Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3138362e3139352e37332e302f32342d3332203d3e203532353830.roa
File:                     3138362e3139352e37332e302f32342d3332203d3e203532353830.roa (raw, json)
Hash identifier:          HFFUWHCX4ECaCzHn+h08/GVpyMxz/P5QIULHd6+wss4=
Subject key identifier:   A5:F3:55:9A:85:59:21:77:EA:1B:02:5E:7A:B1:2B:AE:11:0E:91:FA
Certificate issuer:       /CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
Certificate serial:       437981F1FF68E6D823EEF2A9DB31E1A407FF0807
Authority key identifier: C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3138362e3139352e37332e302f32342d3332203d3e203532353830.roa
Signing time:             Wed 30 Apr 2025 18:37:09 +0000
ROA not before:           Wed 30 Apr 2025 18:32:09 +0000
ROA not after:            Wed 29 Apr 2026 18:37:09 +0000
asID:                     52580
IP address blocks:        186.195.73.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl
                          rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 08:12:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:79:81:f1:ff:68:e6:d8:23:ee:f2:a9:db:31:e1:a4:07:ff:08:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
        Validity
            Not Before: Apr 30 18:32:09 2025 GMT
            Not After : Apr 29 18:37:09 2026 GMT
        Subject: CN=A5F3559A85592177EA1B025E7AB12BAE110E91FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:03:69:4a:84:4a:ab:c3:64:cc:10:f0:cf:33:
                    fb:51:f1:05:19:f5:8b:1a:34:0c:09:8e:dd:a4:38:
                    d3:cb:61:3e:42:08:51:c9:46:a1:8b:c5:9d:a4:97:
                    c7:6c:4d:ff:51:2f:52:8f:25:63:91:dd:d5:6c:b7:
                    2f:08:81:65:9b:cf:66:d1:b4:e4:fc:22:05:15:1d:
                    81:38:53:5f:46:57:b7:30:b9:66:67:82:79:bc:ff:
                    70:5c:e3:81:18:74:1a:43:00:1a:54:60:e3:85:d0:
                    d2:7e:d5:5e:68:b0:f5:4d:b6:a5:fb:dc:6a:b2:00:
                    03:e8:62:fa:e2:d7:92:df:7e:b7:86:a7:e9:51:d9:
                    09:f4:aa:d3:e3:66:c4:d5:7f:bf:2f:21:34:b5:55:
                    d6:7b:15:68:c7:8a:35:a0:37:1d:de:05:ac:fc:55:
                    6a:6a:4d:cd:9f:48:6e:16:f0:20:67:55:3d:b7:1b:
                    97:26:d9:98:cf:1a:f0:14:28:3d:2e:cb:d7:bb:dc:
                    57:ec:f2:db:28:b2:67:e1:a1:94:33:5e:3b:9f:01:
                    fd:62:bf:de:2e:81:02:16:25:d0:e4:0b:03:45:05:
                    30:f2:3f:af:25:6e:e3:fe:6b:62:46:98:ee:de:d5:
                    ef:5a:3f:5a:a7:ad:fd:3f:b4:1a:d3:c3:5b:26:6a:
                    38:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:F3:55:9A:85:59:21:77:EA:1B:02:5E:7A:B1:2B:AE:11:0E:91:FA
            X509v3 Authority Key Identifier:
                keyid:C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3138362e3139352e37332e302f32342d3332203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:1b:89:82:58:f6:1d:4b:15:e4:f0:2e:3b:65:0b:15:0c:e0:
         38:4c:24:26:4b:66:dc:6c:a0:8b:9c:07:4c:0d:50:00:8d:df:
         74:5a:90:fe:84:2f:40:d3:92:ac:9a:34:e8:3f:e9:82:1a:f7:
         45:86:31:32:46:dc:3f:62:e5:c9:67:fc:30:8c:60:31:6a:28:
         90:e7:ed:ec:4f:c4:f1:d5:b5:7d:0b:3d:c7:93:d5:be:a4:b6:
         60:22:1d:b8:6b:ce:a5:be:a9:e3:ee:87:a5:ae:9a:d9:5b:1b:
         9d:ff:f8:48:2b:46:d7:d5:30:7a:77:a2:12:9a:83:87:d1:43:
         b2:a5:38:1c:fc:9c:d1:61:b4:47:50:e7:9d:e7:ac:2b:aa:6d:
         a7:5c:01:f4:d8:cf:fd:cb:e3:1c:e8:60:3c:1e:ad:15:9f:75:
         44:2c:04:dc:3d:9c:cc:9d:f4:19:fa:71:9d:c2:e5:ea:69:47:
         cf:2b:12:ca:fe:ea:b0:29:2c:9e:37:15:44:4e:01:6f:cb:e2:
         a7:80:43:62:f3:df:ac:2a:3b:00:58:99:4e:16:2d:15:a3:31:
         1f:12:19:48:14:7f:ed:97:17:e2:ff:8a:ee:a2:47:e6:67:8e:
         5a:42:a1:e7:78:ef:a6:8b:b5:80:79:ac:27:c4:f0:e6:d1:c3:
         44:c3:a2:f6
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUQ3mB8f9o5tgj7vKp2zHhpAf/CAcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzEzMTM2QURFRUJCNTQxMTFFMkMwOUYyQzdERkJCMzk1
MUVCQ0ZEMDAeFw0yNTA0MzAxODMyMDlaFw0yNjA0MjkxODM3MDlaMDMxMTAvBgNV
BAMTKEE1RjM1NTlBODU1OTIxNzdFQTFCMDI1RTdBQjEyQkFFMTEwRTkxRkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5A2lKhEqrw2TMEPDPM/tR8QUZ
9YsaNAwJjt2kONPLYT5CCFHJRqGLxZ2kl8dsTf9RL1KPJWOR3dVsty8IgWWbz2bR
tOT8IgUVHYE4U19GV7cwuWZngnm8/3Bc44EYdBpDABpUYOOF0NJ+1V5osPVNtqX7
3GqyAAPoYvri15LffreGp+lR2Qn0qtPjZsTVf78vITS1VdZ7FWjHijWgNx3eBaz8
VWpqTc2fSG4W8CBnVT23G5cm2ZjPGvAUKD0uy9e73Ffs8tsosmfhoZQzXjufAf1i
v94ugQIWJdDkCwNFBTDyP68lbuP+a2JGmO7e1e9aP1qnrf0/tBrTw1smajjbAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUpfNVmoVZIXfqGwJeerErrhEOkfowHwYDVR0j
BBgwFoAUwTE2re67VBEeLAnyx9+7OVHrz9AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHBUOGppQldteU4zUnhuakdvUGNZR3BWUnd1VkYzZE1Wd1JldjNGTnp0
aTEvMC9DMTMxMzZBREVFQkI1NDExMUUyQzA5RjJDN0RGQkIzOTUxRUJDRkQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MxMzEzNkFERUVCQjU0MTEx
RTJDMDlGMkM3REZCQjM5NTFFQkNGRDAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hwVDhqaUJXbXlOM1J4bmpHb1BjWUdwVlJ3dVZGM2RNVndSZXYzRk56dGkxLzAv
MzEzODM2MmUzMTM5MzUyZTM3MzMyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzNTMy
MzUzODMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAusNJMA0GCSqGSIb3DQEBCwUAA4IBAQCoG4mCWPYd
SxXk8C47ZQsVDOA4TCQmS2bcbKCLnAdMDVAAjd90WpD+hC9A05KsmjToP+mCGvdF
hjEyRtw/YuXJZ/wwjGAxaiiQ5+3sT8Tx1bV9Cz3Hk9W+pLZgIh24a86lvqnj7oel
rprZWxud//hIK0bX1TB6d6ISmoOH0UOypTgc/JzRYbRHUOed56wrqm2nXAH02M/9
y+Mc6GA8Hq0Vn3VELATcPZzMnfQZ+nGdwuXqaUfPKxLK/uqwKSyeNxVETgFvy+Kn
gENi89+sKjsAWJlOFi0VozEfEhlIFH/tlxfi/4ruokfmZ45aQqHneO+mi7WAeawn
xPDm0cNEw6L2
-----END CERTIFICATE-----
Generated at Thu May 1 15:01:21 2025 by rpki-client