Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/3133382e3231392e3132382e302f32322d3232203d3e20323633393334.roa
File:                     3133382e3231392e3132382e302f32322d3232203d3e20323633393334.roa (raw, json)
Hash identifier:          ynkRZ+lgRgFJeoAld4U4VaMMiZSRqaEpekkBzQUvJl8=
Subject key identifier:   29:CA:C0:17:E2:19:3A:D7:BD:C8:BD:DF:04:AF:BF:59:90:AF:8E:16
Certificate issuer:       /CN=A25520F1E15109C50B44F56EA799FE2E685092D4
Certificate serial:       5A8F6F4684D9A7ADDB4857D8B04A865B5825CBC3
Authority key identifier: A2:55:20:F1:E1:51:09:C5:0B:44:F5:6E:A7:99:FE:2E:68:50:92:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A25520F1E15109C50B44F56EA799FE2E685092D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/3133382e3231392e3132382e302f32322d3232203d3e20323633393334.roa
Signing time:             Thu 03 Apr 2025 14:15:15 +0000
ROA not before:           Thu 03 Apr 2025 14:10:15 +0000
ROA not after:            Thu 02 Apr 2026 14:15:15 +0000
asID:                     263934
IP address blocks:        138.219.128.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/A25520F1E15109C50B44F56EA799FE2E685092D4.crl
                          rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/A25520F1E15109C50B44F56EA799FE2E685092D4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A25520F1E15109C50B44F56EA799FE2E685092D4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 24 Apr 2025 07:51:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:8f:6f:46:84:d9:a7:ad:db:48:57:d8:b0:4a:86:5b:58:25:cb:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A25520F1E15109C50B44F56EA799FE2E685092D4
        Validity
            Not Before: Apr  3 14:10:15 2025 GMT
            Not After : Apr  2 14:15:15 2026 GMT
        Subject: CN=29CAC017E2193AD7BDC8BDDF04AFBF5990AF8E16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:73:ad:f8:50:55:12:1c:6e:c8:d0:1d:ad:57:
                    48:61:ce:dd:84:ef:b3:8b:dd:26:85:0c:1a:a0:36:
                    90:8b:df:16:14:6b:48:87:b6:f9:32:a7:14:0c:1e:
                    f2:02:b9:dc:4d:78:c1:9d:6d:4d:cc:17:de:0e:5f:
                    29:64:fd:97:8a:0d:4c:51:02:24:d8:4f:68:88:a8:
                    bd:da:29:5b:ed:fd:a3:36:65:c9:a2:5d:d8:6b:42:
                    62:f6:db:03:73:ba:8a:83:2c:07:58:55:df:db:e0:
                    e4:c2:9b:23:4a:1b:77:ea:d0:a1:8a:c5:7f:2b:8c:
                    84:c4:d3:f9:38:39:fa:25:d1:b6:ae:ef:dd:89:1c:
                    04:ca:56:de:86:ee:c1:06:77:32:0a:78:19:dc:0b:
                    17:35:08:74:99:3f:b1:89:69:2e:cb:1d:f2:70:82:
                    3a:74:19:ad:0b:8c:9b:f3:dc:af:3e:cb:07:de:a9:
                    c5:5a:a0:5d:c8:c2:79:98:ca:da:19:de:e5:d7:d3:
                    f1:18:2f:99:5e:ad:77:85:06:5b:71:57:0d:26:56:
                    51:91:d6:12:df:7a:3b:09:27:bd:bd:4d:2b:96:b2:
                    41:4a:a6:b9:f1:ab:f2:e6:15:82:2d:ce:b4:16:72:
                    4f:cd:d3:5c:71:35:8b:9f:fe:84:75:49:1d:f5:d6:
                    78:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:CA:C0:17:E2:19:3A:D7:BD:C8:BD:DF:04:AF:BF:59:90:AF:8E:16
            X509v3 Authority Key Identifier:
                keyid:A2:55:20:F1:E1:51:09:C5:0B:44:F5:6E:A7:99:FE:2E:68:50:92:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/A25520F1E15109C50B44F56EA799FE2E685092D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A25520F1E15109C50B44F56EA799FE2E685092D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/3133382e3231392e3132382e302f32322d3232203d3e20323633393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         e0:41:45:20:8e:13:8b:eb:75:0c:2b:08:63:4f:92:dd:2c:75:
         c2:2d:76:e4:4f:77:18:99:a1:f8:fb:11:65:11:fe:4f:ae:f2:
         5e:22:f2:a9:b5:87:7b:b5:26:26:b3:d2:a2:ea:bc:84:7b:13:
         15:ec:46:2d:46:70:f6:75:15:ba:73:90:9b:45:0d:b5:8b:75:
         41:f8:e7:61:ec:3c:b0:b7:28:b3:eb:f6:c4:47:b8:ab:4d:0b:
         6a:0b:dd:0e:f2:c5:26:f2:f3:cf:64:5c:4d:4e:6e:8f:5e:a8:
         c6:fe:f4:0f:51:cc:f9:7f:c3:58:8b:d9:24:5b:84:a7:39:ef:
         42:47:b5:ea:98:19:3b:5a:5d:40:b1:51:d6:cd:bd:d3:70:3b:
         86:86:5f:4d:e1:d2:24:ed:ba:50:1e:9e:fb:9a:1d:86:1c:85:
         97:e6:3f:d2:54:53:2d:3c:22:9a:af:38:3f:3b:60:c0:1a:5b:
         14:1e:58:2f:cf:de:5b:0b:1c:d3:2b:22:8f:df:66:30:31:a4:
         6a:55:27:73:08:94:08:08:64:96:91:d5:79:39:32:d1:37:13:
         af:5b:06:7c:eb:c3:46:04:58:36:45:4d:6e:c2:6c:24:b0:bd:
         df:b7:d2:a1:84:b4:76:70:83:14:a7:14:bb:b3:b9:9a:78:cb:
         8a:b0:6c:20
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUWo9vRoTZp63bSFfYsEqGW1gly8MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTI1NTIwRjFFMTUxMDlDNTBCNDRGNTZFQTc5OUZFMkU2
ODUwOTJENDAeFw0yNTA0MDMxNDEwMTVaFw0yNjA0MDIxNDE1MTVaMDMxMTAvBgNV
BAMTKDI5Q0FDMDE3RTIxOTNBRDdCREM4QkRERjA0QUZCRjU5OTBBRjhFMTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrc634UFUSHG7I0B2tV0hhzt2E
77OL3SaFDBqgNpCL3xYUa0iHtvkypxQMHvICudxNeMGdbU3MF94OXylk/ZeKDUxR
AiTYT2iIqL3aKVvt/aM2ZcmiXdhrQmL22wNzuoqDLAdYVd/b4OTCmyNKG3fq0KGK
xX8rjITE0/k4Ofol0bau792JHATKVt6G7sEGdzIKeBncCxc1CHSZP7GJaS7LHfJw
gjp0Ga0LjJvz3K8+ywfeqcVaoF3IwnmYytoZ3uXX0/EYL5lerXeFBltxVw0mVlGR
1hLfejsJJ729TSuWskFKprnxq/LmFYItzrQWck/N01xxNYuf/oR1SR311niHAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUKcrAF+IZOte9yL3fBK+/WZCvjhYwHwYDVR0j
BBgwFoAUolUg8eFRCcULRPVup5n+LmhQktQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNkU1a25DUWFpbnFkanJlazFIYVR6R3RxTk1adTFwakNDaTRac3ZUMnY2
cDQvMC9BMjU1MjBGMUUxNTEwOUM1MEI0NEY1NkVBNzk5RkUyRTY4NTA5MkQ0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EyNTUyMEYxRTE1MTA5QzUw
QjQ0RjU2RUE3OTlGRTJFNjg1MDkyRDQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZFNWtuQ1FhaW5xZGpyZWsxSGFUekd0cU5NWnUxcGpDQ2k0WnN2VDJ2NnA0LzAv
MzEzMzM4MmUzMjMxMzkyZTMxMzIzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzMzM5MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAorbgDANBgkqhkiG9w0BAQsFAAOCAQEA4EFF
II4Ti+t1DCsIY0+S3Sx1wi125E93GJmh+PsRZRH+T67yXiLyqbWHe7UmJrPSouq8
hHsTFexGLUZw9nUVunOQm0UNtYt1QfjnYew8sLcos+v2xEe4q00LagvdDvLFJvLz
z2RcTU5uj16oxv70D1HM+X/DWIvZJFuEpznvQke16pgZO1pdQLFR1s2903A7hoZf
TeHSJO26UB6e+5odhhyFl+Y/0lRTLTwimq84PztgwBpbFB5YL8/eWwsc0ysij99m
MDGkalUncwiUCAhklpHVeTky0TcTr1sGfOvDRgRYNkVNbsJsJLC937fSoYS0dnCD
FKcUu7O5mnjLirBsIA==
-----END CERTIFICATE-----
Generated at Wed Apr 23 10:01:53 2025 by rpki-client