Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/3138372e3131312e3131322e302f32322d3232203d3e20323731363830.roa
File:                     3138372e3131312e3131322e302f32322d3232203d3e20323731363830.roa (raw, json)
Hash identifier:          NWCm4yJKj/f/UfUiGP5Z5BIupgwy4qUGgoBd+d6DqQ8=
Subject key identifier:   A9:2B:C2:A0:B0:2B:2C:CC:70:C7:D5:18:9B:5F:A7:2B:D6:AF:93:26
Certificate issuer:       /CN=0667C1E975614C995A6FB737132548928E943717
Certificate serial:       0AC2B8A2A665F8D7238C48E28EF33555EBB1C336
Authority key identifier: 06:67:C1:E9:75:61:4C:99:5A:6F:B7:37:13:25:48:92:8E:94:37:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0667C1E975614C995A6FB737132548928E943717.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/3138372e3131312e3131322e302f32322d3232203d3e20323731363830.roa
Signing time:             Sat 21 Dec 2024 12:39:50 +0000
ROA not before:           Sat 21 Dec 2024 12:34:50 +0000
ROA not after:            Sat 20 Dec 2025 12:39:50 +0000
asID:                     271680
IP address blocks:        187.111.112.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/0667C1E975614C995A6FB737132548928E943717.crl
                          rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/0667C1E975614C995A6FB737132548928E943717.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0667C1E975614C995A6FB737132548928E943717.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 04:03:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:c2:b8:a2:a6:65:f8:d7:23:8c:48:e2:8e:f3:35:55:eb:b1:c3:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0667C1E975614C995A6FB737132548928E943717
        Validity
            Not Before: Dec 21 12:34:50 2024 GMT
            Not After : Dec 20 12:39:50 2025 GMT
        Subject: CN=A92BC2A0B02B2CCC70C7D5189B5FA72BD6AF9326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:42:63:63:3c:c4:f5:9a:a9:31:d0:5e:83:d0:
                    dd:9e:03:fe:5e:62:c2:06:57:ba:ed:d5:df:72:78:
                    56:8a:d5:48:df:a1:0a:f8:f7:78:cf:9e:5f:45:c8:
                    ac:58:3e:c9:f7:13:8f:b8:f0:3c:32:9f:e3:58:9a:
                    1f:8c:04:95:7c:7a:97:08:d9:56:c9:dd:b3:9b:1b:
                    13:a5:5f:eb:84:9e:20:d7:b0:0f:74:0d:7d:9a:ad:
                    03:ef:91:e9:af:fb:59:4f:de:9c:8e:bf:3b:7a:57:
                    12:4b:f9:7c:e4:ba:0d:af:99:09:5c:6c:35:5f:c3:
                    b8:85:07:0b:36:a7:6d:c5:f8:42:d6:8e:96:56:b9:
                    51:02:df:41:27:e4:69:e0:33:00:20:10:21:4d:36:
                    a6:04:64:9b:96:d6:e1:71:c9:0a:00:60:ba:0b:7a:
                    8c:87:2e:7c:1f:d9:3c:03:5f:3b:60:40:6a:3c:cc:
                    03:f8:b6:9a:04:d9:bc:f7:07:54:a7:5a:85:3c:92:
                    2b:82:f4:76:a1:d8:18:3f:c3:4f:fa:cc:3d:b0:e8:
                    27:7d:1e:94:d6:5c:cd:a6:8f:4a:87:e9:b2:aa:db:
                    ca:99:0a:82:e8:49:37:d5:f4:5b:13:73:bd:9d:7b:
                    7c:8d:6b:26:33:30:9a:78:0b:8e:37:50:89:34:01:
                    08:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:2B:C2:A0:B0:2B:2C:CC:70:C7:D5:18:9B:5F:A7:2B:D6:AF:93:26
            X509v3 Authority Key Identifier:
