Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3137302e3234372e3230302e302f32322d3232203d3e20323633323536.roa
File:                     3137302e3234372e3230302e302f32322d3232203d3e20323633323536.roa (raw, json)
Hash identifier:          FTgUNFfYyxnQ/l1/XJe5p4PRQkq4apZQZY3zqDexA+U=
Subject key identifier:   18:10:C0:D5:EF:78:56:44:A4:8B:47:C4:A2:9E:09:6A:A7:CD:4A:50
Certificate issuer:       /CN=60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011
Certificate serial:       70B2022E77EC571889BE311EB7F8001B832AB2AD
Authority key identifier: 60:F5:CE:DC:60:B1:C9:2A:5A:74:DC:B3:CF:E6:F0:44:F9:46:20:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3137302e3234372e3230302e302f32322d3232203d3e20323633323536.roa
Signing time:             Fri 10 Jan 2025 16:41:54 +0000
ROA not before:           Fri 10 Jan 2025 16:36:54 +0000
ROA not after:            Fri 09 Jan 2026 16:41:54 +0000
asID:                     263256
IP address blocks:        170.247.200.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011.crl
                          rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 13:49:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:b2:02:2e:77:ec:57:18:89:be:31:1e:b7:f8:00:1b:83:2a:b2:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011
        Validity
            Not Before: Jan 10 16:36:54 2025 GMT
            Not After : Jan  9 16:41:54 2026 GMT
        Subject: CN=1810C0D5EF785644A48B47C4A29E096AA7CD4A50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:00:9d:61:6b:60:9b:55:18:a0:be:40:23:18:
                    0c:8c:ac:de:6d:bd:00:dc:4f:12:44:00:b6:d8:f0:
                    b8:04:ad:52:4b:1c:71:0b:8f:3c:04:7d:b4:cb:3d:
                    11:a5:f4:2c:8d:5e:77:fd:89:af:8c:33:02:43:50:
                    55:27:fb:29:52:67:11:85:f9:3c:7a:7e:9a:f3:77:
                    e0:6e:04:0c:44:77:40:63:c4:d4:b6:1c:18:86:1c:
                    ef:a1:78:22:91:97:3e:01:86:b5:26:39:e6:30:4f:
                    34:d2:90:13:0a:a9:51:28:d6:2d:cc:f4:e9:ab:62:
                    5d:ee:63:0f:a0:c6:d6:4b:29:61:4c:33:fc:e7:25:
                    d0:f4:ef:ca:7a:7a:a1:11:44:4b:de:5f:ca:3d:f0:
                    b7:bf:65:99:bb:65:b7:76:84:a5:6e:d8:be:78:e2:
                    a7:d0:94:dd:91:52:d1:45:aa:cc:f7:46:8e:06:08:
                    4a:e1:c2:2f:f6:b0:dc:8f:d9:fd:b8:f6:ec:b6:a9:
                    51:9b:17:a1:8e:6b:3b:dd:51:88:d1:c6:a0:07:18:
                    cb:49:ef:5f:8c:3d:79:13:80:a0:e5:a6:ef:8b:25:
                    4c:b2:e7:ed:a1:8d:b7:d9:a8:16:0c:17:d8:84:d5:
                    d8:f2:45:71:5f:3e:b8:af:bd:80:16:e0:1c:25:63:
                    cd:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:10:C0:D5:EF:78:56:44:A4:8B:47:C4:A2:9E:09:6A:A7:CD:4A:50
            X509v3 Authority Key Identifier:
                keyid:60:F5:CE:DC:60:B1:C9:2A:5A:74:DC:B3:CF:E6:F0:44:F9:46:20:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3137302e3234372e3230302e302f32322d3232203d3e20323633323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:bf:e4:d4:ef:f5:a3:ab:be:1a:41:7e:ab:30:7d:ea:02:d0:
         7d:f8:62:bc:ef:dd:10:5a:54:a2:1e:2a:33:b3:2a:53:7e:50:
         2f:c1:58:79:df:fe:2e:53:26:01:9c:4b:d9:7d:3d:32:5c:59:
         2d:aa:05:d7:59:17:49:cd:53:2c:f8:1d:bc:f0:27:72:54:e2:
         75:bb:04:54:ed:54:e3:e6:0d:c9:85:37:9b:a9:cd:6f:21:05:
         b5:b7:c0:d3:fb:bd:a1:7e:a9:13:83:f1:01:59:d3:70:11:0f:
         dc:4a:be:0d:cf:89:10:f5:28:72:a1:f8:e0:52:f9:76:82:37:
         0d:09:69:94:59:18:2a:73:9a:70:1a:67:6c:c8:7a:16:d7:71:
         9e:a0:9e:b0:6d:7d:8d:2b:c7:16:fc:0d:82:54:fb:16:31:0a:
         19:a4:dc:4f:91:76:99:db:33:d0:0b:93:01:fc:ac:77:41:54:
         ed:12:73:54:5c:e3:20:92:f6:ee:cc:8f:23:fd:ee:51:94:57:
         97:be:51:20:4d:63:d3:66:cf:32:39:28:e7:dc:55:76:d3:bf:
         65:11:71:24:b0:46:8c:7f:11:a5:d5:51:36:d4:c4:0f:21:c9:
         83:14:fd:cd:a2:72:52:2f:51:92:75:d3:92:ba:ca:e5:8c:f5:
         ab:b1:1d:e0
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUcLICLnfsVxiJvjEet/gAG4Mqsq0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjBGNUNFREM2MEIxQzkyQTVBNzREQ0IzQ0ZFNkYwNDRG
OTQ2MjAxMTAeFw0yNTAxMTAxNjM2NTRaFw0yNjAxMDkxNjQxNTRaMDMxMTAvBgNV
BAMTKDE4MTBDMEQ1RUY3ODU2NDRBNDhCNDdDNEEyOUUwOTZBQTdDRDRBNTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBAJ1ha2CbVRigvkAjGAyMrN5t
vQDcTxJEALbY8LgErVJLHHELjzwEfbTLPRGl9CyNXnf9ia+MMwJDUFUn+ylSZxGF
+Tx6fprzd+BuBAxEd0BjxNS2HBiGHO+heCKRlz4BhrUmOeYwTzTSkBMKqVEo1i3M
9OmrYl3uYw+gxtZLKWFMM/znJdD078p6eqERREveX8o98Le/ZZm7Zbd2hKVu2L54
4qfQlN2RUtFFqsz3Ro4GCErhwi/2sNyP2f249uy2qVGbF6GOazvdUYjRxqAHGMtJ
71+MPXkTgKDlpu+LJUyy5+2hjbfZqBYMF9iE1djyRXFfPrivvYAW4BwlY82TAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUGBDA1e94VkSki0fEop4JaqfNSlAwHwYDVR0j
BBgwFoAUYPXO3GCxySpadNyzz+bwRPlGIBEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXB3UGZzd1c5TmdMZVZKdXFHQ2RZTlRLRWluMXpWQlQ2b0d6ZXM5YXJk
U2QvMC82MEY1Q0VEQzYwQjFDOTJBNUE3NERDQjNDRkU2RjA0NEY5NDYyMDExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYwRjVDRURDNjBCMUM5MkE1
QTc0RENCM0NGRTZGMDQ0Rjk0NjIwMTEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Vwd1Bmc3dXOU5nTGVWSnVxR0NkWU5US0VpbjF6VkJUNm9HemVzOWFyZFNkLzAv
MzEzNzMwMmUzMjM0MzcyZTMyMzAzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzMzMyMzUzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqr3yDANBgkqhkiG9w0BAQsFAAOCAQEAi7/k
1O/1o6u+GkF+qzB96gLQffhivO/dEFpUoh4qM7MqU35QL8FYed/+LlMmAZxL2X09
MlxZLaoF11kXSc1TLPgdvPAnclTidbsEVO1U4+YNyYU3m6nNbyEFtbfA0/u9oX6p
E4PxAVnTcBEP3Eq+Dc+JEPUocqH44FL5doI3DQlplFkYKnOacBpnbMh6FtdxnqCe
sG19jSvHFvwNglT7FjEKGaTcT5F2mdsz0AuTAfysd0FU7RJzVFzjIJL27syPI/3u
UZRXl75RIE1j02bPMjko59xVdtO/ZRFxJLBGjH8RpdVRNtTEDyHJgxT9zaJyUi9R
knXTkrrK5Yz1q7Ed4A==
-----END CERTIFICATE-----
Generated at Tue Apr 8 16:42:43 2025 by rpki-client