Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/snFV25XvGkaJxiuUEY188QhAXiw1KPoveBPm89bsVw1/1/3138392e38352e3131322e302f32322d3234203d3e20323730353430.roa
File:                     3138392e38352e3131322e302f32322d3234203d3e20323730353430.roa (raw, json)
Hash identifier:          d853V50YeX83TOqLUq2RpfXW218Xdw80PLNkvro/kxE=
Subject key identifier:   57:12:6A:7D:11:22:1A:2A:FD:3C:B0:B2:4B:45:F1:71:21:A0:A0:13
Certificate issuer:       /CN=73E65EE174B429E845F371CDDD00B81BC489A017
Certificate serial:       309F10A5CAD69DE9E57556DDF66C44122DFDD59B
Authority key identifier: 73:E6:5E:E1:74:B4:29:E8:45:F3:71:CD:DD:00:B8:1B:C4:89:A0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73E65EE174B429E845F371CDDD00B81BC489A017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/snFV25XvGkaJxiuUEY188QhAXiw1KPoveBPm89bsVw1/1/3138392e38352e3131322e302f32322d3234203d3e20323730353430.roa
Signing time:             Wed 05 Mar 2025 19:00:05 +0000
ROA not before:           Wed 05 Mar 2025 18:55:05 +0000
ROA not after:            Wed 04 Mar 2026 19:00:05 +0000
asID:                     270540
IP address blocks:        189.85.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/snFV25XvGkaJxiuUEY188QhAXiw1KPoveBPm89bsVw1/1/73E65EE174B429E845F371CDDD00B81BC489A017.crl
                          rsync://rpki-repo.registro.br/repo/snFV25XvGkaJxiuUEY188QhAXiw1KPoveBPm89bsVw1/1/73E65EE174B429E845F371CDDD00B81BC489A017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73E65EE174B429E845F371CDDD00B81BC489A017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 19:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:9f:10:a5:ca:d6:9d:e9:e5:75:56:dd:f6:6c:44:12:2d:fd:d5:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73E65EE174B429E845F371CDDD00B81BC489A017
        Validity
            Not Before: Mar  5 18:55:05 2025 GMT
            Not After : Mar  4 19:00:05 2026 GMT
        Subject: CN=3082010A0282010100C5CB0D61F6908CD30EE5DA60114C7867647090721F7220F0BB53F325E875BDF1FD6283D2636DE974F5E847EFA2775A90B2A44E5D6413AB93CAD1820D5DF3CDF6D8D7F189828CC36905D22C00F89A355A2274CC2F78B9E5DB286E3CCD45CC1B40E54124CC65040CDCC470A0D99C502B9DFD5347CED89A65F6738EFE38A2AA3D1C6168F71ADE4E7E1C5AC06F0DAEB702D49E588CB912BB9222E1439AE878272AB3B3D4B39E70A9C0DD5C4F8A6D7C595D4F52CA30FDA6E76667959013D619E0986B609C28812AAB27302E7A747FB843C34B9378F8F4300C6145DF075F93AAF34D08817F33436CF30F31EBD17F465190A94076A73DC14B8435A861A4B84B0A989EB50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:cb:0d:61:f6:90:8c:d3:0e:e5:da:60:11:4c:
                    78:67:64:70:90:72:1f:72:20:f0:bb:53:f3:25:e8:
                    75:bd:f1:fd:62:83:d2:63:6d:e9:74:f5:e8:47:ef:
                    a2:77:5a:90:b2:a4:4e:5d:64:13:ab:93:ca:d1:82:
                    0d:5d:f3:cd:f6:d8:d7:f1:89:82:8c:c3:69:05:d2:
                    2c:00:f8:9a:35:5a:22:74:cc:2f:78:b9:e5:db:28:
                    6e:3c:cd:45:cc:1b:40:e5:41:24:cc:65:04:0c:dc:
                    c4:70:a0:d9:9c:50:2b:9d:fd:53:47:ce:d8:9a:65:
                    f6:73:8e:fe:38:a2:aa:3d:1c:61:68:f7:1a:de:4e:
                    7e:1c:5a:c0:6f:0d:ae:b7:02:d4:9e:58:8c:b9:12:
                    bb:92:22:e1:43:9a:e8:78:27:2a:b3:b3:d4:b3:9e:
                    70:a9:c0:dd:5c:4f:8a:6d:7c:59:5d:4f:52:ca:30:
                    fd:a6:e7:66:67:95:90:13:d6:19:e0:98:6b:60:9c:
                    28:81:2a:ab:27:30:2e:7a:74:7f:b8:43:c3:4b:93:
                    78:f8:f4:30:0c:61:45:df:07:5f:93:aa:f3:4d:08:
                    81:7f:33:43:6c:f3:0f:31:eb:d1:7f:46:51:90:a9:
                    40:76:a7:3d:c1:4b:84:35:a8:61:a4:b8:4b:0a:98:
                    9e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:12:6A:7D:11:22:1A:2A:FD:3C:B0:B2:4B:45:F1:71:21:A0:A0:13
            X509v3 Authority Key Identifier:
                keyid:73:E6:5E:E1:74:B4:29:E8:45:F3:71:CD:DD:00:B8:1B:C4:89:A0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/snFV25XvGkaJxiuUEY188QhAXiw1KPoveBPm89bsVw1/1/73E65EE174B429E845F371CDDD00B81BC489A017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73E65EE174B429E845F371CDDD00B81BC489A017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/snFV25XvGkaJxiuUEY188QhAXiw1KPoveBPm89bsVw1/1/3138392e38352e3131322e302f32322d3234203d3e20323730353430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.85.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:e2:e5:2b:39:f3:84:58:a7:e2:1e:a1:43:53:f2:c7:76:69:
         86:85:f1:77:7d:e4:f7:6a:ac:ca:12:a4:09:eb:74:68:82:63:
         10:2e:cc:8e:ef:8a:e1:91:f6:d4:51:64:e1:ca:52:54:bf:2a:
         65:7a:c4:21:14:b1:fe:51:dc:a1:09:3a:10:d3:3d:c9:84:db:
         2c:a5:85:49:34:f9:7f:9d:4a:72:f1:4d:88:b5:74:d3:8f:c2:
         8d:73:b6:3c:28:5e:12:c5:39:b2:b4:35:89:2a:4b:51:39:a3:
         88:34:52:bf:8a:7c:b7:ba:f7:38:f8:e2:a5:3f:ac:ff:af:36:
         2d:97:f5:ba:a2:34:80:40:dc:fe:d0:01:dc:55:eb:38:f4:22:
         63:e5:0c:97:b9:a9:bd:63:0d:23:88:be:3b:43:cd:f7:93:8b:
         eb:f2:e1:fb:c5:c2:12:28:c7:30:06:39:29:77:21:ff:bf:43:
         f2:a0:7f:1b:fb:dc:53:24:3d:8c:e0:62:c5:ae:eb:3e:75:56:
         41:ab:00:70:a1:87:0c:72:db:fc:49:7e:73:db:7f:f2:81:97:
         0b:a3:f2:4c:ac:b9:3b:87:f8:aa:c3:ab:9f:57:74:ca:2b:48:
         51:91:aa:cc:80:ad:62:d4:7d:fa:2f:e3:db:b2:3a:96:81:2c:
         30:9d:38:a2
-----BEGIN CERTIFICATE-----
