Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/3230312e3135302e3131342e302f32342d3234203d3e203532393434.roa
File:                     3230312e3135302e3131342e302f32342d3234203d3e203532393434.roa (raw, json)
Hash identifier:          G/e3e8E7F4p7jTcYDNoOCIumhfbq9xpEi7BXvoWvgw0=
Subject key identifier:   EC:85:BF:A1:23:21:65:8E:78:21:D8:F0:CD:0E:75:B8:36:59:1C:F7
Certificate issuer:       /CN=2B7B2B36CB333C1CF60039B1C38742338BE69E2F
Certificate serial:       2F7A4D2859F46B3A8D0797A2B1BBD05DFDE4A5B2
Authority key identifier: 2B:7B:2B:36:CB:33:3C:1C:F6:00:39:B1:C3:87:42:33:8B:E6:9E:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7B2B36CB333C1CF60039B1C38742338BE69E2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/3230312e3135302e3131342e302f32342d3234203d3e203532393434.roa
Signing time:             Tue 06 May 2025 14:32:26 +0000
ROA not before:           Tue 06 May 2025 14:27:26 +0000
ROA not after:            Tue 05 May 2026 14:32:26 +0000
asID:                     52944
IP address blocks:        201.150.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/2B7B2B36CB333C1CF60039B1C38742338BE69E2F.crl
                          rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/2B7B2B36CB333C1CF60039B1C38742338BE69E2F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7B2B36CB333C1CF60039B1C38742338BE69E2F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 08:50:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:7a:4d:28:59:f4:6b:3a:8d:07:97:a2:b1:bb:d0:5d:fd:e4:a5:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B7B2B36CB333C1CF60039B1C38742338BE69E2F
        Validity
            Not Before: May  6 14:27:26 2025 GMT
            Not After : May  5 14:32:26 2026 GMT
        Subject: CN=EC85BFA12321658E7821D8F0CD0E75B836591CF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:23:6c:18:ce:0c:df:44:75:58:a9:71:b6:f9:
                    0e:0a:e0:f5:38:00:60:df:85:ec:0a:1d:ed:89:b8:
                    7a:49:b2:25:18:bc:14:aa:ed:83:59:0d:f8:dc:d7:
                    16:62:b6:dd:dd:12:f6:89:98:af:ff:69:3b:e2:b9:
                    24:d9:57:37:aa:3e:79:06:80:b3:ac:8a:ce:85:12:
                    45:68:f0:99:ae:a1:40:86:b4:f3:3f:de:2b:7e:97:
                    8e:47:75:5a:fa:bf:30:73:e3:32:88:21:8f:6a:2b:
                    fe:61:4a:a9:0d:b9:22:89:95:74:f8:f9:83:32:20:
                    d1:97:64:8c:88:92:a0:e3:e7:3d:88:0f:a3:0e:8a:
                    45:85:00:44:f9:db:59:cb:bf:30:b3:72:cf:fe:c3:
                    fa:d6:93:0d:5d:10:7e:4e:1c:ba:a9:bb:76:ad:4d:
                    55:dd:23:c2:63:a5:97:8b:cf:65:40:fd:00:59:51:
                    81:d4:60:32:58:1e:ee:92:9e:a5:47:b6:55:7f:35:
                    ed:5f:1c:3b:67:9c:c2:b1:4d:67:84:bf:70:d6:ef:
                    57:51:02:d5:20:f2:6a:9a:03:26:d1:9b:46:c7:bc:
                    1e:a6:b5:85:13:2f:a3:24:d6:bd:24:c0:da:be:d6:
                    af:97:81:14:fb:02:4f:ba:72:39:fe:44:ee:26:9c:
                    9b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:85:BF:A1:23:21:65:8E:78:21:D8:F0:CD:0E:75:B8:36:59:1C:F7
            X509v3 Authority Key Identifier:
