Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e39372e302f32342d3234203d3e203533313533.roa
File:                     3138372e36312e39372e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier:          34WP1ptp+T3NvK67iPDOGUCsf6htzTs4SlPYLnXJAjQ=
Subject key identifier:   37:B6:C1:A8:A8:55:BE:85:A2:7D:C9:C1:FB:6D:19:7B:BA:A2:22:84
Certificate issuer:       /CN=85CB838E34B41EAF2AA18ECCB28128B775E7DF08
Certificate serial:       739879F87D8A5616E3EDA46027E4A7D8176D8E25
Authority key identifier: 85:CB:83:8E:34:B4:1E:AF:2A:A1:8E:CC:B2:81:28:B7:75:E7:DF:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e39372e302f32342d3234203d3e203533313533.roa
Signing time:             Wed 04 Dec 2024 15:42:42 +0000
ROA not before:           Wed 04 Dec 2024 15:37:42 +0000
ROA not after:            Wed 03 Dec 2025 15:42:42 +0000
asID:                     53153
IP address blocks:        187.61.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.crl
                          rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 11:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:98:79:f8:7d:8a:56:16:e3:ed:a4:60:27:e4:a7:d8:17:6d:8e:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85CB838E34B41EAF2AA18ECCB28128B775E7DF08
        Validity
            Not Before: Dec  4 15:37:42 2024 GMT
            Not After : Dec  3 15:42:42 2025 GMT
        Subject: CN=37B6C1A8A855BE85A27DC9C1FB6D197BBAA22284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:25:cb:57:b1:06:f0:ff:24:84:91:eb:82:67:
                    92:81:78:2d:41:cb:2d:7e:05:ae:8b:f2:cb:7b:f1:
                    65:ae:77:fa:8f:8a:be:5d:d3:27:7e:84:ed:3d:da:
                    22:49:f4:9a:59:81:01:5e:10:87:0d:32:c9:5e:9e:
                    87:d0:d4:2c:f1:f0:ed:f9:50:36:9b:a9:5e:c8:00:
                    80:61:9a:57:eb:eb:c6:f7:65:f6:f6:e3:d4:f7:18:
                    3d:3f:88:72:42:d0:d7:2d:2b:4f:bd:2a:71:03:e3:
                    ab:d9:04:c8:72:33:54:18:c0:9f:8a:7a:76:b7:e8:
                    28:e0:ce:50:d8:99:70:11:e1:d6:ac:b6:6a:89:68:
                    02:e8:34:9d:bb:47:ff:78:b6:19:32:4c:13:9b:32:
                    ab:9a:4a:2f:8e:62:f9:99:05:21:81:8e:f8:31:16:
                    81:72:66:3f:fd:65:57:4c:9b:8b:f1:64:6d:ec:ae:
                    f9:cc:81:4c:53:7d:e1:f0:85:d6:b7:ce:53:16:bc:
                    d7:8c:be:57:e8:2e:07:95:42:ad:41:e6:57:d5:a2:
                    d2:68:d3:f8:4e:fb:46:bd:9c:2d:89:65:16:74:a0:
                    68:08:af:f0:c7:7b:65:98:81:18:65:d7:1e:8d:9a:
                    d7:b3:99:89:80:f7:52:60:7f:f4:8a:0c:80:1a:f7:
                    29:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:B6:C1:A8:A8:55:BE:85:A2:7D:C9:C1:FB:6D:19:7B:BA:A2:22:84
            X509v3 Authority Key Identifier:
