Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/0/3133382e302e32342e302f32322d3232203d3e20323634353339.roa
File:                     3133382e302e32342e302f32322d3232203d3e20323634353339.roa (raw, json)
Hash identifier:          9W3jvrV97K7Fzoz17CDr3R1S3ebSRlhZPkQK5jzDVQs=
Subject key identifier:   85:9F:12:9E:66:B2:21:07:0C:CF:DC:F6:25:BB:D7:AA:2B:99:02:E1
Certificate issuer:       /CN=D56F5D5D003FE373DB99F5814A096011E33A10BF
Certificate serial:       5D6912F9A1E87E07E016FB1ADAFA8678A95E1164
Authority key identifier: D5:6F:5D:5D:00:3F:E3:73:DB:99:F5:81:4A:09:60:11:E3:3A:10:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D56F5D5D003FE373DB99F5814A096011E33A10BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/0/3133382e302e32342e302f32322d3232203d3e20323634353339.roa
Signing time:             Wed 21 May 2025 21:42:31 +0000
ROA not before:           Wed 21 May 2025 21:37:31 +0000
ROA not after:            Wed 20 May 2026 21:42:31 +0000
asID:                     264539
IP address blocks:        138.0.24.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/0/D56F5D5D003FE373DB99F5814A096011E33A10BF.crl
                          rsync://rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/0/D56F5D5D003FE373DB99F5814A096011E33A10BF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D56F5D5D003FE373DB99F5814A096011E33A10BF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 23:19:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:69:12:f9:a1:e8:7e:07:e0:16:fb:1a:da:fa:86:78:a9:5e:11:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D56F5D5D003FE373DB99F5814A096011E33A10BF
        Validity
            Not Before: May 21 21:37:31 2025 GMT
            Not After : May 20 21:42:31 2026 GMT
        Subject: CN=859F129E66B221070CCFDCF625BBD7AA2B9902E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:33:e8:dd:58:00:5a:4c:d3:04:31:28:90:e0:
                    72:b5:34:c1:f1:77:5d:14:dd:2e:60:13:dc:a8:75:
                    ca:21:6b:cb:bf:af:fa:00:f8:1d:66:ab:ba:9a:ed:
                    a7:4f:1b:22:92:03:75:ad:66:ff:5e:1d:69:c9:85:
                    ea:51:70:c0:b5:68:b6:ee:2f:ca:0f:e6:2f:3c:4d:
                    06:cd:a6:6a:f7:08:3a:61:3e:9c:5a:c8:aa:23:02:
                    b4:82:5e:c8:54:b5:1b:a7:f6:a9:e9:c3:8c:37:6e:
                    ea:80:b3:b4:cd:cd:51:a2:e8:9a:55:5a:48:e3:b8:
                    3c:9f:83:1c:ce:6e:30:b1:82:24:f0:62:34:5e:0a:
                    a0:3c:a7:1f:f5:b0:80:b6:bc:61:08:33:56:a2:78:
                    87:8d:d1:da:30:56:ae:b6:4c:a6:5d:f2:b7:06:9d:
                    d6:ae:e5:5c:89:f3:18:7e:cd:e9:91:d1:b8:8c:16:
                    fc:56:51:bf:3c:8a:d0:8b:b7:de:6b:98:f9:6f:24:
                    b3:ba:f1:16:6a:1a:fc:60:66:05:e9:d2:c8:3b:47:
                    2c:35:9c:db:00:f9:36:52:c6:14:99:86:93:60:dc:
                    80:85:40:d3:cf:09:63:7e:aa:f0:1b:89:5b:f3:a8:
                    42:4a:a4:10:4b:b4:a5:4e:34:d5:63:8f:02:16:5c:
                    25:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:9F:12:9E:66:B2:21:07:0C:CF:DC:F6:25:BB:D7:AA:2B:99:02:E1
            X509v3 Authority Key Identifier:
