Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/1/3138312e3233322e3133312e302f32342d3234203d3e20323634343836.roa
File:                     3138312e3233322e3133312e302f32342d3234203d3e20323634343836.roa (raw, json)
Hash identifier:          wu2rIukYpI6JXTw6+o7YNH9kCjNCnuTFCbelp5PhknU=
Subject key identifier:   25:7B:52:BC:B2:14:00:59:A6:BF:4F:36:49:92:05:7F:8B:AD:68:95
Certificate issuer:       /CN=DD01CCF18E70CFC5DB5B0F2DA098EAF53196CBD1
Certificate serial:       7EF5DF4D109EE64A7AA76FF9F22D750FEC9F01C9
Authority key identifier: DD:01:CC:F1:8E:70:CF:C5:DB:5B:0F:2D:A0:98:EA:F5:31:96:CB:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD01CCF18E70CFC5DB5B0F2DA098EAF53196CBD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/1/3138312e3233322e3133312e302f32342d3234203d3e20323634343836.roa
Signing time:             Mon 14 Apr 2025 20:50:28 +0000
ROA not before:           Mon 14 Apr 2025 20:45:28 +0000
ROA not after:            Mon 13 Apr 2026 20:50:28 +0000
asID:                     264486
IP address blocks:        181.232.131.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/1/DD01CCF18E70CFC5DB5B0F2DA098EAF53196CBD1.crl
                          rsync://rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/1/DD01CCF18E70CFC5DB5B0F2DA098EAF53196CBD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD01CCF18E70CFC5DB5B0F2DA098EAF53196CBD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 12:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:f5:df:4d:10:9e:e6:4a:7a:a7:6f:f9:f2:2d:75:0f:ec:9f:01:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD01CCF18E70CFC5DB5B0F2DA098EAF53196CBD1
        Validity
            Not Before: Apr 14 20:45:28 2025 GMT
            Not After : Apr 13 20:50:28 2026 GMT
        Subject: CN=257B52BCB2140059A6BF4F364992057F8BAD6895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c7:35:ee:ed:e5:5b:89:a9:3a:d4:4e:a2:3b:
                    1b:59:16:b1:4d:2d:ea:bd:f7:72:52:92:51:5d:07:
                    4a:d1:a0:59:52:d0:db:22:82:c6:76:50:23:b8:9f:
                    7f:78:ab:ba:f3:c4:59:75:7c:ca:a3:3e:89:1d:07:
                    8c:6c:34:8b:b9:e3:50:39:0a:d1:9b:3f:1d:f6:62:
                    29:b0:75:9b:42:1b:81:80:c0:35:43:77:f8:ba:70:
                    a6:54:55:da:33:08:8a:b5:68:42:75:62:1b:84:0d:
                    b2:d0:41:07:83:c8:6e:0e:58:9a:38:45:6e:5c:ce:
                    25:06:34:ba:eb:bd:78:bd:ca:60:5f:71:94:36:26:
                    07:eb:0f:92:20:a6:db:e2:26:dd:de:b6:ba:a5:3d:
                    5e:df:15:1c:9b:3c:30:87:84:c1:e9:81:06:b5:5e:
                    07:9b:58:54:8b:ca:c9:a3:22:f1:74:8f:c3:e0:c4:
                    e6:e5:88:59:be:4d:67:3c:02:17:41:6c:b7:83:7e:
                    95:ec:05:a2:65:74:4e:cf:e7:93:64:2f:7b:1e:14:
                    c8:aa:66:f3:2d:2d:33:f5:d9:6c:21:e6:41:dd:f7:
                    29:b5:12:68:f7:8e:0f:47:1b:ab:74:29:b3:8b:f6:
                    d8:51:fc:ca:aa:23:92:18:43:57:78:ce:dc:54:a7:
                    dd:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:7B:52:BC:B2:14:00:59:A6:BF:4F:36:49:92:05:7F:8B:AD:68:95
            X509v3 Authority Key Identifier:
                keyid:DD:01:CC:F1:8E:70:CF:C5:DB:5B:0F:2D:A0:98:EA:F5:31:96:CB:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/1/DD01CCF18E70CFC5DB5B0F2DA098EAF53196CBD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD01CCF18E70CFC5DB5B0F2DA098EAF53196CBD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/1/3138312e3233322e3133312e302f32342d3234203d3e20323634343836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:ab:3d:c5:2a:1a:ac:ac:63:c1:1b:e4:af:1b:ca:28:e2:ab:
         0d:fd:74:23:51:08:88:cc:9f:7b:e9:a3:d9:cb:0c:7e:48:45:
         1f:af:29:86:9f:5b:1b:56:79:2f:1d:73:fe:09:83:a4:16:e4:
         47:ef:50:28:70:45:12:2c:2f:4b:b3:ef:14:56:22:72:71:96:
         75:07:87:f0:f6:cc:ba:16:2a:1a:60:e7:56:2a:33:a0:02:b4:
         3a:0a:4d:84:eb:22:06:28:fb:a8:24:b5:56:f5:43:8f:1a:8e:
         36:02:1c:4e:b0:8b:18:d6:e2:5e:fe:76:15:24:1c:ff:a0:e3:
         0b:64:0e:56:52:50:ec:53:58:d5:4b:ab:00:ac:39:a4:43:4c:
         95:cc:8e:c1:b7:d9:f5:0b:5f:50:63:d9:a9:62:43:3c:50:5f:
         88:71:31:a0:a4:b4:ed:cd:b9:4b:9c:5b:2f:5c:86:a9:71:54:
         12:30:3b:28:c3:18:01:1a:4c:6c:bc:e8:8c:90:33:5c:3c:f1:
         f2:38:7f:48:93:50:14:a6:b4:30:b5:f2:98:73:85:c6:66:46:
         81:84:ce:d6:39:e8:18:ba:54:53:b1:c0:0e:ab:6d:cb:db:d7:
         1a:73:8e:12:6b:45:ab:bd:2b:7a:fc:b8:5d:3d:be:00:d6:8e:
         7d:e3:b3:0f
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUfvXfTRCe5kp6p2/58i11D+yfAckwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREQwMUNDRjE4RTcwQ0ZDNURCNUIwRjJEQTA5OEVBRjUz
MTk2Q0JEMTAeFw0yNTA0MTQyMDQ1MjhaFw0yNjA0MTMyMDUwMjhaMDMxMTAvBgNV
BAMTKDI1N0I1MkJDQjIxNDAwNTlBNkJGNEYzNjQ5OTIwNTdGOEJBRDY4OTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDExzXu7eVbiak61E6iOxtZFrFN
Leq993JSklFdB0rRoFlS0NsigsZ2UCO4n394q7rzxFl1fMqjPokdB4xsNIu541A5
CtGbPx32YimwdZtCG4GAwDVDd/i6cKZUVdozCIq1aEJ1YhuEDbLQQQeDyG4OWJo4
RW5cziUGNLrrvXi9ymBfcZQ2JgfrD5IgptviJt3etrqlPV7fFRybPDCHhMHpgQa1
XgebWFSLysmjIvF0j8PgxObliFm+TWc8AhdBbLeDfpXsBaJldE7P55NkL3seFMiq
ZvMtLTP12Wwh5kHd9ym1Emj3jg9HG6t0KbOL9thR/MqqI5IYQ1d4ztxUp91JAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUJXtSvLIUAFmmv082SZIFf4utaJUwHwYDVR0j
BBgwFoAU3QHM8Y5wz8XbWw8toJjq9TGWy9EwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9KNHBaSmN3dXZoSGRaODRDYzNLRUNwV1gxQnJmUWpnVWhDTW11aG4xOXNN
LzEvREQwMUNDRjE4RTcwQ0ZDNURCNUIwRjJEQTA5OEVBRjUzMTk2Q0JEMS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9ERDAxQ0NGMThFNzBDRkM1REI1
QjBGMkRBMDk4RUFGNTMxOTZDQkQxLmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9K
NHBaSmN3dXZoSGRaODRDYzNLRUNwV1gxQnJmUWpnVWhDTW11aG4xOXNNLzEvMzEz
ODMxMmUzMjMzMzIyZTMxMzMzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYz
NDM0MzgzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEALXogzANBgkqhkiG9w0BAQsFAAOCAQEAv6s9xSoa
rKxjwRvkrxvKKOKrDf10I1EIiMyfe+mj2csMfkhFH68php9bG1Z5Lx1z/gmDpBbk
R+9QKHBFEiwvS7PvFFYicnGWdQeH8PbMuhYqGmDnViozoAK0OgpNhOsiBij7qCS1
VvVDjxqONgIcTrCLGNbiXv52FSQc/6DjC2QOVlJQ7FNY1UurAKw5pENMlcyOwbfZ
9QtfUGPZqWJDPFBfiHExoKS07c25S5xbL1yGqXFUEjA7KMMYARpMbLzojJAzXDzx
8jh/SJNQFKa0MLXymHOFxmZGgYTO1jnoGLpUU7HADqtty9vXGnOOEmtFq70revy4
XT2+ANaOfeOzDw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:31 2025 by rpki-client on console.sobornost.net