Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/3137302e3233332e31322e302f32322d3234203d3e203532353331.roa
File:                     3137302e3233332e31322e302f32322d3234203d3e203532353331.roa (raw, json)
Hash identifier:          iJ50k0+xVPc9eH3U5tV0NdhE1mjJ410z6equ5q+wnWU=
Subject key identifier:   64:9F:89:25:84:4E:D1:0B:21:65:A1:AA:9D:C8:54:14:49:ED:4D:D8
Certificate issuer:       /CN=E6115C4B0DDF3566D87F3783DD8730497E3CCE05
Certificate serial:       64EEFDFDFF406FAFE1B0614888E871F34EEC43E6
Authority key identifier: E6:11:5C:4B:0D:DF:35:66:D8:7F:37:83:DD:87:30:49:7E:3C:CE:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/3137302e3233332e31322e302f32322d3234203d3e203532353331.roa
Signing time:             Thu 06 Mar 2025 01:43:41 +0000
ROA not before:           Thu 06 Mar 2025 01:38:41 +0000
ROA not after:            Thu 05 Mar 2026 01:43:41 +0000
asID:                     52531
IP address blocks:        170.233.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.crl
                          rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 16:28:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:ee:fd:fd:ff:40:6f:af:e1:b0:61:48:88:e8:71:f3:4e:ec:43:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6115C4B0DDF3566D87F3783DD8730497E3CCE05
        Validity
            Not Before: Mar  6 01:38:41 2025 GMT
            Not After : Mar  5 01:43:41 2026 GMT
        Subject: CN=649F8925844ED10B2165A1AA9DC8541449ED4DD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4c:40:03:83:2f:68:31:86:21:d6:52:1c:f0:
                    89:b9:77:20:45:81:5b:af:4c:76:98:da:63:0e:81:
                    ac:f0:0a:df:63:2d:04:33:3f:c1:fc:7e:76:17:79:
                    3c:6f:a9:af:5d:17:4f:f1:17:a6:2f:24:16:f9:3a:
                    15:29:f4:65:10:74:9d:62:3c:35:87:10:b4:cf:e6:
                    10:f6:bc:fa:b9:65:17:5e:8a:4d:8f:d9:dd:bd:4f:
                    0e:aa:66:1f:d9:41:36:fb:1c:fc:47:a0:df:14:c4:
                    37:8a:98:f1:d5:4a:39:69:8d:9e:f1:26:6c:81:38:
                    52:5a:e5:85:f2:cd:f7:51:a1:51:7e:c3:38:65:d0:
                    20:e2:77:b2:0d:75:c2:0b:72:05:fc:bf:8d:6a:8c:
                    16:17:ea:8a:b9:47:a2:79:ec:8b:25:0b:34:63:47:
                    0f:aa:be:e4:61:47:c6:40:a9:47:52:d9:c1:2a:0d:
                    2c:cc:0c:39:63:99:b7:02:b6:fc:a4:a7:9e:d6:6d:
                    23:23:f8:ea:b6:e4:5c:a2:3a:c8:e0:d5:62:cf:a9:
                    f0:c1:05:c3:de:fb:61:fa:f4:6d:f4:aa:ed:09:3f:
                    64:8d:f5:41:e4:74:7e:6b:09:69:49:73:ea:fd:05:
                    7c:ba:86:42:c4:29:53:b9:18:c3:85:48:5b:5a:63:
                    64:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:9F:89:25:84:4E:D1:0B:21:65:A1:AA:9D:C8:54:14:49:ED:4D:D8
            X509v3 Authority Key Identifier:
