Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/zeBMrhrWLZEpo8GT6oP8aVsuiyDu1RiaacLq4o65aTJ/1/3136382e302e3232342e302f32322d3234203d3e20323635323630.roa
File:                     3136382e302e3232342e302f32322d3234203d3e20323635323630.roa (raw, json)
Hash identifier:          9va6pTZPZnrF2XAdPf5Y9/C/81Ef0//nXMVdnv4p680=
Subject key identifier:   56:CB:5F:78:B8:53:B5:30:53:17:F5:BE:89:5B:40:19:73:71:65:9D
Certificate issuer:       /CN=C015B32C7C5158D42E33F7D1939172DB85380C54
Certificate serial:       31FF326C268E0168BD3E1C3EC31975BB90D31896
Authority key identifier: C0:15:B3:2C:7C:51:58:D4:2E:33:F7:D1:93:91:72:DB:85:38:0C:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C015B32C7C5158D42E33F7D1939172DB85380C54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zeBMrhrWLZEpo8GT6oP8aVsuiyDu1RiaacLq4o65aTJ/1/3136382e302e3232342e302f32322d3234203d3e20323635323630.roa
Signing time:             Wed 05 Mar 2025 19:00:05 +0000
ROA not before:           Wed 05 Mar 2025 18:55:05 +0000
ROA not after:            Wed 04 Mar 2026 19:00:05 +0000
asID:                     265260
IP address blocks:        168.0.224.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/zeBMrhrWLZEpo8GT6oP8aVsuiyDu1RiaacLq4o65aTJ/1/C015B32C7C5158D42E33F7D1939172DB85380C54.crl
                          rsync://rpki-repo.registro.br/repo/zeBMrhrWLZEpo8GT6oP8aVsuiyDu1RiaacLq4o65aTJ/1/C015B32C7C5158D42E33F7D1939172DB85380C54.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C015B32C7C5158D42E33F7D1939172DB85380C54.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 19:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:ff:32:6c:26:8e:01:68:bd:3e:1c:3e:c3:19:75:bb:90:d3:18:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C015B32C7C5158D42E33F7D1939172DB85380C54
        Validity
            Not Before: Mar  5 18:55:05 2025 GMT
            Not After : Mar  4 19:00:05 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ad:a7:f5:76:77:87:88:10:b0:8f:64:6a:14:
                    13:35:a3:a6:96:1c:6f:d8:8c:12:32:ad:ef:61:9a:
                    60:11:0c:58:10:ed:bf:e0:54:ea:da:85:f1:06:e9:
                    22:56:99:06:9e:4c:9c:a7:06:b2:81:d6:ac:01:cc:
                    45:f6:98:9d:7e:68:8d:f4:ea:ff:8d:da:b8:23:35:
                    0e:9a:dd:3b:75:64:5e:19:b7:f7:ff:c6:a1:b3:79:
                    4d:e1:01:7e:1e:9d:9c:0f:16:ee:0d:dd:c1:90:1f:
                    10:cd:a4:b5:e6:16:b1:68:27:8b:41:f4:0e:bb:27:
