Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/3133382e3230342e3137342e302f32342d3234203d3e20323633393131.roa
File:                     3133382e3230342e3137342e302f32342d3234203d3e20323633393131.roa (raw, json)
Hash identifier:          UkIAzTtv7zNHC6mEiZX9b0Rmj5mT/9ghpLrDu2jgBAo=
Subject key identifier:   88:15:12:36:38:C5:07:D8:85:53:17:8B:D1:87:47:52:0F:6B:A8:5F
Certificate issuer:       /CN=1B827C9EBC31D48DC10AB52ACE52BF27C89E90AC
Certificate serial:       0E6185C1738A5658F5D738F872C3C6DDBA6FA3D2
Authority key identifier: 1B:82:7C:9E:BC:31:D4:8D:C1:0A:B5:2A:CE:52:BF:27:C8:9E:90:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B827C9EBC31D48DC10AB52ACE52BF27C89E90AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/3133382e3230342e3137342e302f32342d3234203d3e20323633393131.roa
Signing time:             Mon 03 Feb 2025 20:58:39 +0000
ROA not before:           Mon 03 Feb 2025 20:53:39 +0000
ROA not after:            Mon 02 Feb 2026 20:58:39 +0000
asID:                     263911
IP address blocks:        138.204.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/1B827C9EBC31D48DC10AB52ACE52BF27C89E90AC.crl
                          rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/1B827C9EBC31D48DC10AB52ACE52BF27C89E90AC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B827C9EBC31D48DC10AB52ACE52BF27C89E90AC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Apr 2025 10:11:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:61:85:c1:73:8a:56:58:f5:d7:38:f8:72:c3:c6:dd:ba:6f:a3:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B827C9EBC31D48DC10AB52ACE52BF27C89E90AC
        Validity
            Not Before: Feb  3 20:53:39 2025 GMT
            Not After : Feb  2 20:58:39 2026 GMT
        Subject: CN=8815123638C507D88553178BD18747520F6BA85F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:65:2c:9e:cd:f0:4e:df:1d:74:f1:7f:10:fc:
                    0d:a4:3c:79:1a:39:a6:13:00:f1:39:93:2e:86:6e:
                    0c:4c:c5:96:8c:86:9b:0b:ea:1b:62:13:06:59:1b:
                    a2:d7:41:e8:3d:c4:7c:0b:82:94:64:7a:a6:2c:64:
                    49:66:53:71:97:fa:7e:74:03:0b:b5:88:71:bc:d7:
                    2f:89:13:49:f5:69:6e:94:39:8f:ac:16:ac:6d:35:
                    0a:22:70:42:34:e6:bd:b8:4f:70:64:63:76:9a:e3:
                    72:6c:b3:93:bc:9b:c4:7f:4e:6b:2c:01:fa:9b:c9:
                    f4:e9:70:d0:d0:47:9c:4e:7b:90:f8:8b:1c:bc:c0:
                    72:69:eb:b8:02:00:5f:d7:a6:bb:86:e2:87:4d:ff:
                    2a:31:62:62:0d:a9:37:40:a6:1a:2b:df:28:5d:d6:
                    b9:77:c9:ff:9c:f8:3a:eb:00:cb:68:99:59:b3:6c:
                    b6:ee:90:f8:0b:de:dd:25:39:fd:16:28:d5:e8:a8:
                    62:fd:8f:60:06:93:66:6e:ea:a2:b1:ad:b0:1f:03:
                    1b:2c:80:5e:e6:80:a5:12:a1:da:f0:19:09:13:40:
                    87:b4:a9:93:ea:96:50:e4:d9:a8:14:13:83:3a:12:
                    c5:dd:28:42:11:9f:ac:ca:36:66:ed:9c:42:90:1d:
                    08:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:15:12:36:38:C5:07:D8:85:53:17:8B:D1:87:47:52:0F:6B:A8:5F
            X509v3 Authority Key Identifier:
                keyid:1B:82:7C:9E:BC:31:D4:8D:C1:0A:B5:2A:CE:52:BF:27:C8:9E:90:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/1B827C9EBC31D48DC10AB52ACE52BF27C89E90AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B827C9EBC31D48DC10AB52ACE52BF27C89E90AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/3133382e3230342e3137342e302f32342d3234203d3e20323633393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:19:e7:8e:30:29:1b:df:5f:9c:4a:02:72:6a:48:31:7a:35:
         53:01:15:8b:af:8a:87:0f:e9:ec:90:6c:1c:46:53:52:c3:77:
         5a:27:67:c2:31:1d:f7:4d:9b:71:e2:43:cf:e2:84:7b:0b:90:
         28:d8:5a:82:bb:e9:a9:96:c6:57:18:46:02:ba:91:86:d5:f6:
         d3:3b:2f:74:c7:fc:43:d7:11:00:5e:32:15:7c:79:f4:4b:c7:
         db:d4:57:8a:62:e3:88:73:94:78:09:ff:8e:43:d8:4d:b2:24:
         04:d5:ce:35:b5:c0:ee:d0:d6:9c:9f:ec:39:64:2d:df:d1:58:
         8d:90:a8:81:a9:a5:3f:b9:81:e5:5a:68:8f:1d:bc:e5:24:a1:
         58:16:77:73:c7:71:e3:f0:5a:44:ce:d4:27:cc:8b:fe:d0:73:
         2f:bd:e3:ad:98:36:d2:b6:da:3f:12:1f:a6:ce:70:94:f7:1d:
         bc:e3:eb:77:79:2d:72:cf:89:0f:59:a5:bb:72:e5:7f:b1:6a:
         82:40:a8:d2:e9:da:d0:d2:ed:9e:b1:48:88:8c:4a:ca:32:e8:
         3d:5b:84:a1:db:2a:70:0d:aa:09:14:c3:eb:04:52:09:84:38:
         e6:de:af:01:65:a3:02:88:05:4c:4e:2e:1e:28:b8:25:65:6e:
         a6:2e:22:87
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUDmGFwXOKVlj11zj4csPG3bpvo9IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUI4MjdDOUVCQzMxRDQ4REMxMEFCNTJBQ0U1MkJGMjdD
ODlFOTBBQzAeFw0yNTAyMDMyMDUzMzlaFw0yNjAyMDIyMDU4MzlaMDMxMTAvBgNV
BAMTKDg4MTUxMjM2MzhDNTA3RDg4NTUzMTc4QkQxODc0NzUyMEY2QkE4NUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmZSyezfBO3x108X8Q/A2kPHka
OaYTAPE5ky6GbgxMxZaMhpsL6htiEwZZG6LXQeg9xHwLgpRkeqYsZElmU3GX+n50
Awu1iHG81y+JE0n1aW6UOY+sFqxtNQoicEI05r24T3BkY3aa43Jss5O8m8R/Tmss
AfqbyfTpcNDQR5xOe5D4ixy8wHJp67gCAF/XpruG4odN/yoxYmINqTdAphor3yhd
1rl3yf+c+DrrAMtomVmzbLbukPgL3t0lOf0WKNXoqGL9j2AGk2Zu6qKxrbAfAxss
gF7mgKUSodrwGQkTQIe0qZPqllDk2agUE4M6EsXdKEIRn6zKNmbtnEKQHQhXAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUiBUSNjjFB9iFUxeL0YdHUg9rqF8wHwYDVR0j
BBgwFoAUG4J8nrwx1I3BCrUqzlK/J8iekKwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM29YUkFxd3dIRmYyaXdZam5adENCamFrWnQxNlMydlB4Yjk0d2NCcnNT
clgvMC8xQjgyN0M5RUJDMzFENDhEQzEwQUI1MkFDRTUyQkYyN0M4OUU5MEFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFCODI3QzlFQkMzMUQ0OERD
MTBBQjUyQUNFNTJCRjI3Qzg5RTkwQUMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNvWFJBcXd3SEZmMml3WWpuWnRDQmpha1p0MTZTMnZQeGI5NHdjQnJzU3JYLzAv
MzEzMzM4MmUzMjMwMzQyZTMxMzczNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM5MzEzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIrMrjANBgkqhkiG9w0BAQsFAAOCAQEARhnn
jjApG99fnEoCcmpIMXo1UwEVi6+Khw/p7JBsHEZTUsN3WidnwjEd902bceJDz+KE
ewuQKNhagrvpqZbGVxhGArqRhtX20zsvdMf8Q9cRAF4yFXx59EvH29RXimLjiHOU
eAn/jkPYTbIkBNXONbXA7tDWnJ/sOWQt39FYjZCogamlP7mB5Vpojx285SShWBZ3
c8dx4/BaRM7UJ8yL/tBzL73jrZg20rbaPxIfps5wlPcdvOPrd3ktcs+JD1mlu3Ll
f7FqgkCo0una0NLtnrFIiIxKyjLoPVuEodsqcA2qCRTD6wRSCYQ45t6vAWWjAogF
TE4uHii4JWVupi4ihw==
-----END CERTIFICATE-----
Generated at Mon Apr 14 00:35:21 2025 by rpki-client