Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3136382e3233322e3234332e302f32342d3234203d3e20323634393532.roa
File:                     3136382e3233322e3234332e302f32342d3234203d3e20323634393532.roa (raw, json)
Hash identifier:          mAdhJzurmrZnhNwZt1dpZ0SuZ4NkhYi9chNTFolsCB0=
Subject key identifier:   4B:5D:D8:42:46:54:B3:8D:4F:AA:DB:AB:FC:FE:E9:80:41:A7:FA:37
Certificate issuer:       /CN=3E212DB1B302950E59672700155B176D07CFDAEA
Certificate serial:       4F2C63DA664410B8060D6DDFD020F7DCE96B47C2
Authority key identifier: 3E:21:2D:B1:B3:02:95:0E:59:67:27:00:15:5B:17:6D:07:CF:DA:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E212DB1B302950E59672700155B176D07CFDAEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3136382e3233322e3234332e302f32342d3234203d3e20323634393532.roa
Signing time:             Tue 01 Apr 2025 15:26:46 +0000
ROA not before:           Tue 01 Apr 2025 15:21:46 +0000
ROA not after:            Tue 31 Mar 2026 15:26:46 +0000
asID:                     264952
IP address blocks:        168.232.243.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3E212DB1B302950E59672700155B176D07CFDAEA.crl
                          rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3E212DB1B302950E59672700155B176D07CFDAEA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E212DB1B302950E59672700155B176D07CFDAEA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 17:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:2c:63:da:66:44:10:b8:06:0d:6d:df:d0:20:f7:dc:e9:6b:47:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E212DB1B302950E59672700155B176D07CFDAEA
        Validity
            Not Before: Apr  1 15:21:46 2025 GMT
            Not After : Mar 31 15:26:46 2026 GMT
        Subject: CN=4B5DD8424654B38D4FAADBABFCFEE98041A7FA37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a5:da:bb:6e:b0:2e:bc:65:27:e3:04:c7:57:
                    00:6d:44:d5:7d:f2:b7:bc:79:4a:61:1a:ba:af:dc:
                    db:05:74:a2:77:c7:b6:99:b2:cd:a8:53:b4:33:52:
                    ae:aa:b1:dd:5a:b0:3c:a9:75:f8:87:0f:af:43:12:
                    98:41:55:a2:2f:e7:24:7c:2c:10:d0:80:4f:6c:e6:
                    a1:4a:68:c5:82:8f:be:e7:a5:17:94:c1:06:8b:d1:
                    28:7c:16:6a:84:12:bf:57:83:a2:5c:95:8e:5e:1c:
                    53:b3:03:2e:a3:58:58:7b:1d:ce:e7:8f:24:9a:d3:
                    58:6a:f5:45:5c:2d:90:24:4d:a7:e3:e9:d5:04:3e:
                    27:cf:79:79:da:14:1b:51:d4:ed:e0:54:ec:c4:fa:
                    d5:77:7a:36:a6:f7:7e:7e:c6:7a:67:cb:80:81:ed:
                    a6:37:c8:a8:db:66:79:2d:71:2f:c3:10:3e:6b:8b:
                    8b:9b:42:51:22:7f:8d:ad:5c:31:12:cc:e8:29:b2:
                    37:7a:6e:ff:45:a4:f9:f9:ff:d3:74:25:aa:33:05:
                    fe:9a:72:c3:c0:7f:70:5a:24:4a:c5:aa:0e:70:8f:
                    8e:0b:00:d3:89:a4:24:03:bb:72:c4:db:67:73:c2:
                    52:81:d7:c7:77:15:54:77:c7:67:52:af:12:d6:17:
                    af:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:5D:D8:42:46:54:B3:8D:4F:AA:DB:AB:FC:FE:E9:80:41:A7:FA:37
            X509v3 Authority Key Identifier:
                keyid:3E:21:2D:B1:B3:02:95:0E:59:67:27:00:15:5B:17:6D:07:CF:DA:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3E212DB1B302950E59672700155B176D07CFDAEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E212DB1B302950E59672700155B176D07CFDAEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3136382e3233322e3234332e302f32342d3234203d3e20323634393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:ea:27:20:38:f9:63:54:bd:c5:87:69:a0:d0:7e:87:8a:30:
         f0:c4:0e:dc:70:c5:47:bd:d4:22:55:90:a2:85:18:6d:96:a4:
         af:f9:73:b0:54:ac:d8:ca:1e:b4:0b:e3:d7:cb:7c:03:de:66:
         b3:d8:a8:24:8c:fb:44:64:1e:c3:b0:db:cd:82:81:aa:74:61:
         97:3e:4f:8e:68:84:f9:3d:fe:bf:ec:b5:d8:52:7b:35:8a:a3:
         93:b9:fb:6d:f9:7d:0e:7c:eb:92:79:58:8f:8b:c2:b6:d0:18:
         27:61:08:f5:33:a7:eb:91:2f:05:2b:f9:71:ca:f4:5b:d1:bf:
         a0:3a:cb:2f:b1:ed:15:c5:f0:c4:ab:9b:03:4b:1d:a4:9d:32:
         7c:4a:88:bf:f5:70:82:f9:fe:62:15:69:cf:0a:82:0d:d3:2b:
         90:13:bc:a0:8f:5c:e1:d4:bc:ba:0f:81:db:34:24:40:7f:0c:
         b2:f1:ee:32:2a:c8:42:79:a4:63:c2:64:0b:ff:7c:f7:28:74:
         d3:4e:cf:cd:4d:63:84:a2:21:38:c1:8d:9c:46:38:b9:d6:fa:
         48:2c:af:16:bd:8a:0b:1e:dd:4b:ee:6f:78:77:03:d3:8b:fb:
         2e:67:08:95:2f:8e:eb:fb:8b:bb:3a:d8:8b:c7:8b:e9:3d:e9:
         6d:ff:b4:7d
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUTyxj2mZEELgGDW3f0CD33OlrR8IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0UyMTJEQjFCMzAyOTUwRTU5NjcyNzAwMTU1QjE3NkQw
N0NGREFFQTAeFw0yNTA0MDExNTIxNDZaFw0yNjAzMzExNTI2NDZaMDMxMTAvBgNV
BAMTKDRCNUREODQyNDY1NEIzOEQ0RkFBREJBQkZDRkVFOTgwNDFBN0ZBMzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZpdq7brAuvGUn4wTHVwBtRNV9
8re8eUphGrqv3NsFdKJ3x7aZss2oU7QzUq6qsd1asDypdfiHD69DEphBVaIv5yR8
LBDQgE9s5qFKaMWCj77npReUwQaL0Sh8FmqEEr9Xg6JclY5eHFOzAy6jWFh7Hc7n
jySa01hq9UVcLZAkTafj6dUEPifPeXnaFBtR1O3gVOzE+tV3ejam935+xnpny4CB
7aY3yKjbZnktcS/DED5ri4ubQlEif42tXDESzOgpsjd6bv9FpPn5/9N0JaozBf6a
csPAf3BaJErFqg5wj44LANOJpCQDu3LE22dzwlKB18d3FVR3x2dSrxLWF6/XAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUS13YQkZUs41Pqtur/P7pgEGn+jcwHwYDVR0j
BBgwFoAUPiEtsbMClQ5ZZycAFVsXbQfP2uowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHVVc2c0S2RyS0Z4cTlxZzhMemdrVkxrcWRBRWM5a203ZVZkeURGUkNT
S2EvMC8zRTIxMkRCMUIzMDI5NTBFNTk2NzI3MDAxNTVCMTc2RDA3Q0ZEQUVBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNFMjEyREIxQjMwMjk1MEU1
OTY3MjcwMDE1NUIxNzZEMDdDRkRBRUEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h1VXNnNEtkcktGeHE5cWc4THpna1ZMa3FkQUVjOWttN2VWZHlERlJDU0thLzAv
MzEzNjM4MmUzMjMzMzIyZTMyMzQzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNDM5MzUzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKjo8zANBgkqhkiG9w0BAQsFAAOCAQEANuon
IDj5Y1S9xYdpoNB+h4ow8MQO3HDFR73UIlWQooUYbZakr/lzsFSs2MoetAvj18t8
A95ms9ioJIz7RGQew7DbzYKBqnRhlz5PjmiE+T3+v+y12FJ7NYqjk7n7bfl9Dnzr
knlYj4vCttAYJ2EI9TOn65EvBSv5ccr0W9G/oDrLL7HtFcXwxKubA0sdpJ0yfEqI
v/Vwgvn+YhVpzwqCDdMrkBO8oI9c4dS8ug+B2zQkQH8MsvHuMirIQnmkY8JkC/98
9yh0007PzU1jhKIhOMGNnEY4udb6SCyvFr2KCx7dS+5veHcD04v7LmcIlS+O6/uL
uzrYi8eL6T3pbf+0fQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 20:06:50 2025 by rpki-client on console.sobornost.net