Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/3230312e3135392e3138302e302f32332d3233203d3e203631373936.roa
File:                     3230312e3135392e3138302e302f32332d3233203d3e203631373936.roa (raw, json)
Hash identifier:          DWtW1+HQZ/vBIrTnhTnUk91KXL8jZ6ac/3s0ihNlNzw=
Subject key identifier:   A5:CF:29:AD:1B:13:64:DC:5F:CB:A1:D1:88:E3:07:E8:6D:8C:FE:D3
Certificate issuer:       /CN=B8839D511120CC6A24C5D5373822EC130EBFA1BF
Certificate serial:       1325F44BF01239963DCAAB2566303F826279FBBC
Authority key identifier: B8:83:9D:51:11:20:CC:6A:24:C5:D5:37:38:22:EC:13:0E:BF:A1:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8839D511120CC6A24C5D5373822EC130EBFA1BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/3230312e3135392e3138302e302f32332d3233203d3e203631373936.roa
Signing time:             Tue 04 Feb 2025 12:10:28 +0000
ROA not before:           Tue 04 Feb 2025 12:05:28 +0000
ROA not after:            Tue 03 Feb 2026 12:10:28 +0000
asID:                     61796
IP address blocks:        201.159.180.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/B8839D511120CC6A24C5D5373822EC130EBFA1BF.crl
                          rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/B8839D511120CC6A24C5D5373822EC130EBFA1BF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8839D511120CC6A24C5D5373822EC130EBFA1BF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 20:37:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:25:f4:4b:f0:12:39:96:3d:ca:ab:25:66:30:3f:82:62:79:fb:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8839D511120CC6A24C5D5373822EC130EBFA1BF
        Validity
            Not Before: Feb  4 12:05:28 2025 GMT
            Not After : Feb  3 12:10:28 2026 GMT
        Subject: CN=A5CF29AD1B1364DC5FCBA1D188E307E86D8CFED3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:35:71:14:ac:b2:70:a6:cb:1e:b1:76:f8:e3:
                    ec:ef:0a:ce:70:fd:e6:06:44:19:43:48:c6:fa:58:
                    70:54:35:33:ef:e8:6b:98:8f:3c:8e:c2:42:db:b5:
                    7b:ec:1f:97:6a:0c:e6:2d:53:c3:33:1a:c3:97:34:
                    ad:1a:85:60:32:cb:4d:90:b3:af:ef:b2:8a:d0:c9:
                    87:c3:09:2c:2a:99:60:35:7a:d4:2c:b2:e4:00:27:
                    6f:6c:63:4d:54:d0:71:6c:14:bb:91:f1:93:83:10:
                    05:34:96:1a:c2:ec:18:72:00:2a:23:e9:b8:ab:db:
                    1c:aa:14:94:5b:73:ac:50:a5:62:57:6e:e0:a4:b0:
                    a5:82:f8:b3:ff:1e:d9:7e:78:f6:84:78:14:56:29:
                    df:df:8f:e9:ce:c0:e6:c4:fa:1f:ea:f7:3c:d8:e3:
                    00:b9:91:00:24:8c:33:fd:e5:7f:88:87:1a:ea:7c:
                    e4:ef:ac:69:74:4e:dc:b5:a6:79:ee:33:9a:68:7a:
                    8a:a0:b1:82:f2:7d:a6:01:f2:8f:49:6a:7f:31:14:
                    68:a3:b8:ea:84:7c:ef:4b:1d:c6:76:58:f3:b6:07:
                    5b:d7:83:33:d8:c2:3d:60:52:7d:b5:0a:88:3d:00:
                    8b:20:5f:4d:17:d3:06:e8:00:11:64:5a:c0:ad:19:
                    4a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:CF:29:AD:1B:13:64:DC:5F:CB:A1:D1:88:E3:07:E8:6D:8C:FE:D3
            X509v3 Authority Key Identifier:
