Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/3138312e3232342e35322e302f32342d3234203d3e20323636333132.roa
File:                     3138312e3232342e35322e302f32342d3234203d3e20323636333132.roa (raw, json)
Hash identifier:          f1hnlBw96tBY5qfdpBOLPWEXbYs/sXtqU9iMPpvPFN8=
Subject key identifier:   70:8C:64:E6:C4:FC:52:DD:10:89:01:AB:1C:02:FA:13:90:12:5E:49
Certificate issuer:       /CN=0A2DC9F591D32599C3AB0561CB8DEF59C396C055
Certificate serial:       106F85F81DF3582FD49B3EEB246329E375DE038B
Authority key identifier: 0A:2D:C9:F5:91:D3:25:99:C3:AB:05:61:CB:8D:EF:59:C3:96:C0:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/3138312e3232342e35322e302f32342d3234203d3e20323636333132.roa
Signing time:             Wed 28 May 2025 15:31:02 +0000
ROA not before:           Wed 28 May 2025 15:26:02 +0000
ROA not after:            Wed 27 May 2026 15:31:02 +0000
asID:                     266312
IP address blocks:        181.224.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.crl
                          rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 01:16:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:6f:85:f8:1d:f3:58:2f:d4:9b:3e:eb:24:63:29:e3:75:de:03:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A2DC9F591D32599C3AB0561CB8DEF59C396C055
        Validity
            Not Before: May 28 15:26:02 2025 GMT
            Not After : May 27 15:31:02 2026 GMT
        Subject: CN=708C64E6C4FC52DD108901AB1C02FA1390125E49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:91:00:2a:cb:99:7c:9b:ec:07:a8:92:8b:dc:
                    12:2e:e4:d3:47:8b:29:9d:2d:c0:3a:01:e5:5c:c5:
                    3b:57:2e:40:c0:cf:c5:f7:51:73:0c:a8:4d:ac:e9:
                    00:6b:94:94:62:7b:ad:ce:a0:b5:c1:e8:41:f4:c0:
                    fc:a8:a7:b1:bc:ff:0c:9b:ee:bb:cd:f1:f1:2d:65:
                    c4:9a:6e:5f:b5:c0:aa:ff:98:c6:ac:4c:14:2a:0c:
                    d5:78:c9:7c:bc:66:c6:a0:64:ab:6b:9f:51:27:7c:
                    5e:12:3a:7f:84:d3:80:e3:ba:b5:6e:8a:7e:38:13:
                    a2:a4:a7:70:44:19:36:c8:6e:08:f1:d5:a5:74:dd:
                    45:7c:f5:9a:5f:56:bb:3a:ed:1a:81:f3:c2:19:97:
                    12:8a:5a:e5:4d:71:d0:97:44:2d:10:75:f0:03:6c:
                    93:01:c8:77:00:7d:3e:66:ae:2c:df:7e:51:df:1a:
                    86:9c:f9:fe:d6:3f:a3:8d:84:4e:bd:3e:b3:12:78:
                    c0:e8:00:3e:e7:9d:f3:e3:b9:fa:9c:b7:94:fc:49:
                    f0:26:08:ec:8e:eb:3d:0c:e5:5d:5c:48:7f:13:24:
                    d0:34:fb:1e:a5:3c:1b:16:86:b8:90:d5:24:b7:37:
                    ff:5c:b9:6b:34:c0:ed:36:59:28:c8:63:67:c0:d0:
                    24:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:8C:64:E6:C4:FC:52:DD:10:89:01:AB:1C:02:FA:13:90:12:5E:49
            X509v3 Authority Key Identifier:
                keyid:0A:2D:C9:F5:91:D3:25:99:C3:AB:05:61:CB:8D:EF:59:C3:96:C0:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/3138312e3232342e35322e302f32342d3234203d3e20323636333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:6c:85:2f:d3:2d:8c:9a:23:ae:00:c9:de:b7:3a:52:3a:75:
         da:fc:67:a2:ad:7f:66:31:05:b0:b8:7e:a7:fc:53:fa:45:77:
         9a:9a:0e:e5:23:d4:1e:bd:2f:c3:c0:1d:11:f9:8b:45:e8:5a:
         26:92:9a:68:0d:bc:d2:c5:cd:52:cb:ce:90:14:fa:7a:0f:0a:
         f9:fa:87:f3:72:f9:08:4f:a0:0c:38:da:0d:bc:ff:1f:8c:36:
         d9:f7:0f:9f:85:e6:a0:5d:b5:7a:31:ae:f5:47:b6:ef:08:1f:
         d9:08:fe:ac:64:19:cd:ab:64:fa:19:42:94:43:42:d8:89:d8:
         94:88:b6:c7:49:6f:c3:7f:ff:69:d4:fa:2c:9a:a4:64:99:61:
         4d:59:6d:6e:6c:42:1e:91:6b:d7:1c:5c:6a:16:b5:22:a5:60:
         84:db:cd:8f:b2:12:66:1e:43:18:3d:3d:87:68:14:0f:7a:cf:
         2b:80:b0:da:74:1a:dd:f8:2e:03:bf:d9:f5:70:eb:e9:e5:3d:
         50:c6:1a:05:56:4a:1d:8f:0e:dc:e9:a9:8e:6e:6a:a4:53:73:
         e3:6c:f4:55:21:26:a2:7b:8a:c3:4b:14:db:27:78:19:fa:f7:
         27:dc:50:d2:1f:c2:20:14:b9:f1:17:3b:0e:12:56:2f:12:40:
         83:42:c5:07
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUEG+F+B3zWC/Umz7rJGMp43XeA4swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEEyREM5RjU5MUQzMjU5OUMzQUIwNTYxQ0I4REVGNTlD
Mzk2QzA1NTAeFw0yNTA1MjgxNTI2MDJaFw0yNjA1MjcxNTMxMDJaMDMxMTAvBgNV
BAMTKDcwOEM2NEU2QzRGQzUyREQxMDg5MDFBQjFDMDJGQTEzOTAxMjVFNDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNkQAqy5l8m+wHqJKL3BIu5NNH
iymdLcA6AeVcxTtXLkDAz8X3UXMMqE2s6QBrlJRie63OoLXB6EH0wPyop7G8/wyb
7rvN8fEtZcSabl+1wKr/mMasTBQqDNV4yXy8ZsagZKtrn1EnfF4SOn+E04DjurVu
in44E6Kkp3BEGTbIbgjx1aV03UV89ZpfVrs67RqB88IZlxKKWuVNcdCXRC0QdfAD
bJMByHcAfT5mrizfflHfGoac+f7WP6ONhE69PrMSeMDoAD7nnfPjufqct5T8SfAm
COyO6z0M5V1cSH8TJNA0+x6lPBsWhriQ1SS3N/9cuWs0wO02WSjIY2fA0CT/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUcIxk5sT8Ut0QiQGrHAL6E5ASXkkwHwYDVR0j
BBgwFoAUCi3J9ZHTJZnDqwVhy43vWcOWwFUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGRQQkpGNXZTMWl0eEZMUXh6OTlYeXVKVkFaeWFYUHpzVUU5Ykh3Mzdh
M24vMS8wQTJEQzlGNTkxRDMyNTk5QzNBQjA1NjFDQjhERUY1OUMzOTZDMDU1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBBMkRDOUY1OTFEMzI1OTlD
M0FCMDU2MUNCOERFRjU5QzM5NkMwNTUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RkUEJKRjV2UzFpdHhGTFF4ejk5WHl1SlZBWnlhWFB6c1VFOWJIdzM3YTNuLzEv
MzEzODMxMmUzMjMyMzQyZTM1MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzYzMzMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC14DQwDQYJKoZIhvcNAQELBQADggEBAAlshS/T
LYyaI64Ayd63OlI6ddr8Z6Ktf2YxBbC4fqf8U/pFd5qaDuUj1B69L8PAHRH5i0Xo
WiaSmmgNvNLFzVLLzpAU+noPCvn6h/Ny+QhPoAw42g28/x+MNtn3D5+F5qBdtXox
rvVHtu8IH9kI/qxkGc2rZPoZQpRDQtiJ2JSItsdJb8N//2nU+iyapGSZYU1ZbW5s
Qh6Ra9ccXGoWtSKlYITbzY+yEmYeQxg9PYdoFA96zyuAsNp0Gt34LgO/2fVw6+nl
PVDGGgVWSh2PDtzpqY5uaqRTc+Ns9FUhJqJ7isNLFNsneBn69yfcUNIfwiAUufEX
Ow4SVi8SQINCxQc=
-----END CERTIFICATE-----
Generated at Wed Jul 2 16:41:18 2025 by rpki-client