                    c5:38:d1:f8:ed:42:a2:1c:56:98:5c:09:11:2e:18:
                    13:84:e4:57:a5:a5:be:f7:e7:2f:9a:66:7f:ed:23:
                    79:aa:61:5c:e0:7d:d3:08:ea:2e:75:f8:e6:c2:3f:
                    fc:2a:70:2a:4f:ca:29:ab:eb:2f:dc:2b:8c:fc:cd:
                    fe:7c:73:1f:60:f4:b9:71:f4:ff:77:18:53:14:d2:
                    6f:da:09:5d:e1:98:55:59:47:bc:3d:6a:ef:01:34:
                    4c:55:90:c0:40:2e:bb:da:17:39:32:9a:3e:9a:e0:
                    d7:2f:a9:36:f2:cd:6b:28:95:3a:a9:e4:bc:6a:e2:
                    3f:f8:e1:bd:90:6a:9e:52:37:97:a6:2d:92:92:4e:
                    27:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:CB:5F:78:B8:53:B5:30:53:17:F5:BE:89:5B:40:19:73:71:65:9D
            X509v3 Authority Key Identifier:
                keyid:C0:15:B3:2C:7C:51:58:D4:2E:33:F7:D1:93:91:72:DB:85:38:0C:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zeBMrhrWLZEpo8GT6oP8aVsuiyDu1RiaacLq4o65aTJ/1/C015B32C7C5158D42E33F7D1939172DB85380C54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C015B32C7C5158D42E33F7D1939172DB85380C54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zeBMrhrWLZEpo8GT6oP8aVsuiyDu1RiaacLq4o65aTJ/1/3136382e302e3232342e302f32322d3234203d3e20323635323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:2c:b8:47:d2:c6:63:a2:a6:7a:59:a1:9b:4a:c8:47:4a:18:
         55:b4:8c:2c:5f:b1:2b:8f:0d:40:c7:4d:55:a6:8e:19:d4:a7:
         af:2e:dd:65:31:79:e9:75:68:b3:3c:d9:28:9a:a4:c2:4c:7e:
         89:c7:cb:4d:1c:5b:5e:67:65:33:f8:8d:f5:d8:84:22:42:65:
         a7:bd:c5:9b:81:ba:ca:94:83:1f:a0:9c:78:f8:ad:0f:d4:d7:
         f7:72:52:41:83:48:1f:a9:fe:e5:96:50:d0:58:00:61:9a:b3:
         0d:eb:ca:10:dc:c2:7e:c9:f4:54:7c:ea:e4:f8:0e:a4:ee:4f:
         17:df:1b:17:9b:b0:b3:14:33:33:a1:a8:c4:68:ae:18:09:7e:
         48:d5:b9:26:08:f4:55:b7:27:12:e5:ca:ce:ed:83:89:ae:d6:
         61:e9:b1:97:cd:be:fc:c8:e1:7a:e7:43:5b:4a:91:38:55:72:
         b1:ca:40:e4:0b:f8:86:78:d9:84:f2:09:e6:af:a1:4f:01:11:
         43:0f:03:a6:3d:45:c4:e1:57:13:c6:12:d8:f1:22:03:26:38:
         08:02:a5:0a:86:ce:e7:65:5a:c0:40:b7:da:64:3c:b6:44:31:
         7a:6d:6d:65:3b:36:52:e0:93:15:b8:1d:bb:db:3f:68:5e:d2:
         e3:d8:1a:10
-----BEGIN CERTIFICATE-----
MIIHPjCCBiagAwIBAgIUMf8ybCaOAWi9Phw+wxl1u5DTGJYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzAxNUIzMkM3QzUxNThENDJFMzNGN0QxOTM5MTcyREI4