                keyid:85:CB:83:8E:34:B4:1E:AF:2A:A1:8E:CC:B2:81:28:B7:75:E7:DF:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e39372e302f32342d3234203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.61.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:64:57:4f:39:f7:01:07:fd:02:36:72:dd:46:c1:11:7b:5d:
         68:15:9d:10:ef:e9:b5:b1:6a:cd:c8:bb:41:d3:ea:ed:6e:1f:
         9a:ac:fe:93:2a:01:04:b2:bf:07:2b:6b:ef:b7:58:32:0b:39:
         e6:39:83:07:bc:1f:f1:d5:79:d1:0b:4f:04:72:36:51:f6:13:
         0b:9b:08:6e:d3:ef:b1:ea:e4:ba:d3:ac:37:52:0a:2c:a5:42:
         6f:27:3a:3e:8c:5c:62:28:62:77:4c:cc:e1:fc:16:e4:f1:93:
         fc:52:79:73:0a:6e:07:4a:27:f6:8e:b7:01:b0:9d:92:3f:ee:
         ad:35:b0:74:3a:f2:f3:7c:9d:93:bf:4e:dc:81:7f:f1:19:72:
         d8:e6:93:75:2d:11:3d:ca:3f:6f:3d:78:76:cf:a0:97:12:5e:
         b7:83:00:cd:de:3b:6f:0d:32:2e:e5:05:e0:ce:44:c1:78:54:
         4f:ad:a5:0e:b8:db:38:c2:ca:60:dc:ea:f8:bb:6f:e3:b5:00:
         aa:5e:76:6c:c0:37:14:c4:9b:4e:c0:a8:38:61:26:9b:9b:9f:
         fa:3c:92:b5:7e:7e:5c:39:b5:2b:bc:cf:16:e8:e1:88:da:64:
         c7:a7:58:5b:ab:78:fb:c0:d1:b9:28:22:24:55:5c:8d:79:78:
         e7:22:37:30
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUc5h5+H2KVhbj7aRgJ+Sn2BdtjiUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODVDQjgzOEUzNEI0MUVBRjJBQTE4RUNDQjI4MTI4Qjc3
NUU3REYwODAeFw0yNDEyMDQxNTM3NDJaFw0yNTEyMDMxNTQyNDJaMDMxMTAvBgNV
BAMTKDM3QjZDMUE4QTg1NUJFODVBMjdEQzlDMUZCNkQxOTdCQkFBMjIyODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoJctXsQbw/ySEkeuCZ5KBeC1B
yy1+Ba6L8st78WWud/qPir5d0yd+hO092iJJ9JpZgQFeEIcNMslenofQ1Czx8O35
UDabqV7IAIBhmlfr68b3Zfb249T3GD0/iHJC0NctK0+9KnED46vZBMhyM1QYwJ+K
ena36CjgzlDYmXAR4dastmqJaALoNJ27R/94thkyTBObMquaSi+OYvmZBSGBjvgx
FoFyZj/9ZVdMm4vxZG3srvnMgUxTfeHwhda3zlMWvNeMvlfoLgeVQq1B5lfVotJo
0/hO+0a9nC2JZRZ0oGgIr/DHe2WYgRhl1x6NmtezmYmA91Jgf/SKDIAa9ymPAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUN7bBqKhVvoWifcnB+20Ze7qiIoQwHwYDVR0j
BBgwFoAUhcuDjjS0Hq8qoY7MsoEot3Xn3wgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMm5zZHRMdG1xcEgzUFBtYnJzTHNIWGhtN2p4a1ByVHNkSnJudmdOelJC
SmgvMC84NUNCODM4RTM0QjQxRUFGMkFBMThFQ0NCMjgxMjhCNzc1RTdERjA4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg1Q0I4MzhFMzRCNDFFQUYy
QUExOEVDQ0IyODEyOEI3NzVFN0RGMDguY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJuc2R0THRtcXBIM1BQbWJyc0xzSFhobTdqeGtQclRzZEpybnZnTnpSQkpoLzAv
MzEzODM3MmUzNjMxMmUzOTM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMzMx
MzUzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEALs9YTANBgkqhkiG9w0BAQsFAAOCAQEAcWRXTzn3AQf9
AjZy3UbBEXtdaBWdEO/ptbFqzci7QdPq7W4fmqz+kyoBBLK/Bytr77dYMgs55jmD
B7wf8dV50QtPBHI2UfYTC5sIbtPvserkutOsN1IKLKVCbyc6PoxcYihid0zM4fwW
5PGT/FJ5cwpuB0on9o63AbCdkj/urTWwdDry83ydk79O3IF/8Rly2OaTdS0RPco/
bz14ds+glxJet4MAzd47bw0yLuUF4M5EwXhUT62lDrjbOMLKYNzq+Ltv47UAql52
bMA3FMSbTsCoOGEmm5uf+jyStX5+XDm1K7zPFujhiNpkx6dYW6t4+8DRuSgiJFVc
jXl45yI3MA==
-----END CERTIFICATE-----
Generated at Tue Apr 8 22:17:55 2025 by rpki-client