Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/3136382e3139372e3233342e302f32342d3234203d3e20323635343836.roa
File:                     3136382e3139372e3233342e302f32342d3234203d3e20323635343836.roa (raw, json)
Hash identifier:          XA7BCriBR7mT9sUcfsGwde4HG74h7lP+Z0uholwoLQY=
Subject key identifier:   7E:58:9D:47:CB:A9:36:E4:BE:DB:06:44:1B:81:70:69:D5:59:8E:4A
Certificate issuer:       /CN=32D842DEE7974134E5B4C88618DC7A30F4029092
Certificate serial:       5F616D9D16548B1E9FD34991C8B86E9A6C346BFB
Authority key identifier: 32:D8:42:DE:E7:97:41:34:E5:B4:C8:86:18:DC:7A:30:F4:02:90:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32D842DEE7974134E5B4C88618DC7A30F4029092.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/3136382e3139372e3233342e302f32342d3234203d3e20323635343836.roa
Signing time:             Thu 05 Jun 2025 21:01:16 +0000
ROA not before:           Thu 05 Jun 2025 20:56:16 +0000
ROA not after:            Thu 04 Jun 2026 21:01:16 +0000
asID:                     265486
IP address blocks:        168.197.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/32D842DEE7974134E5B4C88618DC7A30F4029092.crl
                          rsync://rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/32D842DEE7974134E5B4C88618DC7A30F4029092.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32D842DEE7974134E5B4C88618DC7A30F4029092.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 03:20:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:61:6d:9d:16:54:8b:1e:9f:d3:49:91:c8:b8:6e:9a:6c:34:6b:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32D842DEE7974134E5B4C88618DC7A30F4029092
        Validity
            Not Before: Jun  5 20:56:16 2025 GMT
            Not After : Jun  4 21:01:16 2026 GMT
        Subject: CN=7E589D47CBA936E4BEDB06441B817069D5598E4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:bc:f8:66:39:26:68:ad:d7:16:f6:3e:d3:78:
                    b3:ad:25:46:d8:3e:21:e8:47:c2:e7:11:88:18:7d:
                    fa:20:50:98:e8:cf:fd:7e:a0:e7:54:af:13:ad:dd:
                    1b:99:e3:23:e0:ca:58:62:ba:1d:71:ee:47:82:fc:
                    60:cb:46:87:2c:b5:7c:0b:cf:d6:17:2a:f7:5d:bd:
                    5b:f5:fd:84:ec:81:2a:a2:e1:ca:46:93:c4:ca:a5:
                    b2:f4:79:ed:9a:5f:1e:b6:bd:fb:db:66:0b:71:34:
                    d9:68:f6:f1:ba:d6:a1:5f:5f:8d:cc:60:1f:ed:8e:
                    45:3d:b9:da:85:7d:d6:16:a9:eb:53:ef:b2:0e:61:
                    d3:b6:3f:34:0b:ee:fc:33:19:24:6a:0d:45:c4:52:
                    d9:19:31:9d:20:dd:29:36:6e:e1:06:51:82:dc:cc:
                    17:a3:ce:e0:55:f0:b4:78:71:0a:ed:80:2a:2c:f2:
                    b4:03:bc:91:5c:52:c6:39:30:a0:7c:14:78:9c:e7:
                    ed:5b:58:e6:80:d7:53:8f:37:2f:be:74:ed:db:5e:
                    75:60:2e:b1:0c:35:ec:71:e8:c2:4d:86:7a:fe:d6:
                    88:5e:e1:7d:e9:7a:25:60:eb:55:af:36:62:8f:77:
                    c9:50:71:a8:f1:af:8b:82:44:a9:3a:1e:38:06:3c:
                    c0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:58:9D:47:CB:A9:36:E4:BE:DB:06:44:1B:81:70:69:D5:59:8E:4A
            X509v3 Authority Key Identifier:
