Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/3137302e3233332e3137322e302f32322d3332203d3e20323634323831.roa
File:                     3137302e3233332e3137322e302f32322d3332203d3e20323634323831.roa (raw, json)
Hash identifier:          Bz5wxvrUIn7qT/KOi2fX26APXFbZ3oWcaeGHAaH1U+o=
Subject key identifier:   C0:AE:90:E9:F3:E1:55:F1:0A:2A:28:6C:A4:D2:06:15:04:43:67:D3
Certificate issuer:       /CN=C6311968EBC105398794FB43DCF25FAA7999A36E
Certificate serial:       689737C226A84FC8018416AE656E1A057CC5AA0A
Authority key identifier: C6:31:19:68:EB:C1:05:39:87:94:FB:43:DC:F2:5F:AA:79:99:A3:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6311968EBC105398794FB43DCF25FAA7999A36E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/3137302e3233332e3137322e302f32322d3332203d3e20323634323831.roa
Signing time:             Thu 20 Mar 2025 11:18:00 +0000
ROA not before:           Thu 20 Mar 2025 11:13:00 +0000
ROA not after:            Thu 19 Mar 2026 11:18:00 +0000
asID:                     264281
IP address blocks:        170.233.172.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/C6311968EBC105398794FB43DCF25FAA7999A36E.crl
                          rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/C6311968EBC105398794FB43DCF25FAA7999A36E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6311968EBC105398794FB43DCF25FAA7999A36E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 13:53:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:97:37:c2:26:a8:4f:c8:01:84:16:ae:65:6e:1a:05:7c:c5:aa:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6311968EBC105398794FB43DCF25FAA7999A36E
        Validity
            Not Before: Mar 20 11:13:00 2025 GMT
            Not After : Mar 19 11:18:00 2026 GMT
        Subject: CN=C0AE90E9F3E155F10A2A286CA4D20615044367D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ff:32:5a:32:ab:57:16:76:46:e2:aa:b3:b7:
                    07:80:6e:80:0f:51:d0:13:26:42:59:79:5c:99:21:
                    d1:5c:d7:42:7c:26:51:7d:53:ce:fb:ca:2d:5c:99:
                    66:4a:c6:51:52:d9:0b:5d:cd:9e:ec:1b:0e:cc:65:
                    63:0f:03:fe:1c:d9:62:45:7d:74:50:7f:40:b7:43:
                    47:f5:9f:b2:62:03:d9:49:bc:84:2b:b2:e4:04:da:
                    72:94:76:c6:42:a1:40:09:44:cf:1d:f1:e9:ff:0b:
                    ea:d4:fb:b5:96:5f:c4:33:a7:42:b8:36:58:e9:a8:
                    59:83:b4:e4:ca:b4:c3:9b:c1:54:59:76:3b:e8:cd:
                    df:67:1d:e3:c0:c7:8f:42:15:ca:1b:43:37:2c:50:
                    3b:7b:a0:27:2e:43:2c:ba:db:fc:47:d4:7c:93:8c:
                    6e:92:7c:ba:83:4b:2f:94:66:eb:02:0e:0d:1a:97:
                    4c:ab:3e:1e:13:4a:39:ee:73:8b:47:09:ff:8b:d9:
                    52:b6:d1:00:07:68:4e:59:a3:f4:34:2f:c6:46:c1:
                    0f:a4:49:e4:22:c8:01:90:e9:8a:3c:44:86:d3:64:
                    d7:39:94:a2:3c:5e:47:31:fe:11:02:ee:3f:be:f0:
                    8a:10:ff:3a:5e:ab:66:8a:e7:3d:9c:9f:5f:91:fb:
                    f3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:AE:90:E9:F3:E1:55:F1:0A:2A:28:6C:A4:D2:06:15:04:43:67:D3
            X509v3 Authority Key Identifier:
                keyid:C6:31:19:68:EB:C1:05:39:87:94:FB:43:DC:F2:5F:AA:79:99:A3:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/C6311968EBC105398794FB43DCF25FAA7999A36E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6311968EBC105398794FB43DCF25FAA7999A36E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/3137302e3233332e3137322e302f32322d3332203d3e20323634323831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:fa:37:a0:00:56:6b:6f:7b:c7:47:70:b7:57:2b:34:97:86:
         50:65:0a:14:cf:82:49:36:5e:3f:77:77:ae:34:40:33:7b:3f:
         ea:0a:43:76:d3:0a:d0:1f:26:82:8f:b7:e5:ff:84:32:16:a1:
         69:34:cb:aa:dc:77:47:d3:30:30:15:51:b4:cc:80:6b:32:a5:
         38:34:08:fe:80:e5:5f:7e:a3:bb:18:fa:35:ae:0c:34:d6:19:
         13:98:98:6f:a9:d2:f1:64:04:5e:88:85:27:ea:98:08:81:09:
         80:0b:48:5a:14:b9:a3:1c:fb:d2:21:7a:89:a1:a9:2d:73:cf:
         cc:0d:55:59:79:d0:73:93:a9:6c:f2:7f:f7:8e:10:d9:ef:e8:
         4a:13:d3:7d:ce:20:14:18:d4:83:f5:85:a6:35:5d:ee:2b:90:
         23:23:84:71:fa:03:3a:be:cd:2f:e6:0c:67:7d:39:1c:37:4a:
         04:86:b5:cb:52:9a:f0:5e:2b:71:bd:18:c1:fe:80:b0:d9:ab:
         26:cd:7b:d2:5a:88:51:3d:d4:5e:bc:de:73:ab:c6:d2:63:de:
         b7:bd:75:64:74:d0:1f:2c:73:dc:03:91:e7:c1:78:d4:90:0b:
         de:0f:6d:7d:a8:95:a6:62:a4:02:e4:a3:46:38:b4:19:a6:b4:
         8e:48:ef:ad
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUaJc3wiaoT8gBhBauZW4aBXzFqgowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzYzMTE5NjhFQkMxMDUzOTg3OTRGQjQzRENGMjVGQUE3
OTk5QTM2RTAeFw0yNTAzMjAxMTEzMDBaFw0yNjAzMTkxMTE4MDBaMDMxMTAvBgNV
BAMTKEMwQUU5MEU5RjNFMTU1RjEwQTJBMjg2Q0E0RDIwNjE1MDQ0MzY3RDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY/zJaMqtXFnZG4qqztweAboAP
UdATJkJZeVyZIdFc10J8JlF9U877yi1cmWZKxlFS2QtdzZ7sGw7MZWMPA/4c2WJF
fXRQf0C3Q0f1n7JiA9lJvIQrsuQE2nKUdsZCoUAJRM8d8en/C+rU+7WWX8Qzp0K4
NljpqFmDtOTKtMObwVRZdjvozd9nHePAx49CFcobQzcsUDt7oCcuQyy62/xH1HyT
jG6SfLqDSy+UZusCDg0al0yrPh4TSjnuc4tHCf+L2VK20QAHaE5Zo/Q0L8ZGwQ+k
SeQiyAGQ6Yo8RIbTZNc5lKI8Xkcx/hEC7j++8IoQ/zpeq2aK5z2cn1+R+/PtAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUwK6Q6fPhVfEKKihspNIGFQRDZ9MwHwYDVR0j
BBgwFoAUxjEZaOvBBTmHlPtD3PJfqnmZo24wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDlNV0hTUEdqUWVVblRuU2J5OG5ya3R3Sm1XVmVmZmk5aVdpNGpxbnpR
VzIvMC9DNjMxMTk2OEVCQzEwNTM5ODc5NEZCNDNEQ0YyNUZBQTc5OTlBMzZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M2MzExOTY4RUJDMTA1Mzk4
Nzk0RkI0M0RDRjI1RkFBNzk5OUEzNkUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ5TVdIU1BHalFlVW5UblNieThucmt0d0ptV1ZlZmZpOWlXaTRqcW56UVcyLzAv
MzEzNzMwMmUzMjMzMzMyZTMxMzczMjJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzYzNDMyMzgzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqrprDANBgkqhkiG9w0BAQsFAAOCAQEAA/o3
oABWa297x0dwt1crNJeGUGUKFM+CSTZeP3d3rjRAM3s/6gpDdtMK0B8mgo+35f+E
MhahaTTLqtx3R9MwMBVRtMyAazKlODQI/oDlX36juxj6Na4MNNYZE5iYb6nS8WQE
XoiFJ+qYCIEJgAtIWhS5oxz70iF6iaGpLXPPzA1VWXnQc5OpbPJ/944Q2e/oShPT
fc4gFBjUg/WFpjVd7iuQIyOEcfoDOr7NL+YMZ305HDdKBIa1y1Ka8F4rcb0Ywf6A
sNmrJs170lqIUT3UXrzec6vG0mPet711ZHTQHyxz3AOR58F41JAL3g9tfaiVpmKk
AuSjRji0Gaa0jkjvrQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 17:04:02 2025 by rpki-client on console.sobornost.net