Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/3230312e3135302e3131322e302f32342d3234203d3e203532393434.roa
File:                     3230312e3135302e3131322e302f32342d3234203d3e203532393434.roa (raw, json)
Hash identifier:          iC2WweKsC6mkXv5PSTdawTwU1efhSM7CexCa+BP+Bxg=
Subject key identifier:   A9:C5:A9:90:DA:DB:4A:46:85:99:D5:AA:A5:A2:17:54:C1:89:EE:26
Certificate issuer:       /CN=2B7B2B36CB333C1CF60039B1C38742338BE69E2F
Certificate serial:       632E28C536B75C744D335E7EA35D0871191781AF
Authority key identifier: 2B:7B:2B:36:CB:33:3C:1C:F6:00:39:B1:C3:87:42:33:8B:E6:9E:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7B2B36CB333C1CF60039B1C38742338BE69E2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/3230312e3135302e3131322e302f32342d3234203d3e203532393434.roa
Signing time:             Tue 06 May 2025 14:32:19 +0000
ROA not before:           Tue 06 May 2025 14:27:19 +0000
ROA not after:            Tue 05 May 2026 14:32:19 +0000
asID:                     52944
IP address blocks:        201.150.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/2B7B2B36CB333C1CF60039B1C38742338BE69E2F.crl
                          rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/2B7B2B36CB333C1CF60039B1C38742338BE69E2F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7B2B36CB333C1CF60039B1C38742338BE69E2F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 04:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:2e:28:c5:36:b7:5c:74:4d:33:5e:7e:a3:5d:08:71:19:17:81:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B7B2B36CB333C1CF60039B1C38742338BE69E2F
        Validity
            Not Before: May  6 14:27:19 2025 GMT
            Not After : May  5 14:32:19 2026 GMT
        Subject: CN=A9C5A990DADB4A468599D5AAA5A21754C189EE26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4a:f9:60:16:9e:7f:45:ed:04:80:b8:91:66:
                    76:6e:23:5e:94:f2:cb:f9:bb:b5:4b:1c:70:db:83:
                    04:a0:55:4d:b9:4b:38:b1:4c:4a:a8:9e:18:36:21:
                    20:68:00:18:e8:a5:e7:ce:20:d6:37:de:d2:d3:66:
                    fd:6d:2e:87:dd:c0:c0:66:f5:3b:54:02:ae:32:40:
                    8a:a2:b1:13:4a:83:74:d6:b4:58:02:c2:a1:e6:37:
                    93:8e:a2:ce:e5:02:7e:f4:91:82:2d:14:c7:14:dc:
                    f4:e7:bc:88:8e:a4:03:c5:cf:d8:bc:6a:66:72:22:
                    5d:94:aa:cc:e1:c6:e0:97:e6:34:9d:81:82:d8:60:
                    8c:4a:78:08:9f:3d:80:d8:6c:dc:c3:5c:a7:c4:e3:
                    ae:48:5a:d3:0e:5b:9b:0a:d5:ad:87:9f:ea:29:b2:
                    bf:50:06:86:44:9e:48:3e:73:95:12:01:bb:e3:40:
                    29:41:de:27:8f:74:07:5b:a5:81:90:49:aa:1e:33:
                    bf:8b:03:67:37:87:13:93:5a:8f:8f:55:ae:ba:1c:
                    54:cd:8c:89:b2:9f:36:89:18:18:6f:95:c5:4c:bf:
                    8f:88:25:95:64:46:3d:7c:e4:77:a0:58:1e:bd:ee:
                    0a:af:f7:3d:f7:7b:1e:17:89:1f:a9:ca:e4:8f:60:
                    4a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:C5:A9:90:DA:DB:4A:46:85:99:D5:AA:A5:A2:17:54:C1:89:EE:26
            X509v3 Authority Key Identifier:
                keyid:2B:7B:2B:36:CB:33:3C:1C:F6:00:39:B1:C3:87:42:33:8B:E6:9E:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/2B7B2B36CB333C1CF60039B1C38742338BE69E2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7B2B36CB333C1CF60039B1C38742338BE69E2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/3230312e3135302e3131322e302f32342d3234203d3e203532393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.150.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:63:04:b4:a7:99:4b:3c:95:54:2f:66:4c:8d:46:a2:81:7d:
         a8:da:b5:8b:f9:29:23:4b:89:c6:f1:8c:e4:4e:69:47:d7:65:
         84:a5:ba:4e:c6:39:b6:00:99:64:08:ef:f8:20:73:43:81:05:
         7b:10:26:3b:4b:db:a5:70:e5:be:3a:43:e8:07:7f:d5:03:6d:
         6e:0b:61:3d:ec:59:27:fb:5d:9d:a5:ee:da:a0:18:0d:b4:58:
         e7:e9:07:a5:9d:71:02:9b:f0:31:18:d4:f8:fb:b5:3c:65:65:
         d0:2f:5e:59:d5:40:e6:6a:a2:f6:e9:fa:81:2f:62:44:e9:81:
         84:d3:92:66:4a:97:68:c5:70:aa:dd:29:cc:32:a8:17:c8:75:
         08:9b:fd:a2:5b:e5:d7:84:0e:13:93:51:1d:d9:30:f5:56:17:
         d6:b8:0d:54:b5:9b:cb:ce:f9:74:c9:b0:d2:76:4b:e4:d0:c6:
         e6:bd:2b:78:33:2b:91:5a:6b:0b:74:ee:aa:4e:f0:a6:db:ff:
         b0:34:38:25:21:5b:99:30:43:53:45:61:52:33:e4:61:0d:43:
         e8:9f:0f:8f:ce:03:00:37:44:2d:ba:27:07:8c:b3:e2:93:82:
         c3:5e:23:03:ae:25:19:b7:59:39:3f:2c:5d:de:8f:77:08:c3:
         a2:5b:99:fa
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYy4oxTa3XHRNM15+o10IcRkXga8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkI3QjJCMzZDQjMzM0MxQ0Y2MDAzOUIxQzM4NzQyMzM4
QkU2OUUyRjAeFw0yNTA1MDYxNDI3MTlaFw0yNjA1MDUxNDMyMTlaMDMxMTAvBgNV
BAMTKEE5QzVBOTkwREFEQjRBNDY4NTk5RDVBQUE1QTIxNzU0QzE4OUVFMjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8SvlgFp5/Re0EgLiRZnZuI16U
8sv5u7VLHHDbgwSgVU25SzixTEqonhg2ISBoABjopefOINY33tLTZv1tLofdwMBm
9TtUAq4yQIqisRNKg3TWtFgCwqHmN5OOos7lAn70kYItFMcU3PTnvIiOpAPFz9i8
amZyIl2UqszhxuCX5jSdgYLYYIxKeAifPYDYbNzDXKfE465IWtMOW5sK1a2Hn+op
sr9QBoZEnkg+c5USAbvjQClB3iePdAdbpYGQSaoeM7+LA2c3hxOTWo+PVa66HFTN
jImynzaJGBhvlcVMv4+IJZVkRj185HegWB697gqv9z33ex4XiR+pyuSPYEpVAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUqcWpkNrbSkaFmdWqpaIXVMGJ7iYwHwYDVR0j
BBgwFoAUK3srNsszPBz2ADmxw4dCM4vmni8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFZ1TnNhTGphYTJYVGJRa3JiWmlnam5WeXM3UVpkQVRNUGlHamlyQVNX
ZmovMC8yQjdCMkIzNkNCMzMzQzFDRjYwMDM5QjFDMzg3NDIzMzhCRTY5RTJGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCN0IyQjM2Q0IzMzNDMUNG
NjAwMzlCMUMzODc0MjMzOEJFNjlFMkYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RWdU5zYUxqYWEyWFRiUWtyYlppZ2puVnlzN1FaZEFUTVBpR2ppckFTV2ZqLzAv
MzIzMDMxMmUzMTM1MzAyZTMxMzEzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1
MzIzOTM0MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADJlnAwDQYJKoZIhvcNAQELBQADggEBAL1jBLSn
mUs8lVQvZkyNRqKBfajatYv5KSNLicbxjOROaUfXZYSluk7GObYAmWQI7/ggc0OB
BXsQJjtL26Vw5b46Q+gHf9UDbW4LYT3sWSf7XZ2l7tqgGA20WOfpB6WdcQKb8DEY
1Pj7tTxlZdAvXlnVQOZqovbp+oEvYkTpgYTTkmZKl2jFcKrdKcwyqBfIdQib/aJb
5deEDhOTUR3ZMPVWF9a4DVS1m8vO+XTJsNJ2S+TQxua9K3gzK5Faawt07qpO8Kbb
/7A0OCUhW5kwQ1NFYVIz5GENQ+ifD4/OAwA3RC26JweMs+KTgsNeIwOuJRm3WTk/
LF3ej3cIw6Jbmfo=
-----END CERTIFICATE-----
Generated at Tue May 13 08:23:47 2025 by rpki-client