Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/3133382e39372e33322e302f32332d3234203d3e203631393030.roa
File:                     3133382e39372e33322e302f32332d3234203d3e203631393030.roa (raw, json)
Hash identifier:          Q5YfFJlaYjS2fP1RepaJU9etJnY8aTR6xv+qVr7UYl0=
Subject key identifier:   4D:08:27:85:D4:AE:6A:28:78:D6:85:BB:50:A6:E4:BB:09:17:54:2C
Certificate issuer:       /CN=717D62DB604520975DE382D0D3273E1BDB591D67
Certificate serial:       02104DD3585CEAD1F72E7DC166C1EAEF15D557DD
Authority key identifier: 71:7D:62:DB:60:45:20:97:5D:E3:82:D0:D3:27:3E:1B:DB:59:1D:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/717D62DB604520975DE382D0D3273E1BDB591D67.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/3133382e39372e33322e302f32332d3234203d3e203631393030.roa
Signing time:             Wed 16 Apr 2025 18:34:36 +0000
ROA not before:           Wed 16 Apr 2025 18:29:36 +0000
ROA not after:            Wed 15 Apr 2026 18:34:36 +0000
asID:                     61900
IP address blocks:        138.97.32.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/717D62DB604520975DE382D0D3273E1BDB591D67.crl
                          rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/717D62DB604520975DE382D0D3273E1BDB591D67.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/717D62DB604520975DE382D0D3273E1BDB591D67.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 20:16:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:10:4d:d3:58:5c:ea:d1:f7:2e:7d:c1:66:c1:ea:ef:15:d5:57:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=717D62DB604520975DE382D0D3273E1BDB591D67
        Validity
            Not Before: Apr 16 18:29:36 2025 GMT
            Not After : Apr 15 18:34:36 2026 GMT
        Subject: CN=4D082785D4AE6A2878D685BB50A6E4BB0917542C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:fc:af:f3:1a:bc:d5:d5:e4:c4:89:91:a5:28:
                    b6:ac:33:bd:39:4d:14:07:8f:c6:9d:c0:54:5d:7c:
                    2b:0e:16:88:fc:cb:9c:36:ce:48:d8:f5:81:c4:02:
                    fc:71:d3:f7:98:d5:93:c5:96:db:4a:ef:83:0e:a7:
                    4f:7a:43:8a:84:41:9f:12:80:8c:3d:b5:58:48:87:
                    eb:b1:db:a5:85:b6:c9:82:78:f6:10:96:ac:9d:7c:
                    cd:0c:bf:ff:cc:73:25:42:82:be:e9:cf:81:cf:50:
                    8d:b7:b7:c5:a4:db:07:a5:9f:59:7f:ba:5b:7c:b3:
                    a6:92:74:6a:33:6d:8f:f8:68:c6:a0:ec:a5:16:39:
                    2b:45:d6:0f:b9:46:16:2d:24:14:a1:57:1d:f6:f0:
                    85:e9:21:46:8c:9a:62:47:06:b7:09:87:a5:e1:71:
                    09:84:d0:0d:a5:59:46:b9:5a:1e:2b:23:4d:d5:36:
                    69:7c:a2:cc:fb:64:e1:c6:3a:4f:ce:13:41:43:08:
                    96:36:83:26:72:30:ab:41:73:e3:8a:b0:fb:95:3c:
                    fd:1a:55:e3:51:36:a4:08:c0:72:27:2f:ea:f1:d1:
                    08:76:57:f0:ba:39:f5:f7:02:e6:3e:c0:a7:7d:db:
                    36:1b:db:14:77:93:40:e4:a8:ed:88:0c:fb:f4:65:
                    f5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:08:27:85:D4:AE:6A:28:78:D6:85:BB:50:A6:E4:BB:09:17:54:2C
            X509v3 Authority Key Identifier:
