Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/2/3137302e38342e3234302e302f32322d3234203d3e203532363337.roa
File:                     3137302e38342e3234302e302f32322d3234203d3e203532363337.roa (raw, json)
Hash identifier:          dRynwq6+N2/eYsHPcgZGR88JKlLyV8dScUmNVmwDHbE=
Subject key identifier:   5A:EF:B6:94:AF:67:DE:EE:8D:4A:E8:8D:E1:82:A8:E2:4B:17:5C:5A
Certificate issuer:       /CN=BD40CEDDB8E6AC181C713C37060807D151D2B1AE
Certificate serial:       0D5C3DF1E5CEB2CEBA2BCE8DB18E1004AAE9BED6
Authority key identifier: BD:40:CE:DD:B8:E6:AC:18:1C:71:3C:37:06:08:07:D1:51:D2:B1:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD40CEDDB8E6AC181C713C37060807D151D2B1AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/2/3137302e38342e3234302e302f32322d3234203d3e203532363337.roa
Signing time:             Wed 05 Mar 2025 19:00:03 +0000
ROA not before:           Wed 05 Mar 2025 18:55:03 +0000
ROA not after:            Wed 04 Mar 2026 19:00:03 +0000
asID:                     52637
IP address blocks:        170.84.240.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/2/BD40CEDDB8E6AC181C713C37060807D151D2B1AE.crl
                          rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/2/BD40CEDDB8E6AC181C713C37060807D151D2B1AE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD40CEDDB8E6AC181C713C37060807D151D2B1AE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:5c:3d:f1:e5:ce:b2:ce:ba:2b:ce:8d:b1:8e:10:04:aa:e9:be:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD40CEDDB8E6AC181C713C37060807D151D2B1AE
        Validity
            Not Before: Mar  5 18:55:03 2025 GMT
            Not After : Mar  4 19:00:03 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a7:80:29:17:3e:ef:57:40:fa:b7:e7:b4:77:
                    98:58:bb:76:63:cd:67:ba:74:26:f7:d8:20:d9:41:
                    4b:17:aa:32:4e:dd:98:33:6d:af:a5:53:d0:c9:8f:
                    9d:1c:a0:ad:d4:7a:83:f4:3e:ca:ca:c0:c8:0a:e1:
                    d0:cc:0c:44:8b:10:63:40:c0:40:cb:5b:61:05:a6:
                    1f:03:a1:5b:68:2a:cf:d9:5a:1f:b2:0b:8c:81:7a:
                    a8:5f:1f:54:59:51:fc:b4:bc:22:6c:7a:24:be:80:
                    84:fc:2e:cb:8b:e6:35:cb:5e:0f:14:2e:a0:ef:4e:
                    78:16:b0:cc:6c:61:88:bf:fc:b7:8d:2a:df:15:59:
                    cf:ed:9e:4e:10:06:7e:9b:65:ae:b4:d0:4b:70:ac:
                    06:c5:5f:3d:d4:c2:f6:b9:bf:03:6c:bc:ed:a5:cc:
                    7b:f2:b8:25:cc:28:87:6e:60:47:0f:80:68:16:e9:
                    3e:6b:40:84:6f:68:ed:22:18:b1:47:58:c4:6e:cd:
                    f4:51:f4:a3:5c:93:72:67:8e:c6:24:a9:30:63:0b:
                    73:42:86:56:7c:8c:e1:21:26:08:5f:54:27:29:f9:
                    63:f7:90:fd:8b:0c:c9:c0:e3:73:d0:10:ba:14:90:
                    65:96:3a:31:7d:a8:ae:72:d9:30:b8:48:7f:00:9c:
                    dc:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:EF:B6:94:AF:67:DE:EE:8D:4A:E8:8D:E1:82:A8:E2:4B:17:5C:5A
            X509v3 Authority Key Identifier:
                keyid:BD:40:CE:DD:B8:E6:AC:18:1C:71:3C:37:06:08:07:D1:51:D2:B1:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/2/BD40CEDDB8E6AC181C713C37060807D151D2B1AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD40CEDDB8E6AC181C713C37060807D151D2B1AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/2/3137302e38342e3234302e302f32322d3234203d3e203532363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:86:67:32:85:af:ba:7d:b4:c2:41:e9:97:68:aa:f5:01:47:
