Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/3133382e3235352e3130372e302f32342d3234203d3e20323633393631.roa
File:                     3133382e3235352e3130372e302f32342d3234203d3e20323633393631.roa (raw, json)
Hash identifier:          thhrQUb1pkOGPuo75gAlZh2wLrFwjrjXsmNQdAMe2HQ=
Subject key identifier:   EC:76:63:90:74:F8:1C:DB:43:45:EF:D2:F1:1A:75:FC:CD:CE:93:B3
Certificate issuer:       /CN=0839492B6227EABB7726A5A064BEBE04E53C824A
Certificate serial:       14E546D38B0CDBCAB08089FC716E23B05668A431
Authority key identifier: 08:39:49:2B:62:27:EA:BB:77:26:A5:A0:64:BE:BE:04:E5:3C:82:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0839492B6227EABB7726A5A064BEBE04E53C824A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/3133382e3235352e3130372e302f32342d3234203d3e20323633393631.roa
Signing time:             Thu 06 Mar 2025 01:28:08 +0000
ROA not before:           Thu 06 Mar 2025 01:23:08 +0000
ROA not after:            Thu 05 Mar 2026 01:28:08 +0000
asID:                     263961
IP address blocks:        138.255.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/0839492B6227EABB7726A5A064BEBE04E53C824A.crl
                          rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/0839492B6227EABB7726A5A064BEBE04E53C824A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0839492B6227EABB7726A5A064BEBE04E53C824A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 19:19:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:e5:46:d3:8b:0c:db:ca:b0:80:89:fc:71:6e:23:b0:56:68:a4:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0839492B6227EABB7726A5A064BEBE04E53C824A
        Validity
            Not Before: Mar  6 01:23:08 2025 GMT
            Not After : Mar  5 01:28:08 2026 GMT
        Subject: CN=EC76639074F81CDB4345EFD2F11A75FCCDCE93B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:05:75:65:70:21:4e:62:dc:c4:6c:a2:78:ba:
                    ce:8d:0d:b1:26:12:bc:41:01:7e:80:a3:e5:e9:61:
                    60:77:c2:f3:85:57:a9:d6:4c:41:9b:75:85:93:93:
                    50:7a:3f:ba:f7:24:ab:76:60:6d:9c:df:60:31:ac:
                    2b:31:c0:8f:9a:d0:bc:0b:61:9a:b2:16:2b:75:ea:
                    53:3b:f4:f1:c1:54:26:3c:f7:34:fd:17:06:39:72:
                    c2:d5:f4:a8:bd:e9:a5:c8:ec:90:bb:b2:6b:38:ea:
                    79:c9:47:54:95:99:df:06:1a:02:e1:51:7b:ca:80:
                    95:fc:66:f8:d3:dc:1a:4f:ce:4c:0f:43:91:b4:c4:
                    fd:f7:74:36:80:48:9f:48:60:7b:aa:07:27:27:a8:
                    f5:34:1c:d2:fd:b7:28:f9:74:80:b7:e8:dc:11:61:
                    18:43:59:82:6e:05:fb:b7:d7:c1:10:80:5c:78:b1:
                    12:52:06:21:0f:af:df:3b:48:82:89:08:73:6a:d6:
                    ed:e3:36:93:41:03:1f:b3:f2:b1:40:bd:37:48:ac:
                    0d:e0:36:3f:80:0c:2b:e3:cd:b3:9f:e3:55:58:c0:
                    6a:ee:56:8b:79:33:8b:22:c9:eb:2e:e8:d7:3e:ad:
                    82:6b:0a:0b:08:e3:b9:c0:d5:c6:d5:32:3f:28:7c:
                    b0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:76:63:90:74:F8:1C:DB:43:45:EF:D2:F1:1A:75:FC:CD:CE:93:B3
            X509v3 Authority Key Identifier:
                keyid:08:39:49:2B:62:27:EA:BB:77:26:A5:A0:64:BE:BE:04:E5:3C:82:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/0839492B6227EABB7726A5A064BEBE04E53C824A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0839492B6227EABB7726A5A064BEBE04E53C824A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/3133382e3235352e3130372e302f32342d3234203d3e20323633393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:ae:30:c1:22:93:8b:e7:aa:9c:c2:71:21:a7:f8:65:27:51:
         3e:fd:5f:66:f4:d1:b5:29:8e:46:09:ee:29:3e:2e:9f:e0:6b:
         f9:a6:7d:7a:8b:b3:cd:fd:ba:d2:52:64:a6:44:d7:6d:a8:4f:
         86:2a:3e:48:b5:ef:1f:10:71:7e:66:5b:00:78:0a:73:fd:c8:
         af:0f:b4:de:3e:d3:84:a5:38:cc:74:43:fb:df:77:2a:7a:a1:
         1e:59:e4:2f:09:ab:3e:c3:c1:f6:60:46:bf:8a:80:6e:21:db:
         44:9e:54:a8:24:15:ed:53:2c:3e:7a:79:fb:4e:e7:99:e8:bd:
         02:ca:b0:c6:e3:9e:51:2b:60:bd:d2:29:04:d0:2f:ec:9b:3e:
         18:60:dd:ed:82:ba:eb:79:a6:1f:e3:2e:02:f7:c8:43:db:7b:
         e5:34:eb:91:97:bf:73:d0:46:c4:81:1f:b0:5a:46:2f:e4:4d:
         78:c6:b1:d4:4f:e9:2b:7b:73:bb:e4:38:8f:e3:06:b3:73:1d:
         f6:af:47:85:6b:c9:7d:8d:7d:ed:5f:f4:42:06:1c:06:4a:83:
         7a:6b:a0:32:25:b5:64:05:64:c9:6a:7a:b6:a5:6b:39:7b:df:
         73:01:42:fd:56:62:71:42:8f:0a:dc:79:2c:11:09:e4:4b:c1:
         9d:7a:b6:49
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUFOVG04sM28qwgIn8cW4jsFZopDEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDgzOTQ5MkI2MjI3RUFCQjc3MjZBNUEwNjRCRUJFMDRF
NTNDODI0QTAeFw0yNTAzMDYwMTIzMDhaFw0yNjAzMDUwMTI4MDhaMDMxMTAvBgNV
BAMTKEVDNzY2MzkwNzRGODFDREI0MzQ1RUZEMkYxMUE3NUZDQ0RDRTkzQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+BXVlcCFOYtzEbKJ4us6NDbEm
ErxBAX6Ao+XpYWB3wvOFV6nWTEGbdYWTk1B6P7r3JKt2YG2c32AxrCsxwI+a0LwL
YZqyFit16lM79PHBVCY89zT9FwY5csLV9Ki96aXI7JC7sms46nnJR1SVmd8GGgLh
UXvKgJX8ZvjT3BpPzkwPQ5G0xP33dDaASJ9IYHuqBycnqPU0HNL9tyj5dIC36NwR
YRhDWYJuBfu318EQgFx4sRJSBiEPr987SIKJCHNq1u3jNpNBAx+z8rFAvTdIrA3g
Nj+ADCvjzbOf41VYwGruVot5M4siyesu6Nc+rYJrCgsI47nA1cbVMj8ofLAjAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU7HZjkHT4HNtDRe/S8Rp1/M3Ok7MwHwYDVR0j
BBgwFoAUCDlJK2In6rt3JqWgZL6+BOU8gkowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTZKTG44N0x2ckt1a2RwaE55Z2ZocEFxVTg2Q2V4NU1UQjZEZFJqOWZS
cjcvMS8wODM5NDkyQjYyMjdFQUJCNzcyNkE1QTA2NEJFQkUwNEU1M0M4MjRBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA4Mzk0OTJCNjIyN0VBQkI3
NzI2QTVBMDY0QkVCRTA0RTUzQzgyNEEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzU2SkxuODdMdnJLdWtkcGhOeWdmaHBBcVU4NkNleDVNVEI2RGRSajlmUnI3LzEv
MzEzMzM4MmUzMjM1MzUyZTMxMzAzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM5MzYzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIr/azANBgkqhkiG9w0BAQsFAAOCAQEAda4w
wSKTi+eqnMJxIaf4ZSdRPv1fZvTRtSmORgnuKT4un+Br+aZ9eouzzf260lJkpkTX
bahPhio+SLXvHxBxfmZbAHgKc/3Irw+03j7ThKU4zHRD+993KnqhHlnkLwmrPsPB
9mBGv4qAbiHbRJ5UqCQV7VMsPnp5+07nmei9AsqwxuOeUStgvdIpBNAv7Js+GGDd
7YK663mmH+MuAvfIQ9t75TTrkZe/c9BGxIEfsFpGL+RNeMax1E/pK3tzu+Q4j+MG
s3Md9q9HhWvJfY197V/0QgYcBkqDemugMiW1ZAVkyWp6tqVrOXvfcwFC/VZicUKP
Ctx5LBEJ5EvBnXq2SQ==
-----END CERTIFICATE-----
Generated at Tue Apr 22 06:11:46 2025 by rpki-client