Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/3133312e3232312e3137332e302f32342d3234203d3e20323634343232.roa
File:                     3133312e3232312e3137332e302f32342d3234203d3e20323634343232.roa (raw, json)
Hash identifier:          MtvMNR0zDNZzlahF8YmcyWOpHvvYAWMBLmU1kv1s7BM=
Subject key identifier:   C7:2C:64:B6:F3:80:62:FF:E5:79:70:6B:FA:E3:98:C6:02:11:FA:D0
Certificate issuer:       /CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
Certificate serial:       1A88C78DA5D95EB80C01932749598122076FD926
Authority key identifier: 7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/3133312e3232312e3137332e302f32342d3234203d3e20323634343232.roa
Signing time:             Wed 16 Apr 2025 15:05:44 +0000
ROA not before:           Wed 16 Apr 2025 15:00:44 +0000
ROA not after:            Wed 15 Apr 2026 15:05:44 +0000
asID:                     264422
IP address blocks:        131.221.173.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl
                          rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 17:47:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:88:c7:8d:a5:d9:5e:b8:0c:01:93:27:49:59:81:22:07:6f:d9:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
        Validity
            Not Before: Apr 16 15:00:44 2025 GMT
            Not After : Apr 15 15:05:44 2026 GMT
        Subject: CN=C72C64B6F38062FFE579706BFAE398C60211FAD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2d:85:cb:ea:ee:09:41:8e:d6:6b:e7:f6:39:
                    72:ec:0c:fa:54:12:02:3e:2d:86:04:b8:ee:c4:d3:
                    1c:ff:33:85:ee:76:a9:84:95:47:16:74:f9:1e:8f:
                    87:8c:73:5f:09:3d:ba:8c:e6:8a:73:54:22:18:0b:
                    84:20:fd:50:15:78:ed:ea:63:3e:25:0c:50:4b:15:
                    05:5e:2b:97:6a:bd:4f:0d:ff:52:73:2a:41:83:1e:
                    f9:3f:ba:b6:94:f9:a8:31:43:4a:21:02:f1:b9:c0:
                    d0:a0:a5:b2:b5:50:63:20:2c:68:53:d6:0d:67:b7:
                    33:e8:c5:16:ec:55:d4:ed:d5:1c:40:26:10:e3:83:
                    dd:fe:5f:c4:ec:43:0e:f2:48:0a:58:c0:5f:7a:42:
                    3f:bb:fd:12:e1:a0:7f:ea:6b:50:33:2b:6a:45:20:
                    10:08:a6:e1:38:26:b0:fe:61:ae:50:7c:84:98:2e:
                    9d:73:72:45:02:a3:16:cd:33:6f:7f:f6:0b:66:a8:
                    60:d6:28:91:f6:25:2b:f1:6c:f5:a6:68:81:99:8c:
                    c6:00:3b:3d:a0:49:f1:5b:eb:54:c1:c7:c1:e1:6a:
                    d6:8b:26:43:57:18:4b:69:d7:b1:49:52:3c:3e:5d:
                    95:2e:bd:12:82:5a:77:fe:54:bf:b7:26:1a:a4:30:
                    56:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:2C:64:B6:F3:80:62:FF:E5:79:70:6B:FA:E3:98:C6:02:11:FA:D0
            X509v3 Authority Key Identifier:
                keyid:7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/3133312e3232312e3137332e302f32342d3234203d3e20323634343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:11:9b:d6:dd:9e:a5:78:fd:65:f7:fc:22:19:bd:4e:c8:d6:
         20:f3:80:3a:48:c6:68:d7:50:00:4b:6b:7d:30:9b:fe:02:9b:
         45:58:10:ef:17:48:0b:dc:2f:e9:53:da:84:32:ec:37:6c:5c:
         57:f4:4d:7f:6a:7e:ce:61:ce:3f:07:18:2f:09:7e:6f:1f:71:
         da:11:02:bc:a8:3b:1d:62:bd:46:15:a2:91:30:f9:79:7d:ea:
         ec:eb:9a:94:ab:bc:17:56:3d:1a:99:0a:ac:be:f2:54:59:7c:
         22:64:6e:2f:62:5b:1f:75:69:87:1b:ec:fe:12:14:44:59:f8:
         e9:89:48:a6:d8:5b:7c:02:21:26:00:d0:fd:b2:da:b1:33:c0:
         19:1e:fa:88:ca:41:11:98:49:0c:a2:3f:4e:fa:08:1f:ed:89:
         17:66:ea:f7:49:5a:35:12:57:1b:97:5f:73:0d:c0:7c:f1:9c:
         5e:98:2c:fc:04:99:90:37:25:5a:89:20:4a:b2:ee:88:30:a3:
         b7:a3:b9:c8:f1:18:e5:db:f9:03:a2:32:60:2a:86:b0:27:c1:
         72:a7:9d:7c:e1:96:8d:9e:a8:9d:d7:77:10:ef:d8:bc:fb:16:
         88:22:bd:51:9f:77:49:ea:1f:7a:d3:0d:df:e5:08:f6:8f:74:
         3c:50:06:d9
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUGojHjaXZXrgMAZMnSVmBIgdv2SYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0Q0Q0Q4RTY0MDg4Nzk0OUIxQjYzOEE0M0E5NzRBQ0FE
NTlEQjkxMzAeFw0yNTA0MTYxNTAwNDRaFw0yNjA0MTUxNTA1NDRaMDMxMTAvBgNV
BAMTKEM3MkM2NEI2RjM4MDYyRkZFNTc5NzA2QkZBRTM5OEM2MDIxMUZBRDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCLYXL6u4JQY7Wa+f2OXLsDPpU
EgI+LYYEuO7E0xz/M4XudqmElUcWdPkej4eMc18JPbqM5opzVCIYC4Qg/VAVeO3q
Yz4lDFBLFQVeK5dqvU8N/1JzKkGDHvk/uraU+agxQ0ohAvG5wNCgpbK1UGMgLGhT
1g1ntzPoxRbsVdTt1RxAJhDjg93+X8TsQw7ySApYwF96Qj+7/RLhoH/qa1AzK2pF
IBAIpuE4JrD+Ya5QfISYLp1zckUCoxbNM29/9gtmqGDWKJH2JSvxbPWmaIGZjMYA
Oz2gSfFb61TBx8HhataLJkNXGEtp17FJUjw+XZUuvRKCWnf+VL+3JhqkMFa5AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUxyxktvOAYv/leXBr+uOYxgIR+tAwHwYDVR0j
BBgwFoAUfUzY5kCIeUmxtjikOpdKytWduRMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnRTTXdHdk1ZdWRlUUd0dGtQMWNEdDVEUUdQclNna0J2aHdZemZGd3N2
dkQvMC83RDRDRDhFNjQwODg3OTQ5QjFCNjM4QTQzQTk3NEFDQUQ1OURCOTEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdENENEOEU2NDA4ODc5NDlC
MUI2MzhBNDNBOTc0QUNBRDU5REI5MTMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ0U013R3ZNWXVkZVFHdHRrUDFjRHQ1RFFHUHJTZ2tCdmh3WXpmRndzdnZELzAv
MzEzMzMxMmUzMjMyMzEyZTMxMzczMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNDM0MzIzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIPdrTANBgkqhkiG9w0BAQsFAAOCAQEAhBGb
1t2epXj9Zff8Ihm9TsjWIPOAOkjGaNdQAEtrfTCb/gKbRVgQ7xdIC9wv6VPahDLs
N2xcV/RNf2p+zmHOPwcYLwl+bx9x2hECvKg7HWK9RhWikTD5eX3q7OualKu8F1Y9
GpkKrL7yVFl8ImRuL2JbH3Vphxvs/hIURFn46YlIpthbfAIhJgDQ/bLasTPAGR76
iMpBEZhJDKI/TvoIH+2JF2bq90laNRJXG5dfcw3AfPGcXpgs/ASZkDclWokgSrLu
iDCjt6O5yPEY5dv5A6IyYCqGsCfBcqedfOGWjZ6ondd3EO/YvPsWiCK9UZ93Seof
etMN3+UI9o90PFAG2Q==
-----END CERTIFICATE-----
Generated at Fri Apr 25 19:24:40 2025 by rpki-client on console.sobornost.net