                keyid:D5:6F:5D:5D:00:3F:E3:73:DB:99:F5:81:4A:09:60:11:E3:3A:10:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/0/D56F5D5D003FE373DB99F5814A096011E33A10BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D56F5D5D003FE373DB99F5814A096011E33A10BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/0/3133382e302e32342e302f32322d3232203d3e20323634353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:d4:34:58:a2:36:6d:5b:8a:c4:72:5e:ee:bb:eb:9f:6a:50:
         15:22:b5:d4:bd:29:ca:59:61:24:78:d7:5b:f8:35:ee:96:e3:
         3d:b3:95:ee:bc:71:d3:6a:02:d3:0d:73:5c:15:28:32:7f:43:
         dc:c1:c7:8c:98:f6:97:cc:ee:29:5f:89:87:26:76:a5:fb:77:
         6e:ad:f5:e0:aa:3e:74:61:67:25:50:41:f5:61:72:75:de:76:
         58:62:5c:49:1b:c3:83:01:d7:48:f9:99:97:19:b8:ee:ee:85:
         e0:e4:8f:37:79:80:3a:08:ca:a2:6c:dd:15:d5:0e:db:1f:e8:
         b7:21:09:89:b9:cf:d1:19:f4:d7:70:02:c7:32:fc:bc:74:c8:
         dc:74:0b:3a:8f:cb:77:6c:d6:5f:d6:99:77:65:c9:ea:c8:d9:
         b5:07:d0:97:6f:9d:af:d7:5d:be:6e:11:7d:8d:cc:21:8b:be:
         1e:e6:98:d7:0e:c7:63:3f:a7:ea:bc:3a:8b:e4:58:2a:ca:07:
         96:0d:cb:28:e0:27:c8:88:f9:0b:3f:31:8d:1b:dd:c3:5e:6c:
         2e:b4:7e:42:6b:90:28:a4:f6:61:75:91:e7:7b:21:7b:6b:e1:
         35:a7:ba:1d:5f:54:19:28:80:c8:61:9f:9b:2a:97:92:c2:85:
         d6:20:ef:ef
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUXWkS+aHofgfgFvsa2vqGeKleEWQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDU2RjVENUQwMDNGRTM3M0RCOTlGNTgxNEEwOTYwMTFF
MzNBMTBCRjAeFw0yNTA1MjEyMTM3MzFaFw0yNjA1MjAyMTQyMzFaMDMxMTAvBgNV
BAMTKDg1OUYxMjlFNjZCMjIxMDcwQ0NGRENGNjI1QkJEN0FBMkI5OTAyRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8M+jdWABaTNMEMSiQ4HK1NMHx
d10U3S5gE9yodcoha8u/r/oA+B1mq7qa7adPGyKSA3WtZv9eHWnJhepRcMC1aLbu
L8oP5i88TQbNpmr3CDphPpxayKojArSCXshUtRun9qnpw4w3buqAs7TNzVGi6JpV
WkjjuDyfgxzObjCxgiTwYjReCqA8px/1sIC2vGEIM1aieIeN0dowVq62TKZd8rcG
ndau5VyJ8xh+zemR0biMFvxWUb88itCLt95rmPlvJLO68RZqGvxgZgXp0sg7Ryw1
nNsA+TZSxhSZhpNg3ICFQNPPCWN+qvAbiVvzqEJKpBBLtKVONNVjjwIWXCWlAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUhZ8SnmayIQcMz9z2JbvXqiuZAuEwHwYDVR0j
BBgwFoAU1W9dXQA/43PbmfWBSglgEeM6EL8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXlWVHJwVjRkcHJtRktFWHVwYUxOanhIZDl6REIzc0hQUjIyZ0U0UW1w
ZWgvMC9ENTZGNUQ1RDAwM0ZFMzczREI5OUY1ODE0QTA5NjAxMUUzM0ExMEJGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q1NkY1RDVEMDAzRkUzNzNE
Qjk5RjU4MTRBMDk2MDExRTMzQTEwQkYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F5VlRycFY0ZHBybUZLRVh1cGFMTmp4SGQ5ekRCM3NIUFIyMmdFNFFtcGVoLzAv
MzEzMzM4MmUzMDJlMzIzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzYzNDM1
MzMzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAooAGDANBgkqhkiG9w0BAQsFAAOCAQEACNQ0WKI2bVuK
xHJe7rvrn2pQFSK11L0pyllhJHjXW/g17pbjPbOV7rxx02oC0w1zXBUoMn9D3MHH
jJj2l8zuKV+JhyZ2pft3bq314Ko+dGFnJVBB9WFydd52WGJcSRvDgwHXSPmZlxm4
7u6F4OSPN3mAOgjKomzdFdUO2x/otyEJibnP0Rn013ACxzL8vHTI3HQLOo/Ld2zW
X9aZd2XJ6sjZtQfQl2+dr9ddvm4RfY3MIYu+HuaY1w7HYz+n6rw6i+RYKsoHlg3L
KOAnyIj5Cz8xjRvdw15sLrR+QmuQKKT2YXWR53she2vhNae6HV9UGSiAyGGfmyqX
ksKF1iDv7w==
-----END CERTIFICATE-----
Generated at Mon Jun 9 07:23:54 2025 by rpki-client