Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/1/3138312e3233332e34342e302f32322d3234203d3e20323731343230.roa
File:                     3138312e3233332e34342e302f32322d3234203d3e20323731343230.roa (raw, json)
Hash identifier:          LoIkVhIdpyTaZzQaIa0UHDrxaFmRhF6K5fu6ztdM6DM=
Subject key identifier:   9F:72:0C:AC:80:B0:C8:07:F0:CB:93:98:F6:D9:D5:5A:D1:B2:85:90
Certificate issuer:       /CN=79124DD01AF5FB142695944778636C75D227628B
Certificate serial:       1746F5051461CB06AD829B3627C349F8BE61EC05
Authority key identifier: 79:12:4D:D0:1A:F5:FB:14:26:95:94:47:78:63:6C:75:D2:27:62:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79124DD01AF5FB142695944778636C75D227628B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/1/3138312e3233332e34342e302f32322d3234203d3e20323731343230.roa
Signing time:             Fri 02 May 2025 13:44:18 +0000
ROA not before:           Fri 02 May 2025 13:39:18 +0000
ROA not after:            Fri 01 May 2026 13:44:18 +0000
asID:                     271420
IP address blocks:        181.233.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/1/79124DD01AF5FB142695944778636C75D227628B.crl
                          rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/1/79124DD01AF5FB142695944778636C75D227628B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79124DD01AF5FB142695944778636C75D227628B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 12:40:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:46:f5:05:14:61:cb:06:ad:82:9b:36:27:c3:49:f8:be:61:ec:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79124DD01AF5FB142695944778636C75D227628B
        Validity
            Not Before: May  2 13:39:18 2025 GMT
            Not After : May  1 13:44:18 2026 GMT
        Subject: CN=9F720CAC80B0C807F0CB9398F6D9D55AD1B28590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b8:b4:f3:26:e5:fd:1a:cc:4b:eb:4d:8a:f6:
                    11:89:3c:80:8f:c3:be:4b:d2:32:3d:92:d1:54:af:
                    32:17:9e:bd:0a:91:b9:ce:2e:a6:46:28:01:8e:57:
                    b1:fc:12:e2:b8:f1:35:5c:8f:a6:59:53:e9:1d:6c:
                    2e:70:6b:b3:cd:9e:0c:98:f8:19:7e:d6:9c:7a:42:
                    aa:72:78:3f:5d:e7:ed:7f:eb:9e:41:3f:c0:d2:34:
                    bc:21:88:a2:e4:a9:01:14:70:e2:e5:30:23:84:0a:
                    c2:38:24:e6:e9:c0:a4:5e:8d:b3:be:52:7f:78:bf:
                    b9:4e:69:bb:15:99:b7:25:cf:b2:a2:8a:4b:1c:dc:
                    41:c2:39:2c:03:9e:74:cd:96:10:88:e7:d9:c2:4d:
                    56:55:93:0f:53:a6:db:8c:50:88:b8:44:40:10:c1:
                    00:3c:65:62:86:d2:93:ed:47:ba:9e:81:07:91:b0:
                    48:65:63:00:56:d6:c0:88:90:ae:e7:a6:ee:32:b1:
                    6f:0f:d0:12:c9:80:a3:b7:db:27:07:73:b0:1d:97:
                    a4:2f:bf:bc:fe:46:81:f4:55:c2:85:dd:51:66:10:
                    e1:61:62:70:06:8d:19:14:0c:38:e1:f7:fa:4d:43:
                    d9:f0:35:80:3c:1b:22:91:8c:42:14:de:ec:78:70:
                    60:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:72:0C:AC:80:B0:C8:07:F0:CB:93:98:F6:D9:D5:5A:D1:B2:85:90
            X509v3 Authority Key Identifier:
                keyid:79:12:4D:D0:1A:F5:FB:14:26:95:94:47:78:63:6C:75:D2:27:62:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/1/79124DD01AF5FB142695944778636C75D227628B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79124DD01AF5FB142695944778636C75D227628B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/1/3138312e3233332e34342e302f32322d3234203d3e20323731343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:ea:3d:44:4f:22:27:ad:6a:94:c4:f5:d1:86:86:22:5e:63:
         94:a1:a3:0c:f0:16:35:bc:3a:f1:d2:66:1e:83:91:3d:a6:5c:
         27:de:d5:b1:68:e3:9c:9d:0f:b4:80:19:1d:08:25:4b:50:42:
         8c:f4:b8:54:a8:75:8f:6d:3f:68:93:18:3e:c8:2b:15:9e:fe:
         fd:5f:c3:ec:18:22:af:85:80:90:13:10:c1:54:1d:6d:af:ba:
         af:e6:84:60:d7:5c:ba:c2:98:73:63:79:97:a3:27:46:44:18:
         ec:20:b1:77:18:fe:7f:04:27:64:25:b4:dd:c3:7a:37:35:54:
         1d:d3:26:79:86:11:10:b9:bc:53:21:b1:58:63:92:a8:b9:65:
         60:79:db:32:5d:98:03:0a:93:87:85:f6:b8:d3:59:34:c7:1f:
         1e:d0:68:8b:f4:58:51:fa:3a:9c:f5:15:7f:45:4e:7d:46:e5:
         99:48:e2:60:c7:de:27:b6:c9:6c:68:b9:3f:42:04:1c:50:69:
         cb:ae:5f:2c:dd:db:45:d4:f7:58:cc:8b:10:e7:db:36:ee:29:
         30:28:20:02:8b:04:9a:b0:6c:cf:fc:9d:30:9b:b1:f4:93:46:
         73:9c:3a:d9:18:f5:3f:31:6f:0f:90:5d:ab:ca:dc:c4:33:12:
         cb:09:96:29
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUF0b1BRRhywatgps2J8NJ+L5h7AUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzkxMjRERDAxQUY1RkIxNDI2OTU5NDQ3Nzg2MzZDNzVE
MjI3NjI4QjAeFw0yNTA1MDIxMzM5MThaFw0yNjA1MDExMzQ0MThaMDMxMTAvBgNV
BAMTKDlGNzIwQ0FDODBCMEM4MDdGMENCOTM5OEY2RDlENTVBRDFCMjg1OTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+uLTzJuX9GsxL602K9hGJPICP
w75L0jI9ktFUrzIXnr0KkbnOLqZGKAGOV7H8EuK48TVcj6ZZU+kdbC5wa7PNngyY
+Bl+1px6QqpyeD9d5+1/655BP8DSNLwhiKLkqQEUcOLlMCOECsI4JObpwKRejbO+
Un94v7lOabsVmbclz7Kiiksc3EHCOSwDnnTNlhCI59nCTVZVkw9TptuMUIi4REAQ
wQA8ZWKG0pPtR7qegQeRsEhlYwBW1sCIkK7npu4ysW8P0BLJgKO32ycHc7Adl6Qv
v7z+RoH0VcKF3VFmEOFhYnAGjRkUDDjh9/pNQ9nwNYA8GyKRjEIU3ux4cGCPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUn3IMrICwyAfwy5OY9tnVWtGyhZAwHwYDVR0j
BBgwFoAUeRJN0Br1+xQmlZRHeGNsddInYoswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0p2d3hCS01vcVBFNXVuektGNlJ4c3UxY0J4YTVQWkFGYlBwdVNIRnhm
a2EvMS83OTEyNEREMDFBRjVGQjE0MjY5NTk0NDc3ODYzNkM3NUQyMjc2MjhCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc5MTI0REQwMUFGNUZCMTQy
Njk1OTQ0Nzc4NjM2Qzc1RDIyNzYyOEIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NKdnd4QktNb3FQRTV1bnpLRjZSeHN1MWNCeGE1UFpBRmJQcHVTSEZ4ZmthLzEv
MzEzODMxMmUzMjMzMzMyZTM0MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3
MzEzNDMyMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK16SwwDQYJKoZIhvcNAQELBQADggEBAATqPURP
IietapTE9dGGhiJeY5ShowzwFjW8OvHSZh6DkT2mXCfe1bFo45ydD7SAGR0IJUtQ
Qoz0uFSodY9tP2iTGD7IKxWe/v1fw+wYIq+FgJATEMFUHW2vuq/mhGDXXLrCmHNj
eZejJ0ZEGOwgsXcY/n8EJ2QltN3Dejc1VB3TJnmGERC5vFMhsVhjkqi5ZWB52zJd
mAMKk4eF9rjTWTTHHx7QaIv0WFH6Opz1FX9FTn1G5ZlI4mDH3ie2yWxouT9CBBxQ
acuuXyzd20XU91jMixDn2zbuKTAoIAKLBJqwbM/8nTCbsfSTRnOcOtkY9T8xbw+Q
XavK3MQzEssJlik=
-----END CERTIFICATE-----
Generated at Wed May 14 14:14:45 2025 by rpki-client