Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/3230312e3231392e3234392e302f32342d3234203d3e203631393531.roa
File:                     3230312e3231392e3234392e302f32342d3234203d3e203631393531.roa (raw, json)
Hash identifier:          JihrjILPGyR5AbSQjQsdoNmooRaPsIqxoa4IplcrTbU=
Subject key identifier:   0D:9C:2C:BE:F1:00:C2:84:E6:E5:A5:4F:38:57:36:2A:74:DF:A9:BA
Certificate issuer:       /CN=D3986442AB630E9BA4980A2F9EF2013033EF9C17
Certificate serial:       62C46BDEA510DBD25CDFAEAA8D6FD77E0D2062F8
Authority key identifier: D3:98:64:42:AB:63:0E:9B:A4:98:0A:2F:9E:F2:01:30:33:EF:9C:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/3230312e3231392e3234392e302f32342d3234203d3e203631393531.roa
Signing time:             Wed 05 Mar 2025 21:59:47 +0000
ROA not before:           Wed 05 Mar 2025 21:54:47 +0000
ROA not after:            Wed 04 Mar 2026 21:59:47 +0000
asID:                     61951
IP address blocks:        201.219.249.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.crl
                          rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 13:37:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:c4:6b:de:a5:10:db:d2:5c:df:ae:aa:8d:6f:d7:7e:0d:20:62:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3986442AB630E9BA4980A2F9EF2013033EF9C17
        Validity
            Not Before: Mar  5 21:54:47 2025 GMT
            Not After : Mar  4 21:59:47 2026 GMT
        Subject: CN=0D9C2CBEF100C284E6E5A54F3857362A74DFA9BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:91:76:73:3b:40:d5:5e:84:f7:81:c6:cc:2e:
                    ab:33:e4:00:3f:7a:2d:e6:b4:31:1f:11:21:6a:2d:
                    cb:01:93:8c:f2:4f:75:d3:d7:5f:1a:bf:fc:87:9a:
                    c6:42:2c:cf:d0:7d:b4:14:51:93:42:2c:ed:8e:82:
                    72:89:07:bd:4b:f4:d2:4c:bb:eb:2b:89:a5:a7:82:
                    17:0d:9c:a4:c5:7b:59:b7:26:07:30:80:08:b0:ee:
                    e4:ad:08:76:1a:b3:e7:d5:eb:52:dc:c2:86:78:c6:
                    d2:e2:43:7b:7f:b0:dc:32:b3:01:d4:a7:29:8e:e0:
                    88:ba:65:4c:f1:3a:35:b0:32:58:d0:0e:64:0a:ee:
                    db:56:50:09:27:86:e2:be:79:23:e7:d9:55:90:b8:
                    1b:52:69:a9:6a:51:34:de:a5:71:b2:f6:45:97:5b:
                    00:3a:e6:2d:2e:b4:1d:80:0b:98:58:b6:24:07:51:
                    68:1a:ee:81:87:1b:f1:d1:ce:4e:f8:1c:9b:5e:09:
                    8e:63:f0:2d:0d:5f:76:15:6b:ca:92:60:a9:08:10:
                    1b:3f:b4:f8:09:c3:79:6d:68:c5:cd:29:e2:1b:40:
                    4a:39:e8:08:a0:b4:df:79:58:b4:68:74:14:d0:16:
                    b0:d1:49:45:61:16:6a:54:3b:cb:30:13:38:6d:0e:
                    4d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:9C:2C:BE:F1:00:C2:84:E6:E5:A5:4F:38:57:36:2A:74:DF:A9:BA
            X509v3 Authority Key Identifier:
