Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3133382e3235352e3134342e302f32322d3232203d3e203238323130.roa
File:                     3133382e3235352e3134342e302f32322d3232203d3e203238323130.roa (raw, json)
Hash identifier:          yeZtvl4y0iKeBjWDWLmO8hHgbzCok6i1ooWDAf5DzF8=
Subject key identifier:   FD:D3:0F:6D:66:BD:B4:89:82:3F:DF:19:89:5D:48:B0:F6:80:68:69
Certificate issuer:       /CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Certificate serial:       47BD33A0A2E31F967009ED6120BC4732962C00B6
Authority key identifier: A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3133382e3235352e3134342e302f32322d3232203d3e203238323130.roa
Signing time:             Thu 04 Apr 2024 04:37:47 +0000
ROA not before:           Thu 04 Apr 2024 04:32:47 +0000
ROA not after:            Thu 03 Apr 2025 04:37:47 +0000
asID:                     28210
IP address blocks:        138.255.144.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl
                          rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:bd:33:a0:a2:e3:1f:96:70:09:ed:61:20:bc:47:32:96:2c:00:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
        Validity
            Not Before: Apr  4 04:32:47 2024 GMT
            Not After : Apr  3 04:37:47 2025 GMT
        Subject: CN=FDD30F6D66BDB489823FDF19895D48B0F6806869
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:49:37:11:49:f0:16:84:2b:a0:6a:7f:f0:a2:
                    ed:96:55:fe:19:a8:42:1c:d0:a2:bc:c6:e3:13:6d:
                    3c:1b:67:f9:fa:a6:c9:23:97:aa:c2:f2:3a:61:15:
                    7b:ba:8d:60:51:7d:d3:20:45:87:e5:97:bf:5f:ed:
                    34:27:64:1d:b1:f1:ae:2d:15:3c:e6:e3:00:83:24:
                    28:11:a7:84:db:f3:55:ea:b4:27:1a:6b:40:60:f3:
                    3d:e8:34:82:00:e9:a3:2f:ed:0f:49:27:4e:88:ef:
                    fb:34:68:fa:bf:55:ab:4b:ac:a4:65:bc:a3:27:9b:
                    e9:79:36:94:ec:e9:34:6a:3f:61:b8:76:56:0a:9c:
                    89:86:8b:88:69:92:67:e8:1c:b1:d9:c9:3e:db:9e:
                    54:3e:a8:0c:34:1c:00:3b:b4:d6:40:9a:ee:74:08:
                    07:ea:a5:9a:36:40:45:59:65:7e:d3:75:29:81:e7:
                    51:87:c4:f1:12:18:58:22:ae:45:c2:3e:7f:93:9f:
                    94:69:36:00:96:65:9d:16:59:18:4b:0c:81:c0:a5:
                    48:c4:ed:40:4c:a0:4e:1f:26:67:75:d0:28:29:7c:
                    0d:5e:b6:89:bf:33:38:cf:6f:45:fa:8e:b6:d4:f7:
                    4c:bd:86:b5:f3:78:1e:c1:59:f6:95:f2:85:22:d7:
                    14:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:D3:0F:6D:66:BD:B4:89:82:3F:DF:19:89:5D:48:B0:F6:80:68:69
            X509v3 Authority Key Identifier:
                keyid:A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3133382e3235352e3134342e302f32322d3232203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:21:68:5b:10:8d:56:99:88:9d:55:11:28:3e:82:90:9c:b4:
         aa:e9:46:fb:b7:f2:65:aa:94:f3:e1:d3:b5:e9:a0:93:ff:4e:
         d3:2c:7f:a4:6d:95:fc:7a:08:d8:6a:ae:90:5a:1f:9e:94:a0:
         95:fc:4d:07:b4:bd:56:2f:d7:50:07:f7:73:11:07:84:fa:d3:
         0b:14:b6:2d:65:2c:95:98:96:09:19:00:db:8a:35:7f:ef:74:
         05:34:79:18:75:6c:c3:43:ad:3f:7b:34:88:b6:10:a1:a2:39:
         e0:82:5f:6e:f6:e8:e1:22:32:67:a9:eb:96:10:a8:bf:d4:c3:
         63:8e:63:29:4b:5e:4e:27:89:e4:0f:37:98:1b:c3:8e:be:32:
         8f:c1:22:69:81:6a:82:aa:92:7f:25:98:b8:99:c7:ae:46:ba:
         0f:10:4a:9c:29:d3:b2:a1:58:4d:43:93:18:df:92:48:a3:46:
         a3:65:eb:8a:1b:3e:be:97:e1:f3:6f:76:52:74:84:aa:97:c7:
         33:3f:f6:34:5c:e7:90:fc:8b:5f:67:c8:a3:8e:83:df:fc:08:
         fd:c6:f2:2e:53:bc:d4:04:ad:76:f3:a5:09:3e:ec:0a:b5:e2:
         d4:b9:a6:33:38:05:0a:37:4e:d7:ba:94:dc:25:a8:08:50:99:
         15:cd:fd:9d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUR70zoKLjH5ZwCe1hILxHMpYsALYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTYxQ0FCNjVCQURBRDc1RkY0OUNGOENFNTRBRTc1NzM3
MUQxQzRBQTAeFw0yNDA0MDQwNDMyNDdaFw0yNTA0MDMwNDM3NDdaMDMxMTAvBgNV
BAMTKEZERDMwRjZENjZCREI0ODk4MjNGREYxOTg5NUQ0OEIwRjY4MDY4NjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeSTcRSfAWhCugan/wou2WVf4Z
qEIc0KK8xuMTbTwbZ/n6pskjl6rC8jphFXu6jWBRfdMgRYfll79f7TQnZB2x8a4t
FTzm4wCDJCgRp4Tb81XqtCcaa0Bg8z3oNIIA6aMv7Q9JJ06I7/s0aPq/VatLrKRl
vKMnm+l5NpTs6TRqP2G4dlYKnImGi4hpkmfoHLHZyT7bnlQ+qAw0HAA7tNZAmu50
CAfqpZo2QEVZZX7TdSmB51GHxPESGFgirkXCPn+Tn5RpNgCWZZ0WWRhLDIHApUjE
7UBMoE4fJmd10CgpfA1etom/MzjPb0X6jrbU90y9hrXzeB7BWfaV8oUi1xT9AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU/dMPbWa9tImCP98ZiV1IsPaAaGkwHwYDVR0j
BBgwFoAUphyrZbra11/0nPjOVK51c3HRxKowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVFmeFJydGhFV3dtMXc3WVNmWUU5V2Q2NDFWMW5hWGRrdUtrQXRDOHFn
YVYvMS9BNjFDQUI2NUJBREFENzVGRjQ5Q0Y4Q0U1NEFFNzU3MzcxRDFDNEFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E2MUNBQjY1QkFEQUQ3NUZG
NDlDRjhDRTU0QUU3NTczNzFEMUM0QUEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlRZnhScnRoRVd3bTF3N1lTZllFOVdkNjQxVjFuYVhka3VLa0F0QzhxZ2FWLzEv
MzEzMzM4MmUzMjM1MzUyZTMxMzQzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzgzMjMxMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKK/5AwDQYJKoZIhvcNAQELBQADggEBAH0haFsQ
jVaZiJ1VESg+gpCctKrpRvu38mWqlPPh07XpoJP/TtMsf6Rtlfx6CNhqrpBaH56U
oJX8TQe0vVYv11AH93MRB4T60wsUti1lLJWYlgkZANuKNX/vdAU0eRh1bMNDrT97
NIi2EKGiOeCCX2726OEiMmep65YQqL/Uw2OOYylLXk4nieQPN5gbw46+Mo/BImmB
aoKqkn8lmLiZx65Gug8QSpwp07KhWE1DkxjfkkijRqNl64obPr6X4fNvdlJ0hKqX
xzM/9jRc55D8i19nyKOOg9/8CP3G8i5TvNQErXbzpQk+7Aq14tS5pjM4BQo3Tte6
lNwlqAhQmRXN/Z0=
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:09 2024 by rpki-client on console-fra.rpki-client.org