Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3139302e3138302e3133302e302f32342d3234203d3e203532393330.roa
File:                     3139302e3138302e3133302e302f32342d3234203d3e203532393330.roa (raw, json)
Hash identifier:          vy1uVgRKMVvaWhjif3VCruZfTd9JcgjsTGkkVlLbctA=
Subject key identifier:   49:56:F7:88:15:81:3C:A9:51:FB:FE:EA:33:E3:CE:52:6D:B1:30:FF
Certificate issuer:       /CN=B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD
Certificate serial:       149E87122EA61935B58B7C5A5A1D2978D90954DB
Authority key identifier: B0:F9:F7:5E:2F:F2:19:B2:BD:D6:25:EB:BC:29:4A:98:9B:AB:0E:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3139302e3138302e3133302e302f32342d3234203d3e203532393330.roa
Signing time:             Fri 17 Jan 2025 16:16:52 +0000
ROA not before:           Fri 17 Jan 2025 16:11:52 +0000
ROA not after:            Fri 16 Jan 2026 16:16:52 +0000
asID:                     52930
IP address blocks:        190.180.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.crl
                          rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 20:49:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:9e:87:12:2e:a6:19:35:b5:8b:7c:5a:5a:1d:29:78:d9:09:54:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD
        Validity
            Not Before: Jan 17 16:11:52 2025 GMT
            Not After : Jan 16 16:16:52 2026 GMT
        Subject: CN=4956F78815813CA951FBFEEA33E3CE526DB130FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:97:83:36:be:cb:80:95:46:a9:bf:1b:53:37:
                    07:a8:2e:b4:ef:e2:89:3c:c1:36:4c:c9:e9:32:15:
                    9e:ef:96:b6:c5:fd:9f:5b:f2:f7:da:e0:97:df:50:
                    09:b8:84:dd:4b:ee:8a:23:51:96:6e:72:d2:bd:85:
                    e1:a9:fb:0e:14:92:ee:c3:80:2f:86:cd:7c:3c:7e:
                    d6:cf:60:c4:12:a6:d6:af:6a:7b:67:52:69:71:05:
                    b1:1c:a3:e2:b2:df:84:0d:53:28:fe:ef:f4:91:49:
                    71:f4:c4:d7:9e:b1:32:b5:eb:8e:b2:e8:86:05:bf:
                    a8:9b:3e:06:70:18:4b:76:bc:8c:38:cb:10:40:b0:
                    2a:aa:12:6a:3c:f8:4a:7e:80:4f:0b:ca:52:37:17:
                    06:81:9b:17:0c:38:cc:1d:63:fe:c3:10:b7:1a:85:
                    9d:d5:56:d1:09:19:3d:4c:a1:e8:3a:c4:b8:11:b4:
                    56:92:c8:64:23:41:dd:ed:19:c5:04:58:68:ad:5a:
                    7b:61:31:66:3d:30:d1:14:03:75:22:b8:05:ff:9a:
                    fd:20:4f:82:f0:ef:d9:96:35:9f:77:24:b2:d2:1b:
                    c6:1d:33:a4:92:fc:fd:32:e4:79:28:56:df:23:ea:
                    44:d5:f5:7b:b6:43:54:25:3a:e4:5c:d8:e2:c2:f4:
                    18:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:56:F7:88:15:81:3C:A9:51:FB:FE:EA:33:E3:CE:52:6D:B1:30:FF
            X509v3 Authority Key Identifier:
