Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/3132382e3230312e3234342e302f32332d3233203d3e20323635383835.roa
File:                     3132382e3230312e3234342e302f32332d3233203d3e20323635383835.roa (raw, json)
Hash identifier:          /NE2DMkP5OuvXhHXnwjE+L07d5y1U/sgHsM++WaR7Lc=
Subject key identifier:   DE:19:57:AC:18:8B:61:8C:D6:06:F5:FC:AC:67:59:9A:D7:D2:A9:AD
Certificate issuer:       /CN=94C381CC9333C07A86D3A11282068476C5196FE6
Certificate serial:       7104A5393278CA0D6C960057055F20A364BFF609
Authority key identifier: 94:C3:81:CC:93:33:C0:7A:86:D3:A1:12:82:06:84:76:C5:19:6F:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94C381CC9333C07A86D3A11282068476C5196FE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/3132382e3230312e3234342e302f32332d3233203d3e20323635383835.roa
Signing time:             Thu 06 Mar 2025 18:39:21 +0000
ROA not before:           Thu 06 Mar 2025 18:34:21 +0000
ROA not after:            Thu 05 Mar 2026 18:39:21 +0000
asID:                     265885
IP address blocks:        128.201.244.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/94C381CC9333C07A86D3A11282068476C5196FE6.crl
                          rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/94C381CC9333C07A86D3A11282068476C5196FE6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94C381CC9333C07A86D3A11282068476C5196FE6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 15:19:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:04:a5:39:32:78:ca:0d:6c:96:00:57:05:5f:20:a3:64:bf:f6:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94C381CC9333C07A86D3A11282068476C5196FE6
        Validity
            Not Before: Mar  6 18:34:21 2025 GMT
            Not After : Mar  5 18:39:21 2026 GMT
        Subject: CN=DE1957AC188B618CD606F5FCAC67599AD7D2A9AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:2c:36:34:2f:33:cc:20:7f:0f:33:63:b8:48:
                    0a:06:f9:d0:51:f1:30:33:7b:be:41:bb:c9:23:f4:
                    bb:15:c1:4f:0b:5c:73:c8:ff:17:f9:81:4a:48:40:
                    5d:cb:55:c0:82:79:79:a1:7d:c0:cd:0a:69:f4:85:
                    47:09:8c:20:70:4d:b5:70:72:d0:f6:cd:94:99:5f:
                    70:5c:f0:7d:1b:54:b5:54:db:ce:db:f0:ae:b9:91:
                    d9:f0:6d:82:61:c6:e3:d7:50:31:58:73:00:e1:b2:
                    ce:00:80:2c:92:46:ba:6c:f0:a9:89:fe:e1:86:64:
                    a2:53:65:54:5c:7b:b2:a4:4f:4c:f0:3e:06:00:0a:
                    b9:98:89:58:a1:36:b8:8e:33:e2:86:b0:6d:e4:07:
                    a5:13:90:20:53:d7:51:dc:66:0d:26:bd:51:0b:41:
                    de:63:5a:28:56:1e:f3:51:bb:4e:80:b8:25:8d:d5:
                    76:53:b8:13:bc:ac:c9:15:f9:d2:af:67:c5:89:25:
                    6c:5d:e8:e0:d6:2a:98:f6:03:9f:d9:ca:16:bd:e1:
                    49:19:97:96:bb:34:88:20:b3:68:cd:ef:a1:f0:4d:
                    6d:66:3f:23:7f:a4:46:53:12:ce:13:75:a5:6e:7f:
                    59:8f:02:aa:63:4c:8d:75:39:71:36:d5:c4:9a:64:
                    3e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:19:57:AC:18:8B:61:8C:D6:06:F5:FC:AC:67:59:9A:D7:D2:A9:AD
            X509v3 Authority Key Identifier:
                keyid:94:C3:81:CC:93:33:C0:7A:86:D3:A1:12:82:06:84:76:C5:19:6F:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/94C381CC9333C07A86D3A11282068476C5196FE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94C381CC9333C07A86D3A11282068476C5196FE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/3132382e3230312e3234342e302f32332d3233203d3e20323635383835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:36:90:26:6a:2a:b1:0f:51:d2:81:04:2a:e6:81:a4:0b:09:
         61:c2:e7:e0:0a:e3:59:c2:8f:fe:cf:80:e6:ad:20:b7:98:5b:
         32:be:dc:af:72:a6:26:11:af:13:b1:2b:e3:99:9e:5c:91:d9:
         5d:25:b3:91:a3:6e:70:3e:e9:f3:22:d4:71:3b:0a:ed:14:2a:
         a2:eb:ed:62:ed:51:71:c6:1f:63:3e:e7:55:1e:38:9e:e7:df:
         32:76:22:7c:5c:ad:f5:67:15:de:15:eb:ad:f1:57:39:49:0a:
         45:0c:1a:87:c2:94:7b:95:21:5c:7e:d3:3c:4b:75:bc:82:71:
         49:db:ff:38:d3:e0:08:e4:7b:60:3f:fb:00:39:e7:f6:78:e7:
         25:b6:26:5b:91:45:ae:b4:ec:6b:c8:df:bf:20:88:e0:39:1d:
         e9:c1:c7:f8:af:87:f6:1c:26:26:4a:47:df:17:55:29:64:2c:
         e6:62:70:f0:26:ee:d6:72:9a:5a:38:5b:d8:c4:cd:ff:20:be:
         64:14:40:e2:63:1d:ea:a3:c5:99:71:86:f9:7d:5b:5e:18:03:
         2e:af:73:01:ce:57:2e:a2:c7:fd:b7:ec:79:04:17:af:37:d0:
         42:b8:c9:b2:d4:36:9b:de:c1:2e:d1:f1:33:86:01:cc:d5:ba:
         a6:0a:76:8e
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUcQSlOTJ4yg1slgBXBV8go2S/9gkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTRDMzgxQ0M5MzMzQzA3QTg2RDNBMTEyODIwNjg0NzZD
NTE5NkZFNjAeFw0yNTAzMDYxODM0MjFaFw0yNjAzMDUxODM5MjFaMDMxMTAvBgNV
BAMTKERFMTk1N0FDMTg4QjYxOENENjA2RjVGQ0FDNjc1OTlBRDdEMkE5QUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnLDY0LzPMIH8PM2O4SAoG+dBR
8TAze75Bu8kj9LsVwU8LXHPI/xf5gUpIQF3LVcCCeXmhfcDNCmn0hUcJjCBwTbVw
ctD2zZSZX3Bc8H0bVLVU287b8K65kdnwbYJhxuPXUDFYcwDhss4AgCySRrps8KmJ
/uGGZKJTZVRce7KkT0zwPgYACrmYiVihNriOM+KGsG3kB6UTkCBT11HcZg0mvVEL
Qd5jWihWHvNRu06AuCWN1XZTuBO8rMkV+dKvZ8WJJWxd6ODWKpj2A5/Zyha94UkZ
l5a7NIggs2jN76HwTW1mPyN/pEZTEs4TdaVuf1mPAqpjTI11OXE21cSaZD7nAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU3hlXrBiLYYzWBvX8rGdZmtfSqa0wHwYDVR0j
BBgwFoAUlMOBzJMzwHqG06ESggaEdsUZb+YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlB0Smd1Q1ByZHJ3ZFUyMVdUV0wyOTFyVnpOaWdrYk0yODVINGZXVVBV
M0gvMS85NEMzODFDQzkzMzNDMDdBODZEM0ExMTI4MjA2ODQ3NkM1MTk2RkU2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk0QzM4MUNDOTMzM0MwN0E4
NkQzQTExMjgyMDY4NDc2QzUxOTZGRTYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZQdEpndUNQcmRyd2RVMjFXVFdMMjkxclZ6Tmlna2JNMjg1SDRmV1VQVTNILzEv
MzEzMjM4MmUzMjMwMzEyZTMyMzQzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzNTM4MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAYDJ9DANBgkqhkiG9w0BAQsFAAOCAQEAWTaQ
JmoqsQ9R0oEEKuaBpAsJYcLn4ArjWcKP/s+A5q0gt5hbMr7cr3KmJhGvE7Er45me
XJHZXSWzkaNucD7p8yLUcTsK7RQqouvtYu1RccYfYz7nVR44nuffMnYifFyt9WcV
3hXrrfFXOUkKRQwah8KUe5UhXH7TPEt1vIJxSdv/ONPgCOR7YD/7ADnn9njnJbYm
W5FFrrTsa8jfvyCI4Dkd6cHH+K+H9hwmJkpH3xdVKWQs5mJw8Cbu1nKaWjhb2MTN
/yC+ZBRA4mMd6qPFmXGG+X1bXhgDLq9zAc5XLqLH/bfseQQXrzfQQrjJstQ2m97B
LtHxM4YBzNW6pgp2jg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 15:24:15 2025 by rpki-client on console.sobornost.net