Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/3133312e3235352e3232372e302f32342d3234203d3e20323634343936.roa
File:                     3133312e3235352e3232372e302f32342d3234203d3e20323634343936.roa (raw, json)
Hash identifier:          WcthtglDQxLNs+sH5FcID5xKoCPZhxtpMFghJgHCPAg=
Subject key identifier:   4A:09:28:60:53:29:23:48:45:62:6C:68:08:C9:6E:16:86:C8:C9:24
Certificate issuer:       /CN=970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C
Certificate serial:       12624AD246F3242732A626ED3E7152CDBD9C0E28
Authority key identifier: 97:0C:C2:6D:D0:C3:53:C2:44:F7:2F:5B:62:AE:4B:5B:0E:E5:AE:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/3133312e3235352e3232372e302f32342d3234203d3e20323634343936.roa
Signing time:             Wed 26 Feb 2025 14:34:25 +0000
ROA not before:           Wed 26 Feb 2025 14:29:25 +0000
ROA not after:            Wed 25 Feb 2026 14:34:25 +0000
asID:                     264496
IP address blocks:        131.255.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.crl
                          rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 19:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:62:4a:d2:46:f3:24:27:32:a6:26:ed:3e:71:52:cd:bd:9c:0e:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C
        Validity
            Not Before: Feb 26 14:29:25 2025 GMT
            Not After : Feb 25 14:34:25 2026 GMT
        Subject: CN=4A0928605329234845626C6808C96E1686C8C924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a6:33:13:ff:ba:51:34:87:3e:5c:9e:a4:1a:
                    d6:f8:85:ef:55:36:44:06:2f:0a:aa:aa:7a:49:e0:
                    66:1c:9b:9f:6a:b0:d5:16:88:4d:46:5a:d9:46:79:
                    c5:9b:fc:d2:55:dd:a9:bf:f8:2a:90:08:29:36:5e:
                    9b:8b:67:79:18:aa:0f:73:9b:f6:e3:02:f1:3e:e8:
                    02:0a:4e:f3:92:8c:18:ba:79:7e:00:0d:d8:2e:d0:
                    3e:f3:77:68:b0:51:34:fc:5c:19:eb:a7:d2:6d:db:
                    0b:13:e3:a8:28:fa:9e:1f:3d:ab:e6:d7:54:97:4f:
                    79:66:6f:e9:c4:5b:56:1a:b9:e9:dc:fb:e9:5e:c2:
                    a2:84:df:6a:7d:89:a1:84:40:0a:62:5c:2e:84:03:
                    90:95:55:69:17:80:63:f9:16:b7:98:02:87:32:60:
                    4c:4b:73:87:7e:54:94:41:f2:b3:20:5a:06:4f:52:
                    35:1a:37:34:01:a9:5c:74:74:a2:12:c9:b9:d1:f6:
                    82:ff:fb:0c:73:41:d9:38:3b:d4:c5:ba:db:9f:07:
                    23:a0:c1:2b:45:97:f0:52:93:79:9c:1a:99:9c:a6:
                    99:4a:e0:6e:33:1a:0f:34:47:45:b3:57:27:1b:c5:
                    3b:f4:8f:4d:8c:f7:94:44:89:cd:15:80:c1:c5:14:
                    29:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:09:28:60:53:29:23:48:45:62:6C:68:08:C9:6E:16:86:C8:C9:24
            X509v3 Authority Key Identifier:
                keyid:97:0C:C2:6D:D0:C3:53:C2:44:F7:2F:5B:62:AE:4B:5B:0E:E5:AE:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/3133312e3235352e3232372e302f32342d3234203d3e20323634343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:7d:a4:66:3d:95:e3:e2:a8:d8:af:a0:92:9b:51:d3:bd:ae:
         f8:c1:7d:f9:b3:8f:22:f4:c1:93:61:e0:0d:2c:01:a6:88:d4:
         d9:af:e3:9d:9b:3a:b0:96:47:ec:0a:e7:ee:09:58:ba:ca:1c:
         97:3f:d5:25:0d:0b:c1:08:60:61:a7:23:e6:b9:f4:68:33:28:
         43:94:c4:4a:84:4d:61:de:9f:ee:85:09:15:6c:05:cd:37:c9:
         c6:35:52:74:19:25:72:59:0a:65:e1:11:95:3c:51:6c:1f:c5:
         11:c4:27:36:94:e6:18:a0:2c:04:81:7e:18:36:60:49:d6:a5:
         ce:d4:a2:4d:41:8a:b7:47:cf:75:11:34:d1:66:41:87:6f:d3:
         e0:24:5f:72:b0:32:3f:c4:5d:41:87:a7:39:8b:6b:60:ed:d7:
         03:e6:36:b0:61:ff:e3:62:d6:15:ec:68:92:d2:d4:45:51:a9:
         93:07:4e:ce:6b:de:73:dd:58:cd:df:cb:a7:6a:33:b3:75:03:
         de:41:53:54:88:25:4f:36:bb:9b:4e:af:a7:11:3a:2e:58:e8:
         8d:69:43:97:5c:4a:8f:6c:6f:2c:1d:8b:f6:be:cd:42:43:d2:
         0f:bf:c6:cd:c4:37:3f:ec:91:e2:5a:d9:70:4b:f9:86:33:5c:
         11:93:82:59
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUEmJK0kbzJCcypibtPnFSzb2cDigwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTcwQ0MyNkREMEMzNTNDMjQ0RjcyRjVCNjJBRTRCNUIw
RUU1QUU3QzAeFw0yNTAyMjYxNDI5MjVaFw0yNjAyMjUxNDM0MjVaMDMxMTAvBgNV
BAMTKDRBMDkyODYwNTMyOTIzNDg0NTYyNkM2ODA4Qzk2RTE2ODZDOEM5MjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCepjMT/7pRNIc+XJ6kGtb4he9V
NkQGLwqqqnpJ4GYcm59qsNUWiE1GWtlGecWb/NJV3am/+CqQCCk2XpuLZ3kYqg9z
m/bjAvE+6AIKTvOSjBi6eX4ADdgu0D7zd2iwUTT8XBnrp9Jt2wsT46go+p4fPavm
11SXT3lmb+nEW1Yauenc++lewqKE32p9iaGEQApiXC6EA5CVVWkXgGP5FreYAocy
YExLc4d+VJRB8rMgWgZPUjUaNzQBqVx0dKISybnR9oL/+wxzQdk4O9TFutufByOg
wStFl/BSk3mcGpmcpplK4G4zGg80R0WzVycbxTv0j02M95REic0VgMHFFCkNAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUSgkoYFMpI0hFYmxoCMluFobIySQwHwYDVR0j
BBgwFoAUlwzCbdDDU8JE9y9bYq5LWw7lrnwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR25SYmp4Y2h1RDZySFB1Znc1SzdicVR3MUR3ZmtTUTRLWGFOZURTSlZa
bmcvMC85NzBDQzI2REQwQzM1M0MyNDRGNzJGNUI2MkFFNEI1QjBFRTVBRTdDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk3MENDMjZERDBDMzUzQzI0
NEY3MkY1QjYyQUU0QjVCMEVFNUFFN0MuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0duUmJqeGNodUQ2ckhQdWZ3NUs3YnFUdzFEd2ZrU1E0S1hhTmVEU0pWWm5nLzAv
MzEzMzMxMmUzMjM1MzUyZTMyMzIzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNDM0MzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIP/4zANBgkqhkiG9w0BAQsFAAOCAQEATX2k
Zj2V4+Ko2K+gkptR072u+MF9+bOPIvTBk2HgDSwBpojU2a/jnZs6sJZH7Arn7glY
usoclz/VJQ0LwQhgYacj5rn0aDMoQ5TESoRNYd6f7oUJFWwFzTfJxjVSdBklclkK
ZeERlTxRbB/FEcQnNpTmGKAsBIF+GDZgSdalztSiTUGKt0fPdRE00WZBh2/T4CRf
crAyP8RdQYenOYtrYO3XA+Y2sGH/42LWFexoktLURVGpkwdOzmvec91Yzd/Lp2oz
s3UD3kFTVIglTza7m06vpxE6LljojWlDl1xKj2xvLB2L9r7NQkPSD7/GzcQ3P+yR
4lrZcEv5hjNcEZOCWQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:05:55 2025 by rpki-client