Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnwgmtgFXnyazSMVhX71Lz61u3xtQcR5GMu6icaLNNNK/1/3137302e3234342e3232382e302f32322d3332203d3e20323636353233.roa
File:                     3137302e3234342e3232382e302f32322d3332203d3e20323636353233.roa (raw, json)
Hash identifier:          89HDJX2ovLp3JxWjniDOazeEJLD2VP3C/uRfALDXxUk=
Subject key identifier:   51:73:C6:B4:B3:AB:50:EA:62:FC:53:F1:8E:E3:9E:25:72:22:F2:6D
Certificate issuer:       /CN=D3E0F3C614B2220C8F77C152E1A67F4B0BFB1625
Certificate serial:       C9B88A2403D8859E28A6BA624711CD93C15247
Authority key identifier: D3:E0:F3:C6:14:B2:22:0C:8F:77:C1:52:E1:A6:7F:4B:0B:FB:16:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3E0F3C614B2220C8F77C152E1A67F4B0BFB1625.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnwgmtgFXnyazSMVhX71Lz61u3xtQcR5GMu6icaLNNNK/1/3137302e3234342e3232382e302f32322d3332203d3e20323636353233.roa
Signing time:             Tue 11 Mar 2025 00:03:48 +0000
ROA not before:           Mon 10 Mar 2025 23:58:48 +0000
ROA not after:            Tue 10 Mar 2026 00:03:48 +0000
asID:                     266523
IP address blocks:        170.244.228.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GnwgmtgFXnyazSMVhX71Lz61u3xtQcR5GMu6icaLNNNK/1/D3E0F3C614B2220C8F77C152E1A67F4B0BFB1625.crl
                          rsync://rpki-repo.registro.br/repo/GnwgmtgFXnyazSMVhX71Lz61u3xtQcR5GMu6icaLNNNK/1/D3E0F3C614B2220C8F77C152E1A67F4B0BFB1625.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3E0F3C614B2220C8F77C152E1A67F4B0BFB1625.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 10:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            c9:b8:8a:24:03:d8:85:9e:28:a6:ba:62:47:11:cd:93:c1:52:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3E0F3C614B2220C8F77C152E1A67F4B0BFB1625
        Validity
            Not Before: Mar 10 23:58:48 2025 GMT
            Not After : Mar 10 00:03:48 2026 GMT
        Subject: CN=5173C6B4B3AB50EA62FC53F18EE39E257222F26D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:df:2d:cf:51:f5:0e:01:44:ba:1c:42:c9:30:
                    ea:c2:7a:af:2d:1b:49:02:bd:1f:af:ca:fd:8f:dc:
                    44:35:75:e2:85:19:a2:a3:4e:48:2e:a2:c3:f8:d9:
                    31:18:20:20:10:e1:79:16:f2:43:4a:96:61:c4:ba:
                    ab:2d:02:d4:a7:cf:13:96:d1:25:2e:80:63:d1:47:
                    c0:d5:cf:97:0d:c6:ff:a2:f0:be:90:a8:e2:a4:01:
                    55:7c:9f:3a:ea:af:86:38:86:c6:74:c7:8f:e8:98:
                    9e:eb:41:bd:8d:dc:89:46:05:92:22:9f:9b:f0:f1:
                    15:74:e2:1c:a3:3b:d6:cf:6a:a1:2e:5c:65:9a:fa:
                    5f:1f:2d:44:d6:d9:c8:4b:7b:50:29:d8:80:18:47:
                    2b:ad:cf:de:bd:5f:17:5e:db:f7:10:5a:25:53:0a:
                    6f:b6:c8:e6:a8:48:1d:e5:f2:9c:4c:96:bb:b7:a4:
                    91:62:d3:07:95:6b:ce:c0:d4:a0:a6:57:cd:81:90:
                    b6:bd:88:7e:9d:c1:87:26:2f:d9:63:6b:62:f5:f5:
                    ab:a1:c9:9a:58:dc:d8:b6:54:72:b3:ec:6d:fb:68:
                    fa:83:a3:8d:68:87:78:53:26:5a:9f:62:79:28:4e:
                    12:de:8c:e3:7e:e6:95:2c:c3:15:42:24:b0:eb:01:
                    8b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:73:C6:B4:B3:AB:50:EA:62:FC:53:F1:8E:E3:9E:25:72:22:F2:6D
            X509v3 Authority Key Identifier:
                keyid:D3:E0:F3:C6:14:B2:22:0C:8F:77:C1:52:E1:A6:7F:4B:0B:FB:16:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnwgmtgFXnyazSMVhX71Lz61u3xtQcR5GMu6icaLNNNK/1/D3E0F3C614B2220C8F77C152E1A67F4B0BFB1625.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3E0F3C614B2220C8F77C152E1A67F4B0BFB1625.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnwgmtgFXnyazSMVhX71Lz61u3xtQcR5GMu6icaLNNNK/1/3137302e3234342e3232382e302f32322d3332203d3e20323636353233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:11:ff:7f:d8:72:a7:73:1f:63:80:ce:a5:2b:a5:2b:3a:80:
         8e:c8:58:9c:3a:24:54:e3:d3:b7:fc:8f:51:19:b9:19:49:b4:
         dd:76:07:8d:65:23:e0:04:6b:ec:98:35:0c:d4:dd:b0:cb:ce:
         61:d2:46:8b:85:0f:d4:38:51:d6:28:bb:c3:d4:65:4e:5e:4b:
         62:78:04:1b:5d:9c:d5:51:7f:2b:e1:35:0c:6a:98:f6:ce:5b:
         c0:70:9e:89:61:e4:2c:62:b4:88:55:85:e3:87:41:06:08:d6:
         fd:79:b8:c4:a5:66:05:ec:3d:b4:9b:fb:02:1f:5b:07:56:d2:
         b5:f5:c9:31:c0:30:26:91:5e:d0:35:07:50:f0:cb:59:12:70:
         4a:41:7c:88:24:a5:01:b4:23:3b:57:2d:9c:ca:fa:02:6d:9a:
         13:18:3c:b3:11:89:30:14:7a:09:6c:84:13:31:fe:0c:59:5c:
         91:80:be:2d:6d:46:89:83:d8:b0:0c:d1:6a:42:46:66:f0:5c:
         a9:40:99:50:66:fd:ac:c5:8c:14:c4:8c:c5:9b:28:94:9f:e1:
         83:35:b8:2c:b1:18:2b:df:7b:42:22:e5:df:9c:3e:cd:67:d2:
         d4:10:59:1d:88:1f:59:c6:db:e6:71:e9:35:c3:6d:ec:c3:de:
         ce:0a:b2:f9
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUAMm4iiQD2IWeKKa6YkcRzZPBUkcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDNFMEYzQzYxNEIyMjIwQzhGNzdDMTUyRTFBNjdGNEIw
QkZCMTYyNTAeFw0yNTAzMTAyMzU4NDhaFw0yNjAzMTAwMDAzNDhaMDMxMTAvBgNV
BAMTKDUxNzNDNkI0QjNBQjUwRUE2MkZDNTNGMThFRTM5RTI1NzIyMkYyNkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG3y3PUfUOAUS6HELJMOrCeq8t
G0kCvR+vyv2P3EQ1deKFGaKjTkguosP42TEYICAQ4XkW8kNKlmHEuqstAtSnzxOW
0SUugGPRR8DVz5cNxv+i8L6QqOKkAVV8nzrqr4Y4hsZ0x4/omJ7rQb2N3IlGBZIi
n5vw8RV04hyjO9bPaqEuXGWa+l8fLUTW2chLe1Ap2IAYRyutz969Xxde2/cQWiVT
Cm+2yOaoSB3l8pxMlru3pJFi0weVa87A1KCmV82BkLa9iH6dwYcmL9lja2L19auh
yZpY3Ni2VHKz7G37aPqDo41oh3hTJlqfYnkoThLejON+5pUswxVCJLDrAYsBAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUUXPGtLOrUOpi/FPxjuOeJXIi8m0wHwYDVR0j
BBgwFoAU0+DzxhSyIgyPd8FS4aZ/Swv7FiUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR253Z210Z0ZYbnlhelNNVmhYNzFMejYxdTN4dFFjUjVHTXU2aWNhTE5O
TksvMS9EM0UwRjNDNjE0QjIyMjBDOEY3N0MxNTJFMUE2N0Y0QjBCRkIxNjI1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QzRTBGM0M2MTRCMjIyMEM4
Rjc3QzE1MkUxQTY3RjRCMEJGQjE2MjUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dud2dtdGdGWG55YXpTTVZoWDcxTHo2MXUzeHRRY1I1R011NmljYUxOTk5LLzEv
MzEzNzMwMmUzMjM0MzQyZTMyMzIzODJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzYzNjM1MzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqr05DANBgkqhkiG9w0BAQsFAAOCAQEAFhH/
f9hyp3MfY4DOpSulKzqAjshYnDokVOPTt/yPURm5GUm03XYHjWUj4ARr7Jg1DNTd
sMvOYdJGi4UP1DhR1ii7w9RlTl5LYngEG12c1VF/K+E1DGqY9s5bwHCeiWHkLGK0
iFWF44dBBgjW/Xm4xKVmBew9tJv7Ah9bB1bStfXJMcAwJpFe0DUHUPDLWRJwSkF8
iCSlAbQjO1ctnMr6Am2aExg8sxGJMBR6CWyEEzH+DFlckYC+LW1GiYPYsAzRakJG
ZvBcqUCZUGb9rMWMFMSMxZsolJ/hgzW4LLEYK997QiLl35w+zWfS1BBZHYgfWcbb
5nHpNcNt7MPezgqy+Q==
-----END CERTIFICATE-----
Generated at Sun Apr 6 16:23:51 2025 by rpki-client