Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ew3ofXAiPgoqBttYLbtwm1ULvUemWRSuCRb7pLpzqsAd/0/3137302e3233312e38382e302f32322d3234203d3e203533313936.roa
File:                     3137302e3233312e38382e302f32322d3234203d3e203533313936.roa (raw, json)
Hash identifier:          LSvqj++BC323vPjSCraIp/l+XzCj147S0CCoFV+Lu2Y=
Subject key identifier:   F1:FE:09:C4:EF:E7:81:4B:D9:38:94:8B:8A:00:AF:E3:AE:5B:83:59
Certificate issuer:       /CN=05EEB8D297BD9E3E56ED8D385325BE831CD9123B
Certificate serial:       1D48BD702648992A085A6D31659A53E743D433D3
Authority key identifier: 05:EE:B8:D2:97:BD:9E:3E:56:ED:8D:38:53:25:BE:83:1C:D9:12:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05EEB8D297BD9E3E56ED8D385325BE831CD9123B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ew3ofXAiPgoqBttYLbtwm1ULvUemWRSuCRb7pLpzqsAd/0/3137302e3233312e38382e302f32322d3234203d3e203533313936.roa
Signing time:             Thu 10 Apr 2025 14:05:15 +0000
ROA not before:           Thu 10 Apr 2025 14:00:15 +0000
ROA not after:            Thu 09 Apr 2026 14:05:15 +0000
asID:                     53196
IP address blocks:        170.231.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ew3ofXAiPgoqBttYLbtwm1ULvUemWRSuCRb7pLpzqsAd/0/05EEB8D297BD9E3E56ED8D385325BE831CD9123B.crl
                          rsync://rpki-repo.registro.br/repo/Ew3ofXAiPgoqBttYLbtwm1ULvUemWRSuCRb7pLpzqsAd/0/05EEB8D297BD9E3E56ED8D385325BE831CD9123B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05EEB8D297BD9E3E56ED8D385325BE831CD9123B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 21:21:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:48:bd:70:26:48:99:2a:08:5a:6d:31:65:9a:53:e7:43:d4:33:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05EEB8D297BD9E3E56ED8D385325BE831CD9123B
        Validity
            Not Before: Apr 10 14:00:15 2025 GMT
            Not After : Apr  9 14:05:15 2026 GMT
        Subject: CN=F1FE09C4EFE7814BD938948B8A00AFE3AE5B8359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:4d:e6:88:c9:e0:f3:e8:27:e8:3f:ce:92:88:
                    fe:f9:23:b8:33:ed:c2:02:6f:e6:0f:c1:58:c9:ac:
                    f9:93:c8:c8:42:1d:0d:fe:15:40:01:f6:2d:13:5a:
                    1b:3a:cd:12:45:15:eb:cd:0e:eb:5b:e0:b9:c9:34:
                    a5:13:1e:33:3f:2a:4b:05:64:ed:24:20:aa:04:81:
                    58:99:35:99:60:f1:cd:d8:7b:61:11:58:98:19:da:
                    81:18:a2:39:d1:33:63:f6:dd:89:ba:85:ee:5a:2e:
                    ee:f9:cf:85:d6:e0:8b:cf:52:33:ea:87:62:c0:e2:
                    52:de:3c:46:64:cb:aa:db:5d:3e:f6:fb:66:f3:8a:
                    15:f9:5f:52:8d:3e:02:86:07:f6:81:2e:3b:36:63:
                    7c:94:79:9b:af:fd:31:23:9c:a8:7a:67:2a:d8:b1:
                    7e:28:8c:ac:3a:e6:ba:ca:0c:ad:c7:bc:18:1d:f0:
                    d2:dc:6c:1b:8f:6c:e2:7d:56:4d:83:14:9a:54:51:
                    35:d2:39:ea:f1:f2:15:e9:61:ca:b5:e8:12:39:a2:
                    49:fe:6f:44:54:4c:93:0c:e0:23:e8:32:69:b4:9c:
                    5c:19:fd:6f:11:5d:5d:d3:e6:e8:ae:59:18:13:10:
                    c5:53:87:b9:67:c2:72:51:94:81:53:1a:0c:d8:ab:
                    56:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:FE:09:C4:EF:E7:81:4B:D9:38:94:8B:8A:00:AF:E3:AE:5B:83:59
            X509v3 Authority Key Identifier:
