Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hr8ywjKegDKL73fQUX569U11mJ4pJFDp5vXxyk5w6eaw/1/3136382e3230352e38302e302f32322d3234203d3e20323633363331.roa
File:                     3136382e3230352e38302e302f32322d3234203d3e20323633363331.roa (raw, json)
Hash identifier:          slrcgVOZdrvotdN3NkhzVZOJaXzoxFDp9/ADrRMUKMg=
Subject key identifier:   DA:94:C8:F1:13:05:84:B8:E0:10:D8:A9:8A:9C:DF:A9:94:13:B6:58
Certificate issuer:       /CN=0E877B9FC3D57790790B0D857A7A2A890319B3FA
Certificate serial:       3320BD86867B7F7E901B0182880F81478E7F4BFB
Authority key identifier: 0E:87:7B:9F:C3:D5:77:90:79:0B:0D:85:7A:7A:2A:89:03:19:B3:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E877B9FC3D57790790B0D857A7A2A890319B3FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hr8ywjKegDKL73fQUX569U11mJ4pJFDp5vXxyk5w6eaw/1/3136382e3230352e38302e302f32322d3234203d3e20323633363331.roa
Signing time:             Wed 05 Mar 2025 19:00:08 +0000
ROA not before:           Wed 05 Mar 2025 18:55:08 +0000
ROA not after:            Wed 04 Mar 2026 19:00:08 +0000
asID:                     263631
IP address blocks:        168.205.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hr8ywjKegDKL73fQUX569U11mJ4pJFDp5vXxyk5w6eaw/1/0E877B9FC3D57790790B0D857A7A2A890319B3FA.crl
                          rsync://rpki-repo.registro.br/repo/Hr8ywjKegDKL73fQUX569U11mJ4pJFDp5vXxyk5w6eaw/1/0E877B9FC3D57790790B0D857A7A2A890319B3FA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E877B9FC3D57790790B0D857A7A2A890319B3FA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 04:40:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:20:bd:86:86:7b:7f:7e:90:1b:01:82:88:0f:81:47:8e:7f:4b:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E877B9FC3D57790790B0D857A7A2A890319B3FA
        Validity
            Not Before: Mar  5 18:55:08 2025 GMT
            Not After : Mar  4 19:00:08 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ad:b2:7f:54:41:10:25:2e:2e:7e:bc:e1:4a:
                    00:82:15:21:9a:32:a6:1b:f9:db:a0:5e:70:f0:33:
                    9a:13:02:5e:75:c4:0f:d3:77:cf:e7:ae:04:84:39:
                    d6:1a:cc:5a:3c:46:e8:2a:d1:7e:79:44:62:a9:aa:
                    98:e2:92:63:cd:65:c8:d2:08:8f:9d:23:ae:c4:05:
                    61:9e:b7:fe:53:ef:c3:6a:ff:2e:85:41:72:e5:b2:
                    6c:6d:e7:c5:2a:a6:6b:8b:46:02:93:78:95:46:b6:
                    2a:14:cb:64:9d:c7:76:5a:ff:df:69:86:35:97:11:
                    52:70:6b:42:64:76:e1:98:53:42:ba:51:25:b1:06:
                    20:89:2c:dd:c6:a9:c8:26:c9:0b:c4:59:bf:38:e7:
                    00:0a:2f:68:90:a0:04:76:a3:9d:8b:53:9d:5a:06:
                    e0:8c:8b:cc:c5:c4:d4:f9:09:bf:15:fc:c2:f9:a8:
                    9a:21:15:20:47:44:57:46:56:bd:25:6b:f1:4f:ed:
                    21:2b:c5:51:4e:cb:cf:de:82:39:d8:98:db:d0:58:
                    46:f4:11:ec:57:45:14:c7:b8:c8:21:03:88:1c:ef:
                    a2:fc:59:3e:55:b0:9e:08:f1:ec:b9:c6:06:03:28:
                    81:26:6b:ba:38:ca:72:cd:76:e8:b2:f5:ea:f2:41:
                    0f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:94:C8:F1:13:05:84:B8:E0:10:D8:A9:8A:9C:DF:A9:94:13:B6:58
            X509v3 Authority Key Identifier:
                keyid:0E:87:7B:9F:C3:D5:77:90:79:0B:0D:85:7A:7A:2A:89:03:19:B3:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hr8ywjKegDKL73fQUX569U11mJ4pJFDp5vXxyk5w6eaw/1/0E877B9FC3D57790790B0D857A7A2A890319B3FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E877B9FC3D57790790B0D857A7A2A890319B3FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hr8ywjKegDKL73fQUX569U11mJ4pJFDp5vXxyk5w6eaw/1/3136382e3230352e38302e302f32322d3234203d3e20323633363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:bd:8a:91:75:72:c3:f6:fe:ff:86:c3:aa:e9:02:6d:ac:76:
         ec:28:b9:5d:fe:c3:0f:4c:7e:dc:82:63:f0:8c:6b:af:96:0a:
         74:13:71:62:04:52:f5:00:97:2e:bd:34:46:ef:13:38:21:88:
         a9:60:9f:5b:5f:01:f2:a5:3c:16:ab:d2:00:43:a4:2c:d6:a5:
         79:39:ce:b9:c3:22:9f:87:b6:ea:b1:ee:3e:a9:53:d9:df:3d:
         00:0d:f0:29:66:23:65:af:94:2e:ed:0e:7e:8d:ff:ca:87:87:
         7c:c7:e7:29:f5:20:43:4a:03:e9:48:22:1d:b7:1f:77:e4:e8:
         8b:9b:06:70:25:23:d1:b1:43:bc:1e:22:1e:28:b3:7f:85:4d:
         16:ab:31:69:33:7e:dd:41:4b:dc:36:16:e8:73:35:f1:31:90:
         b7:a2:aa:61:cf:3f:6e:fa:e1:d2:b2:4b:3b:8b:12:e8:27:7d:
         f7:af:e2:f3:2d:2d:99:1f:b0:b3:53:db:7e:06:a3:9d:85:80:
         05:a1:4d:9f:55:e2:1e:b9:fa:25:f7:42:fb:d7:aa:39:0b:6c:
         5d:fc:58:20:0e:fd:3c:89:85:a0:6a:f5:c6:43:d0:1b:64:75:
         e8:df:c9:0a:cb:93:e2:f9:90:25:21:e2:3a:bb:a0:2a:25:e8:
         15:52:1b:69
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUMyC9hoZ7f36QGwGCiA+BR45/S/swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEU4NzdCOUZDM0Q1Nzc5MDc5MEIwRDg1N0E3QTJBODkw
MzE5QjNGQTAeFw0yNTAzMDUxODU1MDhaFw0yNjAzMDQxOTAwMDhaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0JBREIyN0Y1NDQxMTAyNTJF
MkU3RUJDRTE0QTAwODIxNTIxOUEzMkE2MUJGOURCQTA1RTcwRjAzMzlBMTMwMjVF
NzVDNDBGRDM3N0NGRTdBRTA0ODQzOUQ2MUFDQzVBM0M0NkU4MkFEMTdFNzk0NDYy
QTlBQTk4RTI5MjYzQ0Q2NUM4RDIwODhGOUQyM0FFQzQwNTYxOUVCN0ZFNTNFRkMz
NkFGRjJFODU0MTcyRTVCMjZDNkRFN0M1MkFBNjZCOEI0NjAyOTM3ODk1NDZCNjJB
MTRDQjY0OURDNzc2NUFGRkRGNjk4NjM1OTcxMTUyNzA2QjQyNjQ3NkUxOTg1MzQy
QkE1MTI1QjEwNjIwODkyQ0REQzZBOUM4MjZDOTBCQzQ1OUJGMzhFNzAwMEEyRjY4
OTBBMDA0NzZBMzlEOEI1MzlENUEwNkUwOEM4QkNDQzVDNEQ0RjkwOUJGMTVGQ0My
RjlBODlBMjExNTIwNDc0NDU3NDY1NkJEMjU2QkYxNEZFRDIxMkJDNTUxNEVDQkNG
REU4MjM5RDg5OERCRDA1ODQ2RjQxMUVDNTc0NTE0QzdCOEM4MjEwMzg4MUNFRkEy
RkM1OTNFNTVCMDlFMDhGMUVDQjlDNjA2MDMyODgxMjY2QkJBMzhDQTcyQ0Q3NkU4
QjJGNUVBRjI0MTBGRjEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAy62yf1RBECUuLn684UoAghUhmjKmG/nboF5w8DOaEwJedcQP03fP
564EhDnWGsxaPEboKtF+eURiqaqY4pJjzWXI0giPnSOuxAVhnrf+U+/Dav8uhUFy
5bJsbefFKqZri0YCk3iVRrYqFMtkncd2Wv/faYY1lxFScGtCZHbhmFNCulElsQYg
iSzdxqnIJskLxFm/OOcACi9okKAEdqOdi1OdWgbgjIvMxcTU+Qm/FfzC+aiaIRUg
R0RXRla9JWvxT+0hK8VRTsvP3oI52Jjb0FhG9BHsV0UUx7jIIQOIHO+i/Fk+VbCe
CPHsucYGAyiBJmu6OMpyzXbosvXq8kEP8QIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FNqUyPETBYS44BDYqYqc36mUE7ZYMB8GA1UdIwQYMBaAFA6He5/D1XeQeQsNhXp6
KokDGbP6MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hyOHl3aktlZ0RLTDcz
ZlFVWDU2OVUxMW1KNHBKRkRwNXZYeHlrNXc2ZWF3LzEvMEU4NzdCOUZDM0Q1Nzc5
MDc5MEIwRDg1N0E3QTJBODkwMzE5QjNGQS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8wRTg3N0I5RkMzRDU3NzkwNzkwQjBEODU3QTdBMkE4OTAzMTlC
M0ZBLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Icjh5d2pLZWdES0w3M2ZRVVg1
NjlVMTFtSjRwSkZEcDV2WHh5azV3NmVhdy8xLzMxMzYzODJlMzIzMDM1MmUzODMw
MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMzMzYzMzMxLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
qM1QMA0GCSqGSIb3DQEBCwUAA4IBAQA3vYqRdXLD9v7/hsOq6QJtrHbsKLld/sMP
TH7cgmPwjGuvlgp0E3FiBFL1AJcuvTRG7xM4IYipYJ9bXwHypTwWq9IAQ6Qs1qV5
Oc65wyKfh7bqse4+qVPZ3z0ADfApZiNlr5Qu7Q5+jf/Kh4d8x+cp9SBDSgPpSCId
tx935OiLmwZwJSPRsUO8HiIeKLN/hU0WqzFpM37dQUvcNhboczXxMZC3oqphzz9u
+uHSsks7ixLoJ333r+LzLS2ZH7CzU9t+BqOdhYAFoU2fVeIeufol90L716o5C2xd
/FggDv08iYWgavXGQ9AbZHXo38kKy5Pi+ZAlIeI6u6AqJegVUhtp
-----END CERTIFICATE-----
Generated at Fri Apr 18 14:26:35 2025 by rpki-client