Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/gHpd9ZyoyCyD2NAAFezW1mXxnFigdkEycmfyoYumeAj/1/3133312e3235352e3138382e302f32322d3234203d3e20323634343937.roa
File:                     3133312e3235352e3138382e302f32322d3234203d3e20323634343937.roa (raw, json)
Hash identifier:          NST7FPVScNapmdbNPMqGqAqTA4ujcJnYPq9pwsgXGr4=
Subject key identifier:   E6:D5:3E:0D:72:33:1B:E4:28:8B:E2:DA:55:8A:3D:9B:DB:3F:37:4E
Certificate issuer:       /CN=9951F6EBAAA7813C694F3D0F966BFA8B04610665
Certificate serial:       56A90C995E3A4215EBE0BE262F1A44200A77FFC2
Authority key identifier: 99:51:F6:EB:AA:A7:81:3C:69:4F:3D:0F:96:6B:FA:8B:04:61:06:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9951F6EBAAA7813C694F3D0F966BFA8B04610665.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/gHpd9ZyoyCyD2NAAFezW1mXxnFigdkEycmfyoYumeAj/1/3133312e3235352e3138382e302f32322d3234203d3e20323634343937.roa
Signing time:             Wed 05 Mar 2025 23:55:16 +0000
ROA not before:           Wed 05 Mar 2025 23:50:16 +0000
ROA not after:            Wed 04 Mar 2026 23:55:16 +0000
asID:                     264497
IP address blocks:        131.255.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/gHpd9ZyoyCyD2NAAFezW1mXxnFigdkEycmfyoYumeAj/1/9951F6EBAAA7813C694F3D0F966BFA8B04610665.crl
                          rsync://rpki-repo.registro.br/repo/gHpd9ZyoyCyD2NAAFezW1mXxnFigdkEycmfyoYumeAj/1/9951F6EBAAA7813C694F3D0F966BFA8B04610665.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9951F6EBAAA7813C694F3D0F966BFA8B04610665.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 22:37:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:a9:0c:99:5e:3a:42:15:eb:e0:be:26:2f:1a:44:20:0a:77:ff:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9951F6EBAAA7813C694F3D0F966BFA8B04610665
        Validity
            Not Before: Mar  5 23:50:16 2025 GMT
            Not After : Mar  4 23:55:16 2026 GMT
        Subject: CN=E6D53E0D72331BE4288BE2DA558A3D9BDB3F374E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b8:8c:1a:f4:27:35:33:c7:d9:6d:6e:49:e4:
                    7f:70:96:56:6b:4e:02:62:67:37:5c:92:3c:81:6e:
                    91:10:bc:29:16:0b:b3:08:15:a4:c2:5c:f7:c7:54:
                    e0:46:7f:13:15:19:85:a3:52:6e:47:79:29:a0:24:
                    1c:f2:0c:8e:17:43:96:3a:af:45:78:fe:13:30:3c:
                    43:c1:93:78:13:7c:f6:34:0f:85:b1:0d:06:4a:27:
                    c3:f5:e4:65:0f:13:84:77:10:90:93:84:a1:15:f6:
                    40:0f:13:7f:1f:45:9f:d3:de:f5:7f:4b:0a:3b:83:
                    eb:f7:60:4f:3d:5e:ba:45:f2:a8:95:09:53:98:23:
                    9f:44:94:bf:92:37:26:8d:ed:18:6d:a1:0f:af:5d:
                    a9:9f:1b:b7:79:4a:e0:c8:63:dd:9b:ac:8e:4f:a7:
                    3e:fb:f8:5b:fc:84:cd:ff:3b:13:2f:35:dd:8a:3d:
                    33:56:d2:3f:b2:fd:4b:0a:74:71:c4:2c:34:1a:4d:
                    45:14:12:fd:7a:27:8c:08:e0:eb:5a:23:b5:96:57:
                    8a:2f:ce:ca:67:27:38:9d:c8:ed:5b:3c:58:6f:3f:
                    6f:22:de:b9:43:c3:84:ae:29:69:79:1f:00:45:42:
                    3d:1c:0c:8c:ce:d1:0e:60:73:65:3c:ec:68:16:5d:
                    77:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:D5:3E:0D:72:33:1B:E4:28:8B:E2:DA:55:8A:3D:9B:DB:3F:37:4E
            X509v3 Authority Key Identifier:
                keyid:99:51:F6:EB:AA:A7:81:3C:69:4F:3D:0F:96:6B:FA:8B:04:61:06:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/gHpd9ZyoyCyD2NAAFezW1mXxnFigdkEycmfyoYumeAj/1/9951F6EBAAA7813C694F3D0F966BFA8B04610665.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9951F6EBAAA7813C694F3D0F966BFA8B04610665.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/gHpd9ZyoyCyD2NAAFezW1mXxnFigdkEycmfyoYumeAj/1/3133312e3235352e3138382e302f32322d3234203d3e20323634343937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:93:96:c9:76:dd:c9:19:c4:2c:67:45:1a:69:3c:4c:3c:88:
         a4:5b:ae:24:6d:88:95:23:91:f5:bc:d5:2e:65:f8:65:9e:b1:
         ce:47:0a:6e:5e:71:57:23:a8:ae:6c:15:af:6d:22:fa:bc:07:
         8b:d8:2a:3c:78:cf:88:9d:e7:12:e4:d8:a9:81:e4:c6:2d:9b:
         ec:09:88:a5:2f:6a:6e:fc:ac:1f:35:26:0f:f2:eb:4e:21:d7:
         51:42:ee:8a:a3:3a:10:36:d3:da:c1:a3:47:6b:ba:a4:fa:2d:
         df:6b:5c:07:eb:21:b8:ff:58:5c:06:5c:21:00:f0:5a:ba:c5:
         71:f8:54:d4:00:15:87:bf:a5:9d:50:28:37:8f:82:35:96:4b:
         5f:2e:24:e0:5d:42:85:c9:a7:42:6d:46:bf:6e:14:c4:5c:b1:
         a7:cd:f8:d3:03:8a:bb:02:62:ed:1f:5e:fe:db:71:f7:77:dc:
         25:60:43:a3:7d:a0:dd:ff:2d:d0:a6:f7:12:e2:51:7f:24:63:
         d2:9b:e9:53:31:e3:d7:3f:42:08:20:fe:bc:10:f5:2f:bd:db:
         54:62:b2:7d:ed:aa:a2:f9:6c:85:92:34:87:4a:64:36:f6:43:
         55:9e:aa:d1:a6:e5:d7:3f:8a:22:f9:3c:d9:10:a6:9a:d8:23:
         d6:f3:05:ac
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUVqkMmV46QhXr4L4mLxpEIAp3/8IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTk1MUY2RUJBQUE3ODEzQzY5NEYzRDBGOTY2QkZBOEIw
NDYxMDY2NTAeFw0yNTAzMDUyMzUwMTZaFw0yNjAzMDQyMzU1MTZaMDMxMTAvBgNV
BAMTKEU2RDUzRTBENzIzMzFCRTQyODhCRTJEQTU1OEEzRDlCREIzRjM3NEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5uIwa9Cc1M8fZbW5J5H9wllZr
TgJiZzdckjyBbpEQvCkWC7MIFaTCXPfHVOBGfxMVGYWjUm5HeSmgJBzyDI4XQ5Y6
r0V4/hMwPEPBk3gTfPY0D4WxDQZKJ8P15GUPE4R3EJCThKEV9kAPE38fRZ/T3vV/
Swo7g+v3YE89XrpF8qiVCVOYI59ElL+SNyaN7RhtoQ+vXamfG7d5SuDIY92brI5P
pz77+Fv8hM3/OxMvNd2KPTNW0j+y/UsKdHHELDQaTUUUEv16J4wI4OtaI7WWV4ov
zspnJzidyO1bPFhvP28i3rlDw4SuKWl5HwBFQj0cDIzO0Q5gc2U87GgWXXffAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU5tU+DXIzG+Qoi+LaVYo9m9s/N04wHwYDVR0j
BBgwFoAUmVH266qngTxpTz0Plmv6iwRhBmUwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9nSHBkOVp5b3lDeUQyTkFBRmV6VzFtWHhuRmlnZGtFeWNtZnlvWXVtZUFq
LzEvOTk1MUY2RUJBQUE3ODEzQzY5NEYzRDBGOTY2QkZBOEIwNDYxMDY2NS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS85OTUxRjZFQkFBQTc4MTNDNjk0
RjNEMEY5NjZCRkE4QjA0NjEwNjY1LmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9n
SHBkOVp5b3lDeUQyTkFBRmV6VzFtWHhuRmlnZGtFeWNtZnlvWXVtZUFqLzEvMzEz
MzMxMmUzMjM1MzUyZTMxMzgzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYz
NDM0MzkzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAoP/vDANBgkqhkiG9w0BAQsFAAOCAQEAYpOWyXbd
yRnELGdFGmk8TDyIpFuuJG2IlSOR9bzVLmX4ZZ6xzkcKbl5xVyOormwVr20i+rwH
i9gqPHjPiJ3nEuTYqYHkxi2b7AmIpS9qbvysHzUmD/LrTiHXUULuiqM6EDbT2sGj
R2u6pPot32tcB+shuP9YXAZcIQDwWrrFcfhU1AAVh7+lnVAoN4+CNZZLXy4k4F1C
hcmnQm1Gv24UxFyxp8340wOKuwJi7R9e/ttx93fcJWBDo32g3f8t0Kb3EuJRfyRj
0pvpUzHj1z9CCCD+vBD1L73bVGKyfe2qovlshZI0h0pkNvZDVZ6q0abl1z+KIvk8
2RCmmtgj1vMFrA==
-----END CERTIFICATE-----
Generated at Sun Apr 13 01:43:37 2025 by rpki-client