                keyid:05:EE:B8:D2:97:BD:9E:3E:56:ED:8D:38:53:25:BE:83:1C:D9:12:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ew3ofXAiPgoqBttYLbtwm1ULvUemWRSuCRb7pLpzqsAd/0/05EEB8D297BD9E3E56ED8D385325BE831CD9123B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05EEB8D297BD9E3E56ED8D385325BE831CD9123B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ew3ofXAiPgoqBttYLbtwm1ULvUemWRSuCRb7pLpzqsAd/0/3137302e3233312e38382e302f32322d3234203d3e203533313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:8b:34:13:b9:f4:13:52:b3:e2:f5:1d:fb:28:1e:cf:76:f0:
         4a:3a:66:d1:75:5e:f2:d3:c9:ea:76:e9:13:d2:13:57:61:df:
         7c:06:b9:b1:2a:d0:fa:c7:74:1a:a9:a5:5c:ae:83:f4:d8:3a:
         2d:11:4c:c2:9a:3a:12:dc:b3:c7:d7:4e:46:2d:0a:01:3f:7e:
         a3:ed:d5:9a:8b:4a:eb:97:69:77:86:a5:7a:d6:b4:b2:ca:95:
         58:1f:d0:0d:c4:1e:b1:63:5b:ba:49:5c:2b:55:5d:be:80:ca:
         52:f5:54:e0:21:4d:fd:d0:d7:56:84:97:c7:cc:f1:d4:e3:ff:
         e5:18:0c:dc:18:da:74:57:6b:ce:3e:ce:f1:57:66:ed:a4:2e:
         cd:9f:7d:e0:28:1c:f4:88:98:15:a0:13:55:63:9f:6c:65:46:
         f2:64:54:30:8a:8c:56:07:b1:b8:9c:5f:00:12:c6:50:50:21:
         5c:dd:41:76:ce:90:97:f4:06:5d:4e:06:bd:9e:89:f3:28:8a:
         dc:ad:08:9e:f6:b8:3c:d7:d1:7b:75:20:2a:c0:56:e9:d4:73:
         cd:b6:3c:dd:18:ca:a3:03:24:26:88:3c:b1:29:d8:f8:ac:d2:
         29:ce:ca:c3:f1:0a:61:15:12:65:ca:18:ee:7e:a0:87:95:e0:
         ad:09:72:0f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUHUi9cCZImSoIWm0xZZpT50PUM9MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDVFRUI4RDI5N0JEOUUzRTU2RUQ4RDM4NTMyNUJFODMx
Q0Q5MTIzQjAeFw0yNTA0MTAxNDAwMTVaFw0yNjA0MDkxNDA1MTVaMDMxMTAvBgNV
BAMTKEYxRkUwOUM0RUZFNzgxNEJEOTM4OTQ4QjhBMDBBRkUzQUU1QjgzNTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMTeaIyeDz6CfoP86SiP75I7gz
7cICb+YPwVjJrPmTyMhCHQ3+FUAB9i0TWhs6zRJFFevNDutb4LnJNKUTHjM/KksF
ZO0kIKoEgViZNZlg8c3Ye2ERWJgZ2oEYojnRM2P23Ym6he5aLu75z4XW4IvPUjPq
h2LA4lLePEZky6rbXT72+2bzihX5X1KNPgKGB/aBLjs2Y3yUeZuv/TEjnKh6ZyrY
sX4ojKw65rrKDK3HvBgd8NLcbBuPbOJ9Vk2DFJpUUTXSOerx8hXpYcq16BI5okn+
b0RUTJMM4CPoMmm0nFwZ/W8RXV3T5uiuWRgTEMVTh7lnwnJRlIFTGgzYq1ahAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU8f4JxO/ngUvZOJSLigCv465bg1kwHwYDVR0j
BBgwFoAUBe640pe9nj5W7Y04UyW+gxzZEjswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXczb2ZYQWlQZ29xQnR0WUxidHdtMVVMdlVlbVdSU3VDUmI3cExwenFz
QWQvMC8wNUVFQjhEMjk3QkQ5RTNFNTZFRDhEMzg1MzI1QkU4MzFDRDkxMjNCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA1RUVCOEQyOTdCRDlFM0U1
NkVEOEQzODUzMjVCRTgzMUNEOTEyM0IuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0V3M29mWEFpUGdvcUJ0dFlMYnR3bTFVTHZVZW1XUlN1Q1JiN3BMcHpxc0FkLzAv
MzEzNzMwMmUzMjMzMzEyZTM4MzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTMz
MzEzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqudYMA0GCSqGSIb3DQEBCwUAA4IBAQBBizQTufQT
UrPi9R37KB7PdvBKOmbRdV7y08nqdukT0hNXYd98BrmxKtD6x3QaqaVcroP02Dot
EUzCmjoS3LPH105GLQoBP36j7dWai0rrl2l3hqV61rSyypVYH9ANxB6xY1u6SVwr
VV2+gMpS9VTgIU390NdWhJfHzPHU4//lGAzcGNp0V2vOPs7xV2btpC7Nn33gKBz0
iJgVoBNVY59sZUbyZFQwioxWB7G4nF8AEsZQUCFc3UF2zpCX9AZdTga9nonzKIrc
rQie9rg819F7dSAqwFbp1HPNtjzdGMqjAyQmiDyxKdj4rNIpzsrD8QphFRJlyhju
fqCHleCtCXIP
-----END CERTIFICATE-----
Generated at Sat Apr 19 04:02:59 2025 by rpki-client