                keyid:2B:7B:2B:36:CB:33:3C:1C:F6:00:39:B1:C3:87:42:33:8B:E6:9E:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/2B7B2B36CB333C1CF60039B1C38742338BE69E2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7B2B36CB333C1CF60039B1C38742338BE69E2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/3230312e3135302e3131342e302f32342d3234203d3e203532393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.150.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:71:5a:b1:c5:8f:a2:9d:5f:c2:46:31:56:c4:ba:4f:50:4e:
         4b:2f:ae:36:79:0c:75:6e:ac:dc:38:c1:64:1a:95:d6:0a:db:
         db:b8:aa:50:31:64:34:c7:5b:ea:92:b9:af:a4:ec:4b:d8:eb:
         d5:dd:4e:f4:78:bc:5d:74:41:e0:5e:fd:47:ae:04:45:0d:f2:
         ee:bd:74:d6:49:18:30:a6:6f:8c:26:54:2d:54:a7:ee:f6:e5:
         27:5f:2d:c9:8b:ce:a4:71:75:cd:0b:dc:6a:37:34:67:19:75:
         b6:50:13:d7:c7:18:1c:9b:66:08:d9:6f:34:f4:b0:e1:98:33:
         ae:bf:01:8e:dc:d6:b6:b8:3c:28:57:1e:e9:e6:6d:a6:be:e7:
         c4:64:7d:6c:79:b2:18:6c:de:b1:1d:a7:a0:ce:03:67:b5:20:
         32:52:8a:03:44:89:d2:04:ca:59:fd:00:9c:dd:c5:e8:08:ff:
         67:cb:5a:23:0b:4d:11:04:71:01:bb:78:cc:b5:58:b7:d3:2c:
         63:c4:83:a1:2e:74:82:6d:1c:ab:42:20:8d:47:1e:26:bc:3c:
         a9:97:87:6c:bb:1b:f7:f3:7a:a7:1b:7c:c8:fa:89:ff:3e:c4:
         6a:30:90:7a:ae:a7:22:85:cf:46:55:12:d0:14:7a:28:7a:40:
         08:56:5d:14
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUL3pNKFn0azqNB5eisbvQXf3kpbIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkI3QjJCMzZDQjMzM0MxQ0Y2MDAzOUIxQzM4NzQyMzM4
QkU2OUUyRjAeFw0yNTA1MDYxNDI3MjZaFw0yNjA1MDUxNDMyMjZaMDMxMTAvBgNV
BAMTKEVDODVCRkExMjMyMTY1OEU3ODIxRDhGMENEMEU3NUI4MzY1OTFDRjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuI2wYzgzfRHVYqXG2+Q4K4PU4
AGDfhewKHe2JuHpJsiUYvBSq7YNZDfjc1xZitt3dEvaJmK//aTviuSTZVzeqPnkG
gLOsis6FEkVo8JmuoUCGtPM/3it+l45HdVr6vzBz4zKIIY9qK/5hSqkNuSKJlXT4
+YMyINGXZIyIkqDj5z2ID6MOikWFAET521nLvzCzcs/+w/rWkw1dEH5OHLqpu3at
TVXdI8JjpZeLz2VA/QBZUYHUYDJYHu6SnqVHtlV/Ne1fHDtnnMKxTWeEv3DW71dR
AtUg8mqaAybRm0bHvB6mtYUTL6Mk1r0kwNq+1q+XgRT7Ak+6cjn+RO4mnJsvAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU7IW/oSMhZY54IdjwzQ51uDZZHPcwHwYDVR0j
BBgwFoAUK3srNsszPBz2ADmxw4dCM4vmni8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFZ1TnNhTGphYTJYVGJRa3JiWmlnam5WeXM3UVpkQVRNUGlHamlyQVNX
ZmovMC8yQjdCMkIzNkNCMzMzQzFDRjYwMDM5QjFDMzg3NDIzMzhCRTY5RTJGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCN0IyQjM2Q0IzMzNDMUNG
NjAwMzlCMUMzODc0MjMzOEJFNjlFMkYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RWdU5zYUxqYWEyWFRiUWtyYlppZ2puVnlzN1FaZEFUTVBpR2ppckFTV2ZqLzAv
MzIzMDMxMmUzMTM1MzAyZTMxMzEzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1
MzIzOTM0MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADJlnIwDQYJKoZIhvcNAQELBQADggEBAAxxWrHF
j6KdX8JGMVbEuk9QTksvrjZ5DHVurNw4wWQaldYK29u4qlAxZDTHW+qSua+k7EvY
69XdTvR4vF10QeBe/UeuBEUN8u69dNZJGDCmb4wmVC1Up+725SdfLcmLzqRxdc0L
3Go3NGcZdbZQE9fHGBybZgjZbzT0sOGYM66/AY7c1ra4PChXHunmbaa+58RkfWx5
shhs3rEdp6DOA2e1IDJSigNEidIEyln9AJzdxegI/2fLWiMLTREEcQG7eMy1WLfT
LGPEg6EudIJtHKtCII1HHia8PKmXh2y7G/fzeqcbfMj6if8+xGowkHqupyKFz0ZV
EtAUeih6QAhWXRQ=
-----END CERTIFICATE-----
Generated at Wed May 14 01:11:09 2025 by rpki-client