                keyid:71:7D:62:DB:60:45:20:97:5D:E3:82:D0:D3:27:3E:1B:DB:59:1D:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/717D62DB604520975DE382D0D3273E1BDB591D67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/717D62DB604520975DE382D0D3273E1BDB591D67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/3133382e39372e33322e302f32332d3234203d3e203631393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:d2:ba:1d:c4:2d:ee:e7:4b:6b:4c:e3:16:50:45:35:0b:b3:
         16:f7:c5:ac:b4:52:ba:20:84:2e:e7:d0:b5:fd:3a:96:af:12:
         d0:0d:69:c9:99:ec:63:db:0d:aa:1b:93:97:c4:f5:16:76:af:
         44:d5:13:44:df:13:08:0a:53:50:ed:bc:e4:0e:e0:3c:d3:ad:
         15:b1:29:ed:bf:78:50:ea:f7:1c:16:91:4b:37:e7:67:46:62:
         a5:40:7d:9f:6a:dd:d8:11:ce:79:f4:d9:5e:21:9d:81:86:70:
         24:35:84:a5:e0:cb:19:3a:f6:70:00:88:51:e9:01:0b:14:bb:
         ed:9a:9a:27:c4:28:12:bd:cf:16:75:25:ee:60:f9:79:aa:68:
         13:57:61:78:c7:f0:25:b3:60:57:75:d7:52:98:c7:da:5b:4d:
         a1:58:a2:66:30:0a:16:96:14:be:b6:d6:1d:8c:65:1c:2e:cb:
         4e:16:96:e9:9c:a7:13:77:ac:d8:42:54:d5:52:30:18:e5:55:
         2a:c5:b9:9b:9b:c7:42:1b:97:7d:2b:37:c6:08:fb:a7:45:8e:
         e3:07:82:9a:01:6d:83:31:2b:7b:4a:c6:5d:10:11:69:03:40:
         d7:54:0b:cb:64:31:72:a7:39:7f:eb:85:a8:5b:21:1b:07:3c:
         09:16:1d:ce
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUAhBN01hc6tH3Ln3BZsHq7xXVV90wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzE3RDYyREI2MDQ1MjA5NzVERTM4MkQwRDMyNzNFMUJE
QjU5MUQ2NzAeFw0yNTA0MTYxODI5MzZaFw0yNjA0MTUxODM0MzZaMDMxMTAvBgNV
BAMTKDREMDgyNzg1RDRBRTZBMjg3OEQ2ODVCQjUwQTZFNEJCMDkxNzU0MkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU/K/zGrzV1eTEiZGlKLasM705
TRQHj8adwFRdfCsOFoj8y5w2zkjY9YHEAvxx0/eY1ZPFlttK74MOp096Q4qEQZ8S
gIw9tVhIh+ux26WFtsmCePYQlqydfM0Mv//McyVCgr7pz4HPUI23t8Wk2weln1l/
ult8s6aSdGozbY/4aMag7KUWOStF1g+5RhYtJBShVx328IXpIUaMmmJHBrcJh6Xh
cQmE0A2lWUa5Wh4rI03VNml8osz7ZOHGOk/OE0FDCJY2gyZyMKtBc+OKsPuVPP0a
VeNRNqQIwHInL+rx0Qh2V/C6OfX3AuY+wKd92zYb2xR3k0DkqO2IDPv0ZfWRAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUTQgnhdSuaih41oW7UKbkuwkXVCwwHwYDVR0j
BBgwFoAUcX1i22BFIJdd44LQ0yc+G9tZHWcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNG80MTRyOGtKWmloUURDdHBMakhFUm1QamN5anB4UFV5d2FSaDllaGNQ
SlgvMC83MTdENjJEQjYwNDUyMDk3NURFMzgyRDBEMzI3M0UxQkRCNTkxRDY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcxN0Q2MkRCNjA0NTIwOTc1
REUzODJEMEQzMjczRTFCREI1OTFENjcuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRvNDE0cjhrSlppaFFEQ3RwTGpIRVJtUGpjeWpweFBVeXdhUmg5ZWhjUEpYLzAv
MzEzMzM4MmUzOTM3MmUzMzMyMmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzYzMTM5
MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAYphIDANBgkqhkiG9w0BAQsFAAOCAQEAFdK6HcQt7udL
a0zjFlBFNQuzFvfFrLRSuiCELufQtf06lq8S0A1pyZnsY9sNqhuTl8T1FnavRNUT
RN8TCApTUO285A7gPNOtFbEp7b94UOr3HBaRSzfnZ0ZipUB9n2rd2BHOefTZXiGd
gYZwJDWEpeDLGTr2cACIUekBCxS77ZqaJ8QoEr3PFnUl7mD5eapoE1dheMfwJbNg
V3XXUpjH2ltNoViiZjAKFpYUvrbWHYxlHC7LThaW6ZynE3es2EJU1VIwGOVVKsW5
m5vHQhuXfSs3xgj7p0WO4weCmgFtgzEre0rGXRARaQNA11QLy2Qxcqc5f+uFqFsh
Gwc8CRYdzg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 20:06:37 2025 by rpki-client on console.sobornost.net