Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/3136302e3233382e3136302e302f32342d3234203d3e20323636353335.roa
File:                     3136302e3233382e3136302e302f32342d3234203d3e20323636353335.roa (raw, json)
Hash identifier:          bJTEqeP16XCpCH5JZabT/MCNKPhW6t9nzCk4I/T1oI0=
Subject key identifier:   B2:52:E3:B4:25:2D:04:6F:1E:30:B2:C4:50:CC:DB:2F:D0:E6:B9:38
Certificate issuer:       /CN=CA2ED340034D0368230850867C30E245990118A2
Certificate serial:       0A4E68D259202761B5AFD3549BB3B22B842C66BF
Authority key identifier: CA:2E:D3:40:03:4D:03:68:23:08:50:86:7C:30:E2:45:99:01:18:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/3136302e3233382e3136302e302f32342d3234203d3e20323636353335.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     266535
IP address blocks:        160.238.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.crl
                          rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 19:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:4e:68:d2:59:20:27:61:b5:af:d3:54:9b:b3:b2:2b:84:2c:66:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA2ED340034D0368230850867C30E245990118A2
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=3082010A0282010100D880A99683B7962ACABBBE7297540A0F21F2FEA96621ADAA4C1BE27CC9D5A3C3AE76C9AE5B76477968E571C6BE7F6B436773F0873695EED801B2498A7288198FB01C97538C7695CB1A1A3C389A750491E2F684314E0A73C7189B3731E9A7D1D8D5D7BE2F8FFD813161988626B0AE36C3D05DC6E985BEEC7503C29D7ACAD30F7FBE2BBAF7BF7D1269B29CACF53DFBCC089C5D715E8A27DBF2665FF87DAC788B721FA4A962B89BB03422A155C1B5B43890B2A087A25169CDD5BA10207D6B754466135CFD5A59BCD0DFFB3A923AFE41DD5CCB051A50234F8555513FB52C14E3125DA22D768830D14151CE431B4BAD5EBE927B0AB9E1C67F122C01466A2261B1EC8F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:80:a9:96:83:b7:96:2a:ca:bb:be:72:97:54:
                    0a:0f:21:f2:fe:a9:66:21:ad:aa:4c:1b:e2:7c:c9:
                    d5:a3:c3:ae:76:c9:ae:5b:76:47:79:68:e5:71:c6:
                    be:7f:6b:43:67:73:f0:87:36:95:ee:d8:01:b2:49:
                    8a:72:88:19:8f:b0:1c:97:53:8c:76:95:cb:1a:1a:
                    3c:38:9a:75:04:91:e2:f6:84:31:4e:0a:73:c7:18:
                    9b:37:31:e9:a7:d1:d8:d5:d7:be:2f:8f:fd:81:31:
                    61:98:86:26:b0:ae:36:c3:d0:5d:c6:e9:85:be:ec:
                    75:03:c2:9d:7a:ca:d3:0f:7f:be:2b:ba:f7:bf:7d:
                    12:69:b2:9c:ac:f5:3d:fb:cc:08:9c:5d:71:5e:8a:
                    27:db:f2:66:5f:f8:7d:ac:78:8b:72:1f:a4:a9:62:
                    b8:9b:b0:34:22:a1:55:c1:b5:b4:38:90:b2:a0:87:
                    a2:51:69:cd:d5:ba:10:20:7d:6b:75:44:66:13:5c:
                    fd:5a:59:bc:d0:df:fb:3a:92:3a:fe:41:dd:5c:cb:
                    05:1a:50:23:4f:85:55:51:3f:b5:2c:14:e3:12:5d:
                    a2:2d:76:88:30:d1:41:51:ce:43:1b:4b:ad:5e:be:
                    92:7b:0a:b9:e1:c6:7f:12:2c:01:46:6a:22:61:b1:
                    ec:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:52:E3:B4:25:2D:04:6F:1E:30:B2:C4:50:CC:DB:2F:D0:E6:B9:38
            X509v3 Authority Key Identifier:
                keyid:CA:2E:D3:40:03:4D:03:68:23:08:50:86:7C:30:E2:45:99:01:18:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/3136302e3233382e3136302e302f32342d3234203d3e20323636353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:88:71:35:3a:75:da:9c:d5:a9:d1:c0:15:d2:f7:7b:54:2a:
         91:d7:a0:b4:59:58:b2:96:79:d6:8e:91:9d:85:13:af:3f:61:
         a8:1a:07:1f:33:75:6d:a3:f5:28:78:88:63:83:d4:46:1d:0a:
         7d:4b:fd:12:2c:88:4c:a5:e4:01:fd:4b:30:38:52:47:82:69:
         94:32:67:a2:c2:48:24:00:bd:b7:28:59:dc:5c:9e:c2:37:62:
         ef:a4:13:6b:5f:af:35:8c:af:a5:87:9f:6a:d7:1c:7e:da:6d:
         3e:f2:e6:dc:21:dc:5c:1d:5e:ef:df:a5:c2:8b:e5:d6:9f:1e:
         5e:c0:4c:65:3f:d9:c1:a7:84:e3:57:bf:6b:06:ab:a2:50:bd:
         5f:32:14:9f:70:a1:be:e6:bf:a5:a9:ca:b3:fd:76:9a:f4:8b:
         75:a0:4a:7e:ef:57:6b:ef:db:3e:a8:5c:22:30:47:82:47:6f:
         1f:fc:7a:51:1e:d7:14:8d:b5:d2:ee:27:a7:16:6a:6a:83:e7:
         c9:bd:ab:f8:15:12:02:dd:90:af:ee:5c:c5:9e:15:a2:32:cc:
         e4:20:01:c8:54:c4:fc:2e:3d:b3:6a:16:8c:fc:13:94:bf:4a:
         af:d0:67:fa:c6:4e:94:cd:38:9d:f0:2c:e8:bd:0e:ef:68:75:
         91:96:5d:1f
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUCk5o0lkgJ2G1r9NUm7OyK4QsZr8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0EyRUQzNDAwMzREMDM2ODIzMDg1MDg2N0MzMEUyNDU5
OTAxMThBMjAeFw0yNTAzMDUxODU1MDBaFw0yNjAzMDQxOTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDg4MEE5OTY4M0I3OTYyQUNB
QkJCRTcyOTc1NDBBMEYyMUYyRkVBOTY2MjFBREFBNEMxQkUyN0NDOUQ1QTNDM0FF
NzZDOUFFNUI3NjQ3Nzk2OEU1NzFDNkJFN0Y2QjQzNjc3M0YwODczNjk1RUVEODAx
QjI0OThBNzI4ODE5OEZCMDFDOTc1MzhDNzY5NUNCMUExQTNDMzg5QTc1MDQ5MUUy
RjY4NDMxNEUwQTczQzcxODlCMzczMUU5QTdEMUQ4RDVEN0JFMkY4RkZEODEzMTYx
OTg4NjI2QjBBRTM2QzNEMDVEQzZFOTg1QkVFQzc1MDNDMjlEN0FDQUQzMEY3RkJF
MkJCQUY3QkY3RDEyNjlCMjlDQUNGNTNERkJDQzA4OUM1RDcxNUU4QTI3REJGMjY2
NUZGODdEQUM3ODhCNzIxRkE0QTk2MkI4OUJCMDM0MjJBMTU1QzFCNUI0Mzg5MEIy
QTA4N0EyNTE2OUNERDVCQTEwMjA3RDZCNzU0NDY2MTM1Q0ZENUE1OUJDRDBERkZC
M0E5MjNBRkU0MURENUNDQjA1MUE1MDIzNEY4NTU1NTEzRkI1MkMxNEUzMTI1REEy
MkQ3Njg4MzBEMTQxNTFDRTQzMUI0QkFENUVCRTkyN0IwQUI5RTFDNjdGMTIyQzAx
NDY2QTIyNjFCMUVDOEYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA2ICploO3lirKu75yl1QKDyHy/qlmIa2qTBvifMnVo8OudsmuW3ZH
eWjlcca+f2tDZ3PwhzaV7tgBskmKcogZj7Acl1OMdpXLGho8OJp1BJHi9oQxTgpz
xxibNzHpp9HY1de+L4/9gTFhmIYmsK42w9BdxumFvux1A8KdesrTD3++K7r3v30S
abKcrPU9+8wInF1xXoon2/JmX/h9rHiLch+kqWK4m7A0IqFVwbW0OJCyoIeiUWnN
1boQIH1rdURmE1z9Wlm80N/7OpI6/kHdXMsFGlAjT4VVUT+1LBTjEl2iLXaIMNFB
Uc5DG0utXr6Sewq54cZ/EiwBRmoiYbHsjwIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FLJS47QlLQRvHjCyxFDM2y/Q5rk4MB8GA1UdIwQYMBaAFMou00ADTQNoIwhQhnww
4kWZARiiMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0VSbXpFdnpidTFlTWk4
RXZIVEhXaWtrQXhQQVQ4SlpBamNvY2MyZExqUkx5LzEvQ0EyRUQzNDAwMzREMDM2
ODIzMDg1MDg2N0MzMEUyNDU5OTAxMThBMi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9DQTJFRDM0MDAzNEQwMzY4MjMwODUwODY3QzMwRTI0NTk5MDEx
OEEyLmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9FUm16RXZ6YnUxZU1pOEV2SFRI
V2lra0F4UEFUOEpaQWpjb2NjMmRMalJMeS8xLzMxMzYzMDJlMzIzMzM4MmUzMTM2
MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzYzNTMzMzUucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACg7qAwDQYJKoZIhvcNAQELBQADggEBAJSIcTU6ddqc1anRwBXS93tUKpHXoLRZ
WLKWedaOkZ2FE68/YagaBx8zdW2j9Sh4iGOD1EYdCn1L/RIsiEyl5AH9SzA4UkeC
aZQyZ6LCSCQAvbcoWdxcnsI3Yu+kE2tfrzWMr6WHn2rXHH7abT7y5twh3FwdXu/f
pcKL5dafHl7ATGU/2cGnhONXv2sGq6JQvV8yFJ9wob7mv6WpyrP9dpr0i3WgSn7v
V2vv2z6oXCIwR4JHbx/8elEe1xSNtdLuJ6cWamqD58m9q/gVEgLdkK/uXMWeFaIy
zOQgAchUxPwuPbNqFoz8E5S/Sq/QZ/rGTpTNOJ3wLOi9Du9odZGWXR8=
-----END CERTIFICATE-----
Generated at Wed Apr 9 10:23:21 2025 by rpki-client