Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/3136382e3232382e3232332e302f32342d3234203d3e20323634393135.roa
File:                     3136382e3232382e3232332e302f32342d3234203d3e20323634393135.roa (raw, json)
Hash identifier:          3xta+vzlcZwj3D0WB42p4662qk8mfeIE+XrYW1vNJnc=
Subject key identifier:   88:E4:29:9E:86:D0:E6:48:8F:0B:B3:BC:96:10:30:E5:13:03:54:AA
Certificate issuer:       /CN=DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D
Certificate serial:       3C03244997AC0B258992BC7C3266EE9DCA0464C9
Authority key identifier: DC:28:C5:A2:EA:1E:56:49:5A:A9:66:FB:19:84:C7:F3:06:4F:DA:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/3136382e3232382e3232332e302f32342d3234203d3e20323634393135.roa
Signing time:             Mon 07 Apr 2025 15:27:14 +0000
ROA not before:           Mon 07 Apr 2025 15:22:14 +0000
ROA not after:            Mon 06 Apr 2026 15:27:14 +0000
asID:                     264915
IP address blocks:        168.228.223.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D.crl
                          rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 16:48:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:03:24:49:97:ac:0b:25:89:92:bc:7c:32:66:ee:9d:ca:04:64:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D
        Validity
            Not Before: Apr  7 15:22:14 2025 GMT
            Not After : Apr  6 15:27:14 2026 GMT
        Subject: CN=88E4299E86D0E6488F0BB3BC961030E5130354AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a6:6b:01:18:20:e7:44:5e:d3:24:ff:7a:93:
                    8e:00:f3:e2:bc:7f:ad:25:7b:e7:b0:43:2c:8d:fd:
                    97:51:d3:46:b6:f8:43:c4:c2:16:60:ca:6c:6d:99:
                    64:e7:15:28:78:18:e1:79:48:86:1d:7a:63:7f:4d:
                    ee:61:3c:28:e5:83:21:83:ec:5d:64:14:62:6b:76:
                    eb:d1:9c:d8:c8:cf:26:d4:cd:ab:5c:e4:5b:fc:be:
                    c1:5f:a4:e7:52:44:71:06:bb:e1:29:bb:ff:f6:c0:
                    38:02:37:f2:57:5a:74:14:c8:2f:76:ce:f5:f0:d5:
                    09:e4:c3:37:f4:16:8e:09:0d:05:8f:c0:77:58:3b:
                    15:95:67:32:a6:08:36:a2:2e:1f:be:c6:19:43:0c:
                    7c:82:82:e8:63:6f:e0:65:e2:28:33:fe:97:75:f0:
                    8a:2d:74:55:88:fc:ba:5c:a8:4b:6c:8c:0c:38:ab:
                    11:14:42:c4:7b:5f:2a:30:88:4e:c4:1c:3d:47:8b:
                    e1:29:21:d4:ff:3b:8e:12:33:ea:92:a7:81:4c:04:
                    97:4d:e7:21:e1:ed:70:8e:ed:c4:92:67:21:07:5a:
                    78:df:4d:32:82:01:a8:e1:b5:c0:4b:64:40:b8:b9:
                    dd:f7:6b:c8:b3:55:99:0e:49:c5:32:10:ec:a5:46:
                    68:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:E4:29:9E:86:D0:E6:48:8F:0B:B3:BC:96:10:30:E5:13:03:54:AA
            X509v3 Authority Key Identifier:
