Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDAFCGMGsgru1eyDkey3pHdCXKYc32Uwy1Twq7vAiska/3/3138392e3132362e38302e302f32322d3234203d3e20323730363332.roa
File:                     3138392e3132362e38302e302f32322d3234203d3e20323730363332.roa (raw, json)
Hash identifier:          wSVlZD7TRvYj5ZiWjJMHNIeVYl5jW2Q4Z+RlQTCtaj0=
Subject key identifier:   01:AA:A2:88:A6:BB:E3:1C:92:80:D0:ED:45:54:D1:E2:F9:EC:CE:96
Certificate issuer:       /CN=EB2C362543491CC1147C06C78106957C5F504A23
Certificate serial:       1CE08901583A9B1B3E45BDD600B78325BB00FE65
Authority key identifier: EB:2C:36:25:43:49:1C:C1:14:7C:06:C7:81:06:95:7C:5F:50:4A:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB2C362543491CC1147C06C78106957C5F504A23.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDAFCGMGsgru1eyDkey3pHdCXKYc32Uwy1Twq7vAiska/3/3138392e3132362e38302e302f32322d3234203d3e20323730363332.roa
Signing time:             Wed 05 Mar 2025 19:00:05 +0000
ROA not before:           Wed 05 Mar 2025 18:55:05 +0000
ROA not after:            Wed 04 Mar 2026 19:00:05 +0000
asID:                     270632
IP address blocks:        189.126.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JDAFCGMGsgru1eyDkey3pHdCXKYc32Uwy1Twq7vAiska/3/EB2C362543491CC1147C06C78106957C5F504A23.crl
                          rsync://rpki-repo.registro.br/repo/JDAFCGMGsgru1eyDkey3pHdCXKYc32Uwy1Twq7vAiska/3/EB2C362543491CC1147C06C78106957C5F504A23.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB2C362543491CC1147C06C78106957C5F504A23.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 03:40:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:e0:89:01:58:3a:9b:1b:3e:45:bd:d6:00:b7:83:25:bb:00:fe:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB2C362543491CC1147C06C78106957C5F504A23
        Validity
            Not Before: Mar  5 18:55:05 2025 GMT
            Not After : Mar  4 19:00:05 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:41:1d:eb:a1:ea:b0:db:46:7b:ec:c8:7c:64:
                    31:7f:76:cf:52:08:26:d5:c7:8e:7d:70:bf:fc:ea:
                    a7:87:93:22:27:cc:81:30:ef:31:db:dd:76:f6:be:
                    77:74:c4:eb:86:58:92:0e:99:78:19:52:d1:6e:7c:
                    24:bf:2e:ba:4d:8f:88:eb:6c:62:b2:ca:4f:d5:27:
                    2b:8a:bf:c8:c4:4f:32:5e:66:d5:0e:db:de:4c:c7:
                    cf:41:c4:6f:1a:d5:40:de:0a:28:50:40:fc:8d:ac:
                    34:0b:74:05:cf:0d:eb:36:35:12:2d:04:8e:47:0d:
                    a3:b1:26:31:c2:24:68:c8:e9:83:2b:ad:2a:41:74:
                    28:f9:fa:80:03:86:d1:44:58:d4:17:05:45:00:08:
                    b3:2d:ba:73:bf:69:a6:d3:07:0c:b2:df:30:23:ce:
                    83:94:3b:4c:aa:d4:c8:12:43:92:b8:e6:7f:d2:7f:
                    ad:73:b0:32:05:f8:80:63:05:bb:97:8d:48:1e:d9:
                    89:f3:1a:d3:5c:13:93:be:c2:a5:95:86:9b:3f:6d:
                    5d:7f:0a:97:2e:30:14:aa:c2:9d:30:3f:03:ad:4d:
                    e7:e8:35:c4:63:cc:73:fb:9e:34:7f:f4:ea:59:47:
                    51:1f:a6:07:e7:02:f8:9c:4c:d1:5f:aa:02:63:5b:
                    90:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:AA:A2:88:A6:BB:E3:1C:92:80:D0:ED:45:54:D1:E2:F9:EC:CE:96
            X509v3 Authority Key Identifier:
                keyid:EB:2C:36:25:43:49:1C:C1:14:7C:06:C7:81:06:95:7C:5F:50:4A:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDAFCGMGsgru1eyDkey3pHdCXKYc32Uwy1Twq7vAiska/3/EB2C362543491CC1147C06C78106957C5F504A23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB2C362543491CC1147C06C78106957C5F504A23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDAFCGMGsgru1eyDkey3pHdCXKYc32Uwy1Twq7vAiska/3/3138392e3132362e38302e302f32322d3234203d3e20323730363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:64:66:8f:52:83:50:8e:b5:2e:e8:2d:b4:f0:60:cd:6c:65:
