Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/3137372e31322e3133332e302f32342d3330203d3e203238313838.roa
File:                     3137372e31322e3133332e302f32342d3330203d3e203238313838.roa (raw, json)
Hash identifier:          4bbCKRwzQRGq8tQ9u8jj3f0XmqKLS4qywVooG5rMZq4=
Subject key identifier:   B3:A9:EE:2F:4E:98:B4:C2:19:82:3E:41:93:09:A0:C4:75:AA:BF:09
Certificate issuer:       /CN=E38AC2CFB299715B3B6D5866C15CF353BE48A770
Certificate serial:       6FB3741D7E5B86C3528219A14D936AF3BA3907FD
Authority key identifier: E3:8A:C2:CF:B2:99:71:5B:3B:6D:58:66:C1:5C:F3:53:BE:48:A7:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E38AC2CFB299715B3B6D5866C15CF353BE48A770.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/3137372e31322e3133332e302f32342d3330203d3e203238313838.roa
Signing time:             Wed 05 Feb 2025 22:57:31 +0000
ROA not before:           Wed 05 Feb 2025 22:52:31 +0000
ROA not after:            Wed 04 Feb 2026 22:57:31 +0000
asID:                     28188
IP address blocks:        177.12.133.0/24 maxlen: 30
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/E38AC2CFB299715B3B6D5866C15CF353BE48A770.crl
                          rsync://rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/E38AC2CFB299715B3B6D5866C15CF353BE48A770.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E38AC2CFB299715B3B6D5866C15CF353BE48A770.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 21:39:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:b3:74:1d:7e:5b:86:c3:52:82:19:a1:4d:93:6a:f3:ba:39:07:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E38AC2CFB299715B3B6D5866C15CF353BE48A770
        Validity
            Not Before: Feb  5 22:52:31 2025 GMT
            Not After : Feb  4 22:57:31 2026 GMT
        Subject: CN=B3A9EE2F4E98B4C219823E419309A0C475AABF09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a1:71:46:43:2b:fe:23:96:cf:e6:4b:7c:5b:
                    d7:84:5f:85:47:64:d3:78:31:ef:2c:0d:b4:78:76:
                    4a:2c:6d:ad:cc:a5:8b:d1:2f:f2:3d:0a:4b:1e:b9:
                    82:c1:2c:67:86:d0:89:33:91:2f:c0:5f:6a:fd:9a:
                    a6:3b:7e:a8:5c:5f:44:66:2f:f8:24:c9:88:3d:54:
                    dc:b5:1b:a5:c7:82:d6:31:43:37:54:c9:65:e4:b6:
                    5a:e9:f7:ff:99:7d:5b:b4:e0:98:41:f1:ac:43:3d:
                    19:28:58:ab:c8:f5:ef:e2:2f:6a:46:bd:7c:3e:bb:
                    c7:1d:c4:b8:37:f3:0d:89:65:c9:99:bd:ed:ab:cd:
                    07:e4:e7:c2:b0:67:cd:94:ba:8e:b8:98:4d:62:97:
                    19:07:df:71:1d:57:70:d9:f6:1c:eb:fc:f9:75:5c:
                    7a:e3:28:1e:03:74:49:76:3b:df:e2:9a:65:78:37:
                    c2:12:7f:36:c3:75:b5:67:75:93:c1:ce:d8:83:88:
                    09:81:05:4a:db:be:d6:fb:56:a3:db:3a:eb:c3:b5:
                    48:f0:cc:88:f5:3c:65:a8:59:69:4e:20:13:82:a9:
                    5e:56:55:05:6b:6d:c8:f6:4c:d9:19:3c:a4:4c:ec:
                    52:f6:77:14:f0:68:06:9b:f1:26:7e:51:e9:9c:e1:
                    1a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:A9:EE:2F:4E:98:B4:C2:19:82:3E:41:93:09:A0:C4:75:AA:BF:09
            X509v3 Authority Key Identifier:
                keyid:E3:8A:C2:CF:B2:99:71:5B:3B:6D:58:66:C1:5C:F3:53:BE:48:A7:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/E38AC2CFB299715B3B6D5866C15CF353BE48A770.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E38AC2CFB299715B3B6D5866C15CF353BE48A770.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/3137372e31322e3133332e302f32342d3330203d3e203238313838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:e1:55:88:fa:b4:4d:d6:58:6a:cb:6c:e8:c3:00:cc:c1:f7:
         bb:1d:3b:13:e1:cd:ca:13:06:83:c0:17:4f:58:5b:6d:f9:1c:
         23:7a:fe:61:53:e1:2f:9f:59:79:a8:77:ad:e4:4a:5e:ef:c8:
         fa:4e:78:44:35:eb:a1:c2:d2:5e:ec:45:82:02:50:a2:32:27:
         74:ed:0d:ee:1e:05:af:53:6a:2f:8b:ec:c9:18:0b:13:79:ac:
         33:32:f5:5b:c2:6e:bc:7f:ce:67:d6:d1:f1:5a:cf:ac:7d:55:
         6d:51:ae:e6:e2:e2:ab:ba:b7:27:3c:52:b2:0f:ba:93:5d:d7:
         22:48:77:fa:12:a1:96:36:98:4b:17:7f:bd:e5:ed:8f:30:de:
         0c:50:78:45:f2:ef:a7:41:7a:5c:b2:01:96:49:56:29:1d:5e:
         03:e2:77:2f:17:7f:1b:7a:63:b4:f9:22:35:bf:d7:a5:91:81:
         46:2c:7b:fc:40:cd:bc:d7:0c:fb:49:c9:23:a0:e0:c6:ea:ea:
         4b:8d:61:1f:f8:e3:88:17:72:89:2a:de:75:f2:1e:ab:e1:65:
         fa:e0:4e:6c:e4:53:39:88:71:08:f7:86:68:3d:16:50:92:ee:
         12:de:90:4e:e5:da:95:38:e5:80:07:a4:41:d6:e9:27:67:1e:
         52:2a:8b:9f
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUb7N0HX5bhsNSghmhTZNq87o5B/0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTM4QUMyQ0ZCMjk5NzE1QjNCNkQ1ODY2QzE1Q0YzNTNC
RTQ4QTc3MDAeFw0yNTAyMDUyMjUyMzFaFw0yNjAyMDQyMjU3MzFaMDMxMTAvBgNV
BAMTKEIzQTlFRTJGNEU5OEI0QzIxOTgyM0U0MTkzMDlBMEM0NzVBQUJGMDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwoXFGQyv+I5bP5kt8W9eEX4VH
ZNN4Me8sDbR4dkosba3MpYvRL/I9CkseuYLBLGeG0IkzkS/AX2r9mqY7fqhcX0Rm
L/gkyYg9VNy1G6XHgtYxQzdUyWXktlrp9/+ZfVu04JhB8axDPRkoWKvI9e/iL2pG
vXw+u8cdxLg38w2JZcmZve2rzQfk58KwZ82Uuo64mE1ilxkH33EdV3DZ9hzr/Pl1
XHrjKB4DdEl2O9/immV4N8ISfzbDdbVndZPBztiDiAmBBUrbvtb7VqPbOuvDtUjw
zIj1PGWoWWlOIBOCqV5WVQVrbcj2TNkZPKRM7FL2dxTwaAab8SZ+Uemc4RpzAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUs6nuL06YtMIZgj5BkwmgxHWqvwkwHwYDVR0j
BBgwFoAU44rCz7KZcVs7bVhmwVzzU75Ip3AwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9ES050R0E3c3BkNGY1UjNRQUNhNTZyY3pZRFF5QWM4MXdxbzVjakJEVTNk
LzAvRTM4QUMyQ0ZCMjk5NzE1QjNCNkQ1ODY2QzE1Q0YzNTNCRTQ4QTc3MC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9FMzhBQzJDRkIyOTk3MTVCM0I2
RDU4NjZDMTVDRjM1M0JFNDhBNzcwLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9E
S050R0E3c3BkNGY1UjNRQUNhNTZyY3pZRFF5QWM4MXdxbzVjakJEVTNkLzAvMzEz
NzM3MmUzMTMyMmUzMTMzMzMyZTMwMmYzMjM0MmQzMzMwMjAzZDNlMjAzMjM4MzEz
ODM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQAsQyFMA0GCSqGSIb3DQEBCwUAA4IBAQAA4VWI+rRN1lhq
y2zowwDMwfe7HTsT4c3KEwaDwBdPWFtt+Rwjev5hU+Evn1l5qHet5Epe78j6TnhE
NeuhwtJe7EWCAlCiMid07Q3uHgWvU2ovi+zJGAsTeawzMvVbwm68f85n1tHxWs+s
fVVtUa7m4uKrurcnPFKyD7qTXdciSHf6EqGWNphLF3+95e2PMN4MUHhF8u+nQXpc
sgGWSVYpHV4D4ncvF38bemO0+SI1v9elkYFGLHv8QM281wz7SckjoODG6upLjWEf
+OOIF3KJKt518h6r4WX64E5s5FM5iHEI94ZoPRZQku4S3pBO5dqVOOWAB6RB1ukn
Zx5SKouf
-----END CERTIFICATE-----
Generated at Sun Apr 13 04:14:20 2025 by rpki-client