Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/3133382e3132312e332e302f32342d3234203d3e20323634323834.roa
File:                     3133382e3132312e332e302f32342d3234203d3e20323634323834.roa (raw, json)
Hash identifier:          QmPx/+fSKw5aZi1dqgozk+O2uj0FaefZnKyzWRuEnTo=
Subject key identifier:   21:0F:E0:65:C2:E8:7C:A4:AB:5E:3C:4F:AE:A1:BF:F2:8B:B9:FA:30
Certificate issuer:       /CN=80D4CC656FFC13A4AF2625F65D6BB3560200CCFB
Certificate serial:       1B94E7B8D3C701BBBAAB63D20D29E4A75E426A85
Authority key identifier: 80:D4:CC:65:6F:FC:13:A4:AF:26:25:F6:5D:6B:B3:56:02:00:CC:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D4CC656FFC13A4AF2625F65D6BB3560200CCFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/3133382e3132312e332e302f32342d3234203d3e20323634323834.roa
Signing time:             Fri 18 Apr 2025 15:25:44 +0000
ROA not before:           Fri 18 Apr 2025 15:20:44 +0000
ROA not after:            Fri 17 Apr 2026 15:25:44 +0000
asID:                     264284
IP address blocks:        138.121.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/80D4CC656FFC13A4AF2625F65D6BB3560200CCFB.crl
                          rsync://rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/80D4CC656FFC13A4AF2625F65D6BB3560200CCFB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D4CC656FFC13A4AF2625F65D6BB3560200CCFB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 01:09:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:94:e7:b8:d3:c7:01:bb:ba:ab:63:d2:0d:29:e4:a7:5e:42:6a:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80D4CC656FFC13A4AF2625F65D6BB3560200CCFB
        Validity
            Not Before: Apr 18 15:20:44 2025 GMT
            Not After : Apr 17 15:25:44 2026 GMT
        Subject: CN=210FE065C2E87CA4AB5E3C4FAEA1BFF28BB9FA30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:72:ab:3e:4c:ad:66:39:39:b3:e1:51:03:c1:
                    42:d1:ab:50:66:04:e1:83:dc:94:b7:4b:ed:55:21:
                    76:e6:78:63:dc:81:92:3f:ba:4c:88:06:06:b3:7a:
                    c5:96:11:e9:32:bf:ee:d2:78:29:9a:d1:91:e5:6d:
                    14:97:32:ac:cf:86:60:11:4c:69:57:72:2c:65:06:
                    35:7d:05:b1:1b:fb:e5:fb:9f:1a:39:26:ba:9b:41:
                    d3:2c:1a:85:57:d0:1a:e5:de:b2:04:01:d6:7b:df:
                    0a:e3:63:85:25:10:e9:e0:d1:4a:63:bf:9f:46:54:
                    e0:1b:fd:56:d1:5f:47:42:4e:03:59:50:14:28:b6:
                    f4:96:39:81:a3:fb:97:8d:0e:e5:e5:e6:a5:e6:b9:
                    45:6e:48:17:2c:be:dd:ac:a4:ca:62:c4:8a:cb:43:
                    2b:3b:ac:91:4a:27:6d:3e:f2:6b:fb:46:f1:09:2a:
                    1d:a1:37:4e:75:3a:20:25:ca:e7:2a:d9:33:d3:6a:
                    4b:b2:aa:37:5f:d0:94:fb:23:9c:03:11:ee:c2:eb:
                    9a:83:13:85:9e:f4:5f:07:37:4a:82:b3:30:f2:44:
                    a0:9c:9f:91:b7:8a:c9:02:b3:a8:ae:84:db:90:69:
                    7a:bc:8c:19:11:b8:1c:d8:1d:c7:dc:51:0c:18:a1:
                    b2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:0F:E0:65:C2:E8:7C:A4:AB:5E:3C:4F:AE:A1:BF:F2:8B:B9:FA:30
            X509v3 Authority Key Identifier:
