Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/3133382e3235352e3232302e302f32332d3233203d3e20323633393934.roa
File:                     3133382e3235352e3232302e302f32332d3233203d3e20323633393934.roa (raw, json)
Hash identifier:          OQS7p5PIvdNDkVsEjaTtffzpRj5lCDjCd7jRvXaimwk=
Subject key identifier:   05:81:61:93:50:5F:03:61:20:E7:A8:CC:5E:6E:4A:14:E7:C0:47:C9
Certificate issuer:       /CN=6933A3E9616B92D4A6606885C3C206355CC19035
Certificate serial:       578B3866B126EE6C16BE766D0F28855FA3C1602C
Authority key identifier: 69:33:A3:E9:61:6B:92:D4:A6:60:68:85:C3:C2:06:35:5C:C1:90:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6933A3E9616B92D4A6606885C3C206355CC19035.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/3133382e3235352e3232302e302f32332d3233203d3e20323633393934.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     263994
IP address blocks:        138.255.220.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/6933A3E9616B92D4A6606885C3C206355CC19035.crl
                          rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/6933A3E9616B92D4A6606885C3C206355CC19035.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6933A3E9616B92D4A6606885C3C206355CC19035.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 21:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:8b:38:66:b1:26:ee:6c:16:be:76:6d:0f:28:85:5f:a3:c1:60:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6933A3E9616B92D4A6606885C3C206355CC19035
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=05816193505F036120E7A8CC5E6E4A14E7C047C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:67:11:20:73:6d:b3:db:bd:a1:2c:1e:92:81:
                    1b:09:c7:6b:9d:e9:1b:57:95:41:ac:fa:3e:9a:82:
                    db:7f:86:4e:05:f2:3e:d8:69:d8:e2:38:b6:f8:a6:
                    46:6e:7d:5c:b3:d8:cc:9a:3f:51:c3:48:bf:c5:8a:
                    6a:8f:02:a5:ae:b7:7f:e1:89:12:32:9a:60:74:6d:
                    02:6f:f9:ba:74:c5:7c:50:80:57:02:7d:2d:7e:13:
                    80:de:eb:ac:bf:dd:0e:bb:64:32:03:04:d1:64:f1:
                    cb:14:28:3e:3e:e4:d5:37:9a:5e:ff:6e:42:8b:13:
                    53:4d:66:20:d9:e3:b6:af:bf:a2:d9:43:74:fc:2f:
                    cd:82:da:e2:cc:5b:7c:37:24:eb:12:2d:6d:ef:5e:
                    23:5f:9d:5e:08:34:15:ab:02:df:eb:08:6d:4b:27:
                    29:1e:ab:c1:c9:4c:9a:01:c9:7f:f5:0b:92:63:7e:
                    70:35:37:e3:ef:12:5f:65:20:1e:39:e2:b3:53:1f:
                    e5:50:95:89:cf:a0:0c:8f:f1:04:7d:e3:0a:5a:18:
                    2f:5c:65:bf:28:e0:fa:23:82:ea:f1:44:53:85:58:
                    f0:f4:f9:36:0e:6e:36:aa:5d:0b:e2:22:92:9f:4d:
                    84:24:1e:e5:de:6c:59:bf:b7:7c:8b:f6:fa:56:5a:
                    8e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:81:61:93:50:5F:03:61:20:E7:A8:CC:5E:6E:4A:14:E7:C0:47:C9
            X509v3 Authority Key Identifier:
