Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/3133382e3131382e34342e302f32322d3332203d3e20323635333639.roa
File:                     3133382e3131382e34342e302f32322d3332203d3e20323635333639.roa (raw, json)
Hash identifier:          KbZ+qNpkBGT3I9oVhnyT8DmgMDvWtfrQzIY/Ox8k91U=
Subject key identifier:   15:12:D9:12:22:7B:E1:F1:F0:02:81:E9:A4:81:26:36:D4:6E:91:4B
Certificate issuer:       /CN=D88B454BC594C5A1800134E375B465D91C070DFD
Certificate serial:       37ECC4507FCC03C0E52E996EFE72B9875A240163
Authority key identifier: D8:8B:45:4B:C5:94:C5:A1:80:01:34:E3:75:B4:65:D9:1C:07:0D:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D88B454BC594C5A1800134E375B465D91C070DFD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/3133382e3131382e34342e302f32322d3332203d3e20323635333639.roa
Signing time:             Thu 29 May 2025 20:21:35 +0000
ROA not before:           Thu 29 May 2025 20:16:35 +0000
ROA not after:            Thu 28 May 2026 20:21:35 +0000
asID:                     265369
IP address blocks:        138.118.44.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/D88B454BC594C5A1800134E375B465D91C070DFD.crl
                          rsync://rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/D88B454BC594C5A1800134E375B465D91C070DFD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D88B454BC594C5A1800134E375B465D91C070DFD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 14 Jun 2025 04:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:ec:c4:50:7f:cc:03:c0:e5:2e:99:6e:fe:72:b9:87:5a:24:01:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D88B454BC594C5A1800134E375B465D91C070DFD
        Validity
            Not Before: May 29 20:16:35 2025 GMT
            Not After : May 28 20:21:35 2026 GMT
        Subject: CN=1512D912227BE1F1F00281E9A4812636D46E914B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ba:81:1f:c0:42:58:dc:9e:e5:fe:57:8f:96:
                    9b:1b:4e:ed:31:d6:e2:f8:91:32:11:04:10:5d:b5:
                    84:4a:f6:47:12:69:2c:23:34:52:d5:e6:46:05:49:
                    fd:27:37:36:35:f5:05:da:a7:51:a6:0f:b1:65:db:
                    90:43:73:5d:53:29:fb:24:4c:6b:92:b1:1e:39:12:
                    cb:a7:c3:31:8b:bc:77:85:2d:91:3e:25:f4:1f:5e:
                    6c:28:5c:11:f8:b4:15:91:8e:11:99:e3:d1:8f:e7:
                    f5:69:3b:62:ea:77:51:75:dd:80:29:03:a4:7a:f6:
                    43:87:57:3b:93:a4:68:4c:42:7d:a7:cf:a1:ab:ed:
                    4f:c1:f7:a3:af:ab:66:7b:15:b9:e2:ef:f7:16:41:
                    8f:01:5f:ce:a7:2c:36:0f:d3:83:81:8d:82:7f:d9:
                    4c:2c:65:18:ef:12:d9:57:08:b1:80:83:0a:23:38:
                    c6:3a:a5:d0:bc:1f:10:67:9d:e1:fb:13:47:43:eb:
                    3b:a4:63:52:b5:65:b0:99:64:a9:c1:9f:3a:9a:39:
                    a8:43:4e:c6:9b:11:98:36:08:8e:30:b4:39:10:41:
                    93:a1:ce:ff:00:65:89:55:c8:64:b6:1f:3e:99:56:
                    8e:2c:2a:c8:6a:19:6c:67:f4:f1:38:1f:99:72:9f:
                    3b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:12:D9:12:22:7B:E1:F1:F0:02:81:E9:A4:81:26:36:D4:6E:91:4B
            X509v3 Authority Key Identifier:
                keyid:D8:8B:45:4B:C5:94:C5:A1:80:01:34:E3:75:B4:65:D9:1C:07:0D:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/D88B454BC594C5A1800134E375B465D91C070DFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D88B454BC594C5A1800134E375B465D91C070DFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/3133382e3131382e34342e302f32322d3332203d3e20323635333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:30:6a:94:3d:e5:76:a2:f4:29:20:95:72:48:b9:13:30:e3:
         1c:e6:fa:b1:dc:31:6f:3a:39:47:c7:86:b7:e6:44:ff:4a:e1:
         01:fb:d2:8b:5d:2d:77:bc:37:1b:24:e2:fd:1b:29:57:de:c4:
         56:3b:61:ac:1f:af:50:c6:0f:f6:f4:0b:f1:bc:f4:ec:37:14:
         80:3c:28:65:8c:d5:a3:2d:b0:3a:f1:5d:a6:55:2c:8e:95:56:
         6e:12:1e:03:db:d1:16:6d:69:91:9f:61:40:8c:c2:be:74:7b:
         16:1d:76:cf:79:7c:aa:59:35:56:ad:d6:ad:83:b9:d0:a7:59:
         55:be:f8:06:99:1e:66:5e:56:26:d0:39:04:ac:94:b3:13:9f:
         98:1b:02:0b:bd:0a:6a:cf:e9:cb:64:6c:f3:9d:70:40:c8:d2:
         46:04:b3:29:f6:42:18:8a:19:bc:d0:b3:40:24:d8:04:69:01:
         24:bb:0a:38:85:35:3f:8e:ff:c5:41:0a:f2:2a:08:b4:e8:d6:
         fa:44:b5:bb:1e:73:40:86:f5:f2:5c:ec:4a:84:28:6c:cd:c3:
         5e:7a:1d:f4:02:5b:6d:bc:6d:c4:53:a8:d7:94:b2:8f:06:71:
         1d:c4:f4:24:41:59:dd:bb:2c:ff:97:54:a9:21:79:ee:4b:7a:
         67:6e:14:51
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUN+zEUH/MA8DlLplu/nK5h1okAWMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDg4QjQ1NEJDNTk0QzVBMTgwMDEzNEUzNzVCNDY1RDkx
QzA3MERGRDAeFw0yNTA1MjkyMDE2MzVaFw0yNjA1MjgyMDIxMzVaMDMxMTAvBgNV
BAMTKDE1MTJEOTEyMjI3QkUxRjFGMDAyODFFOUE0ODEyNjM2RDQ2RTkxNEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVuoEfwEJY3J7l/lePlpsbTu0x
1uL4kTIRBBBdtYRK9kcSaSwjNFLV5kYFSf0nNzY19QXap1GmD7Fl25BDc11TKfsk
TGuSsR45EsunwzGLvHeFLZE+JfQfXmwoXBH4tBWRjhGZ49GP5/VpO2Lqd1F13YAp
A6R69kOHVzuTpGhMQn2nz6Gr7U/B96Ovq2Z7Fbni7/cWQY8BX86nLDYP04OBjYJ/
2UwsZRjvEtlXCLGAgwojOMY6pdC8HxBnneH7E0dD6zukY1K1ZbCZZKnBnzqaOahD
TsabEZg2CI4wtDkQQZOhzv8AZYlVyGS2Hz6ZVo4sKshqGWxn9PE4H5lynzs7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUFRLZEiJ74fHwAoHppIEmNtRukUswHwYDVR0j
BBgwFoAU2ItFS8WUxaGAATTjdbRl2RwHDf0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlN1MkRMaXU2dnlKUkpwTDViWWlqajJlcXFTdmU5dVdzY3ZpWFFhc3lU
Mm4vMC9EODhCNDU0QkM1OTRDNUExODAwMTM0RTM3NUI0NjVEOTFDMDcwREZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q4OEI0NTRCQzU5NEM1QTE4
MDAxMzRFMzc1QjQ2NUQ5MUMwNzBERkQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZTdTJETGl1NnZ5SlJKcEw1YllpamoyZXFxU3ZlOXVXc2N2aVhRYXN5VDJuLzAv
MzEzMzM4MmUzMTMxMzgyZTM0MzQyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzUzMzM2Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKKdiwwDQYJKoZIhvcNAQELBQADggEBAE0wapQ9
5Xai9CkglXJIuRMw4xzm+rHcMW86OUfHhrfmRP9K4QH70otdLXe8Nxsk4v0bKVfe
xFY7Yawfr1DGD/b0C/G89Ow3FIA8KGWM1aMtsDrxXaZVLI6VVm4SHgPb0RZtaZGf
YUCMwr50exYdds95fKpZNVat1q2DudCnWVW++AaZHmZeVibQOQSslLMTn5gbAgu9
CmrP6ctkbPOdcEDI0kYEsyn2QhiKGbzQs0Ak2ARpASS7CjiFNT+O/8VBCvIqCLTo
1vpEtbsec0CG9fJc7EqEKGzNw156HfQCW228bcRTqNeUso8GcR3E9CRBWd27LP+X
VKkhee5LemduFFE=
-----END CERTIFICATE-----
Generated at Fri Jun 13 10:58:11 2025 by rpki-client