Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3133382e3132322e3138302e302f32322d3232203d3e203532363533.roa
File:                     3133382e3132322e3138302e302f32322d3232203d3e203532363533.roa (raw, json)
Hash identifier:          Kwgb6VgIGKYfgFq2yWCtixJtEryG+tmBtrCIOZC2o6M=
Subject key identifier:   91:96:D0:98:95:15:D0:61:13:DE:84:5E:C9:29:B9:76:EE:8A:CD:D0
Certificate issuer:       /CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
Certificate serial:       4E00FDBD06A33D3F15D3175DBD3A43A8B00157F9
Authority key identifier: 03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3133382e3132322e3138302e302f32322d3232203d3e203532363533.roa
Signing time:             Thu 06 Mar 2025 00:00:01 +0000
ROA not before:           Wed 05 Mar 2025 23:55:01 +0000
ROA not after:            Thu 05 Mar 2026 00:00:01 +0000
asID:                     52653
IP address blocks:        138.122.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl
                          rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 17:46:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:00:fd:bd:06:a3:3d:3f:15:d3:17:5d:bd:3a:43:a8:b0:01:57:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
        Validity
            Not Before: Mar  5 23:55:01 2025 GMT
            Not After : Mar  5 00:00:01 2026 GMT
        Subject: CN=9196D0989515D06113DE845EC929B976EE8ACDD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:03:39:9a:91:60:e4:83:9b:3e:a5:43:b0:a7:
                    54:9a:7b:36:46:43:88:1f:6b:62:3f:24:02:71:de:
                    a5:8a:ac:b7:f7:b8:23:27:c6:8a:69:64:29:7a:b6:
                    eb:aa:df:bd:39:27:be:da:1d:b7:18:f5:93:1f:fa:
                    60:cf:fa:15:ca:d2:10:c5:e1:a3:dd:12:56:40:d3:
                    73:73:41:ff:7d:fe:18:42:fc:c7:9a:71:9a:3a:36:
                    70:15:1b:7b:60:73:b0:08:60:54:86:75:b6:a2:8c:
                    c3:c7:aa:38:66:b9:5c:b5:11:f9:91:b0:b3:91:da:
                    94:78:43:91:b3:46:d4:21:90:22:72:0a:3a:19:03:
                    fe:96:9a:73:7a:dc:76:e7:b8:73:ca:f3:1b:b8:97:
                    d0:d5:bb:85:89:d0:ce:5b:e5:99:a0:fd:79:31:96:
                    7c:7a:fd:63:8e:fa:ff:0e:38:60:ac:fc:96:16:83:
                    45:06:f2:ee:b7:57:75:4c:f9:c7:2b:4f:a2:9c:7c:
                    21:4f:cb:4e:92:6e:de:83:30:46:5d:f4:36:d2:0e:
                    d7:4c:4a:4c:ea:18:65:27:2f:18:f1:95:e8:22:9c:
                    99:68:98:61:cc:02:38:60:cb:0a:c6:0e:2c:8b:49:
                    d8:12:0d:de:1d:65:6d:b5:47:d4:eb:94:df:0f:ef:
                    b3:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:96:D0:98:95:15:D0:61:13:DE:84:5E:C9:29:B9:76:EE:8A:CD:D0
            X509v3 Authority Key Identifier:
                keyid:03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3133382e3132322e3138302e302f32322d3232203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:5b:a5:45:79:fd:78:b3:f9:c5:ec:62:72:60:52:2e:28:71:
         11:f2:5b:cc:da:df:7d:d9:95:d6:41:53:5a:a0:08:4a:75:de:
         33:c2:f7:44:83:d0:69:d5:34:d8:5f:e3:71:a3:b4:33:d9:d2:
         5a:48:71:be:9d:00:c1:86:d5:21:08:73:89:06:17:51:35:8b:
         15:ba:7c:7d:be:08:b0:41:9b:03:3c:b9:ad:03:7e:eb:8f:cd:
         2f:68:9d:08:93:7a:40:34:b9:f3:3e:f3:d3:e1:06:b8:01:ab:
         37:99:7e:fa:2a:58:2a:b5:cc:cb:3b:d0:70:b1:c0:f9:eb:93:
         72:d6:fd:63:e4:72:02:f8:c9:83:72:ac:d3:07:70:33:30:ef:
         49:95:a6:cf:f1:09:b6:b6:15:79:a8:d9:6e:e9:ac:ab:be:b9:
         79:c7:8f:55:ac:8f:a7:28:66:4a:1d:09:41:df:03:a3:e2:c7:
         e4:95:07:04:6a:91:7f:22:2e:ce:31:85:7e:c7:88:74:e2:8c:
         8f:7a:55:6b:11:b6:92:df:da:d0:5b:6c:95:03:62:54:02:10:
         de:b7:92:6f:f3:9e:ba:1f:c5:0b:95:a3:be:53:df:d2:64:12:
         78:44:d0:ca:27:00:a9:73:ca:55:f3:bd:90:4e:64:d2:d7:94:
         91:f5:c7:bb
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUTgD9vQajPT8V0xddvTpDqLABV/kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDM3NDg0NDFEOUNDN0VFMkE5M0UxNjBCQUIyNzI0REFF
Qjc5OUYzQjAeFw0yNTAzMDUyMzU1MDFaFw0yNjAzMDUwMDAwMDFaMDMxMTAvBgNV
BAMTKDkxOTZEMDk4OTUxNUQwNjExM0RFODQ1RUM5MjlCOTc2RUU4QUNERDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGAzmakWDkg5s+pUOwp1SaezZG
Q4gfa2I/JAJx3qWKrLf3uCMnxoppZCl6tuuq3705J77aHbcY9ZMf+mDP+hXK0hDF
4aPdElZA03NzQf99/hhC/MeacZo6NnAVG3tgc7AIYFSGdbaijMPHqjhmuVy1EfmR
sLOR2pR4Q5GzRtQhkCJyCjoZA/6WmnN63HbnuHPK8xu4l9DVu4WJ0M5b5Zmg/Xkx
lnx6/WOO+v8OOGCs/JYWg0UG8u63V3VM+ccrT6KcfCFPy06Sbt6DMEZd9DbSDtdM
SkzqGGUnLxjxleginJlomGHMAjhgywrGDiyLSdgSDd4dZW21R9TrlN8P77NfAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUkZbQmJUV0GET3oReySm5du6KzdAwHwYDVR0j
BBgwFoAUA3SEQdnMfuKpPhYLqyck2ut5nzswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDRUVVJnQnFtWUp5b1N2QWFDTnh3YzJNZHVuWHF0SGVtNlBwS0RpVzF6
SjYvMS8wMzc0ODQ0MUQ5Q0M3RUUyQTkzRTE2MEJBQjI3MjREQUVCNzk5RjNCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAzNzQ4NDQxRDlDQzdFRTJB
OTNFMTYwQkFCMjcyNERBRUI3OTlGM0IuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ0VFVSZ0JxbVlKeW9TdkFhQ054d2MyTWR1blhxdEhlbTZQcEtEaVcxeko2LzEv
MzEzMzM4MmUzMTMyMzIyZTMxMzgzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDM1
MzIzNjM1MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKKerQwDQYJKoZIhvcNAQELBQADggEBAHtbpUV5
/Xiz+cXsYnJgUi4ocRHyW8za333ZldZBU1qgCEp13jPC90SD0GnVNNhf43GjtDPZ
0lpIcb6dAMGG1SEIc4kGF1E1ixW6fH2+CLBBmwM8ua0DfuuPzS9onQiTekA0ufM+
89PhBrgBqzeZfvoqWCq1zMs70HCxwPnrk3LW/WPkcgL4yYNyrNMHcDMw70mVps/x
Cba2FXmo2W7prKu+uXnHj1Wsj6coZkodCUHfA6Pix+SVBwRqkX8iLs4xhX7HiHTi
jI96VWsRtpLf2tBbbJUDYlQCEN63km/znrofxQuVo75T39JkEnhE0MonAKlzylXz
vZBOZNLXlJH1x7s=
-----END CERTIFICATE-----
Generated at Wed Apr 9 02:07:43 2025 by rpki-client