Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3138372e31362e3234302e302f32302d3234203d3e203238323630.roa
File:                     3138372e31362e3234302e302f32302d3234203d3e203238323630.roa (raw, json)
Hash identifier:          8qIcTWWbGYhbxSCfGrZ0nWpV/m9YSQwz9FoTNFnOVLg=
Subject key identifier:   5A:4C:34:1B:BF:4B:A6:2C:46:FB:B4:12:F3:4A:C0:88:C4:FC:5A:A8
Certificate issuer:       /CN=EDDE9456DFB0E0B6141479B36FE32CA0BF98688B
Certificate serial:       7C83B664AE94320AFE80ECF3F9581D19D28B3677
Authority key identifier: ED:DE:94:56:DF:B0:E0:B6:14:14:79:B3:6F:E3:2C:A0:BF:98:68:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDDE9456DFB0E0B6141479B36FE32CA0BF98688B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3138372e31362e3234302e302f32302d3234203d3e203238323630.roa
Signing time:             Mon 27 Jan 2025 20:48:49 +0000
ROA not before:           Mon 27 Jan 2025 20:43:49 +0000
ROA not after:            Mon 26 Jan 2026 20:48:49 +0000
asID:                     28260
IP address blocks:        187.16.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/EDDE9456DFB0E0B6141479B36FE32CA0BF98688B.crl
                          rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/EDDE9456DFB0E0B6141479B36FE32CA0BF98688B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDDE9456DFB0E0B6141479B36FE32CA0BF98688B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 09:52:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:83:b6:64:ae:94:32:0a:fe:80:ec:f3:f9:58:1d:19:d2:8b:36:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDDE9456DFB0E0B6141479B36FE32CA0BF98688B
        Validity
            Not Before: Jan 27 20:43:49 2025 GMT
            Not After : Jan 26 20:48:49 2026 GMT
        Subject: CN=5A4C341BBF4BA62C46FBB412F34AC088C4FC5AA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e7:8f:eb:18:cd:f0:0e:7a:25:c7:56:06:d3:
                    ad:41:fb:c4:e5:9d:9d:23:b6:83:da:2d:56:6c:f7:
                    3a:bb:31:24:e3:0b:34:5f:8d:3e:83:d1:93:36:fa:
                    a7:02:67:e4:3b:3d:2a:01:31:9a:85:0f:1e:21:4a:
                    44:cd:74:8a:06:46:b0:bc:72:0a:db:ba:99:79:12:
                    25:f8:c8:51:47:9e:9c:85:00:6e:de:9c:5e:e9:1b:
                    11:49:68:d2:3e:73:f4:a8:98:85:38:6c:38:b2:34:
                    96:f5:e2:e0:0a:6c:75:00:c2:59:49:25:b5:7b:d0:
                    f9:46:1b:52:12:39:45:66:9c:fa:5e:4f:d5:eb:41:
                    c8:93:43:4a:5f:a5:8f:d2:10:ef:49:d4:6a:7c:9d:
                    a8:09:76:44:33:97:78:56:db:2c:f3:3c:1a:42:3b:
                    0a:9c:c2:07:75:ed:a4:e1:66:a6:3f:0c:3b:95:2f:
                    49:4f:cf:25:57:b4:d9:bb:cd:ed:78:a6:6b:cf:53:
                    f8:4c:fb:3c:7e:2a:53:bf:c3:20:be:3b:19:a1:47:
                    d1:23:b0:31:99:f2:0b:a6:8f:05:2e:92:b0:ea:ff:
                    2b:a9:68:b0:31:25:a1:b5:b3:83:59:dc:47:1e:98:
                    d0:da:ac:94:48:13:a5:0c:6f:f7:f2:be:89:8b:10:
                    a8:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:4C:34:1B:BF:4B:A6:2C:46:FB:B4:12:F3:4A:C0:88:C4:FC:5A:A8
            X509v3 Authority Key Identifier:
                keyid:ED:DE:94:56:DF:B0:E0:B6:14:14:79:B3:6F:E3:2C:A0:BF:98:68:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/EDDE9456DFB0E0B6141479B36FE32CA0BF98688B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDDE9456DFB0E0B6141479B36FE32CA0BF98688B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3138372e31362e3234302e302f32302d3234203d3e203238323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.16.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0b:99:b1:a0:e1:72:6c:6d:c4:31:ca:d9:5b:6c:74:76:d6:a7:
         4f:22:d7:fd:68:09:d5:e9:96:52:87:e1:16:ee:b9:2e:a7:a5:
         35:3f:fd:56:2e:f9:44:04:ea:ec:04:fc:82:cb:db:27:12:c4:
         0a:9f:ef:df:48:3b:6a:80:21:ad:de:9c:f4:aa:b3:ee:5d:8e:
         a5:aa:17:12:3a:f5:40:dc:84:80:7a:ce:5b:d8:36:9b:da:5d:
         06:d1:a8:b7:20:49:b7:c0:77:87:ae:7d:e0:0d:05:9a:27:c4:
         84:f6:cb:c4:31:07:f7:e7:6a:3c:1e:51:9d:49:24:0c:ce:9c:
         8b:3c:ba:0e:ae:bc:e7:33:f8:09:70:1a:69:2c:3d:59:9b:21:
         1c:71:29:74:5f:42:4b:65:b5:13:d7:a0:80:77:c5:d6:1c:29:
         73:ce:b8:59:62:37:26:94:ca:04:d1:52:a1:f1:91:b7:0e:7e:
         9c:3a:e9:38:bf:eb:57:cf:49:ce:f3:02:9e:e7:98:d7:60:57:
         3e:cd:5e:4d:be:8c:e9:ec:e4:91:7f:09:f9:5c:88:4a:31:e1:
         a1:d9:0d:cb:cc:28:ac:1d:ff:a3:65:96:24:8e:1c:98:80:78:
         9c:45:e4:9a:7b:d5:8f:82:d0:d0:f3:f9:36:49:5c:8b:17:c8:
         58:64:0a:c8
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUfIO2ZK6UMgr+gOzz+VgdGdKLNncwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRURERTk0NTZERkIwRTBCNjE0MTQ3OUIzNkZFMzJDQTBC
Rjk4Njg4QjAeFw0yNTAxMjcyMDQzNDlaFw0yNjAxMjYyMDQ4NDlaMDMxMTAvBgNV
BAMTKDVBNEMzNDFCQkY0QkE2MkM0NkZCQjQxMkYzNEFDMDg4QzRGQzVBQTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC054/rGM3wDnolx1YG061B+8Tl
nZ0jtoPaLVZs9zq7MSTjCzRfjT6D0ZM2+qcCZ+Q7PSoBMZqFDx4hSkTNdIoGRrC8
cgrbupl5EiX4yFFHnpyFAG7enF7pGxFJaNI+c/SomIU4bDiyNJb14uAKbHUAwllJ
JbV70PlGG1ISOUVmnPpeT9XrQciTQ0pfpY/SEO9J1Gp8nagJdkQzl3hW2yzzPBpC
Owqcwgd17aThZqY/DDuVL0lPzyVXtNm7ze14pmvPU/hM+zx+KlO/wyC+OxmhR9Ej
sDGZ8gumjwUukrDq/yupaLAxJaG1s4NZ3EcemNDarJRIE6UMb/fyvomLEKghAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUWkw0G79LpixG+7QS80rAiMT8WqgwHwYDVR0j
BBgwFoAU7d6UVt+w4LYUFHmzb+MsoL+YaIswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDgxYWlYcERBdjVXQm1nRThvRXBmb3JkakdQNjJvdG4yZkhyaGFMNGNn
YnkvMC9FRERFOTQ1NkRGQjBFMEI2MTQxNDc5QjM2RkUzMkNBMEJGOTg2ODhCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VEREU5NDU2REZCMEUwQjYx
NDE0NzlCMzZGRTMyQ0EwQkY5ODY4OEIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q4MWFpWHBEQXY1V0JtZ0U4b0VwZm9yZGpHUDYyb3RuMmZIcmhhTDRjZ2J5LzAv
MzEzODM3MmUzMTM2MmUzMjM0MzAyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM4
MzIzNjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEuxDwMA0GCSqGSIb3DQEBCwUAA4IBAQALmbGg4XJs
bcQxytlbbHR21qdPItf9aAnV6ZZSh+EW7rkup6U1P/1WLvlEBOrsBPyCy9snEsQK
n+/fSDtqgCGt3pz0qrPuXY6lqhcSOvVA3ISAes5b2Dab2l0G0ai3IEm3wHeHrn3g
DQWaJ8SE9svEMQf352o8HlGdSSQMzpyLPLoOrrznM/gJcBppLD1ZmyEccSl0X0JL
ZbUT16CAd8XWHClzzrhZYjcmlMoE0VKh8ZG3Dn6cOuk4v+tXz0nO8wKe55jXYFc+
zV5Nvozp7OSRfwn5XIhKMeGh2Q3LzCisHf+jZZYkjhyYgHicReSae9WPgtDQ8/k2
SVyLF8hYZArI
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:56:27 2025 by rpki-client