                keyid:D3:98:64:42:AB:63:0E:9B:A4:98:0A:2F:9E:F2:01:30:33:EF:9C:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/3230312e3231392e3234392e302f32342d3234203d3e203631393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:d9:66:02:72:f2:1a:ae:a4:6a:b4:e3:9d:08:9f:fe:b0:e2:
         62:db:7b:26:f5:7a:7e:e3:f8:be:4a:9d:40:80:8c:ce:85:df:
         74:83:42:fd:2f:76:4a:07:5f:1f:70:21:0f:9a:32:a8:99:ad:
         63:b0:a8:f3:83:bb:49:a9:79:13:e0:a6:9e:8f:7a:df:ce:e8:
         f7:2e:95:be:c1:ac:a8:3f:b6:fd:7b:b8:6b:81:4a:e0:ea:b1:
         78:84:e9:6c:a1:09:76:9f:aa:6a:00:1d:76:8d:b3:d4:da:b2:
         c1:10:2f:4f:ba:57:a3:2d:8c:21:0f:12:01:a8:0b:aa:dd:cc:
         f2:3b:2d:6c:77:84:b2:ec:95:3a:e3:7f:da:f2:e7:2b:df:69:
         b0:ba:16:a3:c9:b1:47:f9:a4:b5:20:c8:fe:ba:c2:a4:06:58:
         ea:7c:a5:1c:07:18:db:e8:40:dc:8a:2e:e9:b1:97:f0:e9:7b:
         90:a8:b0:74:80:5f:52:76:c9:4f:3a:bd:3e:58:93:2b:08:50:
         eb:02:23:a9:3b:ee:8b:36:ac:d9:67:76:5f:7c:b5:81:a7:1e:
         e1:cf:25:71:74:29:ba:74:1a:19:3e:ef:8e:71:61:2e:46:a3:
         88:31:d2:ea:db:46:d0:72:ae:cb:34:8c:53:57:55:44:1a:94:
         8b:33:0d:e6
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYsRr3qUQ29Jc366qjW/Xfg0gYvgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM5ODY0NDJBQjYzMEU5QkE0OTgwQTJGOUVGMjAxMzAz
M0VGOUMxNzAeFw0yNTAzMDUyMTU0NDdaFw0yNjAzMDQyMTU5NDdaMDMxMTAvBgNV
BAMTKDBEOUMyQ0JFRjEwMEMyODRFNkU1QTU0RjM4NTczNjJBNzRERkE5QkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgkXZzO0DVXoT3gcbMLqsz5AA/
ei3mtDEfESFqLcsBk4zyT3XT118av/yHmsZCLM/QfbQUUZNCLO2OgnKJB71L9NJM
u+sriaWnghcNnKTFe1m3JgcwgAiw7uStCHYas+fV61LcwoZ4xtLiQ3t/sNwyswHU
pymO4Ii6ZUzxOjWwMljQDmQK7ttWUAknhuK+eSPn2VWQuBtSaalqUTTepXGy9kWX
WwA65i0utB2AC5hYtiQHUWga7oGHG/HRzk74HJteCY5j8C0NX3YVa8qSYKkIEBs/
tPgJw3ltaMXNKeIbQEo56AigtN95WLRodBTQFrDRSUVhFmpUO8swEzhtDk1fAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUDZwsvvEAwoTm5aVPOFc2KnTfqbowHwYDVR0j
BBgwFoAU05hkQqtjDpukmAovnvIBMDPvnBcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDZMdVhQeXlNRE1wUHIxc0JXWkZKNFJ2NVB5YmJEVzZpU05jRjNlSmhK
OE4vMS9EMzk4NjQ0MkFCNjMwRTlCQTQ5ODBBMkY5RUYyMDEzMDMzRUY5QzE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QzOTg2NDQyQUI2MzBFOUJB
NDk4MEEyRjlFRjIwMTMwMzNFRjlDMTcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q2THVYUHl5TURNcFByMXNCV1pGSjRSdjVQeWJiRFc2aVNOY0YzZUpoSjhOLzEv
MzIzMDMxMmUzMjMxMzkyZTMyMzQzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2
MzEzOTM1MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADJ2/kwDQYJKoZIhvcNAQELBQADggEBAIfZZgJy
8hqupGq0450In/6w4mLbeyb1en7j+L5KnUCAjM6F33SDQv0vdkoHXx9wIQ+aMqiZ
rWOwqPODu0mpeRPgpp6Pet/O6Pculb7BrKg/tv17uGuBSuDqsXiE6WyhCXafqmoA
HXaNs9TassEQL0+6V6MtjCEPEgGoC6rdzPI7LWx3hLLslTrjf9ry5yvfabC6FqPJ
sUf5pLUgyP66wqQGWOp8pRwHGNvoQNyKLumxl/Dpe5CosHSAX1J2yU86vT5YkysI
UOsCI6k77os2rNlndl98tYGnHuHPJXF0Kbp0Ghk+745xYS5Go4gx0urbRtByrss0
jFNXVUQalIszDeY=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:25 2025 by rpki-client on console.sobornost.net