Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3230312e37312e3136302e302f31392d3234203d3e203238363335.roa
File:                     3230312e37312e3136302e302f31392d3234203d3e203238363335.roa (raw, json)
Hash identifier:          Sgx7KW+T/HvcKARAC92SMzkzg8nr4sgfZWRqtkmXM5A=
Subject key identifier:   62:CF:4C:16:3E:40:E4:68:EA:E0:97:7F:90:D3:5D:94:4C:76:FA:08
Certificate issuer:       /CN=FF5D171186C7F92AA82E56A3848B9D1390938458
Certificate serial:       2506897FDE88F13827F8BB2BE1FCE3133979BC98
Authority key identifier: FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3230312e37312e3136302e302f31392d3234203d3e203238363335.roa
Signing time:             Wed 30 Apr 2025 18:28:53 +0000
ROA not before:           Wed 30 Apr 2025 18:23:53 +0000
ROA not after:            Wed 29 Apr 2026 18:28:53 +0000
asID:                     28635
IP address blocks:        201.71.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl
                          rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 02:31:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:06:89:7f:de:88:f1:38:27:f8:bb:2b:e1:fc:e3:13:39:79:bc:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF5D171186C7F92AA82E56A3848B9D1390938458
        Validity
            Not Before: Apr 30 18:23:53 2025 GMT
            Not After : Apr 29 18:28:53 2026 GMT
        Subject: CN=62CF4C163E40E468EAE0977F90D35D944C76FA08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:58:d7:67:6c:bd:d4:bb:8a:9e:99:2e:fd:52:
                    24:a1:3d:97:ac:1e:6e:37:81:fb:39:74:f9:de:26:
                    cb:3e:68:98:a3:c1:59:d5:2c:f6:5d:28:ba:8c:8f:
                    d5:c9:3a:1e:3f:d0:78:42:38:cf:11:fb:dc:6e:77:
                    52:e3:3f:a2:08:67:6e:1f:e3:c3:69:85:ba:be:3c:
                    65:f9:6d:71:ef:e6:47:28:1c:c4:8e:66:c9:a5:fe:
                    9d:da:ac:99:d3:9e:15:b7:e8:40:29:94:e1:5e:89:
                    59:9a:32:cb:77:45:9f:b2:ca:32:40:28:8a:5e:01:
                    21:84:97:6f:c5:64:1f:90:81:bf:b2:56:6a:4d:27:
                    4d:bf:16:fe:5f:88:a7:56:6f:d0:56:ce:ef:34:2e:
                    08:1e:4f:a9:a1:a0:f8:96:68:46:6e:19:2c:db:96:
                    16:42:2b:cf:18:43:cf:0a:10:7d:d7:a8:53:e6:ea:
                    72:8f:85:cd:3a:bc:b8:3b:a1:65:e7:83:dd:a4:ce:
                    93:bd:a2:03:2f:a1:67:c1:1e:97:8c:1a:bb:c0:94:
                    91:f3:52:50:e6:b6:cf:01:58:e5:41:a4:4f:33:84:
                    6c:f2:59:81:26:06:31:ba:44:03:89:ce:c5:10:ff:
                    7a:f9:ec:5e:e4:80:d2:ab:ac:db:ed:90:d9:72:fc:
                    84:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:CF:4C:16:3E:40:E4:68:EA:E0:97:7F:90:D3:5D:94:4C:76:FA:08
            X509v3 Authority Key Identifier:
                keyid:FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3230312e37312e3136302e302f31392d3234203d3e203238363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.71.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         11:50:29:5f:10:68:b1:4c:3a:0c:7f:c2:b0:18:bf:0c:f6:2b:
         13:93:c5:14:f7:cb:0a:4e:f9:79:f2:59:8c:08:a8:ed:b1:05:
         89:e6:6e:2c:b8:2a:0b:2e:37:37:7c:cc:da:5b:c5:7a:c6:11:
         9c:da:06:10:5f:93:52:02:45:7a:38:b0:0a:3f:af:e8:39:b5:
         53:1c:8a:28:28:5b:eb:40:9f:de:59:45:65:3c:9a:35:3b:38:
         a4:cf:0f:16:5d:01:7a:91:62:c7:dd:53:ba:cf:e8:2e:e3:62:
         46:b5:f3:61:19:07:36:34:4f:14:1e:96:e4:de:55:d1:dd:f9:
         a3:4d:ac:6e:f9:a7:ac:19:26:69:be:21:ca:e2:e4:76:61:ad:
         4a:07:c9:46:29:32:5f:fa:e1:69:93:8d:c9:31:00:ee:eb:fd:
         60:4f:fa:4c:4d:cf:53:bc:2d:8c:c0:fe:a0:37:3a:e1:23:97:
         bf:40:ba:94:b3:fd:cb:05:e8:5c:b2:7d:20:6b:a8:d7:ab:11:
         67:7d:22:59:a4:1a:18:40:c0:62:b9:8d:39:22:04:2b:27:4c:
         5c:7b:f8:fe:d5:18:2b:96:9b:c8:67:0f:97:67:b6:55:87:25:
         eb:4b:23:ed:0e:80:76:35:0c:9b:b7:01:34:ac:90:71:83:5c:
         f4:fd:b6:21
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUJQaJf96I8Tgn+Lsr4fzjEzl5vJgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkY1RDE3MTE4NkM3RjkyQUE4MkU1NkEzODQ4QjlEMTM5
MDkzODQ1ODAeFw0yNTA0MzAxODIzNTNaFw0yNjA0MjkxODI4NTNaMDMxMTAvBgNV
BAMTKDYyQ0Y0QzE2M0U0MEU0NjhFQUUwOTc3RjkwRDM1RDk0NEM3NkZBMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDWNdnbL3Uu4qemS79UiShPZes
Hm43gfs5dPneJss+aJijwVnVLPZdKLqMj9XJOh4/0HhCOM8R+9xud1LjP6IIZ24f
48Nphbq+PGX5bXHv5kcoHMSOZsml/p3arJnTnhW36EAplOFeiVmaMst3RZ+yyjJA
KIpeASGEl2/FZB+Qgb+yVmpNJ02/Fv5fiKdWb9BWzu80LggeT6mhoPiWaEZuGSzb
lhZCK88YQ88KEH3XqFPm6nKPhc06vLg7oWXng92kzpO9ogMvoWfBHpeMGrvAlJHz
UlDmts8BWOVBpE8zhGzyWYEmBjG6RAOJzsUQ/3r57F7kgNKrrNvtkNly/IQVAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUYs9MFj5A5Gjq4Jd/kNNdlEx2+ggwHwYDVR0j
BBgwFoAU/10XEYbH+SqoLlajhIudE5CThFgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFZhQk5wY01LenE3REJ6eEFOVVBmUUNnSFNEMUUzemF1VFhDc2NWaVc0
SDQvMC9GRjVEMTcxMTg2QzdGOTJBQTgyRTU2QTM4NDhCOUQxMzkwOTM4NDU4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZGNUQxNzExODZDN0Y5MkFB
ODJFNTZBMzg0OEI5RDEzOTA5Mzg0NTguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RWYUJOcGNNS3pxN0RCenhBTlVQZlFDZ0hTRDFFM3phdVRYQ3NjVmlXNEg0LzAv
MzIzMDMxMmUzNzMxMmUzMTM2MzAyZTMwMmYzMTM5MmQzMjM0MjAzZDNlMjAzMjM4
MzYzMzM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQFyUegMA0GCSqGSIb3DQEBCwUAA4IBAQARUClfEGix
TDoMf8KwGL8M9isTk8UU98sKTvl58lmMCKjtsQWJ5m4suCoLLjc3fMzaW8V6xhGc
2gYQX5NSAkV6OLAKP6/oObVTHIooKFvrQJ/eWUVlPJo1Ozikzw8WXQF6kWLH3VO6
z+gu42JGtfNhGQc2NE8UHpbk3lXR3fmjTaxu+aesGSZpviHK4uR2Ya1KB8lGKTJf
+uFpk43JMQDu6/1gT/pMTc9TvC2MwP6gNzrhI5e/QLqUs/3LBehcsn0ga6jXqxFn
fSJZpBoYQMBiuY05IgQrJ0xce/j+1RgrlpvIZw+XZ7ZVhyXrSyPtDoB2NQybtwE0
rJBxg1z0/bYh
-----END CERTIFICATE-----
Generated at Sun Jun 8 13:36:42 2025 by rpki-client