Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5NT38WEqutJGuPbm2J3S1vqdSLBMKS1QRYfJy4ShajHb/1/3137302e302e3138382e302f32322d3234203d3e20323634393735.roa
File:                     3137302e302e3138382e302f32322d3234203d3e20323634393735.roa (raw, json)
Hash identifier:          7WE0m6p2j7YxuXgb5iLfBjbB4MK08nY5jg7BS+bvfmI=
Subject key identifier:   B6:3B:57:45:58:58:06:2B:0B:BF:16:F2:59:CA:AD:B0:E0:C0:8B:88
Certificate issuer:       /CN=EE8281B7BE13CC06AE2ABA30537E8664C712FA16
Certificate serial:       258B959DE5980CD640AE0B0B9C0604F374AAADA8
Authority key identifier: EE:82:81:B7:BE:13:CC:06:AE:2A:BA:30:53:7E:86:64:C7:12:FA:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE8281B7BE13CC06AE2ABA30537E8664C712FA16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5NT38WEqutJGuPbm2J3S1vqdSLBMKS1QRYfJy4ShajHb/1/3137302e302e3138382e302f32322d3234203d3e20323634393735.roa
Signing time:             Thu 06 Mar 2025 06:45:45 +0000
ROA not before:           Thu 06 Mar 2025 06:40:45 +0000
ROA not after:            Thu 05 Mar 2026 06:45:45 +0000
asID:                     264975
IP address blocks:        170.0.188.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5NT38WEqutJGuPbm2J3S1vqdSLBMKS1QRYfJy4ShajHb/1/EE8281B7BE13CC06AE2ABA30537E8664C712FA16.crl
                          rsync://rpki-repo.registro.br/repo/5NT38WEqutJGuPbm2J3S1vqdSLBMKS1QRYfJy4ShajHb/1/EE8281B7BE13CC06AE2ABA30537E8664C712FA16.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE8281B7BE13CC06AE2ABA30537E8664C712FA16.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 18:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:8b:95:9d:e5:98:0c:d6:40:ae:0b:0b:9c:06:04:f3:74:aa:ad:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE8281B7BE13CC06AE2ABA30537E8664C712FA16
        Validity
            Not Before: Mar  6 06:40:45 2025 GMT
            Not After : Mar  5 06:45:45 2026 GMT
        Subject: CN=B63B57455858062B0BBF16F259CAADB0E0C08B88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1e:19:72:8c:d0:6d:8a:c4:bd:a8:1a:0b:78:
                    3f:4a:b8:d4:66:dd:db:d3:a6:dc:6f:47:7b:90:fb:
                    b7:fa:c6:41:b8:ee:9c:2b:b5:ff:30:90:9c:af:2b:
                    d3:ac:5f:ff:0e:91:25:8c:19:cf:27:e8:b2:b7:24:
                    a4:31:f3:ac:f8:d7:b7:ca:d8:0e:63:24:ed:36:e9:
                    cd:4e:1e:83:b9:6d:a5:3d:80:75:11:8a:60:6d:52:
                    df:6d:be:1c:02:67:9e:01:b2:23:91:bb:63:e2:9b:
                    97:3c:a7:42:28:6c:0d:32:22:ee:38:58:21:ae:c2:
                    29:9d:dc:4b:9e:02:a8:0d:73:7b:91:53:69:1d:b4:
                    d6:2d:09:59:e6:b5:95:28:b1:7e:3d:53:3e:75:c0:
                    44:2b:50:89:a3:9f:42:7b:0d:14:bb:b5:ff:77:49:
                    99:80:39:e0:02:8c:df:4d:3d:ad:b6:13:b1:6b:6b:
                    c3:9a:97:78:9b:2a:61:8e:31:a5:0b:17:25:5c:b3:
                    7e:af:66:22:50:04:4f:90:d7:6a:2d:29:81:d8:ed:
                    16:57:8a:d7:f3:92:a9:ba:be:ed:60:f9:87:3f:b3:
                    55:e3:a3:10:a6:9f:16:ad:15:a5:db:9b:3b:98:4e:
                    62:51:d9:32:55:2f:b1:19:82:c3:78:cf:85:1b:16:
                    d0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:3B:57:45:58:58:06:2B:0B:BF:16:F2:59:CA:AD:B0:E0:C0:8B:88
            X509v3 Authority Key Identifier:
