Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3133382e3132312e3235302e302f32332d3233203d3e20323632333933.roa
File:                     3133382e3132312e3235302e302f32332d3233203d3e20323632333933.roa (raw, json)
Hash identifier:          1XHUDrtLXVCQvxaNWj+RYPnA2OkwjFKUVYs1sdSak3c=
Subject key identifier:   EB:E8:48:6D:A4:F7:58:14:C6:1B:3A:34:75:7F:85:03:31:A7:9F:69
Certificate issuer:       /CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
Certificate serial:       7C7CE28EF93498AC5BEE6C7CFF401A82D6648E08
Authority key identifier: C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3133382e3132312e3235302e302f32332d3233203d3e20323632333933.roa
Signing time:             Sun 05 May 2024 21:40:37 +0000
ROA not before:           Sun 05 May 2024 21:35:37 +0000
ROA not after:            Sun 04 May 2025 21:40:37 +0000
asID:                     262393
IP address blocks:        138.121.250.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl
                          rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 23:26:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:7c:e2:8e:f9:34:98:ac:5b:ee:6c:7c:ff:40:1a:82:d6:64:8e:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
        Validity
            Not Before: May  5 21:35:37 2024 GMT
            Not After : May  4 21:40:37 2025 GMT
        Subject: CN=EBE8486DA4F75814C61B3A34757F850331A79F69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:31:20:76:6c:17:5a:68:a2:82:d9:08:bc:95:
                    d5:c6:82:ff:f6:70:f2:7a:9a:7f:24:ff:eb:64:bf:
                    d6:b4:a6:11:94:f7:46:92:0f:38:27:e2:81:b5:8d:
                    20:b9:0c:a2:37:4f:84:1f:d8:66:cb:29:a7:19:cf:
                    30:c9:ed:eb:0f:73:5d:2e:ee:9a:bd:40:d7:3f:93:
                    bb:68:b9:f7:07:4d:80:88:70:35:33:45:f3:5a:7c:
                    d3:19:2b:bd:08:02:03:51:c2:78:58:87:94:29:0d:
                    bc:b4:4a:94:0f:b0:8a:a6:50:dc:5a:a5:a0:51:22:
                    b2:12:6e:4c:24:4c:39:f2:bf:d4:a6:a0:94:be:db:
                    85:67:bf:54:2f:8e:42:7d:4d:13:6a:05:89:e7:43:
                    11:ef:a2:2e:b2:09:c5:4d:0e:6a:9b:8d:90:5c:fd:
                    c9:38:38:11:f1:52:bb:f3:02:d6:01:21:fb:eb:9c:
                    94:e8:95:e1:56:76:84:eb:2f:5b:32:3d:fe:d2:02:
                    a4:0f:1a:8c:31:41:53:94:e4:1b:f4:48:f6:48:88:
                    85:bf:66:e8:f3:ff:93:17:1c:c8:98:72:10:8d:f7:
                    8d:c3:bb:37:e4:0e:ff:70:d4:54:9e:3e:b3:c3:30:
                    94:2f:4c:ac:95:7e:3a:64:df:5d:7e:a9:b2:b2:59:
                    82:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:E8:48:6D:A4:F7:58:14:C6:1B:3A:34:75:7F:85:03:31:A7:9F:69
            X509v3 Authority Key Identifier:
