Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3137372e3132342e34382e302f32322d3234203d3e20323632333136.roa
File:                     3137372e3132342e34382e302f32322d3234203d3e20323632333136.roa (raw, json)
Hash identifier:          p5diy4Lfpp3uRqBtSPoACOQZG5XP892Xk7GyAi3svuU=
Subject key identifier:   EC:86:78:CF:B4:34:F1:5D:FA:C1:2A:CC:C8:08:81:60:B5:F6:F9:C4
Certificate issuer:       /CN=CB9260C7ABCD7C89119B0F61C609E31389DEB1DE
Certificate serial:       25CD7622C2C1E7430F5E57AB771DE383C53CB76D
Authority key identifier: CB:92:60:C7:AB:CD:7C:89:11:9B:0F:61:C6:09:E3:13:89:DE:B1:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3137372e3132342e34382e302f32322d3234203d3e20323632333136.roa
Signing time:             Wed 16 Apr 2025 13:56:06 +0000
ROA not before:           Wed 16 Apr 2025 13:51:06 +0000
ROA not after:            Wed 15 Apr 2026 13:56:06 +0000
asID:                     262316
IP address blocks:        177.124.48.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.crl
                          rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 17:58:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:cd:76:22:c2:c1:e7:43:0f:5e:57:ab:77:1d:e3:83:c5:3c:b7:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB9260C7ABCD7C89119B0F61C609E31389DEB1DE
        Validity
            Not Before: Apr 16 13:51:06 2025 GMT
            Not After : Apr 15 13:56:06 2026 GMT
        Subject: CN=EC8678CFB434F15DFAC12ACCC8088160B5F6F9C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:15:61:63:96:ba:f4:60:28:bf:94:7e:a0:02:
                    c8:7d:e5:b8:7b:3b:74:7f:65:07:c8:5c:f4:08:64:
                    e3:cf:6c:45:89:68:fc:91:fa:ba:49:c5:4e:b2:9c:
                    53:53:66:95:7d:4b:90:86:10:d5:f3:c9:f5:84:ff:
                    69:3f:e3:99:28:50:a4:0a:05:06:7d:8a:75:b9:3c:
                    a5:d1:d6:3b:8e:85:76:5d:d9:26:5f:8b:88:7a:c4:
                    d1:ae:5a:fb:4f:89:3b:47:a4:11:43:37:82:70:25:
                    13:c0:e1:1e:f1:f0:92:31:16:b9:f8:93:06:c8:04:
                    67:94:69:54:6c:fe:8a:de:d0:05:47:1e:5f:15:1c:
                    c5:8c:ac:9b:77:17:8b:90:1d:28:b9:07:7a:33:2d:
                    24:80:0a:b3:ff:5c:e9:01:4d:3a:cb:07:6b:66:c6:
                    b3:0c:b6:44:a1:e5:a0:77:84:19:f8:96:c7:0f:82:
                    fc:61:52:f2:9f:10:6b:53:37:ff:ca:e8:cc:3c:fb:
                    c2:83:ce:97:3c:2e:b7:17:bf:80:c8:38:a0:06:20:
                    b0:74:e5:06:67:b2:68:73:38:28:31:3c:73:f6:8a:
                    a1:6e:3d:4c:08:2a:f8:31:77:93:2a:fe:0f:01:99:
                    ac:22:35:52:b1:fb:cf:b7:23:f5:0c:14:50:31:6e:
                    6c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:86:78:CF:B4:34:F1:5D:FA:C1:2A:CC:C8:08:81:60:B5:F6:F9:C4
            X509v3 Authority Key Identifier:
                keyid:CB:92:60:C7:AB:CD:7C:89:11:9B:0F:61:C6:09:E3:13:89:DE:B1:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3137372e3132342e34382e302f32322d3234203d3e20323632333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:1f:18:3a:3c:a3:ba:d3:bf:6e:f9:52:17:b3:b2:23:a0:25:
         b4:a1:92:35:7a:c5:18:0b:c1:19:2c:b0:4d:c1:24:3d:a2:61:
         05:7c:02:af:87:c4:de:94:87:da:9b:f5:86:95:b9:6a:c0:13:
         7f:dc:49:47:77:b8:ef:4a:92:e7:57:c9:32:06:1a:fc:db:f0:
         1e:1d:8e:e6:9d:4a:e6:cf:6b:59:47:db:a8:8c:88:13:b2:70:
         2a:0e:a8:cd:67:89:8e:7e:72:7d:a1:5e:97:42:75:90:2c:80:
         62:a4:08:5e:fa:d4:d0:7d:2d:ef:19:7d:d6:5d:16:e7:6d:7c:
         bd:be:72:e9:c2:02:0b:49:27:43:61:7e:78:59:f7:5c:dd:99:
         7f:66:19:df:97:b0:46:d8:17:24:a2:f3:d9:66:eb:7e:72:79:
         f8:7f:e1:ac:c2:d5:9d:ac:91:7b:62:e9:6c:a8:8f:ce:56:39:
         fa:89:4c:dc:e6:93:65:2c:06:8c:d7:24:2a:ab:6b:7a:53:3a:
         6a:7a:52:f2:9d:8a:68:96:60:df:58:dd:0d:b1:d8:15:28:c2:
         ff:59:4e:20:f1:df:8a:c2:6c:ed:88:e5:5d:5a:44:31:a0:44:
         39:2b:ba:14:44:39:f6:8a:00:4d:8d:b9:61:16:13:16:bf:76:
         b7:51:b3:c6
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUJc12IsLB50MPXlerdx3jg8U8t20wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0I5MjYwQzdBQkNEN0M4OTExOUIwRjYxQzYwOUUzMTM4
OURFQjFERTAeFw0yNTA0MTYxMzUxMDZaFw0yNjA0MTUxMzU2MDZaMDMxMTAvBgNV
BAMTKEVDODY3OENGQjQzNEYxNURGQUMxMkFDQ0M4MDg4MTYwQjVGNkY5QzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmFWFjlrr0YCi/lH6gAsh95bh7
O3R/ZQfIXPQIZOPPbEWJaPyR+rpJxU6ynFNTZpV9S5CGENXzyfWE/2k/45koUKQK
BQZ9inW5PKXR1juOhXZd2SZfi4h6xNGuWvtPiTtHpBFDN4JwJRPA4R7x8JIxFrn4
kwbIBGeUaVRs/ore0AVHHl8VHMWMrJt3F4uQHSi5B3ozLSSACrP/XOkBTTrLB2tm
xrMMtkSh5aB3hBn4lscPgvxhUvKfEGtTN//K6Mw8+8KDzpc8LrcXv4DIOKAGILB0
5QZnsmhzOCgxPHP2iqFuPUwIKvgxd5Mq/g8BmawiNVKx+8+3I/UMFFAxbmwbAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU7IZ4z7Q08V36wSrMyAiBYLX2+cQwHwYDVR0j
BBgwFoAUy5Jgx6vNfIkRmw9hxgnjE4nesd4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODhTcjZrNWc1bnkxdndkaXdoOHlmTURTMkVlclc0NXBaZERob1h1VXQy
S2EvMC9DQjkyNjBDN0FCQ0Q3Qzg5MTE5QjBGNjFDNjA5RTMxMzg5REVCMURFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NCOTI2MEM3QUJDRDdDODkx
MTlCMEY2MUM2MDlFMzEzODlERUIxREUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg4U3I2azVnNW55MXZ3ZGl3aDh5Zk1EUzJFZXJXNDVwWmREaG9YdVV0MkthLzAv
MzEzNzM3MmUzMTMyMzQyZTM0MzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzIzMzMxMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKxfDAwDQYJKoZIhvcNAQELBQADggEBAGAfGDo8
o7rTv275UhezsiOgJbShkjV6xRgLwRkssE3BJD2iYQV8Aq+HxN6Uh9qb9YaVuWrA
E3/cSUd3uO9KkudXyTIGGvzb8B4djuadSubPa1lH26iMiBOycCoOqM1niY5+cn2h
XpdCdZAsgGKkCF761NB9Le8ZfdZdFudtfL2+cunCAgtJJ0NhfnhZ91zdmX9mGd+X
sEbYFySi89lm635yefh/4azC1Z2skXti6Wyoj85WOfqJTNzmk2UsBozXJCqra3pT
Omp6UvKdimiWYN9Y3Q2x2BUowv9ZTiDx34rCbO2I5V1aRDGgRDkruhREOfaKAE2N
uWEWExa/drdRs8Y=
-----END CERTIFICATE-----
Generated at Sat Apr 26 18:18:13 2025 by rpki-client on console.sobornost.net