                keyid:B8:83:9D:51:11:20:CC:6A:24:C5:D5:37:38:22:EC:13:0E:BF:A1:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/B8839D511120CC6A24C5D5373822EC130EBFA1BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8839D511120CC6A24C5D5373822EC130EBFA1BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/3230312e3135392e3138302e302f32332d3233203d3e203631373936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:91:cf:a5:39:ea:48:66:0a:5d:ac:c5:d9:76:92:f0:32:b6:
         72:d3:7d:b0:4a:bd:2d:52:b3:26:8e:1a:11:7d:e9:b9:ee:cf:
         6c:e8:a9:b4:9d:b7:ba:9a:1d:90:6e:79:15:3d:05:ab:e2:7b:
         8d:81:fe:ed:e9:b3:a1:3f:b5:f0:90:7e:51:d2:e4:7a:76:ae:
         26:3c:a7:f5:b6:2c:e2:dd:61:05:02:d0:ab:36:9f:63:51:3c:
         a1:db:43:df:d4:50:4b:7b:2f:d0:d3:c3:b5:1e:64:55:3c:18:
         e3:18:75:7d:4d:91:d0:7f:80:c9:83:1c:b0:f4:b5:d2:d5:51:
         ef:23:44:d4:f8:b0:08:61:bc:82:ed:e5:87:89:6c:b0:16:7b:
         56:9f:cd:a4:b2:74:d3:2d:78:49:0c:ec:8b:46:d2:94:0b:a6:
         07:d9:20:7f:b8:ed:90:0b:44:d7:41:31:2e:9e:5b:1c:4f:f8:
         87:b3:db:58:cb:68:bc:bf:06:3f:4b:c5:8c:f6:95:14:c7:2f:
         f7:5f:7d:ad:3f:be:62:05:31:1f:02:03:9f:fc:c0:32:ce:f8:
         d0:9d:87:d8:ff:ac:c9:39:04:ff:ed:82:39:94:da:b0:8e:d6:
         9b:b5:de:d6:e4:5a:a8:84:12:ee:a3:ba:46:9f:87:0d:38:b6:
         77:ae:20:1f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUEyX0S/ASOZY9yqslZjA/gmJ5+7wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjg4MzlENTExMTIwQ0M2QTI0QzVENTM3MzgyMkVDMTMw
RUJGQTFCRjAeFw0yNTAyMDQxMjA1MjhaFw0yNjAyMDMxMjEwMjhaMDMxMTAvBgNV
BAMTKEE1Q0YyOUFEMUIxMzY0REM1RkNCQTFEMTg4RTMwN0U4NkQ4Q0ZFRDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdNXEUrLJwpssesXb44+zvCs5w
/eYGRBlDSMb6WHBUNTPv6GuYjzyOwkLbtXvsH5dqDOYtU8MzGsOXNK0ahWAyy02Q
s6/vsorQyYfDCSwqmWA1etQssuQAJ29sY01U0HFsFLuR8ZODEAU0lhrC7BhyACoj
6bir2xyqFJRbc6xQpWJXbuCksKWC+LP/Htl+ePaEeBRWKd/fj+nOwObE+h/q9zzY
4wC5kQAkjDP95X+IhxrqfOTvrGl0Tty1pnnuM5poeoqgsYLyfaYB8o9Jan8xFGij
uOqEfO9LHcZ2WPO2B1vXgzPYwj1gUn21Cog9AIsgX00X0wboABFkWsCtGUqrAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUpc8prRsTZNxfy6HRiOMH6G2M/tMwHwYDVR0j
BBgwFoAUuIOdUREgzGokxdU3OCLsEw6/ob8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDFNYVd1Ymtuc1dFZnc3dkZoSHp3d2R1NHlxZGszbk1RUkhTaHc1NlVu
bWMvMC9CODgzOUQ1MTExMjBDQzZBMjRDNUQ1MzczODIyRUMxMzBFQkZBMUJGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I4ODM5RDUxMTEyMENDNkEy
NEM1RDUzNzM4MjJFQzEzMEVCRkExQkYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0gxTWFXdWJrbnNXRWZ3N3ZGaEh6d3dkdTR5cWRrM25NUVJIU2h3NTZVbm1jLzAv
MzIzMDMxMmUzMTM1MzkyZTMxMzgzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM2
MzEzNzM5MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAHJn7QwDQYJKoZIhvcNAQELBQADggEBAJORz6U5
6khmCl2sxdl2kvAytnLTfbBKvS1SsyaOGhF96bnuz2zoqbSdt7qaHZBueRU9Bavi
e42B/u3ps6E/tfCQflHS5Hp2riY8p/W2LOLdYQUC0Ks2n2NRPKHbQ9/UUEt7L9DT
w7UeZFU8GOMYdX1NkdB/gMmDHLD0tdLVUe8jRNT4sAhhvILt5YeJbLAWe1afzaSy
dNMteEkM7ItG0pQLpgfZIH+47ZALRNdBMS6eWxxP+Iez21jLaLy/Bj9LxYz2lRTH
L/dffa0/vmIFMR8CA5/8wDLO+NCdh9j/rMk5BP/tgjmU2rCO1pu13tbkWqiEEu6j
ukafhw04tneuIB8=
-----END CERTIFICATE-----
Generated at Sun Apr 27 21:43:20 2025 by rpki-client on console.sobornost.net