         8a:41:da:8e:a8:c0:9e:50:e1:a0:b7:67:b8:bb:f1:79:ef:1e:
         df:9b:bc:d6:d4:9c:23:2f:1c:80:15:75:31:d1:fe:19:c3:ba:
         82:2f:c4:78:de:57:70:a1:9e:f1:f4:10:04:33:1d:b3:1e:c3:
         6f:ca:d8:97:af:3c:e7:a6:0a:9a:4d:9d:21:8e:63:86:fb:a0:
         d5:13:db:20:7b:ee:db:ad:fc:25:ee:71:3a:56:56:6a:a2:84:
         31:eb:d1:f9:79:c0:02:9d:44:01:1e:2b:93:3e:98:a9:54:72:
         23:01:5f:55:0a:09:bd:48:3a:80:f5:3d:da:57:7d:e4:0f:7d:
         67:15:6b:fa:7e:83:2e:66:7d:e3:92:2d:1f:35:4e:67:11:03:
         54:99:27:b2:86:1a:c5:53:36:c6:a3:c1:ba:29:55:dc:a6:bd:
         b9:d3:4f:be:c4:05:49:fb:3d:6c:95:02:ba:e7:3b:21:12:45:
         5c:a7:f2:e0:10:94:90:19:65:73:20:ae:7c:a8:37:f5:7c:70:
         23:65:3b:b7:96:dd:34:08:5a:27:70:b1:9b:c6:f2:15:f1:de:
         63:09:1c:d5:d9:10:0d:d6:be:23:45:0f:d9:90:52:c5:32:83:
         77:83:88:13
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUDVw98eXOss66K86NsY4QBKrpvtYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkQ0MENFRERCOEU2QUMxODFDNzEzQzM3MDYwODA3RDE1
MUQyQjFBRTAeFw0yNTAzMDUxODU1MDNaFw0yNjAzMDQxOTAwMDNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjFBNzgwMjkxNzNFRUY1NzQw
RkFCN0U3QjQ3Nzk4NThCQjc2NjNDRDY3QkE3NDI2RjdEODIwRDk0MTRCMTdBQTMy
NEVERDk4MzM2REFGQTU1M0QwQzk4RjlEMUNBMEFERDQ3QTgzRjQzRUNBQ0FDMEM4
MEFFMUQwQ0MwQzQ0OEIxMDYzNDBDMDQwQ0I1QjYxMDVBNjFGMDNBMTVCNjgyQUNG
RDk1QTFGQjIwQjhDODE3QUE4NUYxRjU0NTk1MUZDQjRCQzIyNkM3QTI0QkU4MDg0
RkMyRUNCOEJFNjM1Q0I1RTBGMTQyRUEwRUY0RTc4MTZCMENDNkM2MTg4QkZGQ0I3
OEQyQURGMTU1OUNGRUQ5RTRFMTAwNjdFOUI2NUFFQjREMDRCNzBBQzA2QzU1RjNE
RDRDMkY2QjlCRjAzNkNCQ0VEQTVDQzdCRjJCODI1Q0MyODg3NkU2MDQ3MEY4MDY4
MTZFOTNFNkI0MDg0NkY2OEVEMjIxOEIxNDc1OEM0NkVDREY0NTFGNEEzNUM5Mzcy
Njc4RUM2MjRBOTMwNjMwQjczNDI4NjU2N0M4Q0UxMjEyNjA4NUY1NDI3MjlGOTYz
Rjc5MEZEOEIwQ0M5QzBFMzczRDAxMEJBMTQ5MDY1OTYzQTMxN0RBOEFFNzJEOTMw
Qjg0ODdGMDA5Q0RDMDcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAsaeAKRc+71dA+rfntHeYWLt2Y81nunQm99gg2UFLF6oyTt2YM22v
pVPQyY+dHKCt1HqD9D7KysDICuHQzAxEixBjQMBAy1thBaYfA6FbaCrP2VofsguM
gXqoXx9UWVH8tLwibHokvoCE/C7Li+Y1y14PFC6g7054FrDMbGGIv/y3jSrfFVnP
7Z5OEAZ+m2WutNBLcKwGxV891ML2ub8DbLztpcx78rglzCiHbmBHD4BoFuk+a0CE
b2jtIhixR1jEbs30UfSjXJNyZ47GJKkwYwtzQoZWfIzhISYIX1QnKflj95D9iwzJ
wONz0BC6FJBlljoxfaiuctkwuEh/AJzcBwIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FFrvtpSvZ97ujUrojeGCqOJLF1xaMB8GA1UdIwQYMBaAFL1Azt245qwYHHE8NwYI
B9FR0rGuMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0J6V0w2RGN2Y0I0WVE4
QTVaRE1wM2kzTFMyRVdCU3poMlB3cmdaZER1V1dCLzIvQkQ0MENFRERCOEU2QUMx
ODFDNzEzQzM3MDYwODA3RDE1MUQyQjFBRS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9CRDQwQ0VEREI4RTZBQzE4MUM3MTNDMzcwNjA4MDdEMTUxRDJC
MUFFLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9CeldMNkRjdmNCNFlROEE1WkRN
cDNpM0xTMkVXQlN6aDJQd3JnWmREdVdXQi8yLzMxMzczMDJlMzgzNDJlMzIzNDMw
MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzMjM2MzMzNy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqpU
8DANBgkqhkiG9w0BAQsFAAOCAQEAbYZnMoWvun20wkHpl2iq9QFHikHajqjAnlDh
oLdnuLvxee8e35u81tScIy8cgBV1MdH+GcO6gi/EeN5XcKGe8fQQBDMdsx7Db8rY
l68856YKmk2dIY5jhvug1RPbIHvu2638Je5xOlZWaqKEMevR+XnAAp1EAR4rkz6Y
qVRyIwFfVQoJvUg6gPU92ld95A99ZxVr+n6DLmZ945ItHzVOZxEDVJknsoYaxVM2
xqPBuilV3Ka9udNPvsQFSfs9bJUCuuc7IRJFXKfy4BCUkBllcyCufKg39XxwI2U7
t5bdNAhaJ3Cxm8byFfHeYwkc1dkQDda+I0UP2ZBSxTKDd4OIEw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 14:50:46 2025 by rpki-client on console.sobornost.net