Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/3137302e38312e3138382e302f32322d3234203d3e20323632373535.roa
File:                     3137302e38312e3138382e302f32322d3234203d3e20323632373535.roa (raw, json)
Hash identifier:          KuJaichzw2NzPyx1P41olphXNBe8KWCNtBYJumHvfYo=
Subject key identifier:   38:CA:CD:68:7A:E6:B9:69:B4:F0:A9:C9:AE:FA:E0:8D:F8:1C:D1:B0
Certificate issuer:       /CN=E98018CD2C68060BD13517BC1BB31EAD6E73038A
Certificate serial:       5C5EF980006CEF5844E880CABD39CFD48EEABC0A
Authority key identifier: E9:80:18:CD:2C:68:06:0B:D1:35:17:BC:1B:B3:1E:AD:6E:73:03:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/3137302e38312e3138382e302f32322d3234203d3e20323632373535.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     262755
IP address blocks:        170.81.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.crl
                          rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 16:32:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:5e:f9:80:00:6c:ef:58:44:e8:80:ca:bd:39:cf:d4:8e:ea:bc:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E98018CD2C68060BD13517BC1BB31EAD6E73038A
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=38CACD687AE6B969B4F0A9C9AEFAE08DF81CD1B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:db:ec:e7:dc:b2:f1:d8:2e:b4:8d:75:3d:dd:
                    e0:a4:f0:68:ec:6a:ea:7e:19:41:af:57:df:fc:40:
                    20:40:2e:b6:16:6b:67:30:1c:39:b9:76:dc:5c:c2:
                    07:81:76:d7:e0:67:93:ef:13:7a:59:bf:94:d6:8e:
                    61:dd:9a:0e:28:b6:85:27:c7:9d:c1:82:a2:7c:ad:
                    71:88:1c:bb:a3:a0:3c:c5:e9:e0:b1:0e:cf:dd:2c:
                    07:d3:3a:10:f5:10:de:1a:b6:3d:b1:67:15:11:6e:
                    ed:60:6d:ac:54:cb:b0:2c:bc:f0:a3:43:68:13:d5:
                    79:6a:27:24:7c:ce:c7:df:8d:28:fa:e5:fa:55:29:
                    9d:85:c9:cf:25:a6:72:00:db:e8:01:1f:74:44:5f:
                    ce:0c:ca:72:00:b4:2e:56:74:fd:81:56:09:f1:65:
                    94:28:d5:49:7a:78:ef:db:da:cc:7f:f5:93:1e:cc:
                    de:1e:b6:25:2e:1b:f8:94:c8:52:53:5e:23:53:b0:
                    81:9d:0e:b1:1e:c0:50:1a:b5:9f:ec:d3:3f:0d:30:
                    82:d1:eb:f8:9f:d0:8c:74:23:3b:75:1a:96:85:dd:
                    7c:8a:82:15:35:81:d0:42:e6:4c:2b:a4:30:d4:15:
                    a4:43:d8:36:19:9a:f8:01:f0:ac:7b:30:93:1b:1b:
                    5c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:CA:CD:68:7A:E6:B9:69:B4:F0:A9:C9:AE:FA:E0:8D:F8:1C:D1:B0
            X509v3 Authority Key Identifier:
                keyid:E9:80:18:CD:2C:68:06:0B:D1:35:17:BC:1B:B3:1E:AD:6E:73:03:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/3137302e38312e3138382e302f32322d3234203d3e20323632373535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:83:f8:6e:34:91:7f:f4:fd:ff:7c:5d:6c:43:56:3c:39:63:
         48:02:7b:86:09:df:68:8f:3e:65:3c:81:81:c6:b5:be:17:8a:
         b7:f7:d0:31:02:68:6f:79:4d:3f:e1:ea:07:4b:1f:51:19:4a:
         21:86:4d:90:04:27:65:4d:47:78:73:3f:3e:e3:86:29:bc:6d:
         4f:47:cc:bd:1f:41:95:eb:18:eb:10:9e:e9:16:b1:20:bd:4a:
         30:b3:5f:4a:20:e4:07:16:d4:bc:0c:16:6f:27:ca:0a:be:a4:
         5e:4e:0c:2a:8c:1a:31:bf:1f:56:6f:17:7c:75:7b:28:1d:ee:
         c1:5e:e7:32:92:2e:7b:07:65:d0:ec:a8:e4:f8:28:54:fd:2a:
         56:f8:f8:60:95:ce:37:1d:68:f4:96:95:ed:00:af:c5:f7:08:
         04:b0:78:d7:6a:31:61:70:dc:99:ef:17:6b:a8:28:3f:f9:b1:
         58:b6:78:ac:9b:02:e5:ca:92:37:a6:c6:10:1b:fb:50:27:1c:
         9a:4c:df:93:be:21:56:66:18:29:e4:46:45:20:fc:31:29:ea:
         4a:75:f6:61:b3:aa:1d:ce:ed:4d:b1:cd:b6:31:db:ed:b2:39:
         91:f6:c5:d8:37:51:a0:28:5e:30:4a:24:4c:b7:bd:10:72:f9:
         0a:de:8c:db
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUXF75gABs71hE6IDKvTnP1I7qvAowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTk4MDE4Q0QyQzY4MDYwQkQxMzUxN0JDMUJCMzFFQUQ2
RTczMDM4QTAeFw0yNTAzMDUxODU1MDBaFw0yNjAzMDQxOTAwMDBaMDMxMTAvBgNV
BAMTKDM4Q0FDRDY4N0FFNkI5NjlCNEYwQTlDOUFFRkFFMDhERjgxQ0QxQjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDy2+zn3LLx2C60jXU93eCk8Gjs
aup+GUGvV9/8QCBALrYWa2cwHDm5dtxcwgeBdtfgZ5PvE3pZv5TWjmHdmg4otoUn
x53BgqJ8rXGIHLujoDzF6eCxDs/dLAfTOhD1EN4atj2xZxURbu1gbaxUy7AsvPCj
Q2gT1XlqJyR8zsffjSj65fpVKZ2Fyc8lpnIA2+gBH3REX84MynIAtC5WdP2BVgnx
ZZQo1Ul6eO/b2sx/9ZMezN4etiUuG/iUyFJTXiNTsIGdDrEewFAatZ/s0z8NMILR
6/if0Ix0Izt1GpaF3XyKghU1gdBC5kwrpDDUFaRD2DYZmvgB8Kx7MJMbG1ytAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUOMrNaHrmuWm08KnJrvrgjfgc0bAwHwYDVR0j
BBgwFoAU6YAYzSxoBgvRNRe8G7MerW5zA4owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1BmMUYxNHFXaVdVa3JmNDJqZWgxczRibVdCMmV6YXNMZ3dqeWpVZDl4
WHMvMS9FOTgwMThDRDJDNjgwNjBCRDEzNTE3QkMxQkIzMUVBRDZFNzMwMzhBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U5ODAxOENEMkM2ODA2MEJE
MTM1MTdCQzFCQjMxRUFENkU3MzAzOEEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NQZjFGMTRxV2lXVWtyZjQyamVoMXM0Ym1XQjJlemFzTGd3anlqVWQ5eFhzLzEv
MzEzNzMwMmUzODMxMmUzMTM4MzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzIzNzM1MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKqUbwwDQYJKoZIhvcNAQELBQADggEBAJKD+G40
kX/0/f98XWxDVjw5Y0gCe4YJ32iPPmU8gYHGtb4Xirf30DECaG95TT/h6gdLH1EZ
SiGGTZAEJ2VNR3hzPz7jhim8bU9HzL0fQZXrGOsQnukWsSC9SjCzX0og5AcW1LwM
Fm8nygq+pF5ODCqMGjG/H1ZvF3x1eygd7sFe5zKSLnsHZdDsqOT4KFT9Klb4+GCV
zjcdaPSWle0Ar8X3CASweNdqMWFw3JnvF2uoKD/5sVi2eKybAuXKkjemxhAb+1An
HJpM35O+IVZmGCnkRkUg/DEp6kp19mGzqh3O7U2xzbYx2+2yOZH2xdg3UaAoXjBK
JEy3vRBy+QrejNs=
-----END CERTIFICATE-----
Generated at Thu Apr 17 07:43:10 2025 by rpki-client