       6DA7CFE7B1BB5F26CDCBFB0BFEE22BEFA67F5028
Authority key identifier: FB:BE:40:BD:3F:7A:6B:58:9C:65:2E:CA:E9:F7:DC:C1:C0:64:E1:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBBE40BD3F7A6B589C652ECAE9F7DCC1C064E18E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BwU4DDHLNcqper4v9yxamLtnw2Tq9NXCaNitJXCA42Y9/1/3138392e3131332e3134342e302f32302d3234203d3e203238323135.roa
Signing time:             Wed 05 Mar 2025 22:45:30 +0000
ROA not before:           Wed 05 Mar 2025 22:40:30 +0000
ROA not after:            Wed 04 Mar 2026 22:45:30 +0000
asID:                     28215
IP address blocks:        189.113.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BwU4DDHLNcqper4v9yxamLtnw2Tq9NXCaNitJXCA42Y9/1/FBBE40BD3F7A6B589C652ECAE9F7DCC1C064E18E.crl
                          rsync://rpki-repo.registro.br/repo/BwU4DDHLNcqper4v9yxamLtnw2Tq9NXCaNitJXCA42Y9/1/FBBE40BD3F7A6B589C652ECAE9F7DCC1C064E18E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBBE40BD3F7A6B589C652ECAE9F7DCC1C064E18E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 20:12:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:a7:cf:e7:b1:bb:5f:26:cd:cb:fb:0b:fe:e2:2b:ef:a6:7f:50:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBBE40BD3F7A6B589C652ECAE9F7DCC1C064E18E
        Validity
            Not Before: Mar  5 22:40:30 2025 GMT
            Not After : Mar  4 22:45:30 2026 GMT
        Subject: CN=274F9F859593A443C0F7DD8A6B2C107334D25480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:80:b5:46:66:3a:4e:5e:5d:80:81:e0:d0:b9:
                    f3:bb:b0:14:08:c5:e4:10:97:b7:35:9e:23:35:da:
                    6a:04:1d:97:ec:52:6a:7c:2b:e7:3b:e5:53:79:a4:
                    7d:52:ba:2f:63:20:95:be:af:83:d7:ec:db:f9:92:
                    3a:85:17:53:93:18:2d:2f:46:c8:10:04:2b:ed:47:
                    e5:07:87:c8:ef:c8:68:2e:44:f4:fe:de:c2:0c:6e:
                    91:95:74:d5:b1:d6:51:93:70:fc:da:89:61:a1:41:
                    a0:cf:b9:80:f9:a5:1e:6c:1b:fc:4c:27:3e:4b:51:
                    ba:02:c6:4f:bf:75:ab:e8:6c:18:be:9b:9f:fd:b3:
                    c3:d1:f0:79:24:47:bb:40:aa:28:c8:f6:ef:21:1a:
                    f2:54:7c:08:55:c6:62:e4:5f:d7:08:28:65:38:f8:
                    41:2d:ba:35:f0:2a:3b:51:ca:48:f5:b5:b6:e1:cd:
                    f3:12:6a:7e:1e:57:32:9d:d8:66:62:13:16:2a:2f:
                    4c:ba:6f:e1:39:ed:d3:97:fa:99:25:46:60:4c:c4:
                    4c:0e:b5:dc:12:12:6e:38:71:ba:28:d1:a9:79:c2:
                    fb:45:6a:6d:c9:6e:cf:c1:7a:72:6e:d8:d2:fa:b1:
                    2e:78:9f:e0:9e:0c:00:46:17:72:89:b4:0a:e4:62:
                    f0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:4F:9F:85:95:93:A4:43:C0:F7:DD:8A:6B:2C:10:73:34:D2:54:80
            X509v3 Authority Key Identifier:
