Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/3133382e39372e3134372e302f32342d3234203d3e20323636313738.roa
File:                     3133382e39372e3134372e302f32342d3234203d3e20323636313738.roa (raw, json)
Hash identifier:          akSCKp8SsUrYcF+qebEjEWPIh4lrttT3OqJxyv5vkaM=
Subject key identifier:   F7:7D:5A:DF:B8:A6:99:F7:DE:DA:11:86:EF:E9:51:51:C4:06:C1:2D
Certificate issuer:       /CN=8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90
Certificate serial:       0C761D2310DC58B58352F8487248C3D9DEFBDE41
Authority key identifier: 8B:B2:3F:B0:F3:8F:7C:DE:17:85:2D:C6:1B:D2:34:DC:EB:C3:BB:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/3133382e39372e3134372e302f32342d3234203d3e20323636313738.roa
Signing time:             Fri 07 Feb 2025 06:07:49 +0000
ROA not before:           Fri 07 Feb 2025 06:02:49 +0000
ROA not after:            Fri 06 Feb 2026 06:07:49 +0000
asID:                     266178
IP address blocks:        138.97.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.crl
                          rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 23:46:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:76:1d:23:10:dc:58:b5:83:52:f8:48:72:48:c3:d9:de:fb:de:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90
        Validity
            Not Before: Feb  7 06:02:49 2025 GMT
            Not After : Feb  6 06:07:49 2026 GMT
        Subject: CN=F77D5ADFB8A699F7DEDA1186EFE95151C406C12D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:57:1d:8d:d8:2e:e8:c5:6c:99:86:6a:0a:f8:
                    0a:53:b3:54:56:84:56:8c:34:2f:f3:15:3c:9e:93:
                    20:01:a3:8b:92:e3:f6:04:7c:ac:79:e8:26:95:28:
                    f6:c6:76:ee:13:30:c7:db:69:dc:15:bc:d1:f2:a8:
                    ac:86:3a:09:0d:ed:37:48:6f:7a:b2:77:e9:c8:09:
                    a2:81:37:59:af:2b:5c:b9:e1:2f:f0:db:4f:7e:2c:
                    f2:b2:dc:40:ef:3d:53:d5:e2:c5:26:02:38:d8:f9:
                    00:4d:16:23:45:ca:27:09:4b:7a:3a:9a:cf:c2:2e:
                    70:7c:9e:1d:a0:49:40:d6:7a:13:70:8b:93:4b:57:
                    07:d6:67:0c:da:f1:97:2d:98:1d:bc:10:be:bf:22:
                    26:99:74:a1:75:8a:d7:f3:db:78:56:5f:c1:1d:f6:
                    95:d4:a5:bb:16:d4:b1:ae:47:e5:9a:b2:cf:32:98:
                    8c:2f:73:ed:af:30:85:dc:73:64:8a:b7:73:09:7a:
                    15:e6:30:d0:f2:fd:14:0c:c6:bd:83:e7:b2:3a:63:
                    b3:ac:01:7c:b6:48:af:bf:bc:27:76:3f:50:5b:6e:
                    ba:aa:01:38:2b:a8:d6:a1:90:b2:58:c8:0d:f9:60:
                    f1:31:39:4c:72:a4:1f:b9:31:be:f7:d6:73:e3:a4:
                    45:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:7D:5A:DF:B8:A6:99:F7:DE:DA:11:86:EF:E9:51:51:C4:06:C1:2D
            X509v3 Authority Key Identifier:
                keyid:8B:B2:3F:B0:F3:8F:7C:DE:17:85:2D:C6:1B:D2:34:DC:EB:C3:BB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/3133382e39372e3134372e302f32342d3234203d3e20323636313738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:07:37:af:30:3e:51:80:11:10:cc:bf:96:3f:e9:06:c4:2a:
         9a:9f:9f:31:54:7c:0e:ec:a2:1f:74:75:56:52:35:c6:e1:77:
         e8:3a:ca:7d:a9:57:35:3c:0f:e9:1f:5d:06:4a:be:e2:e8:75:
         0e:45:52:d5:7c:4c:a1:60:cf:7e:6d:29:e0:de:6a:38:7a:6d:
         2b:95:a6:12:23:9f:29:70:40:35:aa:c7:8f:36:92:62:b4:ba:
         fc:7a:56:c5:61:f0:47:a4:b1:06:79:bb:10:6a:6e:c9:be:ca:
         7a:f5:a2:d3:07:ba:f7:50:a5:f0:01:2e:6d:89:06:9e:18:83:
         4e:0c:de:f1:76:fc:9a:c8:55:ba:f1:94:36:91:3f:ea:32:e7:
         55:a2:8e:a2:e4:c0:90:91:ed:c0:69:5c:87:0b:0f:16:e1:13:
         b0:71:97:91:21:85:94:80:69:4b:e0:6c:40:bf:e5:da:8a:8a:
         67:27:d1:44:5a:6f:d4:8c:dd:f0:17:61:db:3a:aa:0b:6b:25:
         d7:73:39:31:e2:2a:a3:a5:ac:66:66:9d:22:73:31:73:12:b1:
         97:c6:09:83:3f:69:c4:18:0a:ed:42:5e:bf:38:bf:a9:82:c9:
         ce:c5:57:88:ba:88:81:ef:46:1a:5a:51:8c:9b:3d:38:e6:37:
         e6:fd:d7:19
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUDHYdIxDcWLWDUvhIckjD2d773kEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEJCMjNGQjBGMzhGN0NERTE3ODUyREM2MUJEMjM0RENF
QkMzQkI5MDAeFw0yNTAyMDcwNjAyNDlaFw0yNjAyMDYwNjA3NDlaMDMxMTAvBgNV
BAMTKEY3N0Q1QURGQjhBNjk5RjdERURBMTE4NkVGRTk1MTUxQzQwNkMxMkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxVx2N2C7oxWyZhmoK+ApTs1RW
hFaMNC/zFTyekyABo4uS4/YEfKx56CaVKPbGdu4TMMfbadwVvNHyqKyGOgkN7TdI
b3qyd+nICaKBN1mvK1y54S/w209+LPKy3EDvPVPV4sUmAjjY+QBNFiNFyicJS3o6
ms/CLnB8nh2gSUDWehNwi5NLVwfWZwza8ZctmB28EL6/IiaZdKF1itfz23hWX8Ed
9pXUpbsW1LGuR+Wass8ymIwvc+2vMIXcc2SKt3MJehXmMNDy/RQMxr2D57I6Y7Os
AXy2SK+/vCd2P1BbbrqqATgrqNahkLJYyA35YPExOUxypB+5Mb731nPjpEWvAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU931a37immffe2hGG7+lRUcQGwS0wHwYDVR0j
BBgwFoAUi7I/sPOPfN4XhS3GG9I03OvDu5AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzFFQ2VOYTZKRnJRTk55U1pndVNpODJTejExNGdBNWpSeFFZTTJQb3Ix
cVEvMS84QkIyM0ZCMEYzOEY3Q0RFMTc4NTJEQzYxQkQyMzREQ0VCQzNCQjkwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhCQjIzRkIwRjM4RjdDREUx
Nzg1MkRDNjFCRDIzNERDRUJDM0JCOTAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzMxRUNlTmE2SkZyUU5OeVNaZ3VTaTgyU3oxMTRnQTVqUnhRWU0yUG9yMXFRLzEv
MzEzMzM4MmUzOTM3MmUzMTM0MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzYzMTM3Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACKYZMwDQYJKoZIhvcNAQELBQADggEBAKcHN68w
PlGAERDMv5Y/6QbEKpqfnzFUfA7soh90dVZSNcbhd+g6yn2pVzU8D+kfXQZKvuLo
dQ5FUtV8TKFgz35tKeDeajh6bSuVphIjnylwQDWqx482kmK0uvx6VsVh8EeksQZ5
uxBqbsm+ynr1otMHuvdQpfABLm2JBp4Yg04M3vF2/JrIVbrxlDaRP+oy51WijqLk
wJCR7cBpXIcLDxbhE7Bxl5EhhZSAaUvgbEC/5dqKimcn0URab9SM3fAXYds6qgtr
JddzOTHiKqOlrGZmnSJzMXMSsZfGCYM/acQYCu1CXr84v6mCyc7FV4i6iIHvRhpa
UYybPTjmN+b91xk=
-----END CERTIFICATE-----
Generated at Wed Apr 23 07:59:28 2025 by rpki-client