                keyid:69:33:A3:E9:61:6B:92:D4:A6:60:68:85:C3:C2:06:35:5C:C1:90:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/6933A3E9616B92D4A6606885C3C206355CC19035.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6933A3E9616B92D4A6606885C3C206355CC19035.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/3133382e3235352e3232302e302f32332d3233203d3e20323633393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b7:8f:06:75:fb:b6:85:12:9c:f4:09:7c:c0:af:fb:f8:e6:3d:
         3f:14:17:21:78:fc:44:19:74:11:97:8a:d2:66:9f:98:c9:97:
         ed:77:0f:83:8d:12:9d:f6:7a:ea:b2:cc:98:4d:44:ac:9c:38:
         a6:18:17:dc:9a:c6:79:8f:a9:4c:a3:9f:9d:9e:49:76:b0:8b:
         ec:97:58:e8:01:61:7e:31:da:a4:95:b5:f2:11:8c:d4:da:c6:
         70:2b:a5:3e:fd:ca:2e:6c:be:74:33:c3:f8:eb:e8:55:2c:4e:
         8b:04:2c:2b:0a:2e:ec:e7:25:d8:4d:ee:35:9e:b6:21:0e:42:
         4e:7e:75:a0:70:e2:50:ac:bf:de:67:94:cb:fe:74:17:20:3f:
         ef:f3:c8:de:fc:fa:df:08:25:7a:0b:53:29:a7:16:2f:73:59:
         7c:ca:94:88:78:5b:84:03:7b:fe:96:24:dd:31:24:ce:c7:0e:
         d4:94:27:c6:6a:6d:4c:74:28:b5:83:e1:1b:67:32:41:05:60:
         d3:18:e8:f8:12:55:fd:84:6f:ee:0e:46:c4:fc:76:45:8b:50:
         af:f5:bf:af:5d:75:59:3e:21:a6:86:20:0a:14:20:8c:b1:d6:
         50:ad:64:f4:c6:1c:1c:3f:0e:42:cc:10:30:48:e1:d5:ba:8b:
         99:c5:64:48
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUV4s4ZrEm7mwWvnZtDyiFX6PBYCwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjkzM0EzRTk2MTZCOTJENEE2NjA2ODg1QzNDMjA2MzU1
Q0MxOTAzNTAeFw0yNTAzMDUxODU1MDBaFw0yNjAzMDQxOTAwMDBaMDMxMTAvBgNV
BAMTKDA1ODE2MTkzNTA1RjAzNjEyMEU3QThDQzVFNkU0QTE0RTdDMDQ3QzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmZxEgc22z272hLB6SgRsJx2ud
6RtXlUGs+j6agtt/hk4F8j7YadjiOLb4pkZufVyz2MyaP1HDSL/FimqPAqWut3/h
iRIymmB0bQJv+bp0xXxQgFcCfS1+E4De66y/3Q67ZDIDBNFk8csUKD4+5NU3ml7/
bkKLE1NNZiDZ47avv6LZQ3T8L82C2uLMW3w3JOsSLW3vXiNfnV4INBWrAt/rCG1L
Jykeq8HJTJoByX/1C5JjfnA1N+PvEl9lIB454rNTH+VQlYnPoAyP8QR94wpaGC9c
Zb8o4PojgurxRFOFWPD0+TYObjaqXQviIpKfTYQkHuXebFm/t3yL9vpWWo5rAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUBYFhk1BfA2Eg56jMXm5KFOfAR8kwHwYDVR0j
BBgwFoAUaTOj6WFrktSmYGiFw8IGNVzBkDUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWhjU1ZnQTdHVUg0cWtBc2tzanJDYlhGdUdOeFdTZmtDTVFaNUxVVTZ4
dmkvMS82OTMzQTNFOTYxNkI5MkQ0QTY2MDY4ODVDM0MyMDYzNTVDQzE5MDM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY5MzNBM0U5NjE2QjkyRDRB
NjYwNjg4NUMzQzIwNjM1NUNDMTkwMzUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FoY1NWZ0E3R1VINHFrQXNrc2pyQ2JYRnVHTnhXU2ZrQ01RWjVMVVU2eHZpLzEv
MzEzMzM4MmUzMjM1MzUyZTMyMzIzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMzM5MzkzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAYr/3DANBgkqhkiG9w0BAQsFAAOCAQEAt48G
dfu2hRKc9Al8wK/7+OY9PxQXIXj8RBl0EZeK0mafmMmX7XcPg40SnfZ66rLMmE1E
rJw4phgX3JrGeY+pTKOfnZ5JdrCL7JdY6AFhfjHapJW18hGM1NrGcCulPv3KLmy+
dDPD+OvoVSxOiwQsKwou7Ocl2E3uNZ62IQ5CTn51oHDiUKy/3meUy/50FyA/7/PI
3vz63wglegtTKacWL3NZfMqUiHhbhAN7/pYk3TEkzscO1JQnxmptTHQotYPhG2cy
QQVg0xjo+BJV/YRv7g5GxPx2RYtQr/W/r111WT4hpoYgChQgjLHWUK1k9MYcHD8O
QswQMEjh1bqLmcVkSA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:49:32 2025 by rpki-client