                keyid:FB:BE:40:BD:3F:7A:6B:58:9C:65:2E:CA:E9:F7:DC:C1:C0:64:E1:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BwU4DDHLNcqper4v9yxamLtnw2Tq9NXCaNitJXCA42Y9/1/FBBE40BD3F7A6B589C652ECAE9F7DCC1C064E18E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBBE40BD3F7A6B589C652ECAE9F7DCC1C064E18E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwU4DDHLNcqper4v9yxamLtnw2Tq9NXCaNitJXCA42Y9/1/3138392e3131332e3134342e302f32302d3234203d3e203238323135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.113.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         48:b2:4e:41:9b:3b:cb:ad:15:75:5d:1f:55:da:f3:df:0d:9c:
         f6:cd:3d:2d:42:c2:c1:d3:69:95:f6:9d:73:09:6b:e6:57:e6:
         61:de:3a:92:46:05:17:d7:04:f1:21:7f:43:d2:0a:b1:d8:ff:
         f7:48:06:67:73:f6:ab:65:4f:3f:1e:94:6c:0f:a2:a4:31:ec:
         bf:52:2e:8e:04:e8:62:ef:70:80:a1:15:ab:2b:58:69:7c:12:
         77:9b:85:8b:57:3c:b8:c9:7f:71:d0:37:a0:b9:00:ac:a6:b3:
         f7:ed:a9:cd:03:10:01:e0:23:59:49:04:6a:e0:47:9e:b4:20:
         60:c2:8d:4b:6a:41:38:4c:99:9d:b2:07:e6:fa:96:dc:cb:ba:
         2d:be:ac:2b:dd:b0:3d:bf:73:58:91:5c:a8:45:f7:ff:62:b8:
         6e:dc:fa:10:fa:be:da:48:53:12:8f:50:d4:5c:4d:dc:1b:32:
         70:70:e5:f3:f6:5a:e6:16:ce:e0:95:3d:6e:25:20:f6:12:14:
         db:75:ff:a2:af:10:b0:2d:01:2d:4c:b4:7c:51:57:4b:84:c2:
         95:db:c0:d9:7a:fd:76:a5:3f:85:45:3e:62:f4:03:04:46:70:
         c2:06:33:e1:9c:aa:62:28:61:cf:e6:59:32:42:81:4e:de:0c:
         3e:2b:07:6e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUbafP57G7XybNy/sL/uIr76Z/UCgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkJCRTQwQkQzRjdBNkI1ODlDNjUyRUNBRTlGN0RDQzFD
MDY0RTE4RTAeFw0yNTAzMDUyMjQwMzBaFw0yNjAzMDQyMjQ1MzBaMDMxMTAvBgNV
BAMTKDI3NEY5Rjg1OTU5M0E0NDNDMEY3REQ4QTZCMkMxMDczMzREMjU0ODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUgLVGZjpOXl2AgeDQufO7sBQI
xeQQl7c1niM12moEHZfsUmp8K+c75VN5pH1Sui9jIJW+r4PX7Nv5kjqFF1OTGC0v
RsgQBCvtR+UHh8jvyGguRPT+3sIMbpGVdNWx1lGTcPzaiWGhQaDPuYD5pR5sG/xM
Jz5LUboCxk+/davobBi+m5/9s8PR8HkkR7tAqijI9u8hGvJUfAhVxmLkX9cIKGU4
+EEtujXwKjtRykj1tbbhzfMSan4eVzKd2GZiExYqL0y6b+E57dOX+pklRmBMxEwO
tdwSEm44cboo0al5wvtFam3Jbs/BenJu2NL6sS54n+CeDABGF3KJtArkYvAtAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUJ0+fhZWTpEPA992KaywQczTSVIAwHwYDVR0j
BBgwFoAU+75AvT96a1icZS7K6ffcwcBk4Y4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQndVNERESExOY3FwZXI0djl5eGFtTHRudzJUcTlOWENhTml0SlhDQTQy
WTkvMS9GQkJFNDBCRDNGN0E2QjU4OUM2NTJFQ0FFOUY3RENDMUMwNjRFMThFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZCQkU0MEJEM0Y3QTZCNTg5
QzY1MkVDQUU5RjdEQ0MxQzA2NEUxOEUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J3VTREREhMTmNxcGVyNHY5eXhhbUx0bncyVHE5TlhDYU5pdEpYQ0E0Mlk5LzEv
MzEzODM5MmUzMTMxMzMyZTMxMzQzNDJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDMy
MzgzMjMxMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAS9cZAwDQYJKoZIhvcNAQELBQADggEBAEiyTkGb
O8utFXVdH1Xa898NnPbNPS1CwsHTaZX2nXMJa+ZX5mHeOpJGBRfXBPEhf0PSCrHY
//dIBmdz9qtlTz8elGwPoqQx7L9SLo4E6GLvcIChFasrWGl8EnebhYtXPLjJf3HQ
N6C5AKyms/ftqc0DEAHgI1lJBGrgR560IGDCjUtqQThMmZ2yB+b6ltzLui2+rCvd
sD2/c1iRXKhF9/9iuG7c+hD6vtpIUxKPUNRcTdwbMnBw5fP2WuYWzuCVPW4lIPYS
FNt1/6KvELAtAS1MtHxRV0uEwpXbwNl6/XalP4VFPmL0AwRGcMIGM+GcqmIoYc/m
WTJCgU7eDD4rB24=
-----END CERTIFICATE-----
Generated at Sat Apr 12 08:37:19 2025 by rpki-client