                keyid:06:67:C1:E9:75:61:4C:99:5A:6F:B7:37:13:25:48:92:8E:94:37:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/0667C1E975614C995A6FB737132548928E943717.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0667C1E975614C995A6FB737132548928E943717.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/3138372e3131312e3131322e302f32322d3232203d3e20323731363830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.111.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:77:4e:42:d3:49:48:1b:fc:9c:f2:f3:11:1e:e2:a5:6f:3a:
         36:c9:b8:7e:47:d3:76:75:c4:91:70:70:22:c9:45:c3:56:63:
         42:0a:5e:88:45:b1:99:d0:e9:47:55:6a:90:56:27:0c:19:87:
         b5:8b:da:c4:7f:93:b1:7d:60:01:34:17:7a:58:b8:e2:05:43:
         d4:42:39:56:fd:0b:fd:25:89:6c:49:2d:93:e2:c3:1d:db:66:
         3c:f2:92:f6:91:18:7c:3f:a5:26:db:d9:43:83:5c:89:e5:f8:
         86:93:2a:f1:37:8e:43:e1:34:ee:98:b5:02:ff:d7:ef:3d:db:
         f0:7a:40:5a:f6:d2:fd:6e:5c:9a:f8:c5:95:73:9f:40:8b:92:
         b6:93:1b:08:7a:31:66:17:9c:7c:5c:f3:aa:7c:b6:9d:55:79:
         99:84:ac:62:2b:bb:7d:21:0b:42:54:4a:10:65:9d:8d:86:07:
         fe:5d:a5:d3:aa:c7:1e:6b:d7:ca:7a:42:67:1f:3b:c7:46:c9:
         5f:4e:78:72:05:b2:6a:c8:70:39:f2:df:48:7d:f6:7d:4f:c1:
         7c:5d:7e:a2:77:18:9b:07:92:d8:fc:8f:60:86:0b:95:71:a4:
         eb:a8:15:eb:55:1c:3c:d1:35:dc:5f:7d:71:41:c2:55:76:6e:
         e1:33:f5:30
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUCsK4oqZl+NcjjEjijvM1VeuxwzYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDY2N0MxRTk3NTYxNEM5OTVBNkZCNzM3MTMyNTQ4OTI4
RTk0MzcxNzAeFw0yNDEyMjExMjM0NTBaFw0yNTEyMjAxMjM5NTBaMDMxMTAvBgNV
BAMTKEE5MkJDMkEwQjAyQjJDQ0M3MEM3RDUxODlCNUZBNzJCRDZBRjkzMjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJQmNjPMT1mqkx0F6D0N2eA/5e
YsIGV7rt1d9yeFaK1UjfoQr493jPnl9FyKxYPsn3E4+48Dwyn+NYmh+MBJV8epcI
2VbJ3bObGxOlX+uEniDXsA90DX2arQPvkemv+1lP3pyOvzt6VxJL+Xzkug2vmQlc
bDVfw7iFBws2p23F+ELWjpZWuVEC30En5GngMwAgECFNNqYEZJuW1uFxyQoAYLoL
eoyHLnwf2TwDXztgQGo8zAP4tpoE2bz3B1SnWoU8kiuC9Hah2Bg/w0/6zD2w6Cd9
HpTWXM2mj0qH6bKq28qZCoLoSTfV9FsTc72de3yNayYzMJp4C443UIk0AQiXAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUqSvCoLArLMxwx9UYm1+nK9avkyYwHwYDVR0j
BBgwFoAUBmfB6XVhTJlab7c3EyVIko6UNxcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjNtUm5zSm4xUzFUQmhxeWRZRE5CcFZ4S0E5ZDJQd3pTUjJNV0xabnpj
YTIvMS8wNjY3QzFFOTc1NjE0Qzk5NUE2RkI3MzcxMzI1NDg5MjhFOTQzNzE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA2NjdDMUU5NzU2MTRDOTk1
QTZGQjczNzEzMjU0ODkyOEU5NDM3MTcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzIzbVJuc0puMVMxVEJocXlkWUROQnBWeEtBOWQyUHd6U1IyTVdMWm56Y2EyLzEv
MzEzODM3MmUzMTMxMzEyZTMxMzEzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzczMTM2MzgzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArtvcDANBgkqhkiG9w0BAQsFAAOCAQEAUndO
QtNJSBv8nPLzER7ipW86Nsm4fkfTdnXEkXBwIslFw1ZjQgpeiEWxmdDpR1VqkFYn
DBmHtYvaxH+TsX1gATQXeli44gVD1EI5Vv0L/SWJbEktk+LDHdtmPPKS9pEYfD+l
JtvZQ4NcieX4hpMq8TeOQ+E07pi1Av/X7z3b8HpAWvbS/W5cmvjFlXOfQIuStpMb
CHoxZhecfFzzqny2nVV5mYSsYiu7fSELQlRKEGWdjYYH/l2l06rHHmvXynpCZx87
x0bJX054cgWyashwOfLfSH32fU/BfF1+oncYmweS2PyPYIYLlXGk66gV61UcPNE1
3F99cUHCVXZu4TP1MA==
-----END CERTIFICATE-----
Generated at Sat Apr 26 06:14:29 2025 by rpki-client on console.sobornost.net