Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/1/3138312e3233322e3132382e302f32322d3234203d3e20323731353132.roa
File:                     3138312e3233322e3132382e302f32322d3234203d3e20323731353132.roa (raw, json)
Hash identifier:          Ca0ATQBtu2wwlGdbVP249fdllMV78XDACR45JyepW1s=
Subject key identifier:   B4:B3:4F:08:95:91:0C:A0:F3:75:4B:6E:8E:BA:50:3C:3E:43:99:8A
Certificate issuer:       /CN=DD01CCF18E70CFC5DB5B0F2DA098EAF53196CBD1
Certificate serial:       459872B4853F54A8B5CF5CFBD0F188197792CFE0
Authority key identifier: DD:01:CC:F1:8E:70:CF:C5:DB:5B:0F:2D:A0:98:EA:F5:31:96:CB:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD01CCF18E70CFC5DB5B0F2DA098EAF53196CBD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/1/3138312e3233322e3132382e302f32322d3234203d3e20323731353132.roa
Signing time:             Thu 06 Mar 2025 23:10:53 +0000
ROA not before:           Thu 06 Mar 2025 23:05:53 +0000
ROA not after:            Thu 05 Mar 2026 23:10:53 +0000
asID:                     271512
IP address blocks:        181.232.128.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/1/DD01CCF18E70CFC5DB5B0F2DA098EAF53196CBD1.crl
                          rsync://rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/1/DD01CCF18E70CFC5DB5B0F2DA098EAF53196CBD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD01CCF18E70CFC5DB5B0F2DA098EAF53196CBD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 12:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:98:72:b4:85:3f:54:a8:b5:cf:5c:fb:d0:f1:88:19:77:92:cf:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD01CCF18E70CFC5DB5B0F2DA098EAF53196CBD1
        Validity
            Not Before: Mar  6 23:05:53 2025 GMT
            Not After : Mar  5 23:10:53 2026 GMT
        Subject: CN=B4B34F0895910CA0F3754B6E8EBA503C3E43998A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:88:39:5f:4c:d7:9c:39:7f:0c:60:9f:e4:14:
                    56:9b:dd:ce:0e:a4:01:40:66:99:66:b4:58:2b:0f:
                    4d:d1:1a:c1:bd:69:d3:eb:2b:7f:34:b3:b9:68:53:
                    95:f8:33:44:9c:0d:66:f3:3e:c4:6b:eb:25:e5:f7:
                    2f:a2:07:c4:62:6e:a0:f3:1f:85:b0:f4:0d:3d:84:
                    e5:05:22:fd:4e:6f:19:d6:d7:6a:4c:19:48:8c:29:
                    0e:1a:2e:58:66:7f:8b:80:b1:a2:5e:be:85:df:e3:
                    f7:e6:44:c7:16:c7:9a:12:6b:35:0b:32:ca:4e:54:
                    70:ed:8c:2f:01:52:b1:09:13:66:fc:9b:53:a5:8f:
                    77:bb:68:97:ba:41:80:83:8f:a4:fe:7e:2a:af:36:
                    50:0f:43:c4:44:34:a5:e7:06:db:38:38:5a:ca:6e:
                    08:ad:2e:f7:21:b6:2c:8b:f2:79:e2:10:fd:9d:b8:
                    02:84:7e:62:d9:4a:68:be:8f:53:50:78:81:27:fb:
                    5a:ff:bc:b1:7e:24:2a:c2:d2:ff:66:10:0b:a0:aa:
                    53:92:ba:cf:a5:12:55:ee:be:f6:b7:11:69:2c:68:
                    75:62:97:03:84:d9:fb:c3:62:68:8d:91:d5:68:85:
                    46:33:7e:68:18:f9:ba:ca:47:e4:70:a8:50:7a:5d:
                    75:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:B3:4F:08:95:91:0C:A0:F3:75:4B:6E:8E:BA:50:3C:3E:43:99:8A
            X509v3 Authority Key Identifier:
                keyid:DD:01:CC:F1:8E:70:CF:C5:DB:5B:0F:2D:A0:98:EA:F5:31:96:CB:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/1/DD01CCF18E70CFC5DB5B0F2DA098EAF53196CBD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD01CCF18E70CFC5DB5B0F2DA098EAF53196CBD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/1/3138312e3233322e3132382e302f32322d3234203d3e20323731353132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:70:d9:28:79:39:e8:99:6a:27:0b:e5:81:b0:5d:83:3c:3c:
         d7:18:8e:66:7d:f6:34:3e:0f:1a:09:ba:d0:09:ad:1b:31:02:
         cc:fd:6a:36:be:94:ab:a1:78:f3:7b:2b:b6:42:3b:d7:a7:3b:
         b7:f5:62:fb:a0:86:56:e1:ba:8e:b2:0d:80:a1:4b:50:84:3c:
         eb:91:29:d1:cc:fb:13:c1:48:bd:0f:5b:1c:8e:9f:b1:74:22:
         82:ca:2f:e1:6a:25:80:bb:08:a9:13:b7:74:98:cf:f6:a1:32:
         b0:3a:fe:07:35:df:50:f4:56:d4:a1:9f:8f:8a:e0:78:73:c5:
         1b:6a:9b:25:1d:ec:04:b0:1e:dd:0f:87:f8:36:4e:ed:10:4e:
         f6:1d:56:8c:e6:a8:ed:25:bd:2a:1e:e7:10:c9:e8:51:cb:a3:
         7c:2c:fb:3c:11:68:39:f3:97:48:64:53:3f:47:3a:85:8f:d8:
         5d:79:8c:df:d5:2e:dd:ea:c2:cb:2c:16:b6:40:a3:43:76:94:
         69:72:0a:9d:ac:85:ea:05:cd:2b:1b:e6:66:f3:ce:b7:bf:ac:
         be:1d:8f:ef:02:4b:5b:a6:57:3b:0f:a4:e5:e3:34:a2:4c:56:
         8a:3e:c4:c2:0f:6c:cc:83:c4:d5:45:55:3d:cc:47:54:66:e4:
         d7:c8:d7:1b
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIURZhytIU/VKi1z1z70PGIGXeSz+AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREQwMUNDRjE4RTcwQ0ZDNURCNUIwRjJEQTA5OEVBRjUz
MTk2Q0JEMTAeFw0yNTAzMDYyMzA1NTNaFw0yNjAzMDUyMzEwNTNaMDMxMTAvBgNV
BAMTKEI0QjM0RjA4OTU5MTBDQTBGMzc1NEI2RThFQkE1MDNDM0U0Mzk5OEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDiDlfTNecOX8MYJ/kFFab3c4O
pAFAZplmtFgrD03RGsG9adPrK380s7loU5X4M0ScDWbzPsRr6yXl9y+iB8RibqDz
H4Ww9A09hOUFIv1ObxnW12pMGUiMKQ4aLlhmf4uAsaJevoXf4/fmRMcWx5oSazUL
MspOVHDtjC8BUrEJE2b8m1Olj3e7aJe6QYCDj6T+fiqvNlAPQ8RENKXnBts4OFrK
bgitLvchtiyL8nniEP2duAKEfmLZSmi+j1NQeIEn+1r/vLF+JCrC0v9mEAugqlOS
us+lElXuvva3EWksaHVilwOE2fvDYmiNkdVohUYzfmgY+brKR+RwqFB6XXVVAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUtLNPCJWRDKDzdUtujrpQPD5DmYowHwYDVR0j
BBgwFoAU3QHM8Y5wz8XbWw8toJjq9TGWy9EwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9KNHBaSmN3dXZoSGRaODRDYzNLRUNwV1gxQnJmUWpnVWhDTW11aG4xOXNN
LzEvREQwMUNDRjE4RTcwQ0ZDNURCNUIwRjJEQTA5OEVBRjUzMTk2Q0JEMS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9ERDAxQ0NGMThFNzBDRkM1REI1
QjBGMkRBMDk4RUFGNTMxOTZDQkQxLmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9K
NHBaSmN3dXZoSGRaODRDYzNLRUNwV1gxQnJmUWpnVWhDTW11aG4xOXNNLzEvMzEz
ODMxMmUzMjMzMzIyZTMxMzIzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzcz
MTM1MzEzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEArXogDANBgkqhkiG9w0BAQsFAAOCAQEANXDZKHk5
6JlqJwvlgbBdgzw81xiOZn32ND4PGgm60AmtGzECzP1qNr6Uq6F483srtkI716c7
t/Vi+6CGVuG6jrINgKFLUIQ865Ep0cz7E8FIvQ9bHI6fsXQigsov4WolgLsIqRO3
dJjP9qEysDr+BzXfUPRW1KGfj4rgeHPFG2qbJR3sBLAe3Q+H+DZO7RBO9h1WjOao
7SW9Kh7nEMnoUcujfCz7PBFoOfOXSGRTP0c6hY/YXXmM39Uu3erCyywWtkCjQ3aU
aXIKnayF6gXNKxvmZvPOt7+svh2P7wJLW6ZXOw+k5eM0okxWij7Ewg9szIPE1UVV
PcxHVGbk18jXGw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:31 2025 by rpki-client on console.sobornost.net