Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3137302e3135302e3230342e302f32322d3234203d3e203238323230.roa
File:                     3137302e3135302e3230342e302f32322d3234203d3e203238323230.roa (raw, json)
Hash identifier:          lvrzPJIN1m1H2wK2uyLKYYX9Nbnc0hABolxa8svpDME=
Subject key identifier:   87:CD:4C:6A:51:16:3D:31:DF:33:F5:05:85:8A:21:CC:4A:EF:26:52
Certificate issuer:       /CN=DDF75D11A85F5023747B20E973994EC53D23A68E
Certificate serial:       391C5F4EF57A26D2F8D084B378529EF8A1ED06DD
Authority key identifier: DD:F7:5D:11:A8:5F:50:23:74:7B:20:E9:73:99:4E:C5:3D:23:A6:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDF75D11A85F5023747B20E973994EC53D23A68E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3137302e3135302e3230342e302f32322d3234203d3e203238323230.roa
Signing time:             Fri 09 May 2025 12:57:32 +0000
ROA not before:           Fri 09 May 2025 12:52:32 +0000
ROA not after:            Fri 08 May 2026 12:57:32 +0000
asID:                     28220
IP address blocks:        170.150.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.crl
                          rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDF75D11A85F5023747B20E973994EC53D23A68E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 01:12:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:1c:5f:4e:f5:7a:26:d2:f8:d0:84:b3:78:52:9e:f8:a1:ed:06:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDF75D11A85F5023747B20E973994EC53D23A68E
        Validity
            Not Before: May  9 12:52:32 2025 GMT
            Not After : May  8 12:57:32 2026 GMT
        Subject: CN=87CD4C6A51163D31DF33F505858A21CC4AEF2652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:43:b0:c4:50:11:1a:9a:1f:31:28:06:5f:75:
                    55:c2:bb:73:a9:5a:df:7c:42:f8:c7:88:9f:9b:7f:
                    83:47:fc:28:66:ef:34:00:3f:13:5d:14:b3:d6:fa:
                    c6:34:dc:50:45:6f:02:ef:e1:2d:e8:14:80:ea:9d:
                    4a:8f:ac:9d:27:fb:1f:e2:92:f8:80:75:03:73:74:
                    de:e0:97:cc:86:88:0c:22:e4:8a:7f:a4:e9:12:11:
                    e5:a4:90:88:48:ef:aa:cc:c0:3a:8e:b1:6e:09:7c:
                    f7:e5:62:48:e8:06:14:41:b2:1e:85:81:26:b6:8c:
                    46:5f:b0:e4:24:6e:5e:09:ee:67:59:4f:7f:d2:0c:
                    57:01:a6:c9:1e:20:9d:6c:d0:9f:79:03:be:8e:a5:
                    02:a1:0d:22:64:36:a4:fc:bc:70:1d:d3:a4:49:41:
                    54:4f:09:51:05:69:64:f6:d4:f4:34:50:e9:77:c8:
                    87:fe:e3:1e:47:14:84:35:76:ef:ea:cb:ea:9b:07:
                    9f:d3:96:07:28:da:d9:3c:54:34:92:1a:c0:d7:3a:
                    aa:6b:00:e5:f7:62:af:f9:15:e3:2f:a8:70:32:02:
                    14:42:af:5f:a2:9f:07:95:f6:4d:f2:99:9a:e0:4f:
                    32:bd:f1:44:14:fe:ae:b4:e1:8e:e5:41:a7:b0:69:
                    74:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:CD:4C:6A:51:16:3D:31:DF:33:F5:05:85:8A:21:CC:4A:EF:26:52
            X509v3 Authority Key Identifier:
                keyid:DD:F7:5D:11:A8:5F:50:23:74:7B:20:E9:73:99:4E:C5:3D:23:A6:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDF75D11A85F5023747B20E973994EC53D23A68E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3137302e3135302e3230342e302f32322d3234203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:26:77:64:1b:21:15:6f:5e:c6:0d:f9:95:ef:d4:1c:53:42:
         5c:f6:45:4f:12:30:a1:30:fd:0c:7b:ad:90:82:da:e3:96:35:
         c3:46:c1:2d:06:e8:ca:ba:b7:b5:29:03:be:f7:4d:23:05:25:
         dd:06:ea:27:c0:50:f5:bc:01:db:21:0f:a1:9d:87:df:23:9d:
         b7:64:b7:a2:16:ad:f4:e1:fc:27:58:60:a6:78:64:00:be:28:
         35:47:10:d8:3e:75:b4:0b:e7:bb:92:34:f8:9c:84:43:9a:fe:
         ea:79:2d:98:6b:b1:44:70:9a:ec:47:2e:62:6c:db:2e:0e:23:
         bb:0f:6e:04:13:36:f6:0c:65:b8:c2:23:64:92:41:89:74:2c:
         7a:d7:c3:80:33:6c:5e:09:34:dd:f7:3a:a1:02:81:eb:47:20:
         e2:b1:e8:25:74:86:27:72:40:f1:68:61:e0:18:ef:76:19:4e:
         4e:56:0c:2c:61:26:30:e3:33:28:c1:17:97:64:28:82:0c:33:
         fe:3d:31:62:16:22:e3:b0:f8:2d:76:87:2c:44:71:d6:22:4c:
         e6:20:03:eb:97:75:50:8d:a7:16:53:fe:fc:d6:26:b2:0f:7f:
         4b:11:ff:92:92:45:45:0f:cb:6c:b0:8c:02:bd:ec:ca:7e:b8:
         75:26:87:68
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUORxfTvV6JtL40ISzeFKe+KHtBt0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRERGNzVEMTFBODVGNTAyMzc0N0IyMEU5NzM5OTRFQzUz
RDIzQTY4RTAeFw0yNTA1MDkxMjUyMzJaFw0yNjA1MDgxMjU3MzJaMDMxMTAvBgNV
BAMTKDg3Q0Q0QzZBNTExNjNEMzFERjMzRjUwNTg1OEEyMUNDNEFFRjI2NTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoQ7DEUBEamh8xKAZfdVXCu3Op
Wt98QvjHiJ+bf4NH/Chm7zQAPxNdFLPW+sY03FBFbwLv4S3oFIDqnUqPrJ0n+x/i
kviAdQNzdN7gl8yGiAwi5Ip/pOkSEeWkkIhI76rMwDqOsW4JfPflYkjoBhRBsh6F
gSa2jEZfsOQkbl4J7mdZT3/SDFcBpskeIJ1s0J95A76OpQKhDSJkNqT8vHAd06RJ
QVRPCVEFaWT21PQ0UOl3yIf+4x5HFIQ1du/qy+qbB5/Tlgco2tk8VDSSGsDXOqpr
AOX3Yq/5FeMvqHAyAhRCr1+inweV9k3ymZrgTzK98UQU/q604Y7lQaewaXQ1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUh81MalEWPTHfM/UFhYohzErvJlIwHwYDVR0j
BBgwFoAU3fddEahfUCN0eyDpc5lOxT0jpo4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOU03WlFMVXp5Tkt2M3lTRTNGQ05KQ0t1bXdLTkN0Y3pTVFlwRjdIOE1n
cmYvMC9EREY3NUQxMUE4NUY1MDIzNzQ3QjIwRTk3Mzk5NEVDNTNEMjNBNjhFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RERjc1RDExQTg1RjUwMjM3
NDdCMjBFOTczOTk0RUM1M0QyM0E2OEUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlNN1pRTFV6eU5LdjN5U0UzRkNOSkNLdW13S05DdGN6U1RZcEY3SDhNZ3JmLzAv
MzEzNzMwMmUzMTM1MzAyZTMyMzAzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzgzMjMyMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKqlswwDQYJKoZIhvcNAQELBQADggEBAAkmd2Qb
IRVvXsYN+ZXv1BxTQlz2RU8SMKEw/Qx7rZCC2uOWNcNGwS0G6Mq6t7UpA773TSMF
Jd0G6ifAUPW8AdshD6Gdh98jnbdkt6IWrfTh/CdYYKZ4ZAC+KDVHENg+dbQL57uS
NPichEOa/up5LZhrsURwmuxHLmJs2y4OI7sPbgQTNvYMZbjCI2SSQYl0LHrXw4Az
bF4JNN33OqECgetHIOKx6CV0hidyQPFoYeAY73YZTk5WDCxhJjDjMyjBF5dkKIIM
M/49MWIWIuOw+C12hyxEcdYiTOYgA+uXdVCNpxZT/vzWJrIPf0sR/5KSRUUPy2yw
jAK97Mp+uHUmh2g=
-----END CERTIFICATE-----
Generated at Wed May 14 06:05:38 2025 by rpki-client