Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9ef7dUe8sk6dR7sozNNLotRkeE5N5xs9QdBL66Rfjpoy/0/3133382e3132322e32302e302f32322d3234203d3e20323634333038.roa
File:                     3133382e3132322e32302e302f32322d3234203d3e20323634333038.roa (raw, json)
Hash identifier:          LiGCtKwHpo6jTWj5cgBlfpOLQY1sVTLIVD8gqgBguE8=
Subject key identifier:   52:54:63:3B:F8:09:D1:0A:13:E4:BE:53:02:EA:80:7C:E1:9B:60:91
Certificate issuer:       /CN=FF73A17CC4D25E9C9076F559235209BADA365B27
Certificate serial:       3A8ACE67F51A393F1C419D99A56E4DF359B200D0
Authority key identifier: FF:73:A1:7C:C4:D2:5E:9C:90:76:F5:59:23:52:09:BA:DA:36:5B:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF73A17CC4D25E9C9076F559235209BADA365B27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9ef7dUe8sk6dR7sozNNLotRkeE5N5xs9QdBL66Rfjpoy/0/3133382e3132322e32302e302f32322d3234203d3e20323634333038.roa
Signing time:             Fri 07 Mar 2025 14:46:23 +0000
ROA not before:           Fri 07 Mar 2025 14:41:23 +0000
ROA not after:            Fri 06 Mar 2026 14:46:23 +0000
asID:                     264308
IP address blocks:        138.122.20.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9ef7dUe8sk6dR7sozNNLotRkeE5N5xs9QdBL66Rfjpoy/0/FF73A17CC4D25E9C9076F559235209BADA365B27.crl
                          rsync://rpki-repo.registro.br/repo/9ef7dUe8sk6dR7sozNNLotRkeE5N5xs9QdBL66Rfjpoy/0/FF73A17CC4D25E9C9076F559235209BADA365B27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF73A17CC4D25E9C9076F559235209BADA365B27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 18:40:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:8a:ce:67:f5:1a:39:3f:1c:41:9d:99:a5:6e:4d:f3:59:b2:00:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF73A17CC4D25E9C9076F559235209BADA365B27
        Validity
            Not Before: Mar  7 14:41:23 2025 GMT
            Not After : Mar  6 14:46:23 2026 GMT
        Subject: CN=5254633BF809D10A13E4BE5302EA807CE19B6091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:25:c2:e4:db:72:cd:15:ae:c6:c7:93:87:13:
                    d6:34:49:ce:a1:26:b7:3d:43:17:2a:48:d8:b5:d7:
                    fc:fc:bd:cf:f2:75:4e:d4:e9:89:5f:90:1f:44:62:
                    8f:88:41:05:25:67:6a:45:f4:a6:19:68:41:c5:59:
                    c0:03:9c:bc:c7:c1:34:42:ab:2a:5b:55:5c:9a:2e:
                    78:10:5e:88:11:0f:99:4f:1a:41:99:e5:b9:4f:cc:
                    2c:e2:0b:1f:52:3d:e0:d4:18:9e:03:66:12:ea:d8:
                    31:8e:42:c5:d8:ee:f4:4a:ec:57:63:ff:a0:2d:44:
                    46:08:53:6a:d2:74:26:e8:88:12:47:28:59:18:89:
                    f7:c8:98:8b:4a:61:2e:ef:20:0d:7f:56:0d:79:41:
                    ed:ae:bb:20:f2:10:77:f3:30:05:d6:10:01:fb:a6:
                    38:51:ce:60:c8:16:29:9e:df:72:4b:67:49:22:f1:
                    63:db:3d:e3:1e:67:da:75:1b:22:29:bd:d0:03:82:
                    df:ea:0b:50:35:ee:21:21:45:e2:ff:84:52:d6:89:
                    22:a7:e8:22:66:56:7e:81:a6:9a:56:4a:41:9e:27:
                    bb:17:5f:24:b1:ab:34:17:b0:71:a7:03:97:f2:91:
                    ff:f9:60:9f:ee:bb:73:07:3b:8c:1c:a3:16:ab:59:
                    2a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:54:63:3B:F8:09:D1:0A:13:E4:BE:53:02:EA:80:7C:E1:9B:60:91
            X509v3 Authority Key Identifier:
                keyid:FF:73:A1:7C:C4:D2:5E:9C:90:76:F5:59:23:52:09:BA:DA:36:5B:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9ef7dUe8sk6dR7sozNNLotRkeE5N5xs9QdBL66Rfjpoy/0/FF73A17CC4D25E9C9076F559235209BADA365B27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF73A17CC4D25E9C9076F559235209BADA365B27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9ef7dUe8sk6dR7sozNNLotRkeE5N5xs9QdBL66Rfjpoy/0/3133382e3132322e32302e302f32322d3234203d3e20323634333038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:c3:9b:07:4a:a6:5b:37:2c:35:26:8a:18:8a:07:98:21:d2:
         27:e7:38:b6:82:b2:99:a8:c6:cb:dd:75:44:e9:31:ba:66:70:
         c0:ad:8c:fd:1c:89:a3:39:3a:d8:63:0f:ea:52:56:9c:a5:28:
         13:13:73:99:c0:bf:61:49:98:ef:5d:d8:6a:ec:24:57:35:c1:
         26:5a:b9:99:51:bd:5b:f7:a5:a0:cd:69:64:02:36:56:81:e4:
         27:c2:24:07:b8:f0:ce:8c:65:84:d4:89:be:ef:32:26:46:c2:
         c9:41:b0:cd:25:38:aa:35:1d:e7:cd:52:4f:2d:58:e2:23:15:
         47:b5:af:07:81:8a:54:0b:ef:e6:b9:3c:f1:dc:fa:5f:06:8f:
         b9:22:ec:e3:38:2d:8e:7d:ff:c3:6c:8b:8b:6d:07:fc:a1:e9:
         0a:8e:e0:cd:50:05:0b:9f:be:c4:c4:a4:11:f1:9b:47:6e:8a:
         4e:19:82:6e:5c:bb:87:d5:de:30:00:70:64:a3:fd:9e:b1:9b:
         c6:a5:b8:44:3c:7e:3e:37:7d:6d:8e:31:99:e4:82:3e:41:7d:
         27:01:65:b1:8d:80:0d:2f:09:c4:02:61:f3:dd:5a:5f:75:d6:
         f7:10:5a:4f:92:dc:8e:b9:8b:0e:77:fa:95:f4:3a:14:32:96:
         6f:dc:f9:78
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUOorOZ/UaOT8cQZ2ZpW5N81myANAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkY3M0ExN0NDNEQyNUU5QzkwNzZGNTU5MjM1MjA5QkFE
QTM2NUIyNzAeFw0yNTAzMDcxNDQxMjNaFw0yNjAzMDYxNDQ2MjNaMDMxMTAvBgNV
BAMTKDUyNTQ2MzNCRjgwOUQxMEExM0U0QkU1MzAyRUE4MDdDRTE5QjYwOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaJcLk23LNFa7Gx5OHE9Y0Sc6h
Jrc9QxcqSNi11/z8vc/ydU7U6YlfkB9EYo+IQQUlZ2pF9KYZaEHFWcADnLzHwTRC
qypbVVyaLngQXogRD5lPGkGZ5blPzCziCx9SPeDUGJ4DZhLq2DGOQsXY7vRK7Fdj
/6AtREYIU2rSdCboiBJHKFkYiffImItKYS7vIA1/Vg15Qe2uuyDyEHfzMAXWEAH7
pjhRzmDIFime33JLZ0ki8WPbPeMeZ9p1GyIpvdADgt/qC1A17iEhReL/hFLWiSKn
6CJmVn6BpppWSkGeJ7sXXySxqzQXsHGnA5fykf/5YJ/uu3MHO4wcoxarWSpzAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUUlRjO/gJ0QoT5L5TAuqAfOGbYJEwHwYDVR0j
BBgwFoAU/3OhfMTSXpyQdvVZI1IJuto2WycwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWVmN2RVZThzazZkUjdzb3pOTkxvdFJrZUU1TjV4czlRZEJMNjZSZmpw
b3kvMC9GRjczQTE3Q0M0RDI1RTlDOTA3NkY1NTkyMzUyMDlCQURBMzY1QjI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZGNzNBMTdDQzREMjVFOUM5
MDc2RjU1OTIzNTIwOUJBREEzNjVCMjcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzllZjdkVWU4c2s2ZFI3c296Tk5Mb3RSa2VFNU41eHM5UWRCTDY2UmZqcG95LzAv
MzEzMzM4MmUzMTMyMzIyZTMyMzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzQzMzMwMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKKehQwDQYJKoZIhvcNAQELBQADggEBAJfDmwdK
pls3LDUmihiKB5gh0ifnOLaCspmoxsvddUTpMbpmcMCtjP0ciaM5OthjD+pSVpyl
KBMTc5nAv2FJmO9d2GrsJFc1wSZauZlRvVv3paDNaWQCNlaB5CfCJAe48M6MZYTU
ib7vMiZGwslBsM0lOKo1HefNUk8tWOIjFUe1rweBilQL7+a5PPHc+l8Gj7ki7OM4
LY59/8Nsi4ttB/yh6QqO4M1QBQufvsTEpBHxm0duik4Zgm5cu4fV3jAAcGSj/Z6x
m8aluEQ8fj43fW2OMZnkgj5BfScBZbGNgA0vCcQCYfPdWl911vcQWk+S3I65iw53
+pX0OhQylm/c+Xg=
-----END CERTIFICATE-----
Generated at Sun Apr 13 00:08:56 2025 by rpki-client