Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FvPPg2KDY3De4mDA7Eiyc6fF6wKh3aRSyQ5faJQZ8mfD/1/3139322e3134342e37322e302f32332d3233203d3e20323637333232.roa
File:                     3139322e3134342e37322e302f32332d3233203d3e20323637333232.roa (raw, json)
Hash identifier:          ygxS92ceZNKVnQiCwCk+rQdiDwH+UJgsg+ffvFKKAUE=
Subject key identifier:   DD:4E:E0:95:C9:A5:85:6C:2C:9C:EB:FE:33:C5:06:36:98:F7:D3:94
Certificate issuer:       /CN=C1C7F834309205DF0944BA5C05FE62D65607F6C0
Certificate serial:       23901030ED05EBF2DAE502607704CAEC077D2DF3
Authority key identifier: C1:C7:F8:34:30:92:05:DF:09:44:BA:5C:05:FE:62:D6:56:07:F6:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1C7F834309205DF0944BA5C05FE62D65607F6C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FvPPg2KDY3De4mDA7Eiyc6fF6wKh3aRSyQ5faJQZ8mfD/1/3139322e3134342e37322e302f32332d3233203d3e20323637333232.roa
Signing time:             Wed 05 Mar 2025 19:00:06 +0000
ROA not before:           Wed 05 Mar 2025 18:55:06 +0000
ROA not after:            Wed 04 Mar 2026 19:00:06 +0000
asID:                     267322
IP address blocks:        192.144.72.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FvPPg2KDY3De4mDA7Eiyc6fF6wKh3aRSyQ5faJQZ8mfD/1/C1C7F834309205DF0944BA5C05FE62D65607F6C0.crl
                          rsync://rpki-repo.registro.br/repo/FvPPg2KDY3De4mDA7Eiyc6fF6wKh3aRSyQ5faJQZ8mfD/1/C1C7F834309205DF0944BA5C05FE62D65607F6C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1C7F834309205DF0944BA5C05FE62D65607F6C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 11 Apr 2025 22:16:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:90:10:30:ed:05:eb:f2:da:e5:02:60:77:04:ca:ec:07:7d:2d:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1C7F834309205DF0944BA5C05FE62D65607F6C0
        Validity
            Not Before: Mar  5 18:55:06 2025 GMT
            Not After : Mar  4 19:00:06 2026 GMT
        Subject: CN=DD4EE095C9A5856C2C9CEBFE33C5063698F7D394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:bc:9e:b5:c9:da:b7:b5:3e:c7:2c:b0:66:49:
                    57:3e:15:8e:8b:df:09:7a:68:6a:10:f5:bb:b2:97:
                    4b:21:af:7e:98:20:9a:fc:7c:02:50:02:5b:78:9e:
                    20:93:2c:a1:ca:44:48:dc:62:53:64:69:a2:bb:24:
                    05:47:9b:0d:3c:bf:85:c7:c8:5b:12:f1:a3:00:01:
                    06:11:82:76:0d:d8:3a:57:75:f1:f2:2c:2d:da:e8:
                    cf:61:01:ea:be:32:54:a6:cf:d5:de:10:93:74:f9:
                    18:08:92:d6:13:5d:17:86:93:b5:d7:33:6a:f1:bc:
                    46:e9:32:d2:0d:d7:8f:0c:43:ba:e0:94:22:c5:90:
                    1e:b4:f3:2f:46:41:5a:b0:76:ea:ae:e1:15:fe:2b:
                    1f:52:0c:1c:89:c6:8a:e6:e7:68:71:78:91:0d:53:
                    fb:65:c2:a1:43:b6:08:9f:d6:e5:23:86:13:d1:e9:
                    c3:04:6a:03:53:9e:15:f2:7c:24:a1:91:0b:e4:5e:
                    84:4d:f6:78:cd:26:80:5b:88:07:d2:27:2b:ed:9a:
                    9a:d5:30:dc:61:f7:d7:5c:37:8c:e5:29:a3:3c:49:
                    bd:12:54:6a:a4:c8:79:d5:65:40:a4:24:3c:cd:3b:
                    d2:98:69:da:61:d8:c8:fd:8a:12:68:68:ec:23:17:
                    41:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:4E:E0:95:C9:A5:85:6C:2C:9C:EB:FE:33:C5:06:36:98:F7:D3:94
            X509v3 Authority Key Identifier:
                keyid:C1:C7:F8:34:30:92:05:DF:09:44:BA:5C:05:FE:62:D6:56:07:F6:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FvPPg2KDY3De4mDA7Eiyc6fF6wKh3aRSyQ5faJQZ8mfD/1/C1C7F834309205DF0944BA5C05FE62D65607F6C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1C7F834309205DF0944BA5C05FE62D65607F6C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FvPPg2KDY3De4mDA7Eiyc6fF6wKh3aRSyQ5faJQZ8mfD/1/3139322e3134342e37322e302f32332d3233203d3e20323637333232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.144.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:dd:63:34:5a:25:0f:42:f4:77:34:61:e7:90:ee:82:1d:2f:
         11:ea:a1:00:cb:85:01:f8:fd:86:fc:28:8c:76:5b:a7:82:5c:
         8b:6a:0e:87:e1:e3:b5:18:33:12:c3:02:ef:c4:ba:1b:cb:d3:
         9e:55:e6:0b:7f:42:37:c8:8b:82:cd:30:9e:5b:2e:1c:9f:af:
         24:f0:be:50:e4:22:e4:c1:6d:d3:ca:48:95:f4:21:c5:1c:12:
         e9:f6:bc:49:2b:f4:d7:c2:1f:94:30:6e:e0:2c:3d:cf:a0:9f:
         cb:f7:08:82:49:4a:38:c1:3a:d8:53:1d:2e:ef:d9:27:27:52:
         38:83:7b:d6:ca:68:2d:b1:a5:10:8a:d8:d1:e2:cb:7b:b4:4a:
         22:35:c3:b4:ab:39:f9:d4:a3:f3:62:89:46:54:12:6a:b9:19:
         90:b7:95:4a:10:51:48:02:27:47:0e:69:b1:8e:54:36:83:bc:
         b9:1a:8a:9e:cb:36:65:fe:82:ef:1d:b2:b6:c7:5e:f3:8b:7c:
         ee:a5:ec:9b:86:a5:7c:d2:86:b9:b0:9e:c9:3a:24:9f:4c:b5:
         84:d7:51:ae:4f:ae:46:ca:d2:4b:9c:72:fb:13:6a:a8:07:ef:
         ba:d1:4f:33:c3:bd:82:1c:8b:9e:fa:7e:06:e8:18:cb:c1:13:
         27:08:89:9a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUI5AQMO0F6/La5QJgdwTK7Ad9LfMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzFDN0Y4MzQzMDkyMDVERjA5NDRCQTVDMDVGRTYyRDY1
NjA3RjZDMDAeFw0yNTAzMDUxODU1MDZaFw0yNjAzMDQxOTAwMDZaMDMxMTAvBgNV
BAMTKERENEVFMDk1QzlBNTg1NkMyQzlDRUJGRTMzQzUwNjM2OThGN0QzOTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgvJ61ydq3tT7HLLBmSVc+FY6L
3wl6aGoQ9buyl0shr36YIJr8fAJQAlt4niCTLKHKREjcYlNkaaK7JAVHmw08v4XH
yFsS8aMAAQYRgnYN2DpXdfHyLC3a6M9hAeq+MlSmz9XeEJN0+RgIktYTXReGk7XX
M2rxvEbpMtIN148MQ7rglCLFkB608y9GQVqwduqu4RX+Kx9SDByJxorm52hxeJEN
U/tlwqFDtgif1uUjhhPR6cMEagNTnhXyfCShkQvkXoRN9njNJoBbiAfSJyvtmprV
MNxh99dcN4zlKaM8Sb0SVGqkyHnVZUCkJDzNO9KYadph2Mj9ihJoaOwjF0EXAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU3U7glcmlhWwsnOv+M8UGNpj305QwHwYDVR0j
BBgwFoAUwcf4NDCSBd8JRLpcBf5i1lYH9sAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnZQUGcyS0RZM0RlNG1EQTdFaXljNmZGNndLaDNhUlN5UTVmYUpRWjht
ZkQvMS9DMUM3RjgzNDMwOTIwNURGMDk0NEJBNUMwNUZFNjJENjU2MDdGNkMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MxQzdGODM0MzA5MjA1REYw
OTQ0QkE1QzA1RkU2MkQ2NTYwN0Y2QzAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Z2UFBnMktEWTNEZTRtREE3RWl5YzZmRjZ3S2gzYVJTeVE1ZmFKUVo4bWZELzEv
MzEzOTMyMmUzMTM0MzQyZTM3MzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzczMzMyMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAHAkEgwDQYJKoZIhvcNAQELBQADggEBADTdYzRa
JQ9C9Hc0YeeQ7oIdLxHqoQDLhQH4/Yb8KIx2W6eCXItqDofh47UYMxLDAu/EuhvL
055V5gt/QjfIi4LNMJ5bLhyfryTwvlDkIuTBbdPKSJX0IcUcEun2vEkr9NfCH5Qw
buAsPc+gn8v3CIJJSjjBOthTHS7v2ScnUjiDe9bKaC2xpRCK2NHiy3u0SiI1w7Sr
OfnUo/NiiUZUEmq5GZC3lUoQUUgCJ0cOabGOVDaDvLkaip7LNmX+gu8dsrbHXvOL
fO6l7JuGpXzShrmwnsk6JJ9MtYTXUa5PrkbK0kuccvsTaqgH77rRTzPDvYIci576
fgboGMvBEycIiZo=
-----END CERTIFICATE-----
Generated at Thu Apr 10 23:49:18 2025 by rpki-client