Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/3137392e34332e31362e302f32342d3234203d3e20323730393736.roa
File:                     3137392e34332e31362e302f32342d3234203d3e20323730393736.roa (raw, json)
Hash identifier:          r5Nv8hZqAdaFErWxl99wVj0f5dm9RR/TtUEwXqjtBAw=
Subject key identifier:   C8:BF:D8:1E:D7:1B:98:13:39:37:C4:E2:0E:0D:1E:B0:E3:C7:2E:2E
Certificate issuer:       /CN=4A3F13967BD1598A8FC3B219CC9900A809C37494
Certificate serial:       553E6EE2B3F3A32FA8A3D71D8A1AB4B6EAD20686
Authority key identifier: 4A:3F:13:96:7B:D1:59:8A:8F:C3:B2:19:CC:99:00:A8:09:C3:74:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A3F13967BD1598A8FC3B219CC9900A809C37494.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/3137392e34332e31362e302f32342d3234203d3e20323730393736.roa
Signing time:             Fri 28 Mar 2025 19:40:38 +0000
ROA not before:           Fri 28 Mar 2025 19:35:38 +0000
ROA not after:            Fri 27 Mar 2026 19:40:38 +0000
asID:                     270976
IP address blocks:        179.43.16.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/4A3F13967BD1598A8FC3B219CC9900A809C37494.crl
                          rsync://rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/4A3F13967BD1598A8FC3B219CC9900A809C37494.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A3F13967BD1598A8FC3B219CC9900A809C37494.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:3e:6e:e2:b3:f3:a3:2f:a8:a3:d7:1d:8a:1a:b4:b6:ea:d2:06:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A3F13967BD1598A8FC3B219CC9900A809C37494
        Validity
            Not Before: Mar 28 19:35:38 2025 GMT
            Not After : Mar 27 19:40:38 2026 GMT
        Subject: CN=C8BFD81ED71B98133937C4E20E0D1EB0E3C72E2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d6:88:1e:3f:0a:03:26:8b:99:06:0c:f9:40:
                    53:5c:6f:4c:b6:c9:e6:16:a3:82:29:eb:0a:b4:ec:
                    31:a0:77:4a:ad:5b:71:b0:e5:65:e8:8f:ca:5d:9e:
                    57:87:7b:5c:bc:97:d7:db:c7:8d:c8:60:78:e2:ad:
                    4d:2a:de:47:e4:d2:0a:67:3b:92:b2:e2:57:96:7e:
                    c5:be:20:cc:b4:9c:03:a1:a1:98:c7:22:ea:8e:72:
                    2e:ad:09:88:23:19:35:dd:bb:94:be:0d:ba:64:81:
                    bd:c8:97:95:bb:9e:3b:15:71:7f:d6:b3:59:e3:85:
                    42:22:17:5b:9f:00:52:e0:ae:4f:3e:dc:b2:89:f5:
                    4b:f4:ed:7f:33:e6:c7:71:91:46:c5:b2:cf:bd:a2:
                    5d:78:37:98:0b:b5:00:e7:5f:03:88:09:ab:11:ad:
                    63:f3:66:99:39:0e:d8:4a:e3:e3:ce:17:7e:f0:10:
                    f3:1e:99:8d:5b:93:dd:4a:c3:bb:d3:b9:9d:f5:fd:
                    22:d1:10:98:69:53:71:5d:80:46:39:60:66:3f:ae:
                    65:82:44:ce:30:3c:a8:f3:85:61:b8:95:56:92:4f:
                    e0:38:5b:a2:4e:91:ea:6a:b7:79:19:98:68:49:40:
                    ec:08:bf:13:a4:ad:d6:c1:f7:53:9f:b7:0a:93:fc:
                    f8:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:BF:D8:1E:D7:1B:98:13:39:37:C4:E2:0E:0D:1E:B0:E3:C7:2E:2E
            X509v3 Authority Key Identifier:
                keyid:4A:3F:13:96:7B:D1:59:8A:8F:C3:B2:19:CC:99:00:A8:09:C3:74:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/4A3F13967BD1598A8FC3B219CC9900A809C37494.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A3F13967BD1598A8FC3B219CC9900A809C37494.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/3137392e34332e31362e302f32342d3234203d3e20323730393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:48:aa:be:ad:71:75:ec:09:c1:ed:36:a1:9f:df:b9:92:fb:
         ad:b8:99:f8:c6:dd:e6:fd:5f:e4:19:8d:81:30:94:2b:ef:77:
         80:9f:f6:1e:01:7e:e7:ce:06:74:c3:71:56:f5:03:5a:bb:69:
         88:12:a7:df:2c:d5:0a:20:04:56:db:f3:3f:04:b2:e3:e4:ed:
         4c:ba:a0:c8:df:f7:1c:ed:3a:b9:82:37:54:9f:70:f4:4d:7e:
         9b:48:3a:7c:0b:de:8d:98:b0:bc:b7:d8:33:ae:62:66:d5:d7:
         85:ab:42:09:61:6a:cf:da:74:e5:cf:80:d6:e1:b5:a1:cd:93:
         66:ba:02:64:1f:8f:1c:1b:2b:32:52:3c:64:af:34:84:2a:74:
         40:85:b3:c3:d5:d9:58:5e:bf:e8:9e:c4:77:2b:d0:d4:e0:1e:
         b5:27:40:b3:7c:4e:7b:ed:a0:8d:f7:24:7c:77:6e:6a:57:78:
         22:46:ea:5d:2a:80:06:87:e5:4d:f5:5e:95:db:47:12:03:8e:
         b6:2d:84:4b:2c:5e:b7:34:dc:3a:22:fd:6d:28:eb:5e:c4:98:
         5e:4b:ed:a2:d4:de:85:8f:9f:9b:1d:3f:d1:cd:3e:7b:70:78:
         9c:b3:bd:2b:21:a3:43:2b:6f:b2:f4:87:98:52:6b:27:d4:53:
         96:60:4c:64
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUVT5u4rPzoy+oo9cdihq0turSBoYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEEzRjEzOTY3QkQxNTk4QThGQzNCMjE5Q0M5OTAwQTgw
OUMzNzQ5NDAeFw0yNTAzMjgxOTM1MzhaFw0yNjAzMjcxOTQwMzhaMDMxMTAvBgNV
BAMTKEM4QkZEODFFRDcxQjk4MTMzOTM3QzRFMjBFMEQxRUIwRTNDNzJFMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC71ogePwoDJouZBgz5QFNcb0y2
yeYWo4Ip6wq07DGgd0qtW3Gw5WXoj8pdnleHe1y8l9fbx43IYHjirU0q3kfk0gpn
O5Ky4leWfsW+IMy0nAOhoZjHIuqOci6tCYgjGTXdu5S+Dbpkgb3Il5W7njsVcX/W
s1njhUIiF1ufAFLgrk8+3LKJ9Uv07X8z5sdxkUbFss+9ol14N5gLtQDnXwOICasR
rWPzZpk5DthK4+POF37wEPMemY1bk91Kw7vTuZ31/SLREJhpU3FdgEY5YGY/rmWC
RM4wPKjzhWG4lVaST+A4W6JOkepqt3kZmGhJQOwIvxOkrdbB91OftwqT/PjvAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUyL/YHtcbmBM5N8TiDg0esOPHLi4wHwYDVR0j
BBgwFoAUSj8TlnvRWYqPw7IZzJkAqAnDdJQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNmtIUERHUUtiNVlBWVAxYTdyTG1XaE5xQkp3Z2hqR3pYZWJoWFFlUW82
V0EvMC80QTNGMTM5NjdCRDE1OThBOEZDM0IyMTlDQzk5MDBBODA5QzM3NDk0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRBM0YxMzk2N0JEMTU5OEE4
RkMzQjIxOUNDOTkwMEE4MDlDMzc0OTQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZrSFBER1FLYjVZQVlQMWE3ckxtV2hOcUJKd2doakd6WGViaFhRZVFvNldBLzAv
MzEzNzM5MmUzNDMzMmUzMTM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMw
MzkzNzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsysQMA0GCSqGSIb3DQEBCwUAA4IBAQBnSKq+rXF1
7AnB7Tahn9+5kvutuJn4xt3m/V/kGY2BMJQr73eAn/YeAX7nzgZ0w3FW9QNau2mI
EqffLNUKIARW2/M/BLLj5O1MuqDI3/cc7Tq5gjdUn3D0TX6bSDp8C96NmLC8t9gz
rmJm1deFq0IJYWrP2nTlz4DW4bWhzZNmugJkH48cGysyUjxkrzSEKnRAhbPD1dlY
Xr/onsR3K9DU4B61J0CzfE577aCN9yR8d25qV3giRupdKoAGh+VN9V6V20cSA462
LYRLLF63NNw6Iv1tKOtexJheS+2i1N6Fj5+bHT/RzT57cHics70rIaNDK2+y9IeY
Umsn1FOWYExk
-----END CERTIFICATE-----
Generated at Mon Apr 28 06:00:07 2025 by rpki-client on console.sobornost.net