                keyid:32:D8:42:DE:E7:97:41:34:E5:B4:C8:86:18:DC:7A:30:F4:02:90:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/32D842DEE7974134E5B4C88618DC7A30F4029092.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32D842DEE7974134E5B4C88618DC7A30F4029092.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/3136382e3139372e3233342e302f32342d3234203d3e20323635343836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:a5:ce:9b:00:fd:01:5e:a0:14:78:a1:fa:2a:10:a3:b7:1a:
         d7:7a:02:84:c8:ad:6e:b6:3f:5c:1c:8e:fc:50:02:16:82:84:
         f8:15:aa:3f:c3:71:61:45:10:a0:d3:65:15:63:f0:82:cf:ef:
         d9:1c:e8:a2:19:da:44:d6:25:27:31:10:45:17:1a:01:91:79:
         85:00:53:5f:ea:94:d9:af:c9:64:0f:64:38:a1:93:42:e0:5d:
         30:1a:67:c7:ac:1b:ba:e1:bd:88:f1:5f:85:51:d9:7b:b7:3d:
         28:bf:78:74:ec:0b:1f:f5:33:3e:8b:37:28:65:81:e8:a2:cf:
         58:47:38:84:28:5e:07:ad:75:84:6f:8b:3a:98:dc:19:a6:a5:
         64:a9:59:a6:0c:38:ae:9f:56:45:bf:2b:bf:34:02:8b:74:b7:
         88:cc:37:19:9a:a8:6e:3b:95:f5:82:a3:34:2b:3b:1b:28:74:
         e2:59:a7:90:37:7b:b0:34:57:40:7b:4a:69:db:ad:4f:c8:7e:
         fb:67:34:b6:bb:0b:be:b2:26:3d:2d:08:80:2e:69:df:a0:95:
         ad:86:f6:84:75:36:dc:71:a7:f5:2e:f4:9b:3b:c1:35:57:ee:
         be:41:cc:fb:4a:44:76:9a:ae:f9:a7:7c:eb:7b:d8:54:8d:d9:
         8d:df:25:12
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUX2FtnRZUix6f00mRyLhummw0a/swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzJEODQyREVFNzk3NDEzNEU1QjRDODg2MThEQzdBMzBG
NDAyOTA5MjAeFw0yNTA2MDUyMDU2MTZaFw0yNjA2MDQyMTAxMTZaMDMxMTAvBgNV
BAMTKDdFNTg5RDQ3Q0JBOTM2RTRCRURCMDY0NDFCODE3MDY5RDU1OThFNEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKvPhmOSZordcW9j7TeLOtJUbY
PiHoR8LnEYgYffogUJjoz/1+oOdUrxOt3RuZ4yPgylhiuh1x7keC/GDLRocstXwL
z9YXKvddvVv1/YTsgSqi4cpGk8TKpbL0ee2aXx62vfvbZgtxNNlo9vG61qFfX43M
YB/tjkU9udqFfdYWqetT77IOYdO2PzQL7vwzGSRqDUXEUtkZMZ0g3Sk2buEGUYLc
zBejzuBV8LR4cQrtgCos8rQDvJFcUsY5MKB8FHic5+1bWOaA11OPNy++dO3bXnVg
LrEMNexx6MJNhnr+1ohe4X3peiVg61WvNmKPd8lQcajxr4uCRKk6HjgGPMAJAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUflidR8upNuS+2wZEG4FwadVZjkowHwYDVR0j
BBgwFoAUMthC3ueXQTTltMiGGNx6MPQCkJIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWNKclBSWFZaY2hhTmJ6dUV6UlhlaXRaZ1FUSzV0SGs4U2tMWHRnVnFL
ZlMvMC8zMkQ4NDJERUU3OTc0MTM0RTVCNEM4ODYxOERDN0EzMEY0MDI5MDkyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMyRDg0MkRFRTc5NzQxMzRF
NUI0Qzg4NjE4REM3QTMwRjQwMjkwOTIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VjSnJQUlhWWmNoYU5ienVFelJYZWl0WmdRVEs1dEhrOFNrTFh0Z1ZxS2ZTLzAv
MzEzNjM4MmUzMTM5MzcyZTMyMzMzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNTM0MzgzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKjF6jANBgkqhkiG9w0BAQsFAAOCAQEATaXO
mwD9AV6gFHih+ioQo7ca13oChMitbrY/XByO/FACFoKE+BWqP8NxYUUQoNNlFWPw
gs/v2RzoohnaRNYlJzEQRRcaAZF5hQBTX+qU2a/JZA9kOKGTQuBdMBpnx6wbuuG9
iPFfhVHZe7c9KL94dOwLH/UzPos3KGWB6KLPWEc4hCheB611hG+LOpjcGaalZKlZ
pgw4rp9WRb8rvzQCi3S3iMw3GZqobjuV9YKjNCs7Gyh04lmnkDd7sDRXQHtKadut
T8h++2c0trsLvrImPS0IgC5p36CVrYb2hHU23HGn9S70mzvBNVfuvkHM+0pEdpqu
+ad863vYVI3Zjd8lEg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 13:36:43 2025 by rpki-client