         2b:83:39:04:a0:34:50:9d:f4:0d:9a:69:92:50:3d:39:b8:16:
         fd:a6:50:e3:fc:78:4e:b4:59:e0:5e:65:9c:5a:38:6e:5b:c5:
         66:12:57:43:f8:89:16:ae:60:57:c0:a4:7f:21:ff:74:99:6b:
         94:00:97:c9:3e:57:f8:80:e0:52:62:7b:fd:70:c9:1e:39:3c:
         46:13:a4:76:e0:84:68:37:e0:00:d1:a0:d0:e1:be:1a:84:e6:
         60:c4:e9:4d:0b:84:3b:8b:80:93:c0:8a:e7:a8:ef:5c:54:85:
         bd:dc:12:74:ef:cb:78:7d:18:1c:ae:86:b3:3e:a0:31:29:ea:
         68:39:cd:ec:8b:82:0f:db:ca:80:6c:ee:83:2e:be:42:53:a9:
         e7:61:3b:70:e3:fb:f5:92:b9:bd:45:45:46:f9:c1:f7:99:2c:
         ab:75:d3:94:43:f5:13:a8:17:f8:bc:b6:17:74:1d:27:5b:e6:
         82:67:40:6b:06:a6:86:00:66:68:9e:8c:5d:58:d5:60:d3:57:
         6b:02:ae:e0:1b:ee:2e:c8:75:91:99:73:57:27:83:f6:ba:f4:
         dd:75:1a:65:0c:d3:27:f5:fc:4b:38:dc:12:dc:9a:e3:69:33:
         11:49:de:c5
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUHOCJAVg6mxs+Rb3WALeDJbsA/mUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUIyQzM2MjU0MzQ5MUNDMTE0N0MwNkM3ODEwNjk1N0M1
RjUwNEEyMzAeFw0yNTAzMDUxODU1MDVaFw0yNjAzMDQxOTAwMDVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkE0MTFERUJBMUVBQjBEQjQ2
N0JFQ0M4N0M2NDMxN0Y3NkNGNTIwODI2RDVDNzhFN0Q3MEJGRkNFQUE3ODc5MzIy
MjdDQzgxMzBFRjMxREJERDc2RjZCRTc3NzRDNEVCODY1ODkyMEU5OTc4MTk1MkQx
NkU3QzI0QkYyRUJBNEQ4Rjg4RUI2QzYyQjJDQTRGRDUyNzJCOEFCRkM4QzQ0RjMy
NUU2NkQ1MEVEQkRFNENDN0NGNDFDNDZGMUFENTQwREUwQTI4NTA0MEZDOERBQzM0
MEI3NDA1Q0YwREVCMzYzNTEyMkQwNDhFNDcwREEzQjEyNjMxQzIyNDY4QzhFOTgz
MkJBRDJBNDE3NDI4RjlGQTgwMDM4NkQxNDQ1OEQ0MTcwNTQ1MDAwOEIzMkRCQTcz
QkY2OUE2RDMwNzBDQjJERjMwMjNDRTgzOTQzQjRDQUFENEM4MTI0MzkyQjhFNjdG
RDI3RkFENzNCMDMyMDVGODgwNjMwNUJCOTc4RDQ4MUVEOTg5RjMxQUQzNUMxMzkz
QkVDMkE1OTU4NjlCM0Y2RDVEN0YwQTk3MkUzMDE0QUFDMjlEMzAzRjAzQUQ0REU3
RTgzNUM0NjNDQzczRkI5RTM0N0ZGNEVBNTk0NzUxMUZBNjA3RTcwMkY4OUM0Q0Qx
NUZBQTAyNjM1QjkwQ0IwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAukEd66HqsNtGe+zIfGQxf3bPUggm1ceOfXC//Oqnh5MiJ8yBMO8x
29129r53dMTrhliSDpl4GVLRbnwkvy66TY+I62xisspP1Scrir/IxE8yXmbVDtve
TMfPQcRvGtVA3gooUED8jaw0C3QFzw3rNjUSLQSORw2jsSYxwiRoyOmDK60qQXQo
+fqAA4bRRFjUFwVFAAizLbpzv2mm0wcMst8wI86DlDtMqtTIEkOSuOZ/0n+tc7Ay
BfiAYwW7l41IHtmJ8xrTXBOTvsKllYabP21dfwqXLjAUqsKdMD8DrU3n6DXEY8xz
+540f/TqWUdRH6YH5wL4nEzRX6oCY1uQywIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FAGqooimu+MckoDQ7UVU0eL57M6WMB8GA1UdIwQYMBaAFOssNiVDSRzBFHwGx4EG
lXxfUEojMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0pEQUZDR01Hc2dydTFl
eURrZXkzcEhkQ1hLWWMzMlV3eTFUd3E3dkFpc2thLzMvRUIyQzM2MjU0MzQ5MUND
MTE0N0MwNkM3ODEwNjk1N0M1RjUwNEEyMy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9FQjJDMzYyNTQzNDkxQ0MxMTQ3QzA2Qzc4MTA2OTU3QzVGNTA0
QTIzLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9KREFGQ0dNR3NncnUxZXlEa2V5
M3BIZENYS1ljMzJVd3kxVHdxN3ZBaXNrYS8zLzMxMzgzOTJlMzEzMjM2MmUzODMw
MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNzMwMzYzMzMyLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
vX5QMA0GCSqGSIb3DQEBCwUAA4IBAQCdZGaPUoNQjrUu6C208GDNbGUrgzkEoDRQ
nfQNmmmSUD05uBb9plDj/HhOtFngXmWcWjhuW8VmEldD+IkWrmBXwKR/If90mWuU
AJfJPlf4gOBSYnv9cMkeOTxGE6R24IRoN+AA0aDQ4b4ahOZgxOlNC4Q7i4CTwIrn
qO9cVIW93BJ078t4fRgcroazPqAxKepoOc3si4IP28qAbO6DLr5CU6nnYTtw4/v1
krm9RUVG+cH3mSyrddOUQ/UTqBf4vLYXdB0nW+aCZ0BrBqaGAGZonoxdWNVg01dr
Aq7gG+4uyHWRmXNXJ4P2uvTddRplDNMn9fxLONwS3JrjaTMRSd7F
-----END CERTIFICATE-----
Generated at Tue Apr 22 14:22:59 2025 by rpki-client