Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CM61YX48Fxvq9UTK57aGQ5ZfhK1j8pjiohpUKNpekH55/1/3137302e3233382e3138342e302f3234203d3e20323636333338.roa
File:                     3137302e3233382e3138342e302f3234203d3e20323636333338.roa (raw, json)
Hash identifier:          w4sXnGI2uOr6cCxdXnyOL+eRqaex8Q4qdRiuDBCjlDM=
Subject key identifier:   EE:31:23:EB:55:E2:AB:EA:9B:97:86:21:8E:C1:DF:61:55:FE:EC:1C
Certificate issuer:       /CN=4EE0AA39E5673205B615B1337C24E86FBCD3C635
Certificate serial:       5B13D38F9F52FF9F7B529348F43A1FAC4E91A052
Authority key identifier: 4E:E0:AA:39:E5:67:32:05:B6:15:B1:33:7C:24:E8:6F:BC:D3:C6:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EE0AA39E5673205B615B1337C24E86FBCD3C635.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CM61YX48Fxvq9UTK57aGQ5ZfhK1j8pjiohpUKNpekH55/1/3137302e3233382e3138342e302f3234203d3e20323636333338.roa
Signing time:             Sat 26 Apr 2025 21:00:01 +0000
ROA not before:           Sat 26 Apr 2025 20:55:01 +0000
ROA not after:            Sun 26 Apr 2026 21:00:01 +0000
asID:                     266338
IP address blocks:        170.238.184.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CM61YX48Fxvq9UTK57aGQ5ZfhK1j8pjiohpUKNpekH55/1/4EE0AA39E5673205B615B1337C24E86FBCD3C635.crl
                          rsync://rpki-repo.registro.br/repo/CM61YX48Fxvq9UTK57aGQ5ZfhK1j8pjiohpUKNpekH55/1/4EE0AA39E5673205B615B1337C24E86FBCD3C635.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EE0AA39E5673205B615B1337C24E86FBCD3C635.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:13:d3:8f:9f:52:ff:9f:7b:52:93:48:f4:3a:1f:ac:4e:91:a0:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EE0AA39E5673205B615B1337C24E86FBCD3C635
        Validity
            Not Before: Apr 26 20:55:01 2025 GMT
            Not After : Apr 26 21:00:01 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:59:e3:d6:fb:95:c2:6b:ee:d0:28:45:2d:8c:
                    c1:00:7f:ad:96:d5:a8:87:e3:22:8b:59:85:54:de:
                    f3:2b:67:1c:07:2a:8b:4c:26:b7:70:88:69:2d:d2:
                    50:7d:88:d4:41:75:cd:58:0b:3d:94:39:d7:91:6b:
                    78:06:5c:fa:8f:75:bb:92:f7:b3:02:ef:d2:47:8d:
                    b5:2a:2a:f1:bc:2c:8b:d7:8c:91:15:44:d0:6c:98:
                    3f:b2:75:94:f5:20:0c:76:b8:e3:f1:c8:b9:36:ba:
                    39:01:ad:d8:68:a2:39:1c:73:8b:1f:72:bc:23:88:
                    f6:81:ae:68:7f:fe:67:c8:f9:a6:d9:28:86:91:df:
                    a3:24:ca:ff:53:59:1b:ca:e2:9b:a4:20:0b:a0:25:
                    92:d2:0b:0a:a1:2a:7b:3a:fe:6a:eb:ce:17:b5:a7:
                    a2:7f:22:07:64:3e:04:9e:b0:00:88:82:ff:12:ce:
                    51:5c:37:d8:4c:c0:bd:40:2f:a0:fc:d7:46:f7:41:
                    d5:2d:a6:e7:a9:11:c6:b8:c4:92:f8:fb:01:da:74:
                    24:4e:14:6f:c5:8b:56:b4:8e:fc:f5:c9:11:26:6a:
                    c2:57:78:8f:e0:a5:45:59:92:b2:97:45:29:4e:69:
                    64:83:f7:dc:8a:d6:25:16:06:4e:15:bc:6e:a1:e4:
                    4e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:31:23:EB:55:E2:AB:EA:9B:97:86:21:8E:C1:DF:61:55:FE:EC:1C
            X509v3 Authority Key Identifier:
                keyid:4E:E0:AA:39:E5:67:32:05:B6:15:B1:33:7C:24:E8:6F:BC:D3:C6:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CM61YX48Fxvq9UTK57aGQ5ZfhK1j8pjiohpUKNpekH55/1/4EE0AA39E5673205B615B1337C24E86FBCD3C635.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EE0AA39E5673205B615B1337C24E86FBCD3C635.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CM61YX48Fxvq9UTK57aGQ5ZfhK1j8pjiohpUKNpekH55/1/3137302e3233382e3138342e302f3234203d3e20323636333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:4a:07:b5:f5:63:3a:0f:26:ce:8b:eb:4c:8d:28:e2:82:aa:
