Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J2gCNqqkgJzdByugRoQLWkWqRTY7LEKtN4ArUiSjXEaF/1/3137302e3234352e3139322e302f32322d3234203d3e203631363733.roa
File:                     3137302e3234352e3139322e302f32322d3234203d3e203631363733.roa (raw, json)
Hash identifier:          peDtmMB2JmyFdV/0jo3ILupuO77br12SeuTJq1TYZ8Q=
Subject key identifier:   68:D9:2D:7E:4B:99:AE:0F:6E:CE:35:2C:8F:DF:89:6B:52:3C:17:1A
Certificate issuer:       /CN=4F46505CC0FEC2DEE60976A6282C5D61DD9F230E
Certificate serial:       6F31E28D869FB2C2CFEEC368AA48E5E3F4173A43
Authority key identifier: 4F:46:50:5C:C0:FE:C2:DE:E6:09:76:A6:28:2C:5D:61:DD:9F:23:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F46505CC0FEC2DEE60976A6282C5D61DD9F230E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J2gCNqqkgJzdByugRoQLWkWqRTY7LEKtN4ArUiSjXEaF/1/3137302e3234352e3139322e302f32322d3234203d3e203631363733.roa
Signing time:             Thu 13 Mar 2025 12:15:23 +0000
ROA not before:           Thu 13 Mar 2025 12:10:23 +0000
ROA not after:            Thu 12 Mar 2026 12:15:23 +0000
asID:                     61673
IP address blocks:        170.245.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J2gCNqqkgJzdByugRoQLWkWqRTY7LEKtN4ArUiSjXEaF/1/4F46505CC0FEC2DEE60976A6282C5D61DD9F230E.crl
                          rsync://rpki-repo.registro.br/repo/J2gCNqqkgJzdByugRoQLWkWqRTY7LEKtN4ArUiSjXEaF/1/4F46505CC0FEC2DEE60976A6282C5D61DD9F230E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F46505CC0FEC2DEE60976A6282C5D61DD9F230E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 16:51:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:31:e2:8d:86:9f:b2:c2:cf:ee:c3:68:aa:48:e5:e3:f4:17:3a:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F46505CC0FEC2DEE60976A6282C5D61DD9F230E
        Validity
            Not Before: Mar 13 12:10:23 2025 GMT
            Not After : Mar 12 12:15:23 2026 GMT
        Subject: CN=68D92D7E4B99AE0F6ECE352C8FDF896B523C171A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e2:2f:b0:c0:14:aa:ae:fd:c7:29:a5:8e:27:
                    bd:f6:a9:63:23:c9:33:49:8e:a4:a2:f9:e5:c6:87:
                    4a:e8:ae:cf:3b:0c:4e:aa:2f:e1:f7:7b:d3:bd:55:
                    49:c3:3e:4c:9e:c5:c0:70:2e:92:fa:0b:90:fb:2f:
                    48:3c:75:6a:3d:2e:f9:5f:cc:a2:f6:fa:6a:16:fb:
                    8e:ec:79:4d:80:88:77:05:4d:c2:60:2b:97:da:0b:
                    54:ab:c9:fb:54:5f:5c:60:82:ff:c0:dd:96:d8:51:
                    5d:20:e4:ee:e2:8a:97:67:0a:66:ef:8b:ef:79:73:
                    28:28:b9:ba:8f:71:a1:85:ee:96:ed:9e:c2:fc:38:
                    c8:b3:99:e7:fb:cf:34:be:e7:0a:35:21:f2:ea:3e:
                    20:06:72:44:f7:6b:e4:16:ca:82:72:fc:92:a5:7d:
                    06:20:68:c1:0d:df:ad:5e:63:7d:33:52:a8:be:50:
                    8d:b5:da:db:c5:b0:59:ea:c4:95:8f:ce:46:cb:61:
                    a3:59:af:04:17:f8:a2:f4:1d:a1:0e:7c:7d:22:0a:
                    87:9c:01:49:39:56:58:40:c6:b6:6c:fc:66:10:4e:
                    35:61:aa:c8:69:64:cf:38:d9:95:e4:4d:48:bc:50:
                    c1:90:fc:b5:32:d5:bd:3b:5c:6a:cc:7d:de:f7:67:
                    0b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:D9:2D:7E:4B:99:AE:0F:6E:CE:35:2C:8F:DF:89:6B:52:3C:17:1A
            X509v3 Authority Key Identifier:
                keyid:4F:46:50:5C:C0:FE:C2:DE:E6:09:76:A6:28:2C:5D:61:DD:9F:23:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J2gCNqqkgJzdByugRoQLWkWqRTY7LEKtN4ArUiSjXEaF/1/4F46505CC0FEC2DEE60976A6282C5D61DD9F230E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F46505CC0FEC2DEE60976A6282C5D61DD9F230E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J2gCNqqkgJzdByugRoQLWkWqRTY7LEKtN4ArUiSjXEaF/1/3137302e3234352e3139322e302f32322d3234203d3e203631363733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         db:cb:3e:05:0d:db:43:53:b8:65:12:d1:b5:f2:34:1b:6f:bb:
         2a:4a:59:d1:0d:8b:48:42:fd:ad:3f:ed:43:a0:39:85:c5:b9:
         d6:d9:c1:5f:a7:db:11:a2:c2:65:18:f1:60:22:77:27:52:fd:
         36:88:57:1a:09:06:fa:8a:9d:53:c2:e5:1f:bf:aa:c5:43:90:
         31:aa:77:8f:e1:05:ea:97:14:72:64:39:21:e6:2c:92:6f:c8:
         1f:b5:51:b2:ba:6e:7b:b5:5b:56:cf:dc:9c:04:09:de:73:d4:
         4d:39:8c:98:d4:21:ac:1d:39:9d:22:1c:93:bc:e8:20:d2:f9:
         37:30:ec:5e:9a:87:a6:a7:af:07:87:03:b1:24:5b:29:09:69:
         33:a2:56:3c:09:c3:42:38:0b:4a:21:21:3a:8a:bb:bf:85:df:
         81:24:c5:bc:8a:57:71:c3:81:74:13:85:41:4b:ea:e7:28:15:
         ba:d0:73:58:93:20:56:8e:7e:1a:44:90:94:f8:ca:9e:bb:bb:
         dd:98:5f:59:69:cb:27:fa:1d:d0:48:5d:64:68:67:56:72:8f:
         23:97:e6:e4:c5:17:c8:3f:c8:88:e3:46:78:b4:7a:92:20:3e:
         cf:3d:42:f1:fa:bc:f1:39:90:8a:5b:63:d3:dd:77:5e:ed:34:
         30:46:4b:58
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUbzHijYafssLP7sNoqkjl4/QXOkMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEY0NjUwNUNDMEZFQzJERUU2MDk3NkE2MjgyQzVENjFE
RDlGMjMwRTAeFw0yNTAzMTMxMjEwMjNaFw0yNjAzMTIxMjE1MjNaMDMxMTAvBgNV
BAMTKDY4RDkyRDdFNEI5OUFFMEY2RUNFMzUyQzhGREY4OTZCNTIzQzE3MUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC64i+wwBSqrv3HKaWOJ732qWMj
yTNJjqSi+eXGh0rors87DE6qL+H3e9O9VUnDPkyexcBwLpL6C5D7L0g8dWo9Lvlf
zKL2+moW+47seU2AiHcFTcJgK5faC1SryftUX1xggv/A3ZbYUV0g5O7iipdnCmbv
i+95cygoubqPcaGF7pbtnsL8OMizmef7zzS+5wo1IfLqPiAGckT3a+QWyoJy/JKl
fQYgaMEN361eY30zUqi+UI212tvFsFnqxJWPzkbLYaNZrwQX+KL0HaEOfH0iCoec
AUk5VlhAxrZs/GYQTjVhqshpZM842ZXkTUi8UMGQ/LUy1b07XGrMfd73Zwu9AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUaNktfkuZrg9uzjUsj9+Ja1I8FxowHwYDVR0j
BBgwFoAUT0ZQXMD+wt7mCXamKCxdYd2fIw4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjJnQ05xcWtnSnpkQnl1Z1JvUUxXa1dxUlRZN0xFS3RONEFyVWlTalhF
YUYvMS80RjQ2NTA1Q0MwRkVDMkRFRTYwOTc2QTYyODJDNUQ2MUREOUYyMzBFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRGNDY1MDVDQzBGRUMyREVF
NjA5NzZBNjI4MkM1RDYxREQ5RjIzMEUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0oyZ0NOcXFrZ0p6ZEJ5dWdSb1FMV2tXcVJUWTdMRUt0TjRBclVpU2pYRWFGLzEv
MzEzNzMwMmUzMjM0MzUyZTMxMzkzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM2
MzEzNjM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKq9cAwDQYJKoZIhvcNAQELBQADggEBANvLPgUN
20NTuGUS0bXyNBtvuypKWdENi0hC/a0/7UOgOYXFudbZwV+n2xGiwmUY8WAidydS
/TaIVxoJBvqKnVPC5R+/qsVDkDGqd4/hBeqXFHJkOSHmLJJvyB+1UbK6bnu1W1bP
3JwECd5z1E05jJjUIawdOZ0iHJO86CDS+Tcw7F6ah6anrweHA7EkWykJaTOiVjwJ
w0I4C0ohITqKu7+F34EkxbyKV3HDgXQThUFL6ucoFbrQc1iTIFaOfhpEkJT4yp67
u92YX1lpyyf6HdBIXWRoZ1ZyjyOX5uTFF8g/yIjjRni0epIgPs89QvH6vPE5kIpb
Y9Pdd17tNDBGS1g=
-----END CERTIFICATE-----
Generated at Mon Jun 9 04:56:24 2025 by rpki-client