                keyid:B0:F9:F7:5E:2F:F2:19:B2:BD:D6:25:EB:BC:29:4A:98:9B:AB:0E:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3139302e3138302e3133302e302f32342d3234203d3e203532393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.180.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:41:02:64:33:05:84:d0:bf:dc:35:83:ac:7f:0f:8f:ea:81:
         9e:de:e3:48:d5:ff:1d:82:15:73:0f:6f:bc:8d:0b:a8:93:16:
         48:ab:b4:62:29:75:a9:2b:5b:62:5b:87:65:8f:19:92:f0:00:
         a5:a7:23:b4:85:e0:ff:e7:9f:b8:4c:ab:45:ab:d5:64:c7:17:
         44:a7:38:4a:29:f7:6e:43:53:5a:33:47:fb:6c:9d:9c:e2:34:
         2f:a8:7a:15:c0:9f:2c:98:81:e0:8d:06:e9:8d:af:f5:5d:ce:
         dc:6b:7f:32:08:e8:2f:01:16:b7:22:44:73:ea:e1:b2:79:ac:
         14:16:04:6f:4d:b2:d7:af:9c:91:bd:83:a2:71:91:22:a9:90:
         ea:87:14:e3:0b:00:34:ee:fb:47:3b:cb:ec:12:7f:3a:cd:e8:
         37:cb:9c:0f:0d:3a:de:e8:76:fa:bb:82:27:97:9e:6e:40:b8:
         ce:1a:64:2c:9f:41:c3:7d:08:eb:1c:24:c2:f1:41:c3:05:26:
         1a:a2:80:95:22:b9:b7:de:bd:00:fb:0a:16:41:f1:e5:ea:bc:
         8d:2f:aa:a5:19:e0:97:23:6f:12:6d:c6:86:97:63:2f:1e:93:
         3c:56:cc:7c:c9:24:13:35:3c:46:92:33:98:86:2d:79:5f:f1:
         2c:85:11:03
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUFJ6HEi6mGTW1i3xaWh0peNkJVNswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjBGOUY3NUUyRkYyMTlCMkJERDYyNUVCQkMyOTRBOTg5
QkFCMEVCRDAeFw0yNTAxMTcxNjExNTJaFw0yNjAxMTYxNjE2NTJaMDMxMTAvBgNV
BAMTKDQ5NTZGNzg4MTU4MTNDQTk1MUZCRkVFQTMzRTNDRTUyNkRCMTMwRkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIl4M2vsuAlUapvxtTNweoLrTv
4ok8wTZMyekyFZ7vlrbF/Z9b8vfa4JffUAm4hN1L7oojUZZuctK9heGp+w4Uku7D
gC+GzXw8ftbPYMQSptavantnUmlxBbEco+Ky34QNUyj+7/SRSXH0xNeesTK1646y
6IYFv6ibPgZwGEt2vIw4yxBAsCqqEmo8+Ep+gE8LylI3FwaBmxcMOMwdY/7DELca
hZ3VVtEJGT1Moeg6xLgRtFaSyGQjQd3tGcUEWGitWnthMWY9MNEUA3UiuAX/mv0g
T4Lw79mWNZ93JLLSG8YdM6SS/P0y5HkoVt8j6kTV9Xu2Q1QlOuRc2OLC9BiZAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUSVb3iBWBPKlR+/7qM+POUm2xMP8wHwYDVR0j
BBgwFoAUsPn3Xi/yGbK91iXrvClKmJurDr0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjdEYkU5OGRQWjlDVmkyVEhDMW9FVUVzck11NWpGNU1lZm5HMTluV1R6
anIvMC9CMEY5Rjc1RTJGRjIxOUIyQkRENjI1RUJCQzI5NEE5ODlCQUIwRUJELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IwRjlGNzVFMkZGMjE5QjJC
REQ2MjVFQkJDMjk0QTk4OUJBQjBFQkQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0o3RGJFOThkUFo5Q1ZpMlRIQzFvRVVFc3JNdTVqRjVNZWZuRzE5bldUempyLzAv
MzEzOTMwMmUzMTM4MzAyZTMxMzMzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1
MzIzOTMzMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC+tIIwDQYJKoZIhvcNAQELBQADggEBACtBAmQz
BYTQv9w1g6x/D4/qgZ7e40jV/x2CFXMPb7yNC6iTFkirtGIpdakrW2Jbh2WPGZLw
AKWnI7SF4P/nn7hMq0Wr1WTHF0SnOEop925DU1ozR/tsnZziNC+oehXAnyyYgeCN
BumNr/VdztxrfzII6C8BFrciRHPq4bJ5rBQWBG9NstevnJG9g6JxkSKpkOqHFOML
ADTu+0c7y+wSfzrN6DfLnA8NOt7odvq7gieXnm5AuM4aZCyfQcN9COscJMLxQcMF
JhqigJUiubfevQD7ChZB8eXqvI0vqqUZ4JcjbxJtxoaXYy8ekzxWzHzJJBM1PEaS
M5iGLXlf8SyFEQM=
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:52 2025 by rpki-client