                keyid:DC:28:C5:A2:EA:1E:56:49:5A:A9:66:FB:19:84:C7:F3:06:4F:DA:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/3136382e3232382e3232332e302f32342d3234203d3e20323634393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:1c:14:d9:27:03:a4:f0:8f:86:00:2a:d1:ef:4a:16:b0:6a:
         b1:31:08:0b:3e:74:ed:db:8d:0a:f8:45:02:35:6a:69:cd:bd:
         bd:60:d2:55:9d:d2:ff:bc:c0:7d:28:e7:68:cd:84:81:d4:cf:
         65:30:7d:45:31:18:5b:ff:56:4f:56:c1:b9:67:4c:2d:97:98:
         90:3e:e7:d4:f4:c7:f7:f8:65:58:ed:aa:6b:6c:fd:47:b2:c3:
         16:35:02:9e:9d:ad:ff:eb:3c:89:34:79:28:ab:e9:0c:cd:91:
         80:a1:cd:19:bc:bc:1e:22:10:70:a3:e9:ef:c8:f0:3c:04:41:
         ef:f8:94:88:fc:ba:6e:47:af:d0:d7:ef:2d:84:ea:a9:bc:eb:
         e3:0b:84:bc:b4:92:a8:70:9e:31:eb:d7:39:7f:c3:43:75:bd:
         bd:c5:25:76:dd:7c:ca:9d:2d:6b:1c:23:81:21:ae:28:d8:bb:
         d1:9b:39:c3:25:db:e3:6d:65:ee:f2:ef:73:c2:8c:bb:de:76:
         ea:ac:41:75:43:0a:dd:dc:58:9c:60:21:1b:3c:89:7b:a1:ab:
         81:5d:0b:66:91:1e:51:e9:e1:12:20:ae:f3:80:42:d4:93:91:
         63:c3:25:33:63:f4:41:54:48:17:71:dd:80:e2:15:be:88:d2:
         5f:c4:18:3c
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUPAMkSZesCyWJkrx8MmbuncoEZMkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREMyOEM1QTJFQTFFNTY0OTVBQTk2NkZCMTk4NEM3RjMw
NjRGREExRDAeFw0yNTA0MDcxNTIyMTRaFw0yNjA0MDYxNTI3MTRaMDMxMTAvBgNV
BAMTKDg4RTQyOTlFODZEMEU2NDg4RjBCQjNCQzk2MTAzMEU1MTMwMzU0QUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVpmsBGCDnRF7TJP96k44A8+K8
f60le+ewQyyN/ZdR00a2+EPEwhZgymxtmWTnFSh4GOF5SIYdemN/Te5hPCjlgyGD
7F1kFGJrduvRnNjIzybUzatc5Fv8vsFfpOdSRHEGu+Epu//2wDgCN/JXWnQUyC92
zvXw1Qnkwzf0Fo4JDQWPwHdYOxWVZzKmCDaiLh++xhlDDHyCguhjb+Bl4igz/pd1
8IotdFWI/LpcqEtsjAw4qxEUQsR7XyowiE7EHD1Hi+EpIdT/O44SM+qSp4FMBJdN
5yHh7XCO7cSSZyEHWnjfTTKCAajhtcBLZEC4ud33a8izVZkOScUyEOylRmjVAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUiOQpnobQ5kiPC7O8lhAw5RMDVKowHwYDVR0j
BBgwFoAU3CjFouoeVklaqWb7GYTH8wZP2h0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUN6RVI2d0FnUnd2RVRNWmtvcmJxTHhNalhSeWNGTVlMbXBlR0t0Q0s3
a2MvMC9EQzI4QzVBMkVBMUU1NjQ5NUFBOTY2RkIxOTg0QzdGMzA2NEZEQTFELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RDMjhDNUEyRUExRTU2NDk1
QUE5NjZGQjE5ODRDN0YzMDY0RkRBMUQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVDekVSNndBZ1J3dkVUTVprb3JicUx4TWpYUnljRk1ZTG1wZUdLdENLN2tjLzAv
MzEzNjM4MmUzMjMyMzgyZTMyMzIzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNDM5MzEzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKjk3zANBgkqhkiG9w0BAQsFAAOCAQEAGRwU
2ScDpPCPhgAq0e9KFrBqsTEICz507duNCvhFAjVqac29vWDSVZ3S/7zAfSjnaM2E
gdTPZTB9RTEYW/9WT1bBuWdMLZeYkD7n1PTH9/hlWO2qa2z9R7LDFjUCnp2t/+s8
iTR5KKvpDM2RgKHNGby8HiIQcKPp78jwPARB7/iUiPy6bkev0NfvLYTqqbzr4wuE
vLSSqHCeMevXOX/DQ3W9vcUldt18yp0taxwjgSGuKNi70Zs5wyXb421l7vLvc8KM
u9526qxBdUMK3dxYnGAhGzyJe6GrgV0LZpEeUenhEiCu84BC1JORY8MlM2P0QVRI
F3HdgOIVvojSX8QYPA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:37:55 2025 by rpki-client on console.sobornost.net