                keyid:80:D4:CC:65:6F:FC:13:A4:AF:26:25:F6:5D:6B:B3:56:02:00:CC:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/80D4CC656FFC13A4AF2625F65D6BB3560200CCFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D4CC656FFC13A4AF2625F65D6BB3560200CCFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/3133382e3132312e332e302f32342d3234203d3e20323634323834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:43:2b:4d:70:57:5b:82:23:6a:4b:d4:ad:fe:40:7e:6a:54:
         38:dd:06:e3:6e:98:d5:51:03:78:da:90:9f:f0:32:de:17:0b:
         37:ed:db:d6:65:ba:7e:e5:d7:41:2d:10:c1:4c:e8:5c:b3:39:
         82:61:e9:4b:1b:5a:84:a1:e2:20:48:c0:dc:a9:67:9a:f0:53:
         e8:2c:93:05:59:54:60:92:a9:c9:b0:c2:6a:94:cb:d2:f3:cb:
         90:a2:71:6c:f1:ba:37:ac:34:43:02:fe:43:4e:e7:ec:6c:e0:
         ad:ed:b4:9b:b2:2a:33:76:2e:f1:51:81:88:63:c2:b1:2c:66:
         5e:07:5b:2c:19:b1:9f:be:6a:2b:96:13:2f:37:ae:30:2f:7a:
         95:87:97:2c:48:6a:fd:d9:d5:cb:d4:d0:65:64:e6:53:d6:dd:
         21:7d:e9:cb:3f:34:da:6e:a2:20:dd:83:9a:86:b6:10:80:35:
         a7:49:97:4a:c4:74:f8:63:c3:86:e2:d4:99:83:42:b8:62:29:
         45:e9:b0:4d:5b:8c:bc:fb:50:91:bf:1c:cd:84:5e:ac:fa:a8:
         e2:5c:ad:7e:3b:40:d0:5e:f8:7c:a3:1b:da:55:64:f0:d5:6a:
         b9:4c:e7:db:5c:67:79:27:c3:cd:d4:ff:3d:dd:4e:57:7c:d1:
         cf:78:ed:03
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUG5TnuNPHAbu6q2PSDSnkp15CaoUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODBENENDNjU2RkZDMTNBNEFGMjYyNUY2NUQ2QkIzNTYw
MjAwQ0NGQjAeFw0yNTA0MTgxNTIwNDRaFw0yNjA0MTcxNTI1NDRaMDMxMTAvBgNV
BAMTKDIxMEZFMDY1QzJFODdDQTRBQjVFM0M0RkFFQTFCRkYyOEJCOUZBMzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIcqs+TK1mOTmz4VEDwULRq1Bm
BOGD3JS3S+1VIXbmeGPcgZI/ukyIBgazesWWEekyv+7SeCma0ZHlbRSXMqzPhmAR
TGlXcixlBjV9BbEb++X7nxo5JrqbQdMsGoVX0Brl3rIEAdZ73wrjY4UlEOng0Upj
v59GVOAb/VbRX0dCTgNZUBQotvSWOYGj+5eNDuXl5qXmuUVuSBcsvt2spMpixIrL
Qys7rJFKJ20+8mv7RvEJKh2hN051OiAlyucq2TPTakuyqjdf0JT7I5wDEe7C65qD
E4We9F8HN0qCszDyRKCcn5G3iskCs6iuhNuQaXq8jBkRuBzYHcfcUQwYobJ5AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUIQ/gZcLofKSrXjxPrqG/8ou5+jAwHwYDVR0j
BBgwFoAUgNTMZW/8E6SvJiX2XWuzVgIAzPswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHpmUXpLamdwNDE3eXFvRWRVZENmN3FFdzlqWmlvdlhNM1hLUGlhc3ph
TFIvMC84MEQ0Q0M2NTZGRkMxM0E0QUYyNjI1RjY1RDZCQjM1NjAyMDBDQ0ZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgwRDRDQzY1NkZGQzEzQTRB
RjI2MjVGNjVENkJCMzU2MDIwMENDRkIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h6ZlF6S2pncDQxN3lxb0VkVWRDZjdxRXc5alppb3ZYTTNYS1BpYXN6YUxSLzAv
MzEzMzM4MmUzMTMyMzEyZTMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM0
MzIzODM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAinkDMA0GCSqGSIb3DQEBCwUAA4IBAQC7QytNcFdb
giNqS9St/kB+alQ43QbjbpjVUQN42pCf8DLeFws37dvWZbp+5ddBLRDBTOhcszmC
YelLG1qEoeIgSMDcqWea8FPoLJMFWVRgkqnJsMJqlMvS88uQonFs8bo3rDRDAv5D
TufsbOCt7bSbsiozdi7xUYGIY8KxLGZeB1ssGbGfvmorlhMvN64wL3qVh5csSGr9
2dXL1NBlZOZT1t0hfenLPzTabqIg3YOahrYQgDWnSZdKxHT4Y8OG4tSZg0K4YilF
6bBNW4y8+1CRvxzNhF6s+qjiXK1+O0DQXvh8oxvaVWTw1Wq5TOfbXGd5J8PN1P89
3U5XfNHPeO0D
-----END CERTIFICATE-----
Generated at Mon Jun 9 09:18:58 2025 by rpki-client