                keyid:E6:11:5C:4B:0D:DF:35:66:D8:7F:37:83:DD:87:30:49:7E:3C:CE:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/3137302e3233332e31322e302f32322d3234203d3e203532353331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:c7:9f:b8:9f:48:f2:6a:0c:87:8e:28:22:a2:2d:5c:2b:a6:
         77:63:7f:e2:3c:89:e3:2c:87:c3:65:73:16:ac:a4:75:54:c7:
         7f:f8:03:03:6d:17:fe:3c:ff:ed:f2:59:bd:40:8c:b7:9d:5f:
         49:ee:ed:3e:13:30:ec:5d:6e:d3:97:22:6f:d4:60:74:54:51:
         e9:57:df:f0:bb:79:ef:81:6d:36:aa:09:a0:2e:19:a3:1d:8d:
         59:15:90:12:fd:0a:cf:96:91:67:d7:d6:3b:6e:1e:38:06:61:
         58:83:7b:86:ae:13:6d:c3:03:18:68:c6:7b:1c:45:5a:76:34:
         84:4a:55:d7:f0:41:12:13:18:21:c1:a9:ab:3e:e8:a1:ea:1c:
         d5:48:fb:ee:10:bf:c3:02:0c:08:7d:f9:ea:0e:81:8a:72:08:
         5f:53:05:e0:4d:8d:5f:7e:37:a4:48:c7:b3:26:03:11:9e:a3:
         7d:e7:1a:9d:23:40:70:39:7e:95:c2:6b:8f:15:42:27:b8:b6:
         c4:80:5e:a8:51:f2:16:33:98:ee:08:d4:3b:8f:f4:e6:0d:dd:
         ff:ad:1e:22:53:f9:5d:be:e0:b9:4c:45:00:15:95:47:90:97:
         71:a6:71:db:21:6d:62:70:96:52:f1:1c:7a:2a:52:0a:6e:fc:
         8d:29:1f:6c
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUZO79/f9Ab6/hsGFIiOhx807sQ+YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTYxMTVDNEIwRERGMzU2NkQ4N0YzNzgzREQ4NzMwNDk3
RTNDQ0UwNTAeFw0yNTAzMDYwMTM4NDFaFw0yNjAzMDUwMTQzNDFaMDMxMTAvBgNV
BAMTKDY0OUY4OTI1ODQ0RUQxMEIyMTY1QTFBQTlEQzg1NDE0NDlFRDRERDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXTEADgy9oMYYh1lIc8Im5dyBF
gVuvTHaY2mMOgazwCt9jLQQzP8H8fnYXeTxvqa9dF0/xF6YvJBb5OhUp9GUQdJ1i
PDWHELTP5hD2vPq5ZRdeik2P2d29Tw6qZh/ZQTb7HPxHoN8UxDeKmPHVSjlpjZ7x
JmyBOFJa5YXyzfdRoVF+wzhl0CDid7INdcILcgX8v41qjBYX6oq5R6J57IslCzRj
Rw+qvuRhR8ZAqUdS2cEqDSzMDDljmbcCtvykp57WbSMj+Oq25FyiOsjg1WLPqfDB
BcPe+2H69G30qu0JP2SN9UHkdH5rCWlJc+r9BXy6hkLEKVO5GMOFSFtaY2RxAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUZJ+JJYRO0QshZaGqnchUFEntTdgwHwYDVR0j
BBgwFoAU5hFcSw3fNWbYfzeD3YcwSX48zgUwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby91ZGNwd1BlTEN5eVpIWDJEUGlvbWtrdkM2dlRzUFhTS3FndWRNRGhKVWlh
LzEvRTYxMTVDNEIwRERGMzU2NkQ4N0YzNzgzREQ4NzMwNDk3RTNDQ0UwNS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9FNjExNUM0QjBEREYzNTY2RDg3
RjM3ODNERDg3MzA0OTdFM0NDRTA1LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby91
ZGNwd1BlTEN5eVpIWDJEUGlvbWtrdkM2dlRzUFhTS3FndWRNRGhKVWlhLzEvMzEz
NzMwMmUzMjMzMzMyZTMxMzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTMyMzUz
MzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQCqukMMA0GCSqGSIb3DQEBCwUAA4IBAQA5x5+4n0jyagyH
jigioi1cK6Z3Y3/iPInjLIfDZXMWrKR1VMd/+AMDbRf+PP/t8lm9QIy3nV9J7u0+
EzDsXW7TlyJv1GB0VFHpV9/wu3nvgW02qgmgLhmjHY1ZFZAS/QrPlpFn19Y7bh44
BmFYg3uGrhNtwwMYaMZ7HEVadjSESlXX8EESExghwamrPuih6hzVSPvuEL/DAgwI
ffnqDoGKcghfUwXgTY1ffjekSMezJgMRnqN95xqdI0BwOX6VwmuPFUInuLbEgF6o
UfIWM5juCNQ7j/TmDd3/rR4iU/ldvuC5TEUAFZVHkJdxpnHbIW1icJZS8Rx6KlIK
bvyNKR9s
-----END CERTIFICATE-----
Generated at Fri Apr 18 08:25:54 2025 by rpki-client