Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/1/3133322e3235352e3234302e302f32322d3332203d3e203631353838.roa
File:                     3133322e3235352e3234302e302f32322d3332203d3e203631353838.roa (raw, json)
Hash identifier:          cEpaWb3QtHtk4avuKod9/t2iqD8O65CS7K3aW1WX/4k=
Subject key identifier:   2A:44:F9:03:04:72:C0:2B:0E:D7:DB:7E:1A:F1:EE:16:5E:D0:C5:E4
Certificate issuer:       /CN=9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815
Certificate serial:       0A92F2185544ECFD68A1808EE7F44CB54EEC8E67
Authority key identifier: 9A:EA:4D:C1:41:FC:20:D7:BA:2A:53:81:C5:2B:C3:4A:29:AB:68:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/1/3133322e3235352e3234302e302f32322d3332203d3e203631353838.roa
Signing time:             Thu 06 Mar 2025 09:00:38 +0000
ROA not before:           Thu 06 Mar 2025 08:55:38 +0000
ROA not after:            Thu 05 Mar 2026 09:00:38 +0000
asID:                     61588
IP address blocks:        132.255.240.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/1/9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.crl
                          rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/1/9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 12:53:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:92:f2:18:55:44:ec:fd:68:a1:80:8e:e7:f4:4c:b5:4e:ec:8e:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815
        Validity
            Not Before: Mar  6 08:55:38 2025 GMT
            Not After : Mar  5 09:00:38 2026 GMT
        Subject: CN=2A44F9030472C02B0ED7DB7E1AF1EE165ED0C5E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0c:79:f6:b7:e0:7d:5f:54:d2:c7:78:95:14:
                    b8:d9:8f:2f:4d:41:96:45:ad:5e:44:44:2f:85:a1:
                    52:27:de:9a:3f:19:d4:1d:3b:10:76:a5:33:85:ac:
                    5d:7c:48:41:94:a8:9a:da:84:07:91:e8:06:fc:d8:
                    e4:73:b0:bc:9a:34:7e:78:47:e1:7c:f2:12:c5:69:
                    36:f0:f2:86:b2:cf:b8:b1:ef:c2:c9:37:1f:cc:f7:
                    c2:e7:cd:77:08:f1:d5:f4:af:cb:94:03:8a:77:22:
                    42:b8:64:87:f4:34:0b:20:9a:c2:3b:fd:17:98:f8:
                    1b:ca:2f:d8:5f:81:dd:b0:87:f2:86:05:e9:35:73:
                    ac:f3:35:30:d5:ca:d6:04:ed:ab:05:d4:b3:d6:6c:
                    57:c5:3d:18:b2:a4:3f:de:19:66:bc:75:78:f2:82:
                    d1:51:79:ab:d2:ed:da:aa:fc:d0:d2:e9:0c:33:13:
                    27:be:11:31:7c:21:09:31:cd:0b:fb:bd:d2:1e:97:
                    f7:f4:5d:d1:86:07:df:cb:1d:ef:18:d2:ed:31:70:
                    2e:5c:b4:b6:15:59:2b:8f:f7:93:e9:ba:0c:67:08:
                    2e:ca:e6:25:45:df:59:ef:59:0f:dd:4e:8a:01:30:
                    2b:17:2a:f7:75:c8:a5:39:9f:3d:80:e8:11:04:ec:
                    b6:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:44:F9:03:04:72:C0:2B:0E:D7:DB:7E:1A:F1:EE:16:5E:D0:C5:E4
            X509v3 Authority Key Identifier:
                keyid:9A:EA:4D:C1:41:FC:20:D7:BA:2A:53:81:C5:2B:C3:4A:29:AB:68:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/1/9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/1/3133322e3235352e3234302e302f32322d3332203d3e203631353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:5a:e8:07:f0:f8:8c:da:6b:ba:94:5e:27:8b:fc:4d:bf:51:
         3c:cf:dd:83:6f:10:e2:17:3e:5f:2f:63:d3:54:0e:dd:9d:62:
         b9:f4:c0:06:a3:e0:62:ec:ca:fd:83:2a:1b:46:2e:22:45:d3:
         13:8c:cc:1b:ab:de:42:df:56:9b:f4:33:73:00:fa:77:ad:6b:
         3a:68:0f:9f:1e:d2:9f:a9:d7:e1:7a:c1:64:29:0c:ea:d2:97:
         59:f5:01:1e:3f:b7:23:44:ec:42:3c:5b:c2:f3:dc:66:51:6b:
         84:02:e3:3e:94:c3:ea:6b:c5:06:02:78:7e:46:30:8d:1a:a2:
         46:57:4c:76:10:64:2b:bc:82:6b:92:7e:38:f1:d5:b0:14:ed:
         8b:ce:50:a7:31:e9:5a:a6:36:10:32:f1:6f:64:0f:ce:fd:c3:
         48:f2:1f:4a:c2:02:b5:3a:14:b9:5f:68:ff:e6:c2:6d:96:e0:
         9d:27:5a:34:0d:b9:d2:8f:4f:be:a8:39:e8:d7:d7:25:0a:6b:
         a3:b1:16:a4:54:ff:2a:d8:55:3f:39:02:51:df:fc:41:22:2e:
         f8:16:40:4f:26:f1:77:a9:ee:23:5e:8f:4a:7c:74:62:2f:dc:
         90:b5:e8:14:7e:64:27:d9:62:cb:3a:43:df:45:e4:2c:ee:29:
         af:d9:73:17
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUCpLyGFVE7P1ooYCO5/RMtU7sjmcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUFFQTREQzE0MUZDMjBEN0JBMkE1MzgxQzUyQkMzNEEy
OUFCNjgxNTAeFw0yNTAzMDYwODU1MzhaFw0yNjAzMDUwOTAwMzhaMDMxMTAvBgNV
BAMTKDJBNDRGOTAzMDQ3MkMwMkIwRUQ3REI3RTFBRjFFRTE2NUVEMEM1RTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEDHn2t+B9X1TSx3iVFLjZjy9N
QZZFrV5ERC+FoVIn3po/GdQdOxB2pTOFrF18SEGUqJrahAeR6Ab82ORzsLyaNH54
R+F88hLFaTbw8oayz7ix78LJNx/M98LnzXcI8dX0r8uUA4p3IkK4ZIf0NAsgmsI7
/ReY+BvKL9hfgd2wh/KGBek1c6zzNTDVytYE7asF1LPWbFfFPRiypD/eGWa8dXjy
gtFReavS7dqq/NDS6QwzEye+ETF8IQkxzQv7vdIel/f0XdGGB9/LHe8Y0u0xcC5c
tLYVWSuP95PpugxnCC7K5iVF31nvWQ/dTooBMCsXKvd1yKU5nz2A6BEE7LYDAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUKkT5AwRywCsO19t+GvHuFl7QxeQwHwYDVR0j
BBgwFoAUmupNwUH8INe6KlOBxSvDSimraBUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREJkVldtTkR6QXJEZ1UxRm9uRkpLSE1pWHRwNDRZZDNiU1Q2TnlmZkdD
Z2cvMS85QUVBNERDMTQxRkMyMEQ3QkEyQTUzODFDNTJCQzM0QTI5QUI2ODE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlBRUE0REMxNDFGQzIwRDdC
QTJBNTM4MUM1MkJDMzRBMjlBQjY4MTUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RCZFZXbU5EekFyRGdVMUZvbkZKS0hNaVh0cDQ0WWQzYlNUNk55ZmZHQ2dnLzEv
MzEzMzMyMmUzMjM1MzUyZTMyMzQzMDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDM2
MzEzNTM4Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKE//AwDQYJKoZIhvcNAQELBQADggEBAGBa6Afw
+Izaa7qUXieL/E2/UTzP3YNvEOIXPl8vY9NUDt2dYrn0wAaj4GLsyv2DKhtGLiJF
0xOMzBur3kLfVpv0M3MA+netazpoD58e0p+p1+F6wWQpDOrSl1n1AR4/tyNE7EI8
W8Lz3GZRa4QC4z6Uw+prxQYCeH5GMI0aokZXTHYQZCu8gmuSfjjx1bAU7YvOUKcx
6VqmNhAy8W9kD879w0jyH0rCArU6FLlfaP/mwm2W4J0nWjQNudKPT76oOejX1yUK
a6OxFqRU/yrYVT85AlHf/EEiLvgWQE8m8Xep7iNej0p8dGIv3JC16BR+ZCfZYss6
Q99F5CzuKa/Zcxc=
-----END CERTIFICATE-----
Generated at Sun Apr 13 04:22:31 2025 by rpki-client