                keyid:C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3133382e3132312e3235302e302f32332d3233203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:74:ce:17:9e:d8:73:36:56:a2:0e:04:01:85:00:9c:54:d2:
         a9:c6:7f:d5:c0:55:a8:e9:60:24:6e:c4:7b:bc:a4:ab:9c:d0:
         d0:9d:d6:88:95:d0:61:69:64:2c:95:6d:53:5d:46:31:6c:13:
         4a:44:d8:d9:58:62:1a:bf:b8:ce:72:63:46:21:b3:04:55:f2:
         ac:1b:49:1c:0a:6b:58:b6:49:b7:a0:4f:d0:25:cc:5a:2f:f4:
         3c:a5:62:3c:a0:d7:6a:d4:dc:3c:14:94:f5:9f:e6:20:6a:7e:
         89:26:14:a8:7f:a1:6e:5b:48:94:74:0b:7e:e0:6a:a9:48:75:
         76:bc:29:00:b4:4c:fe:db:76:2a:49:80:b2:db:f0:2e:73:c1:
         66:03:85:e1:12:78:31:c9:05:4c:ef:db:de:31:1e:4f:e4:4c:
         7d:31:95:1d:01:68:17:d4:89:65:51:48:97:cb:5b:35:d6:62:
         af:df:26:02:2e:a6:c6:8d:6b:ba:2f:f9:72:2d:6b:b1:41:4a:
         11:bc:f3:8a:27:ea:2c:61:aa:f2:be:7f:0a:05:32:0b:07:44:
         39:74:62:25:ba:82:0f:78:24:71:0f:69:3d:e6:3c:33:49:54:
         ff:3c:3f:1b:bb:9f:f5:fe:1e:9f:6e:dd:c2:be:4a:1d:a2:9b:
         18:a6:72:60
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUfHzijvk0mKxb7mx8/0AagtZkjggwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzhCQjFGM0M3QjEwNjc3Njk3RDM2NzU4NjFGNThFQzVF
NEM0QjFFNTAeFw0yNDA1MDUyMTM1MzdaFw0yNTA1MDQyMTQwMzdaMDMxMTAvBgNV
BAMTKEVCRTg0ODZEQTRGNzU4MTRDNjFCM0EzNDc1N0Y4NTAzMzFBNzlGNjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYMSB2bBdaaKKC2Qi8ldXGgv/2
cPJ6mn8k/+tkv9a0phGU90aSDzgn4oG1jSC5DKI3T4Qf2GbLKacZzzDJ7esPc10u
7pq9QNc/k7toufcHTYCIcDUzRfNafNMZK70IAgNRwnhYh5QpDby0SpQPsIqmUNxa
paBRIrISbkwkTDnyv9SmoJS+24Vnv1QvjkJ9TRNqBYnnQxHvoi6yCcVNDmqbjZBc
/ck4OBHxUrvzAtYBIfvrnJToleFWdoTrL1syPf7SAqQPGowxQVOU5Bv0SPZIiIW/
Zujz/5MXHMiYchCN943DuzfkDv9w1FSePrPDMJQvTKyVfjpk311+qbKyWYI5AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU6+hIbaT3WBTGGzo0dX+FAzGnn2kwHwYDVR0j
BBgwFoAUyLsfPHsQZ3aX02dYYfWOxeTEseUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMk1UdTh5aEZMcm9HTkdDcVZrUzJpVDlhOGhONHFTeTlZZHM0NXJhZkFL
VTYvMS9DOEJCMUYzQzdCMTA2Nzc2OTdEMzY3NTg2MUY1OEVDNUU0QzRCMUU1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M4QkIxRjNDN0IxMDY3NzY5
N0QzNjc1ODYxRjU4RUM1RTRDNEIxRTUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJNVHU4eWhGTHJvR05HQ3FWa1MyaVQ5YThoTjRxU3k5WWRzNDVyYWZBS1U2LzEv
MzEzMzM4MmUzMTMyMzEyZTMyMzUzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMjMzMzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAYp5+jANBgkqhkiG9w0BAQsFAAOCAQEAKXTO
F57YczZWog4EAYUAnFTSqcZ/1cBVqOlgJG7Ee7ykq5zQ0J3WiJXQYWlkLJVtU11G
MWwTSkTY2VhiGr+4znJjRiGzBFXyrBtJHAprWLZJt6BP0CXMWi/0PKViPKDXatTc
PBSU9Z/mIGp+iSYUqH+hbltIlHQLfuBqqUh1drwpALRM/tt2KkmAstvwLnPBZgOF
4RJ4MckFTO/b3jEeT+RMfTGVHQFoF9SJZVFIl8tbNdZir98mAi6mxo1rui/5ci1r
sUFKEbzziifqLGGq8r5/CgUyCwdEOXRiJbqCD3gkcQ9pPeY8M0lU/zw/G7uf9f4e
n27dwr5KHaKbGKZyYA==
-----END CERTIFICATE-----
Generated at Fri Jun 28 22:39:30 2024 by rpki-client on console-fra.rpki-client.org