NTM4MEM1NDAeFw0yNTAzMDUxODU1MDVaFw0yNjAzMDQxOTAwMDVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDhBREE3RjU3Njc3ODc4ODEw
QjA4RjY0NkExNDEzMzVBM0E2OTYxQzZGRDg4QzEyMzJBREVGNjE5QTYwMTEwQzU4
MTBFREJGRTA1NEVBREE4NUYxMDZFOTIyNTY5OTA2OUU0QzlDQTcwNkIyODFENkFD
MDFDQzQ1RjY5ODlEN0U2ODhERjRFQUZGOEREQUI4MjMzNTBFOUFERDNCNzU2NDVF
MTlCN0Y3RkZDNkExQjM3OTRERTEwMTdFMUU5RDlDMEYxNkVFMEREREMxOTAxRjEw
Q0RBNEI1RTYxNkIxNjgyNzhCNDFGNDBFQkIyN0M1MzhEMUY4RUQ0MkEyMUM1Njk4
NUMwOTExMkUxODEzODRFNDU3QTVBNUJFRjdFNzJGOUE2NjdGRUQyMzc5QUE2MTVD
RTA3REQzMDhFQTJFNzVGOEU2QzIzRkZDMkE3MDJBNEZDQTI5QUJFQjJGREMyQjhD
RkNDREZFN0M3MzFGNjBGNEI5NzFGNEZGNzcxODUzMTREMjZGREEwOTVERTE5ODU1
NTk0N0JDM0Q2QUVGMDEzNDRDNTU5MEMwNDAyRUJCREExNzM5MzI5QTNFOUFFMEQ3
MkZBOTM2RjJDRDZCMjg5NTNBQTlFNEJDNkFFMjNGRjhFMUJEOTA2QTlFNTIzNzk3
QTYyRDkyOTI0RTI3MDUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA2K2n9XZ3h4gQsI9kahQTNaOmlhxv2IwSMq3vYZpgEQxYEO2/4FTq
2oXxBukiVpkGnkycpwaygdasAcxF9pidfmiN9Or/jdq4IzUOmt07dWReGbf3/8ah
s3lN4QF+Hp2cDxbuDd3BkB8QzaS15haxaCeLQfQOuyfFONH47UKiHFaYXAkRLhgT
hORXpaW+9+cvmmZ/7SN5qmFc4H3TCOoudfjmwj/8KnAqT8opq+sv3CuM/M3+fHMf
YPS5cfT/dxhTFNJv2gld4ZhVWUe8PWrvATRMVZDAQC672hc5Mpo+muDXL6k28s1r
KJU6qeS8auI/+OG9kGqeUjeXpi2Skk4nBQIDAQABo4ICTDCCAkgwHQYDVR0OBBYE
FFbLX3i4U7UwUxf1volbQBlzcWWdMB8GA1UdIwQYMBaAFMAVsyx8UVjULjP30ZOR
ctuFOAxUMA4GA1UdDwEB/wQEAwIHgDCBkgYDVR0fBIGKMIGHMIGEoIGBoH+GfXJz
eW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vemVCTXJocldMWkVwbzhH
VDZvUDhhVnN1aXlEdTFSaWFhY0xxNG82NWFUSi8xL0MwMTVCMzJDN0M1MTU4RDQy
RTMzRjdEMTkzOTE3MkRCODUzODBDNTQuY3JsMHgGCCsGAQUFBwEBBGwwajBoBggr
BgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9uaWNi
cl9yZXBvLzEvQzAxNUIzMkM3QzUxNThENDJFMzNGN0QxOTM5MTcyREI4NTM4MEM1
NC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5jOi8v
cnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vemVCTXJocldMWkVwbzhHVDZvUDhh
VnN1aXlEdTFSaWFhY0xxNG82NWFUSi8xLzMxMzYzODJlMzAyZTMyMzIzNDJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzNTMyMzYzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqgA4DAN
BgkqhkiG9w0BAQsFAAOCAQEAPSy4R9LGY6Kmelmhm0rIR0oYVbSMLF+xK48NQMdN
VaaOGdSnry7dZTF56XVoszzZKJqkwkx+icfLTRxbXmdlM/iN9diEIkJlp73Fm4G6
ypSDH6CcePitD9TX93JSQYNIH6n+5ZZQ0FgAYZqzDevKENzCfsn0VHzq5PgOpO5P
F98bF5uwsxQzM6GoxGiuGAl+SNW5Jgj0VbcnEuXKzu2Dia7WYemxl82+/MjheudD
W0qROFVyscpA5Av4hnjZhPIJ5q+hTwERQw8Dpj1FxOFXE8YS2PEiAyY4CAKlCobO
52VawEC32mQ8tkQxem1tZTs2UuCTFbgdu9s/aF7S49gaEA==
-----END CERTIFICATE-----
Generated at Wed Apr 23 02:34:17 2025 by rpki-client