Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/odX2xJL2T7Eh3ptkU4v3LinCDUhzKT2xyFgeWPBrshS/1/3133312e3130382e3132382e302f32322d3234203d3e20323634333534.roa
File:                     3133312e3130382e3132382e302f32322d3234203d3e20323634333534.roa (raw, json)
Hash identifier:          CWhLjy2BUsQhohvVV10YgDUmAcI9UwT6x3hS2g96DFo=
Subject key identifier:   9B:49:9C:33:74:85:9F:26:21:7A:84:90:0C:4C:0E:FE:21:32:81:CE
Certificate issuer:       /CN=3701790BFCD740698BF2D59FB7800495728B1041
Certificate serial:       19E342E89AAB42D50BB674D0DF2578402781AED1
Authority key identifier: 37:01:79:0B:FC:D7:40:69:8B:F2:D5:9F:B7:80:04:95:72:8B:10:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3701790BFCD740698BF2D59FB7800495728B1041.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/odX2xJL2T7Eh3ptkU4v3LinCDUhzKT2xyFgeWPBrshS/1/3133312e3130382e3132382e302f32322d3234203d3e20323634333534.roa
Signing time:             Thu 06 Mar 2025 05:55:24 +0000
ROA not before:           Thu 06 Mar 2025 05:50:24 +0000
ROA not after:            Thu 05 Mar 2026 05:55:24 +0000
asID:                     264354
IP address blocks:        131.108.128.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/odX2xJL2T7Eh3ptkU4v3LinCDUhzKT2xyFgeWPBrshS/1/3701790BFCD740698BF2D59FB7800495728B1041.crl
                          rsync://rpki-repo.registro.br/repo/odX2xJL2T7Eh3ptkU4v3LinCDUhzKT2xyFgeWPBrshS/1/3701790BFCD740698BF2D59FB7800495728B1041.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3701790BFCD740698BF2D59FB7800495728B1041.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 16:10:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:e3:42:e8:9a:ab:42:d5:0b:b6:74:d0:df:25:78:40:27:81:ae:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3701790BFCD740698BF2D59FB7800495728B1041
        Validity
            Not Before: Mar  6 05:50:24 2025 GMT
            Not After : Mar  5 05:55:24 2026 GMT
        Subject: CN=9B499C3374859F26217A84900C4C0EFE213281CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:cb:0b:cf:9b:93:ed:ec:5e:eb:b8:80:e7:98:
                    e9:6e:95:29:a5:88:cc:f8:d6:ff:cf:66:e2:c7:7a:
                    ec:b5:8d:e5:79:16:7f:d2:ab:bb:c1:fb:5c:cd:cf:
                    c4:f6:0e:db:7d:0d:13:ea:11:5c:af:eb:ff:24:55:
                    f7:10:cb:70:f0:5b:43:21:55:dd:26:dc:81:e1:d3:
                    41:08:eb:e7:08:d6:84:08:c1:09:26:e5:0f:79:d9:
                    c2:4a:9f:60:09:d8:d0:0a:8f:c8:04:89:c2:97:95:
                    88:41:02:8a:f3:cb:4e:ea:c5:a4:7b:9b:67:63:81:
                    5e:c7:a2:32:99:d6:01:eb:29:f6:9a:e6:ab:c8:e9:
                    12:26:a3:d4:d0:75:bf:e2:50:5f:52:36:26:0c:7c:
                    07:5d:6d:85:63:2a:53:f0:90:da:b5:5b:c4:98:8d:
                    e2:49:6b:39:48:77:db:11:ad:a4:7e:4b:c5:c9:27:
                    9e:23:ba:52:35:96:9d:3e:b2:c5:99:d6:68:89:91:
                    e3:1c:88:c4:e2:0f:97:b6:85:c3:6c:2f:38:1b:8f:
                    3a:65:9c:7b:79:0c:58:53:8c:2d:d0:bd:cd:48:00:
                    bd:d0:b4:4f:bb:d4:2f:4f:cc:00:5f:0e:20:3f:ab:
                    25:04:f3:d1:ee:7f:9d:14:5b:50:a6:10:72:5b:c9:
                    17:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:49:9C:33:74:85:9F:26:21:7A:84:90:0C:4C:0E:FE:21:32:81:CE
            X509v3 Authority Key Identifier:
                keyid:37:01:79:0B:FC:D7:40:69:8B:F2:D5:9F:B7:80:04:95:72:8B:10:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/odX2xJL2T7Eh3ptkU4v3LinCDUhzKT2xyFgeWPBrshS/1/3701790BFCD740698BF2D59FB7800495728B1041.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3701790BFCD740698BF2D59FB7800495728B1041.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/odX2xJL2T7Eh3ptkU4v3LinCDUhzKT2xyFgeWPBrshS/1/3133312e3130382e3132382e302f32322d3234203d3e20323634333534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:47:6a:b2:46:5c:6d:51:a7:03:73:23:35:10:b1:eb:cc:f8:
         99:bf:95:45:4d:00:d8:72:ca:fc:bc:c7:6e:bd:c9:94:63:f9:
         e5:bf:f8:0a:e5:5c:1d:7e:fe:8b:62:ff:fe:26:22:01:78:2b:
         50:95:9c:c1:7b:15:24:df:2d:1c:5b:7e:13:b7:7e:6a:9b:49:
         e5:26:4d:d5:62:c7:82:d5:d0:ad:b7:bf:de:cb:36:31:e1:75:
         35:3a:b9:94:05:27:6a:2a:dc:0a:5a:9a:08:18:a2:5a:91:b3:
         e7:ce:34:f5:b3:59:7a:99:07:12:1c:42:b2:25:d0:ad:3d:0b:
         e6:ba:63:8a:2c:43:bb:91:a7:27:72:20:6d:6e:34:90:99:98:
         a5:b9:13:c2:13:e5:4b:01:9e:b7:97:b1:75:08:e6:d5:65:4d:
         22:33:fb:8a:54:ad:eb:7f:77:d0:35:47:a0:49:0c:02:6e:6a:
         a6:c3:4d:4e:a8:d6:fa:b4:11:f2:47:41:13:68:c6:49:5d:53:
         38:d9:1c:02:97:f2:f2:23:a8:86:a9:80:ea:de:01:cb:e0:e4:
         b0:41:01:b5:68:6a:0c:96:36:ba:2b:2d:a7:3e:8b:f3:e6:0e:
         0c:dd:62:61:20:cd:f0:3e:b7:8b:60:d3:12:cc:6a:02:8a:88:
         91:fb:d9:fa
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUGeNC6JqrQtULtnTQ3yV4QCeBrtEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzcwMTc5MEJGQ0Q3NDA2OThCRjJENTlGQjc4MDA0OTU3
MjhCMTA0MTAeFw0yNTAzMDYwNTUwMjRaFw0yNjAzMDUwNTU1MjRaMDMxMTAvBgNV
BAMTKDlCNDk5QzMzNzQ4NTlGMjYyMTdBODQ5MDBDNEMwRUZFMjEzMjgxQ0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1ywvPm5Pt7F7ruIDnmOlulSml
iMz41v/PZuLHeuy1jeV5Fn/Sq7vB+1zNz8T2Dtt9DRPqEVyv6/8kVfcQy3DwW0Mh
Vd0m3IHh00EI6+cI1oQIwQkm5Q952cJKn2AJ2NAKj8gEicKXlYhBAorzy07qxaR7
m2djgV7HojKZ1gHrKfaa5qvI6RImo9TQdb/iUF9SNiYMfAddbYVjKlPwkNq1W8SY
jeJJazlId9sRraR+S8XJJ54julI1lp0+ssWZ1miJkeMciMTiD5e2hcNsLzgbjzpl
nHt5DFhTjC3Qvc1IAL3QtE+71C9PzABfDiA/qyUE89Huf50UW1CmEHJbyRfjAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUm0mcM3SFnyYheoSQDEwO/iEygc4wHwYDVR0j
BBgwFoAUNwF5C/zXQGmL8tWft4AElXKLEEEwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9vZFgyeEpMMlQ3RWgzcHRrVTR2M0xpbkNEVWh6S1QyeHlGZ2VXUEJyc2hT
LzEvMzcwMTc5MEJGQ0Q3NDA2OThCRjJENTlGQjc4MDA0OTU3MjhCMTA0MS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8zNzAxNzkwQkZDRDc0MDY5OEJG
MkQ1OUZCNzgwMDQ5NTcyOEIxMDQxLmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9v
ZFgyeEpMMlQ3RWgzcHRrVTR2M0xpbkNEVWh6S1QyeHlGZ2VXUEJyc2hTLzEvMzEz
MzMxMmUzMTMwMzgyZTMxMzIzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYz
NDMzMzUzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAoNsgDANBgkqhkiG9w0BAQsFAAOCAQEAMEdqskZc
bVGnA3MjNRCx68z4mb+VRU0A2HLK/LzHbr3JlGP55b/4CuVcHX7+i2L//iYiAXgr
UJWcwXsVJN8tHFt+E7d+aptJ5SZN1WLHgtXQrbe/3ss2MeF1NTq5lAUnaircClqa
CBiiWpGz58409bNZepkHEhxCsiXQrT0L5rpjiixDu5GnJ3IgbW40kJmYpbkTwhPl
SwGet5exdQjm1WVNIjP7ilSt63930DVHoEkMAm5qpsNNTqjW+rQR8kdBE2jGSV1T
ONkcApfy8iOohqmA6t4By+DksEEBtWhqDJY2uistpz6L8+YODN1iYSDN8D63i2DT
EsxqAoqIkfvZ+g==
-----END CERTIFICATE-----
Generated at Sun Apr 13 01:19:54 2025 by rpki-client