Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/3133382e3230342e33372e302f32342d3332203d3e203631373735.roa
File:                     3133382e3230342e33372e302f32342d3332203d3e203631373735.roa (raw, json)
Hash identifier:          bHsfgx5bc+iOPbuSRSP7Bx9qmbPdlwgcPx8SooF5nOw=
Subject key identifier:   32:C2:66:00:86:C3:D8:FD:1C:67:26:90:E5:D8:05:67:E4:18:C8:BB
Certificate issuer:       /CN=2A4DF9097F97664A00A318EFAE22DC1036E91B5C
Certificate serial:       425EA865ACDEA04C2A608B0893A2EC9F910BC0A8
Authority key identifier: 2A:4D:F9:09:7F:97:66:4A:00:A3:18:EF:AE:22:DC:10:36:E9:1B:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/3133382e3230342e33372e302f32342d3332203d3e203631373735.roa
Signing time:             Thu 06 Mar 2025 21:05:57 +0000
ROA not before:           Thu 06 Mar 2025 21:00:57 +0000
ROA not after:            Thu 05 Mar 2026 21:05:57 +0000
asID:                     61775
IP address blocks:        138.204.37.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.crl
                          rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 10:45:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:5e:a8:65:ac:de:a0:4c:2a:60:8b:08:93:a2:ec:9f:91:0b:c0:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A4DF9097F97664A00A318EFAE22DC1036E91B5C
        Validity
            Not Before: Mar  6 21:00:57 2025 GMT
            Not After : Mar  5 21:05:57 2026 GMT
        Subject: CN=32C2660086C3D8FD1C672690E5D80567E418C8BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7b:ec:2d:64:85:af:2b:a9:c2:71:c8:c8:07:
                    c0:12:c7:be:9a:ef:a6:e3:20:6e:ee:ba:d2:ab:98:
                    6a:0b:f0:de:05:e1:e8:97:88:a3:57:c9:a1:12:a8:
                    b2:c3:78:7f:be:2e:9b:59:64:e7:3b:f3:5b:13:0e:
                    a5:51:a3:37:a1:a4:00:f0:a3:ec:fd:69:5d:83:fd:
                    23:42:6f:d1:10:e7:ca:91:09:f5:dc:70:0e:cc:04:
                    51:ff:55:cc:53:12:48:74:60:67:e3:ea:c2:c2:02:
                    07:06:6f:ed:7c:52:00:98:e7:ce:ef:d7:b8:e8:0a:
                    85:66:db:3c:6b:d6:8d:13:3c:dd:4f:77:79:84:eb:
                    43:db:51:85:ba:9c:25:71:c7:2c:6e:39:07:ac:8e:
                    33:fe:ca:8c:de:f3:3a:f5:34:84:3f:ad:ca:48:4e:
                    26:fa:8d:e1:69:b5:51:f6:6f:17:85:0f:36:df:4e:
                    65:b1:9d:16:fe:a4:2e:ce:29:b5:05:52:95:fb:78:
                    14:71:7d:58:f4:ef:31:68:d4:6f:a1:e9:c9:c5:cf:
                    b7:60:6a:c5:62:74:06:19:1e:e1:c9:f6:37:2e:c3:
                    9c:0a:4a:72:f5:81:83:db:ce:24:df:41:c2:9d:54:
                    f7:37:58:88:1c:28:02:cd:28:fc:51:92:96:09:7b:
                    3c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:C2:66:00:86:C3:D8:FD:1C:67:26:90:E5:D8:05:67:E4:18:C8:BB
            X509v3 Authority Key Identifier:
                keyid:2A:4D:F9:09:7F:97:66:4A:00:A3:18:EF:AE:22:DC:10:36:E9:1B:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/3133382e3230342e33372e302f32342d3332203d3e203631373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:2a:12:b1:35:6c:07:cf:9e:54:bc:db:91:00:88:68:7f:53:
         a5:30:bf:36:66:65:7f:61:38:06:ae:2e:3c:0b:b3:97:37:ff:
         67:af:8c:32:d3:fd:64:3d:25:14:ce:66:5d:4a:e6:fc:bb:73:
         e6:a5:3e:cd:1a:de:5b:07:7f:86:10:bc:bc:ab:8d:46:cb:8e:
         9c:b8:36:1d:30:51:3e:d1:aa:ba:b0:4e:d5:77:48:17:9a:4d:
         4f:08:a0:a9:53:59:0d:af:13:f9:24:26:ae:89:02:19:af:eb:
         c5:1b:e6:05:af:38:70:99:b7:09:ee:7d:c4:19:d7:73:36:48:
         1f:33:20:e4:f0:58:c3:3f:fa:26:15:ed:89:68:0f:06:57:e2:
         8a:97:ab:bd:c0:f3:d6:57:35:0f:32:73:91:10:20:fb:ea:eb:
         24:73:78:db:cb:a4:7b:14:97:a0:0d:fa:9b:7b:d1:ba:4b:c4:
         9d:fa:83:3d:cf:04:a1:20:5d:08:55:73:5f:34:14:dd:a1:d7:
         f2:12:45:e7:d0:c5:47:f6:68:d6:28:bb:ce:74:04:34:4e:6f:
         25:81:63:79:a4:36:67:f9:39:64:a6:f4:4b:8f:c5:b0:cc:b6:
         e4:7d:ee:26:c2:cc:e9:8b:7d:b9:44:94:7e:9d:c5:ea:fd:50:
         76:28:38:82
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUQl6oZazeoEwqYIsIk6Lsn5ELwKgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkE0REY5MDk3Rjk3NjY0QTAwQTMxOEVGQUUyMkRDMTAz
NkU5MUI1QzAeFw0yNTAzMDYyMTAwNTdaFw0yNjAzMDUyMTA1NTdaMDMxMTAvBgNV
BAMTKDMyQzI2NjAwODZDM0Q4RkQxQzY3MjY5MEU1RDgwNTY3RTQxOEM4QkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCue+wtZIWvK6nCccjIB8ASx76a
76bjIG7uutKrmGoL8N4F4eiXiKNXyaESqLLDeH++LptZZOc781sTDqVRozehpADw
o+z9aV2D/SNCb9EQ58qRCfXccA7MBFH/VcxTEkh0YGfj6sLCAgcGb+18UgCY587v
17joCoVm2zxr1o0TPN1Pd3mE60PbUYW6nCVxxyxuOQesjjP+yoze8zr1NIQ/rcpI
Tib6jeFptVH2bxeFDzbfTmWxnRb+pC7OKbUFUpX7eBRxfVj07zFo1G+h6cnFz7dg
asVidAYZHuHJ9jcuw5wKSnL1gYPbziTfQcKdVPc3WIgcKALNKPxRkpYJezyNAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUMsJmAIbD2P0cZyaQ5dgFZ+QYyLswHwYDVR0j
BBgwFoAUKk35CX+XZkoAoxjvriLcEDbpG1wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFZScFF6VTd3aG1LSkh0YUZxd3drSktyN2h6WVgzdkVEemU1MXJ2czZp
WDIvMS8yQTRERjkwOTdGOTc2NjRBMDBBMzE4RUZBRTIyREMxMDM2RTkxQjVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBNERGOTA5N0Y5NzY2NEEw
MEEzMThFRkFFMjJEQzEwMzZFOTFCNUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRWUnBRelU3d2htS0pIdGFGcXd3a0pLcjdoellYM3ZFRHplNTFydnM2aVgyLzEv
MzEzMzM4MmUzMjMwMzQyZTMzMzcyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzNjMx
MzczNzM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAiswlMA0GCSqGSIb3DQEBCwUAA4IBAQB5KhKxNWwH
z55UvNuRAIhof1OlML82ZmV/YTgGri48C7OXN/9nr4wy0/1kPSUUzmZdSub8u3Pm
pT7NGt5bB3+GELy8q41Gy46cuDYdMFE+0aq6sE7Vd0gXmk1PCKCpU1kNrxP5JCau
iQIZr+vFG+YFrzhwmbcJ7n3EGddzNkgfMyDk8FjDP/omFe2JaA8GV+KKl6u9wPPW
VzUPMnORECD76uskc3jby6R7FJegDfqbe9G6S8Sd+oM9zwShIF0IVXNfNBTdodfy
EkXn0MVH9mjWKLvOdAQ0Tm8lgWN5pDZn+TlkpvRLj8WwzLbkfe4mwszpi325RJR+
ncXq/VB2KDiC
-----END CERTIFICATE-----
Generated at Sat Apr 12 21:19:13 2025 by rpki-client