MIIHQDCCBiigAwIBAgIUMJ8QpcrWnenldVbd9mxEEi391ZswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzNFNjVFRTE3NEI0MjlFODQ1RjM3MUNEREQwMEI4MUJD
NDg5QTAxNzAeFw0yNTAzMDUxODU1MDVaFw0yNjAzMDQxOTAwMDVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzVDQjBENjFGNjkwOENEMzBF
RTVEQTYwMTE0Qzc4Njc2NDcwOTA3MjFGNzIyMEYwQkI1M0YzMjVFODc1QkRGMUZE
NjI4M0QyNjM2REU5NzRGNUU4NDdFRkEyNzc1QTkwQjJBNDRFNUQ2NDEzQUI5M0NB
RDE4MjBENURGM0NERjZEOEQ3RjE4OTgyOENDMzY5MDVEMjJDMDBGODlBMzU1QTIy
NzRDQzJGNzhCOUU1REIyODZFM0NDRDQ1Q0MxQjQwRTU0MTI0Q0M2NTA0MENEQ0M0
NzBBMEQ5OUM1MDJCOURGRDUzNDdDRUQ4OUE2NUY2NzM4RUZFMzhBMkFBM0QxQzYx
NjhGNzFBREU0RTdFMUM1QUMwNkYwREFFQjcwMkQ0OUU1ODhDQjkxMkJCOTIyMkUx
NDM5QUU4NzgyNzJBQjNCM0Q0QjM5RTcwQTlDMERENUM0RjhBNkQ3QzU5NUQ0RjUy
Q0EzMEZEQTZFNzY2Njc5NTkwMTNENjE5RTA5ODZCNjA5QzI4ODEyQUFCMjczMDJF
N0E3NDdGQjg0M0MzNEI5Mzc4RjhGNDMwMEM2MTQ1REYwNzVGOTNBQUYzNEQwODgx
N0YzMzQzNkNGMzBGMzFFQkQxN0Y0NjUxOTBBOTQwNzZBNzNEQzE0Qjg0MzVBODYx
QTRCODRCMEE5ODlFQjUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAxcsNYfaQjNMO5dpgEUx4Z2RwkHIfciDwu1PzJeh1vfH9YoPSY23p
dPXoR++id1qQsqROXWQTq5PK0YINXfPN9tjX8YmCjMNpBdIsAPiaNVoidMwveLnl
2yhuPM1FzBtA5UEkzGUEDNzEcKDZnFArnf1TR87YmmX2c47+OKKqPRxhaPca3k5+
HFrAbw2utwLUnliMuRK7kiLhQ5roeCcqs7PUs55wqcDdXE+KbXxZXU9SyjD9pudm
Z5WQE9YZ4JhrYJwogSqrJzAuenR/uEPDS5N4+PQwDGFF3wdfk6rzTQiBfzNDbPMP
MevRf0ZRkKlAdqc9wUuENahhpLhLCpietQIDAQABo4ICTjCCAkowHQYDVR0OBBYE
FFcSan0RIhoq/TywsktF8XEhoKATMB8GA1UdIwQYMBaAFHPmXuF0tCnoRfNxzd0A
uBvEiaAXMA4GA1UdDwEB/wQEAwIHgDCBkgYDVR0fBIGKMIGHMIGEoIGBoH+GfXJz
eW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vc25GVjI1WHZHa2FKeGl1
VUVZMTg4UWhBWGl3MUtQb3ZlQlBtODlic1Z3MS8xLzczRTY1RUUxNzRCNDI5RTg0
NUYzNzFDREREMDBCODFCQzQ4OUEwMTcuY3JsMHgGCCsGAQUFBwEBBGwwajBoBggr
BgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9uaWNi
cl9yZXBvLzEvNzNFNjVFRTE3NEI0MjlFODQ1RjM3MUNEREQwMEI4MUJDNDg5QTAx
Ny5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5jOi8v
cnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vc25GVjI1WHZHa2FKeGl1VUVZMTg4
UWhBWGl3MUtQb3ZlQlBtODlic1Z3MS8xLzMxMzgzOTJlMzgzNTJlMzEzMTMyMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNzMwMzUzNDMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCvVVw
MA0GCSqGSIb3DQEBCwUAA4IBAQCr4uUrOfOEWKfiHqFDU/LHdmmGhfF3feT3aqzK
EqQJ63RogmMQLsyO74rhkfbUUWThylJUvyplesQhFLH+UdyhCToQ0z3JhNsspYVJ
NPl/nUpy8U2ItXTTj8KNc7Y8KF4SxTmytDWJKktROaOINFK/iny3uvc4+OKlP6z/
rzYtl/W6ojSAQNz+0AHcVes49CJj5QyXuam9Yw0jiL47Q833k4vr8uH7xcISKMcw
BjkpdyH/v0PyoH8b+9xTJD2M4GLFrus+dVZBqwBwoYcMctv8SX5z23/ygZcLo/JM
rLk7h/iqw6ufV3TKK0hRkarMgK1i1H36L+PbsjqWgSwwnTii
-----END CERTIFICATE-----
Generated at Sun Apr 6 23:37:57 2025 by rpki-client