Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5yQJ3eeN27HHZKx1tMtFGcJDmmEy3SWG2z5QaSw8xR5V/0/3138392e38352e3132302e302f32342d3234203d3e20323733353930.roa
File:                     3138392e38352e3132302e302f32342d3234203d3e20323733353930.roa (raw, json)
Hash identifier:          zye4T4P14sVSggT6z5O8FSTD5LIgzX3Wmd7LrAjY68A=
Subject key identifier:   16:93:26:A1:5E:3F:6E:B0:BD:5E:6E:1C:73:CD:07:A8:97:58:DE:22
Certificate issuer:       /CN=624E4C478FEA89FB6279398C403AD178972E10A6
Certificate serial:       1C286965916EBEAA6DECCC7E93437DC062AEC3DD
Authority key identifier: 62:4E:4C:47:8F:EA:89:FB:62:79:39:8C:40:3A:D1:78:97:2E:10:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/624E4C478FEA89FB6279398C403AD178972E10A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5yQJ3eeN27HHZKx1tMtFGcJDmmEy3SWG2z5QaSw8xR5V/0/3138392e38352e3132302e302f32342d3234203d3e20323733353930.roa
Signing time:             Thu 26 Jun 2025 18:17:45 +0000
ROA not before:           Thu 26 Jun 2025 18:12:45 +0000
ROA not after:            Thu 25 Jun 2026 18:17:45 +0000
asID:                     273590
IP address blocks:        189.85.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5yQJ3eeN27HHZKx1tMtFGcJDmmEy3SWG2z5QaSw8xR5V/0/624E4C478FEA89FB6279398C403AD178972E10A6.crl
                          rsync://rpki-repo.registro.br/repo/5yQJ3eeN27HHZKx1tMtFGcJDmmEy3SWG2z5QaSw8xR5V/0/624E4C478FEA89FB6279398C403AD178972E10A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/624E4C478FEA89FB6279398C403AD178972E10A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 22:09:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:28:69:65:91:6e:be:aa:6d:ec:cc:7e:93:43:7d:c0:62:ae:c3:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=624E4C478FEA89FB6279398C403AD178972E10A6
        Validity
            Not Before: Jun 26 18:12:45 2025 GMT
            Not After : Jun 25 18:17:45 2026 GMT
        Subject: CN=169326A15E3F6EB0BD5E6E1C73CD07A89758DE22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:35:4f:cb:59:81:d1:d7:19:d9:2c:ad:d9:85:
                    5c:cd:c4:9e:41:06:2d:68:f2:e4:42:88:c1:88:3a:
                    23:33:2e:ec:93:e7:ff:06:28:15:6b:38:43:95:08:
                    2c:7e:86:01:8d:5b:3e:32:28:4e:2f:2d:d4:88:c9:
                    32:19:a6:39:ec:df:c8:1c:da:13:0e:fe:b1:ba:d5:
                    ac:e8:63:c8:d2:ad:ef:ab:6f:4c:fd:8e:c9:c5:21:
                    6d:07:4b:15:e1:d2:e8:df:bd:e9:bb:0e:13:d1:6c:
                    44:e2:12:e4:e1:f2:cd:33:a7:1a:95:09:c3:3c:fb:
                    6b:f8:51:78:01:e7:b1:d3:57:b1:e3:4d:cc:dd:0a:
                    22:99:6c:85:58:ed:d0:eb:b9:13:f0:2e:28:ad:90:
                    9c:33:66:02:74:aa:3c:e9:e1:a0:6d:22:bb:a2:24:
                    67:35:9b:27:ea:32:fa:d6:ee:d5:1e:14:73:25:11:
                    fc:15:67:af:4b:4e:4d:c6:25:cb:38:b7:96:da:90:
                    45:98:a5:8c:e7:b3:1f:ee:20:67:0c:64:cb:b3:e6:
                    ab:5a:a9:5a:61:67:3c:5e:6e:25:78:6e:ae:0a:55:
                    ea:09:8c:8b:97:39:66:33:42:50:d7:22:85:d0:f9:
                    da:da:d9:0d:d4:35:88:a1:74:4c:7e:49:a1:99:48:
                    ce:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:93:26:A1:5E:3F:6E:B0:BD:5E:6E:1C:73:CD:07:A8:97:58:DE:22
            X509v3 Authority Key Identifier:
                keyid:62:4E:4C:47:8F:EA:89:FB:62:79:39:8C:40:3A:D1:78:97:2E:10:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5yQJ3eeN27HHZKx1tMtFGcJDmmEy3SWG2z5QaSw8xR5V/0/624E4C478FEA89FB6279398C403AD178972E10A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/624E4C478FEA89FB6279398C403AD178972E10A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5yQJ3eeN27HHZKx1tMtFGcJDmmEy3SWG2z5QaSw8xR5V/0/3138392e38352e3132302e302f32342d3234203d3e20323733353930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.85.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:93:b4:4d:12:e2:f2:35:4c:08:a5:85:19:5f:8a:e6:43:a8:
         0e:f5:94:8a:bd:0e:45:93:5c:7d:80:51:7e:aa:67:9f:7a:92:
         04:45:94:0c:97:26:b0:43:4f:6a:16:31:ab:27:a3:21:b5:09:
         07:ba:51:27:05:ed:c1:a7:38:a4:fc:e7:5e:22:7d:8d:21:80:
         70:89:b8:27:14:0d:2e:aa:87:71:2a:77:ea:45:57:7f:41:16:
         2d:5b:69:9d:ca:ff:38:32:89:33:f9:3c:62:eb:63:ca:f8:e4:
         74:55:86:ae:55:02:5e:88:d0:e2:aa:96:ab:57:89:a3:d7:ec:
         9e:e0:f7:74:7b:50:eb:05:22:39:63:1e:f1:2f:c9:f6:78:2f:
         1a:f3:e0:2b:c3:d9:70:d7:d0:28:af:18:e7:64:8f:01:c1:e8:
         b9:97:b6:58:a6:bd:4a:16:46:b6:42:d7:02:b6:bd:08:0b:8a:
         ef:c7:1f:86:47:3d:37:dc:c8:6f:4a:dc:09:09:40:8b:df:49:
         80:b9:5b:3d:a5:0d:cd:5f:c6:f9:c7:f9:1e:7a:23:d3:11:2e:
         fc:b4:04:74:ca:a2:97:ff:bc:df:82:f5:41:cc:60:7a:77:f7:
         7a:d2:79:b8:dc:2f:15:78:4d:cf:6e:12:61:ed:7a:03:c5:36:
         c4:33:2e:9d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUHChpZZFuvqpt7Mx+k0N9wGKuw90wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjI0RTRDNDc4RkVBODlGQjYyNzkzOThDNDAzQUQxNzg5
NzJFMTBBNjAeFw0yNTA2MjYxODEyNDVaFw0yNjA2MjUxODE3NDVaMDMxMTAvBgNV
BAMTKDE2OTMyNkExNUUzRjZFQjBCRDVFNkUxQzczQ0QwN0E4OTc1OERFMjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrNU/LWYHR1xnZLK3ZhVzNxJ5B
Bi1o8uRCiMGIOiMzLuyT5/8GKBVrOEOVCCx+hgGNWz4yKE4vLdSIyTIZpjns38gc
2hMO/rG61azoY8jSre+rb0z9jsnFIW0HSxXh0ujfvem7DhPRbETiEuTh8s0zpxqV
CcM8+2v4UXgB57HTV7HjTczdCiKZbIVY7dDruRPwLiitkJwzZgJ0qjzp4aBtIrui
JGc1myfqMvrW7tUeFHMlEfwVZ69LTk3GJcs4t5bakEWYpYznsx/uIGcMZMuz5qta
qVphZzxebiV4bq4KVeoJjIuXOWYzQlDXIoXQ+dra2Q3UNYihdEx+SaGZSM4BAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUFpMmoV4/brC9Xm4cc80HqJdY3iIwHwYDVR0j
BBgwFoAUYk5MR4/qiftieTmMQDrReJcuEKYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXlRSjNlZU4yN0hIWkt4MXRNdEZHY0pEbW1FeTNTV0cyejVRYVN3OHhS
NVYvMC82MjRFNEM0NzhGRUE4OUZCNjI3OTM5OEM0MDNBRDE3ODk3MkUxMEE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYyNEU0QzQ3OEZFQTg5RkI2
Mjc5Mzk4QzQwM0FEMTc4OTcyRTEwQTYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV5UUozZWVOMjdISFpLeDF0TXRGR2NKRG1tRXkzU1dHMno1UWFTdzh4UjVWLzAv
MzEzODM5MmUzODM1MmUzMTMyMzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzMzNTM5MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC9VXgwDQYJKoZIhvcNAQELBQADggEBABCTtE0S
4vI1TAilhRlfiuZDqA71lIq9DkWTXH2AUX6qZ596kgRFlAyXJrBDT2oWMasnoyG1
CQe6UScF7cGnOKT8514ifY0hgHCJuCcUDS6qh3Eqd+pFV39BFi1baZ3K/zgyiTP5
PGLrY8r45HRVhq5VAl6I0OKqlqtXiaPX7J7g93R7UOsFIjljHvEvyfZ4Lxrz4CvD
2XDX0CivGOdkjwHB6LmXtlimvUoWRrZC1wK2vQgLiu/HH4ZHPTfcyG9K3AkJQIvf
SYC5Wz2lDc1fxvnH+R56I9MRLvy0BHTKopf/vN+C9UHMYHp393rSebjcLxV4Tc9u
EmHtegPFNsQzLp0=
-----END CERTIFICATE-----
Generated at Thu Jul 3 07:11:10 2025 by rpki-client