Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/3139302e392e3130342e302f32332d3233203d3e20323731363037.roa
File:                     3139302e392e3130342e302f32332d3233203d3e20323731363037.roa (raw, json)
Hash identifier:          /lOnITnsBWnxNA6epV89MrMQ7FB0dCBnu1J6TgpbcsQ=
Subject key identifier:   96:13:F8:68:0A:80:7E:3A:25:D8:A4:D9:8B:78:26:CE:1A:D3:A7:5A
Certificate issuer:       /CN=DE1BAD7F162F23137492FDE80491DD14E69C31FA
Certificate serial:       13F18B8C21CD91FB638FD43375C06229C9D2D98E
Authority key identifier: DE:1B:AD:7F:16:2F:23:13:74:92:FD:E8:04:91:DD:14:E6:9C:31:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1BAD7F162F23137492FDE80491DD14E69C31FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/3139302e392e3130342e302f32332d3233203d3e20323731363037.roa
Signing time:             Mon 05 May 2025 21:42:39 +0000
ROA not before:           Mon 05 May 2025 21:37:39 +0000
ROA not after:            Mon 04 May 2026 21:42:39 +0000
asID:                     271607
IP address blocks:        190.9.104.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/DE1BAD7F162F23137492FDE80491DD14E69C31FA.crl
                          rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/DE1BAD7F162F23137492FDE80491DD14E69C31FA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1BAD7F162F23137492FDE80491DD14E69C31FA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 17:15:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:f1:8b:8c:21:cd:91:fb:63:8f:d4:33:75:c0:62:29:c9:d2:d9:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE1BAD7F162F23137492FDE80491DD14E69C31FA
        Validity
            Not Before: May  5 21:37:39 2025 GMT
            Not After : May  4 21:42:39 2026 GMT
        Subject: CN=9613F8680A807E3A25D8A4D98B7826CE1AD3A75A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f9:4e:55:a8:a5:cc:d2:6c:d5:73:cc:cd:f6:
                    c0:c1:33:04:ff:cd:c8:0f:06:9d:37:d2:be:ad:a0:
                    13:df:33:27:fa:60:1f:a3:24:08:77:98:b9:65:9d:
                    84:6c:10:41:09:0f:2a:7d:97:f2:31:f7:0c:f9:0f:
                    55:c5:e0:d5:0d:27:58:e1:98:30:2e:ed:0a:a0:13:
                    97:7b:3a:0f:fc:f1:48:00:c2:d1:f8:5b:3e:2c:62:
                    8e:e6:7f:26:71:85:1f:2e:b3:49:31:f4:a1:82:c1:
                    53:58:52:f3:eb:ff:f2:f9:8f:0f:77:b0:60:29:ca:
                    68:6f:3d:5e:42:d4:75:16:58:0d:71:a6:07:3b:d5:
                    56:d5:73:4c:40:33:6c:a7:c9:fd:2a:f0:58:d1:95:
                    b6:5a:c3:4e:2b:55:d3:57:18:8c:0e:15:4b:fb:f4:
                    3a:86:de:b8:2c:d0:cb:e6:58:7e:f3:dc:fc:4c:bb:
                    86:a6:75:7e:f7:79:0e:58:2a:44:c6:ea:5d:c1:cb:
                    6c:e9:0d:6a:9f:29:35:83:49:5e:3b:59:96:b7:37:
                    24:bd:61:c4:43:95:3b:07:0c:d6:90:8a:e7:c2:2b:
                    d2:41:7b:1d:af:d9:58:2e:5d:1c:80:f3:0a:eb:1f:
                    fe:4e:7d:27:21:03:0e:97:d0:4b:de:9f:2f:4b:bd:
                    9c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:13:F8:68:0A:80:7E:3A:25:D8:A4:D9:8B:78:26:CE:1A:D3:A7:5A
            X509v3 Authority Key Identifier:
                keyid:DE:1B:AD:7F:16:2F:23:13:74:92:FD:E8:04:91:DD:14:E6:9C:31:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/DE1BAD7F162F23137492FDE80491DD14E69C31FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1BAD7F162F23137492FDE80491DD14E69C31FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/0/3139302e392e3130342e302f32332d3233203d3e20323731363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b1:9c:c3:ed:aa:56:ef:a8:f1:c7:e8:d0:d8:67:c2:83:66:e7:
         80:32:0d:8d:bd:4b:6d:d8:36:1e:09:b8:bc:b0:ab:81:3c:2f:
         24:c4:70:f1:8f:4b:ef:57:82:13:91:8f:01:e1:60:98:b6:6f:
         8f:15:b1:19:03:e5:b3:06:f1:3a:22:09:85:78:57:5f:7a:75:
         c9:7a:dd:62:f6:0a:34:81:0c:04:f8:7f:18:39:65:35:34:35:
         9c:fd:72:7d:22:98:50:a3:c8:bc:98:c0:52:8d:e6:f3:2b:e5:
         fd:36:48:bc:4b:11:b3:b6:cf:53:01:26:35:5d:34:ad:88:11:
         66:29:c9:d1:ac:3d:c8:02:41:fc:68:62:34:89:cb:0a:db:65:
         97:02:8c:3e:34:35:4c:28:de:6f:14:69:df:98:18:07:c1:1a:
         18:34:2d:6a:5d:38:15:07:21:51:49:b2:25:c6:dd:d3:a3:9e:
         83:a5:6f:31:57:f7:b9:07:81:21:08:79:46:21:bd:47:40:3c:
         8a:d3:46:6e:9b:cd:c3:a3:29:ac:08:99:d3:10:f8:a5:16:3b:
         b6:36:cd:1b:c8:b7:cd:0d:46:b2:d0:48:d7:c5:c1:d5:fc:63:
         46:2c:b5:37:19:45:59:dd:d6:36:5d:a3:19:2e:03:3d:83:6b:
         1f:03:52:20
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUE/GLjCHNkftjj9QzdcBiKcnS2Y4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREUxQkFEN0YxNjJGMjMxMzc0OTJGREU4MDQ5MUREMTRF
NjlDMzFGQTAeFw0yNTA1MDUyMTM3MzlaFw0yNjA1MDQyMTQyMzlaMDMxMTAvBgNV
BAMTKDk2MTNGODY4MEE4MDdFM0EyNUQ4QTREOThCNzgyNkNFMUFEM0E3NUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl+U5VqKXM0mzVc8zN9sDBMwT/
zcgPBp030r6toBPfMyf6YB+jJAh3mLllnYRsEEEJDyp9l/Ix9wz5D1XF4NUNJ1jh
mDAu7QqgE5d7Og/88UgAwtH4Wz4sYo7mfyZxhR8us0kx9KGCwVNYUvPr//L5jw93
sGApymhvPV5C1HUWWA1xpgc71VbVc0xAM2ynyf0q8FjRlbZaw04rVdNXGIwOFUv7
9DqG3rgs0MvmWH7z3PxMu4amdX73eQ5YKkTG6l3By2zpDWqfKTWDSV47WZa3NyS9
YcRDlTsHDNaQiufCK9JBex2v2VguXRyA8wrrH/5OfSchAw6X0Eveny9LvZyRAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUlhP4aAqAfjol2KTZi3gmzhrTp1owHwYDVR0j
BBgwFoAU3hutfxYvIxN0kv3oBJHdFOacMfowDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9DaTJhc1A5MmVxTGN3cmRMRUJudGJlRmVwY21KVlR4N2pVc1pKZGNjWlNH
LzAvREUxQkFEN0YxNjJGMjMxMzc0OTJGREU4MDQ5MUREMTRFNjlDMzFGQS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9ERTFCQUQ3RjE2MkYyMzEzNzQ5
MkZERTgwNDkxREQxNEU2OUMzMUZBLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9D
aTJhc1A5MmVxTGN3cmRMRUJudGJlRmVwY21KVlR4N2pVc1pKZGNjWlNHLzAvMzEz
OTMwMmUzOTJlMzEzMDM0MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNzMxMzYz
MDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQBvgloMA0GCSqGSIb3DQEBCwUAA4IBAQCxnMPtqlbvqPHH
6NDYZ8KDZueAMg2NvUtt2DYeCbi8sKuBPC8kxHDxj0vvV4ITkY8B4WCYtm+PFbEZ
A+WzBvE6IgmFeFdfenXJet1i9go0gQwE+H8YOWU1NDWc/XJ9IphQo8i8mMBSjebz
K+X9Nki8SxGzts9TASY1XTStiBFmKcnRrD3IAkH8aGI0icsK22WXAow+NDVMKN5v
FGnfmBgHwRoYNC1qXTgVByFRSbIlxt3To56DpW8xV/e5B4EhCHlGIb1HQDyK00Zu
m83DoymsCJnTEPilFju2Ns0byLfNDUay0EjXxcHV/GNGLLU3GUVZ3dY2XaMZLgM9
g2sfA1Ig
-----END CERTIFICATE-----
Generated at Mon May 12 20:01:59 2025 by rpki-client