Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DYog6YedRW1q11qvMJ3HntL3S14pTpW9whT7Ts4gwSMc/0/3138362e3232372e33322e302f32302d3234203d3e20323632373434.roa
File:                     3138362e3232372e33322e302f32302d3234203d3e20323632373434.roa (raw, json)
Hash identifier:          hee5nuq+7DKXRVu991zKyZnmjYT92nnVTtlRY5qJhCs=
Subject key identifier:   D9:DF:87:8C:CD:4E:FC:91:D1:E2:E8:70:D4:68:CC:3D:01:5D:49:54
Certificate issuer:       /CN=1DF4513E0496CBA9FDADA2D53702B61BB989E297
Certificate serial:       73DDBD530FC9D99F9F5C050BE70C8AE8BB20558F
Authority key identifier: 1D:F4:51:3E:04:96:CB:A9:FD:AD:A2:D5:37:02:B6:1B:B9:89:E2:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1DF4513E0496CBA9FDADA2D53702B61BB989E297.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DYog6YedRW1q11qvMJ3HntL3S14pTpW9whT7Ts4gwSMc/0/3138362e3232372e33322e302f32302d3234203d3e20323632373434.roa
Signing time:             Mon 10 Mar 2025 20:46:45 +0000
ROA not before:           Mon 10 Mar 2025 20:41:45 +0000
ROA not after:            Mon 09 Mar 2026 20:46:45 +0000
asID:                     262744
IP address blocks:        186.227.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DYog6YedRW1q11qvMJ3HntL3S14pTpW9whT7Ts4gwSMc/0/1DF4513E0496CBA9FDADA2D53702B61BB989E297.crl
                          rsync://rpki-repo.registro.br/repo/DYog6YedRW1q11qvMJ3HntL3S14pTpW9whT7Ts4gwSMc/0/1DF4513E0496CBA9FDADA2D53702B61BB989E297.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1DF4513E0496CBA9FDADA2D53702B61BB989E297.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 06:17:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:dd:bd:53:0f:c9:d9:9f:9f:5c:05:0b:e7:0c:8a:e8:bb:20:55:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DF4513E0496CBA9FDADA2D53702B61BB989E297
        Validity
            Not Before: Mar 10 20:41:45 2025 GMT
            Not After : Mar  9 20:46:45 2026 GMT
        Subject: CN=D9DF878CCD4EFC91D1E2E870D468CC3D015D4954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:95:fb:5a:c3:5a:89:5f:37:fb:6b:6d:7c:d7:
                    b0:7e:3b:01:74:6f:f4:3d:cc:38:8e:01:58:b2:ad:
                    3a:08:79:f3:6c:90:b5:cb:cc:53:39:72:76:5f:9b:
                    21:44:b5:9e:c4:d2:06:ac:cd:0d:17:5b:fa:88:fa:
                    3b:fb:56:f1:58:8b:65:8a:23:72:3b:21:c0:be:4e:
                    4b:0e:c6:ac:db:56:80:56:cc:4d:6b:1b:2b:18:35:
                    69:ae:7b:14:ec:f0:79:86:41:9c:6f:8c:31:23:11:
                    f2:c4:f7:64:5c:75:00:34:b2:53:70:fe:64:d2:61:
                    2c:2a:59:fd:df:5e:f3:93:4f:5a:0b:1a:fd:91:b0:
                    52:5c:c8:51:20:92:96:5d:8d:b7:ea:df:ee:48:28:
                    5d:87:88:81:74:53:69:d4:71:b5:71:69:0f:51:24:
                    de:00:70:72:f9:58:4b:f5:fc:16:3f:0a:5f:88:a1:
                    c7:3f:a3:54:3a:77:44:3b:d6:2b:53:a1:9b:e4:e7:
                    74:b2:11:5f:86:d2:4f:01:63:4b:e0:20:0c:e4:d7:
                    0a:74:40:b6:d3:99:82:ad:77:47:37:9c:69:f6:9e:
                    11:ed:34:70:99:49:dc:6a:1e:4d:dc:d4:e6:c5:d8:
                    b0:86:69:1f:89:a8:47:96:8c:1a:5a:92:a7:09:2c:
                    76:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:DF:87:8C:CD:4E:FC:91:D1:E2:E8:70:D4:68:CC:3D:01:5D:49:54
            X509v3 Authority Key Identifier:
                keyid:1D:F4:51:3E:04:96:CB:A9:FD:AD:A2:D5:37:02:B6:1B:B9:89:E2:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DYog6YedRW1q11qvMJ3HntL3S14pTpW9whT7Ts4gwSMc/0/1DF4513E0496CBA9FDADA2D53702B61BB989E297.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1DF4513E0496CBA9FDADA2D53702B61BB989E297.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYog6YedRW1q11qvMJ3HntL3S14pTpW9whT7Ts4gwSMc/0/3138362e3232372e33322e302f32302d3234203d3e20323632373434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         52:ce:ea:f0:b3:23:d5:98:30:64:52:6b:7b:7d:a4:4d:88:82:
         b0:9e:7a:e9:50:60:eb:96:28:fc:4c:99:25:de:1d:1c:37:e1:
         c9:92:9c:b5:f5:10:57:3d:d3:07:3d:9e:ee:1f:40:24:2a:5a:
         28:62:0b:bb:09:7f:1c:1f:cf:9c:10:c6:e4:f7:5f:a8:71:1d:
         ad:fe:3c:bc:f7:69:52:c7:94:f1:0a:24:c4:13:17:4d:9e:c7:
         3a:d1:d7:91:73:c0:70:6d:8c:6c:60:82:2e:db:b3:3f:81:d9:
         7a:f0:b6:c1:72:1e:66:ad:25:5b:ae:3e:e6:0d:70:56:3c:9e:
         94:71:ab:73:a7:21:f7:f4:fc:e5:f7:9a:c8:72:5c:13:b6:f6:
         08:a9:d1:bc:a1:e7:53:2f:7c:20:a2:4a:23:1c:bc:95:b3:01:
         e0:d8:6a:25:d9:d3:2d:80:a2:2c:82:12:d6:61:0f:ad:35:0e:
         54:b0:6a:a9:56:97:47:5d:fc:04:3a:ba:ec:3b:ca:81:cf:38:
         c5:48:ec:84:fc:d6:59:ea:12:8d:15:14:5a:4e:2a:cd:24:92:
         4d:ca:1d:ad:24:59:33:e8:0d:80:b1:bd:57:4b:bd:b1:8d:66:
         6a:50:b8:39:01:54:3e:5c:ac:0b:ce:c4:ba:35:89:cf:95:11:
         64:bd:22:09
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUc929Uw/J2Z+fXAUL5wyK6LsgVY8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMURGNDUxM0UwNDk2Q0JBOUZEQURBMkQ1MzcwMkI2MUJC
OTg5RTI5NzAeFw0yNTAzMTAyMDQxNDVaFw0yNjAzMDkyMDQ2NDVaMDMxMTAvBgNV
BAMTKEQ5REY4NzhDQ0Q0RUZDOTFEMUUyRTg3MEQ0NjhDQzNEMDE1RDQ5NTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWlftaw1qJXzf7a21817B+OwF0
b/Q9zDiOAViyrToIefNskLXLzFM5cnZfmyFEtZ7E0gaszQ0XW/qI+jv7VvFYi2WK
I3I7IcC+TksOxqzbVoBWzE1rGysYNWmuexTs8HmGQZxvjDEjEfLE92RcdQA0slNw
/mTSYSwqWf3fXvOTT1oLGv2RsFJcyFEgkpZdjbfq3+5IKF2HiIF0U2nUcbVxaQ9R
JN4AcHL5WEv1/BY/Cl+Iocc/o1Q6d0Q71itToZvk53SyEV+G0k8BY0vgIAzk1wp0
QLbTmYKtd0c3nGn2nhHtNHCZSdxqHk3c1ObF2LCGaR+JqEeWjBpakqcJLHbVAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU2d+HjM1O/JHR4uhw1GjMPQFdSVQwHwYDVR0j
BBgwFoAUHfRRPgSWy6n9raLVNwK2G7mJ4pcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFlvZzZZZWRSVzFxMTFxdk1KM0hudEwzUzE0cFRwVzl3aFQ3VHM0Z3dT
TWMvMC8xREY0NTEzRTA0OTZDQkE5RkRBREEyRDUzNzAyQjYxQkI5ODlFMjk3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFERjQ1MTNFMDQ5NkNCQTlG
REFEQTJENTM3MDJCNjFCQjk4OUUyOTcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RZb2c2WWVkUlcxcTExcXZNSjNIbnRMM1MxNHBUcFc5d2hUN1RzNGd3U01jLzAv
MzEzODM2MmUzMjMyMzcyZTMzMzIyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM2
MzIzNzM0MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAS64yAwDQYJKoZIhvcNAQELBQADggEBAFLO6vCz
I9WYMGRSa3t9pE2IgrCeeulQYOuWKPxMmSXeHRw34cmSnLX1EFc90wc9nu4fQCQq
WihiC7sJfxwfz5wQxuT3X6hxHa3+PLz3aVLHlPEKJMQTF02exzrR15FzwHBtjGxg
gi7bsz+B2XrwtsFyHmatJVuuPuYNcFY8npRxq3OnIff0/OX3mshyXBO29gip0byh
51MvfCCiSiMcvJWzAeDYaiXZ0y2AoiyCEtZhD601DlSwaqlWl0dd/AQ6uuw7yoHP
OMVI7IT81lnqEo0VFFpOKs0kkk3KHa0kWTPoDYCxvVdLvbGNZmpQuDkBVD5crAvO
xLo1ic+VEWS9Igk=
-----END CERTIFICATE-----
Generated at Fri Apr 18 18:37:20 2025 by rpki-client