Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/3133382e3132312e322e302f32342d3234203d3e20323634323834.roa
File:                     3133382e3132312e322e302f32342d3234203d3e20323634323834.roa (raw, json)
Hash identifier:          pzts6/RvGD5RJfx3R9upD7A4mmpksgTvjq444a8bCGA=
Subject key identifier:   26:05:1C:D0:30:1B:CD:54:5F:80:F5:28:54:AB:5D:25:2F:28:C8:3F
Certificate issuer:       /CN=80D4CC656FFC13A4AF2625F65D6BB3560200CCFB
Certificate serial:       71DD810CF0DE82351262DC8CCF7ED378172E5483
Authority key identifier: 80:D4:CC:65:6F:FC:13:A4:AF:26:25:F6:5D:6B:B3:56:02:00:CC:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D4CC656FFC13A4AF2625F65D6BB3560200CCFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/3133382e3132312e322e302f32342d3234203d3e20323634323834.roa
Signing time:             Fri 18 Apr 2025 15:25:44 +0000
ROA not before:           Fri 18 Apr 2025 15:20:44 +0000
ROA not after:            Fri 17 Apr 2026 15:25:44 +0000
asID:                     264284
IP address blocks:        138.121.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/80D4CC656FFC13A4AF2625F65D6BB3560200CCFB.crl
                          rsync://rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/80D4CC656FFC13A4AF2625F65D6BB3560200CCFB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D4CC656FFC13A4AF2625F65D6BB3560200CCFB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 01:09:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:dd:81:0c:f0:de:82:35:12:62:dc:8c:cf:7e:d3:78:17:2e:54:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80D4CC656FFC13A4AF2625F65D6BB3560200CCFB
        Validity
            Not Before: Apr 18 15:20:44 2025 GMT
            Not After : Apr 17 15:25:44 2026 GMT
        Subject: CN=26051CD0301BCD545F80F52854AB5D252F28C83F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c5:f6:7f:cc:58:df:ed:8b:0d:2a:90:8c:f0:
                    f9:1d:c4:7d:59:22:37:bc:7a:cc:56:9f:ad:f5:b4:
                    d1:a5:dc:33:d9:5c:cb:39:9c:ef:01:ec:6e:71:85:
                    4e:bb:87:96:ac:37:7b:37:6a:10:b5:37:12:7a:e7:
                    13:b6:27:29:e4:d8:09:a2:57:f1:b2:c2:2a:45:7c:
                    30:78:df:68:88:a7:de:0d:10:ab:cb:06:5f:2c:78:
                    53:97:0e:5a:a8:de:cc:3b:81:e5:64:e1:8b:cc:b1:
                    6a:29:f3:64:74:0a:c3:3c:cd:80:f0:a4:00:7f:5a:
                    d7:5a:c4:cb:b5:f7:f8:f7:27:0e:fd:61:77:73:4c:
                    75:57:09:73:41:62:05:00:25:ec:2e:97:78:d4:aa:
                    39:60:6e:76:ec:09:f8:f8:5d:a2:8f:2b:8e:87:1e:
                    09:ef:43:ac:fc:31:f0:2e:30:3f:4d:32:14:9e:9c:
                    ad:8b:76:ab:6f:61:33:12:fb:08:6d:d8:dd:e2:7a:
                    b2:3b:b1:a9:c4:55:1f:c8:98:b4:2b:5b:94:95:2a:
                    4f:fd:49:c6:c5:12:6f:11:ce:e9:e4:ee:6f:b7:65:
                    78:b1:00:0b:6c:3c:9e:76:6c:27:6f:8c:fa:15:11:
                    81:e9:3e:b2:5a:f6:25:a2:c3:da:54:cc:b8:6f:bd:
                    30:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:05:1C:D0:30:1B:CD:54:5F:80:F5:28:54:AB:5D:25:2F:28:C8:3F
            X509v3 Authority Key Identifier:
                keyid:80:D4:CC:65:6F:FC:13:A4:AF:26:25:F6:5D:6B:B3:56:02:00:CC:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/80D4CC656FFC13A4AF2625F65D6BB3560200CCFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D4CC656FFC13A4AF2625F65D6BB3560200CCFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/3133382e3132312e322e302f32342d3234203d3e20323634323834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:a2:ee:39:7b:ae:94:ce:bb:9b:73:2f:c4:d1:69:8f:47:6f:
         bc:55:b2:21:7c:d1:4c:62:3b:a1:33:c8:d6:5f:30:55:7e:60:
         f6:5a:fd:04:f5:43:19:53:d4:9b:d7:5c:b0:2c:2d:4d:92:52:
         24:c2:69:2f:34:51:1a:8c:29:16:bb:e6:d7:a1:2f:fb:76:f6:
         00:97:0e:d8:c1:7b:38:f0:93:ba:39:20:1f:e4:45:a3:4d:b6:
         d4:a0:70:37:ae:8e:f7:a8:d0:88:0f:0c:58:6b:e7:07:af:8f:
         aa:ca:61:c4:ac:28:4e:0c:bf:89:c6:a3:a2:29:ac:fd:f4:ee:
         5d:b6:93:b4:a8:b8:3f:ec:a9:14:fd:13:55:be:8a:66:1f:f0:
         15:f2:6a:b7:7d:e5:5d:7b:5f:9c:cf:2c:ee:3e:4d:85:06:b1:
         19:5e:f4:33:a0:d5:d8:fe:dc:38:08:64:9d:09:56:34:46:d1:
         83:35:e4:5f:e2:0c:41:89:5e:b4:d6:53:3f:a9:90:40:15:7e:
         91:63:57:0d:bd:f7:8e:aa:27:ca:56:46:1f:75:4c:5f:f7:73:
         2d:b5:a1:c0:83:c6:7e:17:2d:c2:11:8b:98:97:04:5a:d3:09:
         5e:a5:eb:3d:6a:5f:11:68:3e:73:9a:33:3e:9e:c4:18:a0:a5:
         24:bd:7b:e0
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUcd2BDPDegjUSYtyMz37TeBcuVIMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODBENENDNjU2RkZDMTNBNEFGMjYyNUY2NUQ2QkIzNTYw
MjAwQ0NGQjAeFw0yNTA0MTgxNTIwNDRaFw0yNjA0MTcxNTI1NDRaMDMxMTAvBgNV
BAMTKDI2MDUxQ0QwMzAxQkNENTQ1RjgwRjUyODU0QUI1RDI1MkYyOEM4M0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDixfZ/zFjf7YsNKpCM8PkdxH1Z
Ije8esxWn631tNGl3DPZXMs5nO8B7G5xhU67h5asN3s3ahC1NxJ65xO2Jynk2Ami
V/GywipFfDB432iIp94NEKvLBl8seFOXDlqo3sw7geVk4YvMsWop82R0CsM8zYDw
pAB/WtdaxMu19/j3Jw79YXdzTHVXCXNBYgUAJewul3jUqjlgbnbsCfj4XaKPK46H
HgnvQ6z8MfAuMD9NMhSenK2LdqtvYTMS+wht2N3ierI7sanEVR/ImLQrW5SVKk/9
ScbFEm8Rzunk7m+3ZXixAAtsPJ52bCdvjPoVEYHpPrJa9iWiw9pUzLhvvTDHAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUJgUc0DAbzVRfgPUoVKtdJS8oyD8wHwYDVR0j
BBgwFoAUgNTMZW/8E6SvJiX2XWuzVgIAzPswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHpmUXpLamdwNDE3eXFvRWRVZENmN3FFdzlqWmlvdlhNM1hLUGlhc3ph
TFIvMC84MEQ0Q0M2NTZGRkMxM0E0QUYyNjI1RjY1RDZCQjM1NjAyMDBDQ0ZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgwRDRDQzY1NkZGQzEzQTRB
RjI2MjVGNjVENkJCMzU2MDIwMENDRkIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h6ZlF6S2pncDQxN3lxb0VkVWRDZjdxRXc5alppb3ZYTTNYS1BpYXN6YUxSLzAv
MzEzMzM4MmUzMTMyMzEyZTMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM0
MzIzODM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAinkCMA0GCSqGSIb3DQEBCwUAA4IBAQAuou45e66U
zrubcy/E0WmPR2+8VbIhfNFMYjuhM8jWXzBVfmD2Wv0E9UMZU9Sb11ywLC1NklIk
wmkvNFEajCkWu+bXoS/7dvYAlw7YwXs48JO6OSAf5EWjTbbUoHA3ro73qNCIDwxY
a+cHr4+qymHErChODL+JxqOiKaz99O5dtpO0qLg/7KkU/RNVvopmH/AV8mq3feVd
e1+czyzuPk2FBrEZXvQzoNXY/tw4CGSdCVY0RtGDNeRf4gxBiV601lM/qZBAFX6R
Y1cNvfeOqifKVkYfdUxf93MttaHAg8Z+Fy3CEYuYlwRa0wlepes9al8RaD5zmjM+
nsQYoKUkvXvg
-----END CERTIFICATE-----
Generated at Mon Jun 9 05:40:56 2025 by rpki-client