Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G81J6aRi8gaguucAFXhd3nr6UG9V5434jLWQLtx9wPc6/1/3137302e3233392e36382e302f32322d3332203d3e203533313639.roa
File:                     3137302e3233392e36382e302f32322d3332203d3e203533313639.roa (raw, json)
Hash identifier:          SzSWfH16zrGMKDBwKX/A5RVF9NLyBp0d4I0IYYOc6MY=
Subject key identifier:   95:44:7A:40:3E:52:26:9A:BA:49:D4:0A:A8:98:FB:20:B3:D1:31:27
Certificate issuer:       /CN=14DABC9061A328905E8120751E9528DFE978C501
Certificate serial:       2B1488E10A275A586A6CF80213CB7E18C3037A79
Authority key identifier: 14:DA:BC:90:61:A3:28:90:5E:81:20:75:1E:95:28:DF:E9:78:C5:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14DABC9061A328905E8120751E9528DFE978C501.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G81J6aRi8gaguucAFXhd3nr6UG9V5434jLWQLtx9wPc6/1/3137302e3233392e36382e302f32322d3332203d3e203533313639.roa
Signing time:             Wed 05 Mar 2025 21:14:14 +0000
ROA not before:           Wed 05 Mar 2025 21:09:14 +0000
ROA not after:            Wed 04 Mar 2026 21:14:14 +0000
asID:                     53169
IP address blocks:        170.239.68.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G81J6aRi8gaguucAFXhd3nr6UG9V5434jLWQLtx9wPc6/1/14DABC9061A328905E8120751E9528DFE978C501.crl
                          rsync://rpki-repo.registro.br/repo/G81J6aRi8gaguucAFXhd3nr6UG9V5434jLWQLtx9wPc6/1/14DABC9061A328905E8120751E9528DFE978C501.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14DABC9061A328905E8120751E9528DFE978C501.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 05:14:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:14:88:e1:0a:27:5a:58:6a:6c:f8:02:13:cb:7e:18:c3:03:7a:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14DABC9061A328905E8120751E9528DFE978C501
        Validity
            Not Before: Mar  5 21:09:14 2025 GMT
            Not After : Mar  4 21:14:14 2026 GMT
        Subject: CN=95447A403E52269ABA49D40AA898FB20B3D13127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f9:27:75:12:24:a6:0f:93:64:4e:22:4a:b7:
                    ec:0c:9a:55:90:d3:95:66:1a:19:21:a9:44:24:a9:
                    6b:c3:db:5d:d7:42:29:8e:10:cc:6c:98:9d:4a:66:
                    8f:69:57:b3:71:02:eb:c2:ca:e8:99:4e:6d:08:92:
                    9c:7f:53:eb:fd:9f:90:a1:99:09:d1:2b:ca:2f:a1:
                    23:35:5d:31:b4:1d:e5:9f:98:03:fb:89:f8:e5:dd:
                    34:79:56:f7:9b:16:fd:0a:9c:22:6d:2a:66:af:ef:
                    79:5e:d4:2b:85:6c:9f:6d:1f:2d:28:76:42:61:6a:
                    f5:a1:62:12:25:94:4d:30:dd:14:f7:dc:0c:f4:a5:
                    c5:30:53:63:4f:be:95:2d:8f:3c:a2:e6:4c:0b:59:
                    c6:0c:2b:9f:e1:36:1a:3b:c5:80:0b:bc:fa:1e:1e:
                    4a:a9:42:fe:0d:05:c7:34:3e:ab:ce:71:a0:e2:9e:
                    57:dd:a4:cf:c1:da:10:51:65:5c:51:70:b5:39:35:
                    cc:8e:97:64:ff:bc:c5:1c:0a:77:c1:e2:ea:65:01:
                    d7:bb:b2:8a:e6:72:62:04:7e:e7:31:16:5f:05:13:
                    ca:a0:9d:91:ad:4e:49:be:9a:85:eb:b5:3a:1e:17:
                    e0:49:ae:f2:1a:55:f3:ed:2b:b6:6a:df:4f:56:a4:
                    11:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:44:7A:40:3E:52:26:9A:BA:49:D4:0A:A8:98:FB:20:B3:D1:31:27
            X509v3 Authority Key Identifier:
                keyid:14:DA:BC:90:61:A3:28:90:5E:81:20:75:1E:95:28:DF:E9:78:C5:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G81J6aRi8gaguucAFXhd3nr6UG9V5434jLWQLtx9wPc6/1/14DABC9061A328905E8120751E9528DFE978C501.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14DABC9061A328905E8120751E9528DFE978C501.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G81J6aRi8gaguucAFXhd3nr6UG9V5434jLWQLtx9wPc6/1/3137302e3233392e36382e302f32322d3332203d3e203533313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:16:54:75:55:d0:4d:a4:a0:85:dd:39:6a:b4:4e:11:be:24:
         77:fa:84:ae:84:bb:50:37:0b:3c:5a:df:04:f3:71:87:0d:fe:
         b8:83:35:da:b1:f9:55:60:3d:77:02:3b:87:9f:7a:b6:60:d7:
         f9:fb:08:73:1f:73:af:be:b2:3b:d0:8a:eb:c2:e9:86:bd:ec:
         83:de:16:58:c6:fc:ea:f4:b8:64:55:00:cd:20:33:82:b9:7f:
         e7:f9:ce:01:56:9d:77:92:06:56:a9:98:f8:22:7b:0b:8c:19:
         7a:3f:eb:d0:14:53:90:1f:f5:82:0c:4c:bb:ae:23:ff:8b:07:
         00:c9:5c:06:aa:d2:5a:cd:88:b5:d5:ec:2a:f0:38:c8:41:bd:
         74:5e:e9:fb:c1:e4:88:ed:9c:2d:21:83:8e:e5:cc:62:26:e4:
         92:c5:f3:ad:4c:95:4c:c5:21:a9:b6:ff:3d:62:28:9c:f7:da:
         0f:7b:21:2c:0f:7b:42:aa:51:64:c3:f7:ff:0c:09:b7:6e:28:
         d6:4a:8f:ad:27:1e:c3:57:4b:ef:fb:b3:5f:ab:0f:26:22:15:
         eb:ee:52:b9:9d:ae:2e:86:0f:30:4e:cb:a3:51:cb:da:eb:2c:
         20:e0:2c:b4:d5:e2:3b:83:e5:76:fa:de:5b:0d:22:f9:99:ee:
         8a:e6:78:3a
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUKxSI4QonWlhqbPgCE8t+GMMDenkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTREQUJDOTA2MUEzMjg5MDVFODEyMDc1MUU5NTI4REZF
OTc4QzUwMTAeFw0yNTAzMDUyMTA5MTRaFw0yNjAzMDQyMTE0MTRaMDMxMTAvBgNV
BAMTKDk1NDQ3QTQwM0U1MjI2OUFCQTQ5RDQwQUE4OThGQjIwQjNEMTMxMjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6+Sd1EiSmD5NkTiJKt+wMmlWQ
05VmGhkhqUQkqWvD213XQimOEMxsmJ1KZo9pV7NxAuvCyuiZTm0Ikpx/U+v9n5Ch
mQnRK8ovoSM1XTG0HeWfmAP7ifjl3TR5VvebFv0KnCJtKmav73le1CuFbJ9tHy0o
dkJhavWhYhIllE0w3RT33Az0pcUwU2NPvpUtjzyi5kwLWcYMK5/hNho7xYALvPoe
HkqpQv4NBcc0PqvOcaDinlfdpM/B2hBRZVxRcLU5NcyOl2T/vMUcCnfB4uplAde7
sormcmIEfucxFl8FE8qgnZGtTkm+moXrtToeF+BJrvIaVfPtK7Zq309WpBFRAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUlUR6QD5SJpq6SdQKqJj7ILPRMScwHwYDVR0j
BBgwFoAUFNq8kGGjKJBegSB1HpUo3+l4xQEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzgxSjZhUmk4Z2FndXVjQUZYaGQzbnI2VUc5VjU0MzRqTFdRTHR4OXdQ
YzYvMS8xNERBQkM5MDYxQTMyODkwNUU4MTIwNzUxRTk1MjhERkU5NzhDNTAxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE0REFCQzkwNjFBMzI4OTA1
RTgxMjA3NTFFOTUyOERGRTk3OEM1MDEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0c4MUo2YVJpOGdhZ3V1Y0FGWGhkM25yNlVHOVY1NDM0akxXUUx0eDl3UGM2LzEv
MzEzNzMwMmUzMjMzMzkyZTM2MzgyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzNTMz
MzEzNjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqu9EMA0GCSqGSIb3DQEBCwUAA4IBAQAjFlR1VdBN
pKCF3TlqtE4RviR3+oSuhLtQNws8Wt8E83GHDf64gzXasflVYD13AjuHn3q2YNf5
+whzH3OvvrI70IrrwumGveyD3hZYxvzq9LhkVQDNIDOCuX/n+c4BVp13kgZWqZj4
InsLjBl6P+vQFFOQH/WCDEy7riP/iwcAyVwGqtJazYi11ewq8DjIQb10Xun7weSI
7ZwtIYOO5cxiJuSSxfOtTJVMxSGptv89Yiic99oPeyEsD3tCqlFkw/f/DAm3bijW
So+tJx7DV0vv+7Nfqw8mIhXr7lK5na4uhg8wTsujUcva6ywg4Cy01eI7g+V2+t5b
DSL5me6K5ng6
-----END CERTIFICATE-----
Generated at Sat Apr 26 11:16:52 2025 by rpki-client on console.sobornost.net