         d7:d6:e2:44:3d:b9:e7:d2:2c:d5:fe:c9:8b:a6:b3:55:c4:1f:
         64:60:4d:c9:c2:81:cc:80:90:55:76:2b:09:ea:f4:4c:53:36:
         22:99:38:8d:8a:5d:7e:05:34:cd:ee:2b:88:4a:43:16:d1:33:
         41:96:55:25:40:6d:52:b3:78:4d:dd:7d:97:2e:a6:67:bb:e3:
         79:2b:35:e0:27:1a:ed:b7:f1:77:2c:fe:f7:fc:58:63:58:7f:
         b0:d4:53:0e:99:8d:35:a3:0c:1b:c4:08:bb:fc:03:f6:2b:8c:
         81:e6:5a:8e:df:dc:37:a1:e0:cc:ff:5c:20:3b:a2:a4:eb:9c:
         1c:d5:24:e3:72:25:59:79:31:c0:6f:b7:79:66:62:b0:06:8a:
         b8:fb:ee:8d:0b:1e:00:4a:27:98:0b:52:d6:e7:00:68:87:52:
         37:ba:50:79:be:39:e4:32:ae:43:8d:0f:7e:d5:c9:90:73:a9:
         b5:b7:64:ee:75:82:66:f8:af:75:8c:19:98:7a:0c:cd:c2:15:
         8b:06:a8:82:52:e8:2e:2e:cf:44:8f:db:a1:2b:34:97:36:0e:
         35:8e:35:10:65:19:b2:54:73:eb:a7:84:fd:41:92:d8:49:27:
         68:1d:9b:c0
-----BEGIN CERTIFICATE-----
MIIHPzCCBiegAwIBAgIUWxPTj59S/597UpNI9DofrE6RoFIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEVFMEFBMzlFNTY3MzIwNUI2MTVCMTMzN0MyNEU4NkZC
Q0QzQzYzNTAeFw0yNTA0MjYyMDU1MDFaFw0yNjA0MjYyMTAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkI1OUUzRDZGQjk1QzI2QkVF
RDAyODQ1MkQ4Q0MxMDA3RkFEOTZENUE4ODdFMzIyOEI1OTg1NTRERUYzMkI2NzFD
MDcyQThCNEMyNkI3NzA4ODY5MkREMjUwN0Q4OEQ0NDE3NUNENTgwQjNEOTQzOUQ3
OTE2Qjc4MDY1Q0ZBOEY3NUJCOTJGN0IzMDJFRkQyNDc4REI1MkEyQUYxQkMyQzhC
RDc4QzkxMTU0NEQwNkM5ODNGQjI3NTk0RjUyMDBDNzZCOEUzRjFDOEI5MzZCQTM5
MDFBREQ4NjhBMjM5MUM3MzhCMUY3MkJDMjM4OEY2ODFBRTY4N0ZGRTY3QzhGOUE2
RDkyODg2OTFERkEzMjRDQUZGNTM1OTFCQ0FFMjlCQTQyMDBCQTAyNTkyRDIwQjBB
QTEyQTdCM0FGRTZBRUJDRTE3QjVBN0EyN0YyMjA3NjQzRTA0OUVCMDAwODg4MkZG
MTJDRTUxNUMzN0Q4NENDMEJENDAyRkEwRkNENzQ2Rjc0MUQ1MkRBNkU3QTkxMUM2
QjhDNDkyRjhGQjAxREE3NDI0NEUxNDZGQzU4QjU2QjQ4RUZDRjVDOTExMjY2QUMy
NTc3ODhGRTBBNTQ1NTk5MkIyOTc0NTI5NEU2OTY0ODNGN0RDOEFENjI1MTYwNjRF
MTVCQzZFQTFFNDRFREYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAu1nj1vuVwmvu0ChFLYzBAH+tltWoh+Mii1mFVN7zK2ccByqLTCa3
cIhpLdJQfYjUQXXNWAs9lDnXkWt4Blz6j3W7kvezAu/SR421KirxvCyL14yRFUTQ
bJg/snWU9SAMdrjj8ci5Nro5Aa3YaKI5HHOLH3K8I4j2ga5of/5nyPmm2SiGkd+j
JMr/U1kbyuKbpCALoCWS0gsKoSp7Ov5q684XtaeifyIHZD4EnrAAiIL/Es5RXDfY
TMC9QC+g/NdG90HVLabnqRHGuMSS+PsB2nQkThRvxYtWtI789ckRJmrCV3iP4KVF
WZKyl0UpTmlkg/fcitYlFgZOFbxuoeRO3wIDAQABo4ICTTCCAkkwHQYDVR0OBBYE
FO4xI+tV4qvqm5eGIY7B32FV/uwcMB8GA1UdIwQYMBaAFE7gqjnlZzIFthWxM3wk
6G+808Y1MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NNNjFZWDQ4Rnh2cTlV
VEs1N2FHUTVaZmhLMWo4cGppb2hwVUtOcGVrSDU1LzEvNEVFMEFBMzlFNTY3MzIw
NUI2MTVCMTMzN0MyNEU4NkZCQ0QzQzYzNS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS80RUUwQUEzOUU1NjczMjA1QjYxNUIxMzM3QzI0RTg2RkJDRDND
NjM1LmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9DTTYxWVg0OEZ4dnE5VVRLNTdh
R1E1WmZoSzFqOHBqaW9ocFVLTnBla0g1NS8xLzMxMzczMDJlMzIzMzM4MmUzMTM4
MzQyZTMwMmYzMjM0MjAzZDNlMjAzMjM2MzYzMzMzMzgucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACq7rgw
DQYJKoZIhvcNAQELBQADggEBAE9KB7X1YzoPJs6L60yNKOKCqtfW4kQ9uefSLNX+
yYums1XEH2RgTcnCgcyAkFV2Kwnq9ExTNiKZOI2KXX4FNM3uK4hKQxbRM0GWVSVA
bVKzeE3dfZcupme743krNeAnGu238Xcs/vf8WGNYf7DUUw6ZjTWjDBvECLv8A/Yr
jIHmWo7f3Deh4Mz/XCA7oqTrnBzVJONyJVl5McBvt3lmYrAGirj77o0LHgBKJ5gL
UtbnAGiHUje6UHm+OeQyrkOND37VyZBzqbW3ZO51gmb4r3WMGZh6DM3CFYsGqIJS
6C4uz0SP26ErNJc2DjWONRBlGbJUc+unhP1BkthJJ2gdm8A=
-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:37 2025 by rpki-client on console.sobornost.net