                keyid:EE:82:81:B7:BE:13:CC:06:AE:2A:BA:30:53:7E:86:64:C7:12:FA:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5NT38WEqutJGuPbm2J3S1vqdSLBMKS1QRYfJy4ShajHb/1/EE8281B7BE13CC06AE2ABA30537E8664C712FA16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE8281B7BE13CC06AE2ABA30537E8664C712FA16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5NT38WEqutJGuPbm2J3S1vqdSLBMKS1QRYfJy4ShajHb/1/3137302e302e3138382e302f32322d3234203d3e20323634393735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:b6:f2:1c:57:d4:51:c1:6f:51:e0:71:b0:19:06:c6:d6:eb:
         64:cc:d0:0f:86:b2:40:09:7b:12:18:50:fb:8a:2b:31:67:bf:
         b8:db:90:4b:9f:20:fa:bd:25:98:a9:16:ba:45:53:7d:3b:bc:
         61:e4:b8:ab:e6:98:a3:0d:c4:46:11:98:52:44:82:19:04:ef:
         32:22:08:3d:bb:60:c8:d9:1e:83:38:de:a1:f8:aa:b6:d8:6d:
         3c:92:94:a1:47:1a:32:36:79:16:33:de:80:d8:98:94:50:c4:
         7e:09:0c:40:ee:13:80:ca:ee:29:3b:8d:38:7f:52:d6:82:c2:
         5f:fd:45:41:c8:c3:b8:ff:5e:3d:4e:d3:e9:e7:97:af:32:27:
         ef:6b:6c:2f:1c:ba:43:aa:59:f9:3e:66:9a:10:25:5d:72:90:
         34:71:17:0a:a6:72:90:ec:a2:ce:f1:06:58:55:36:0e:53:11:
         03:3d:a9:a0:17:3a:64:39:02:dd:0e:b4:da:d9:3d:aa:f5:3c:
         da:06:fc:06:4b:40:94:41:62:a8:da:19:4a:d4:cc:28:da:f8:
         38:59:07:4c:70:7c:26:9e:73:c6:90:3e:59:67:dd:de:55:3f:
         bc:53:45:92:61:db:1e:08:09:fa:e9:cb:f9:5b:3f:ab:65:be:
         7f:2b:89:ab
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUJYuVneWYDNZArgsLnAYE83SqragwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU4MjgxQjdCRTEzQ0MwNkFFMkFCQTMwNTM3RTg2NjRD
NzEyRkExNjAeFw0yNTAzMDYwNjQwNDVaFw0yNjAzMDUwNjQ1NDVaMDMxMTAvBgNV
BAMTKEI2M0I1NzQ1NTg1ODA2MkIwQkJGMTZGMjU5Q0FBREIwRTBDMDhCODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFHhlyjNBtisS9qBoLeD9KuNRm
3dvTptxvR3uQ+7f6xkG47pwrtf8wkJyvK9OsX/8OkSWMGc8n6LK3JKQx86z417fK
2A5jJO026c1OHoO5baU9gHURimBtUt9tvhwCZ54BsiORu2Pim5c8p0IobA0yIu44
WCGuwimd3EueAqgNc3uRU2kdtNYtCVnmtZUosX49Uz51wEQrUImjn0J7DRS7tf93
SZmAOeACjN9NPa22E7Fra8Oal3ibKmGOMaULFyVcs36vZiJQBE+Q12otKYHY7RZX
itfzkqm6vu1g+Yc/s1XjoxCmnxatFaXbmzuYTmJR2TJVL7EZgsN4z4UbFtCZAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUtjtXRVhYBisLvxbyWcqtsODAi4gwHwYDVR0j
BBgwFoAU7oKBt74TzAauKrowU36GZMcS+hYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNU5UMzhXRXF1dEpHdVBibTJKM1MxdnFkU0xCTUtTMVFSWWZKeTRTaGFq
SGIvMS9FRTgyODFCN0JFMTNDQzA2QUUyQUJBMzA1MzdFODY2NEM3MTJGQTE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VFODI4MUI3QkUxM0NDMDZB
RTJBQkEzMDUzN0U4NjY0QzcxMkZBMTYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVOVDM4V0VxdXRKR3VQYm0ySjNTMXZxZFNMQk1LUzFRUllmSnk0U2hhakhiLzEv
MzEzNzMwMmUzMDJlMzEzODM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM0
MzkzNzM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqgC8MA0GCSqGSIb3DQEBCwUAA4IBAQBFtvIcV9RR
wW9R4HGwGQbG1utkzNAPhrJACXsSGFD7iisxZ7+425BLnyD6vSWYqRa6RVN9O7xh
5Lir5pijDcRGEZhSRIIZBO8yIgg9u2DI2R6DON6h+Kq22G08kpShRxoyNnkWM96A
2JiUUMR+CQxA7hOAyu4pO404f1LWgsJf/UVByMO4/149TtPp55evMifva2wvHLpD
qln5PmaaECVdcpA0cRcKpnKQ7KLO8QZYVTYOUxEDPamgFzpkOQLdDrTa2T2q9Tza
BvwGS0CUQWKo2hlK1Mwo2vg4WQdMcHwmnnPGkD5ZZ93eVT+8U0WSYdseCAn66cv5
Wz+rZb5/K4mr
-----END CERTIFICATE-----
Generated at Thu Apr 24 18:01:46 2025 by rpki-client on console.sobornost.net