Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/1/3133382e3138352e39302e302f32342d3234203d3e20323730383737.roa
File:                     3133382e3138352e39302e302f32342d3234203d3e20323730383737.roa (raw, json)
Hash identifier:          CinKBFfX3ISnduxQuNq5n348SAlw/HjaXz2UB4gRxJA=
Subject key identifier:   6E:E2:C0:29:77:8D:DE:51:B6:70:8D:E5:8D:36:20:2E:83:06:F3:77
Certificate issuer:       /CN=3E268A146165B7580B59E044B59D275B5F824225
Certificate serial:       1CB02D78DD348A59F343FF3714840A5590AB1C38
Authority key identifier: 3E:26:8A:14:61:65:B7:58:0B:59:E0:44:B5:9D:27:5B:5F:82:42:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E268A146165B7580B59E044B59D275B5F824225.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/1/3133382e3138352e39302e302f32342d3234203d3e20323730383737.roa
Signing time:             Thu 06 Mar 2025 02:05:13 +0000
ROA not before:           Thu 06 Mar 2025 02:00:13 +0000
ROA not after:            Thu 05 Mar 2026 02:05:13 +0000
asID:                     270877
IP address blocks:        138.185.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/1/3E268A146165B7580B59E044B59D275B5F824225.crl
                          rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/1/3E268A146165B7580B59E044B59D275B5F824225.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E268A146165B7580B59E044B59D275B5F824225.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 00:25:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:b0:2d:78:dd:34:8a:59:f3:43:ff:37:14:84:0a:55:90:ab:1c:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E268A146165B7580B59E044B59D275B5F824225
        Validity
            Not Before: Mar  6 02:00:13 2025 GMT
            Not After : Mar  5 02:05:13 2026 GMT
        Subject: CN=6EE2C029778DDE51B6708DE58D36202E8306F377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:02:85:15:47:15:4b:a7:92:73:56:41:de:8a:
                    78:b6:52:4f:a6:0a:4c:d8:32:d5:62:92:de:91:b2:
                    88:c2:b6:7d:91:57:52:e2:85:d2:8c:8f:63:ea:aa:
                    e2:e6:1b:c4:2d:43:be:e4:db:72:7d:22:c6:d2:fc:
                    5e:95:f7:5b:dd:fa:0c:59:f5:8f:ef:ae:e8:0f:a8:
                    19:65:3d:30:78:7e:65:19:73:56:b3:a1:1d:1f:58:
                    68:b4:2f:02:59:40:1d:8d:68:82:11:b0:ab:a4:4c:
                    d4:f8:57:d4:e4:cc:40:30:ae:8f:dc:0b:22:9e:4b:
                    7b:41:2e:05:e4:fb:01:83:15:16:a5:0e:dc:f4:a0:
                    61:a9:df:21:ae:34:a5:63:a8:fe:3a:9e:5a:c8:fd:
                    ce:2a:ae:e0:ff:a6:bd:c1:92:e1:22:7a:38:1a:e1:
                    bc:67:2f:59:bc:2c:b4:c5:63:21:72:6c:af:c7:78:
                    2d:d8:70:69:54:ff:cc:cd:1c:2d:6d:24:7a:6e:d4:
                    39:36:f6:84:ea:ac:80:af:2a:52:3d:90:68:7b:a4:
                    ef:cf:ed:54:f7:2b:5e:28:53:d4:ca:9d:30:fc:ae:
                    01:5c:f1:b5:69:c2:b1:47:55:52:98:8f:66:98:be:
                    d5:b1:96:f0:5b:e3:49:14:e6:d8:64:e4:67:25:ca:
                    d5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:E2:C0:29:77:8D:DE:51:B6:70:8D:E5:8D:36:20:2E:83:06:F3:77
            X509v3 Authority Key Identifier:
                keyid:3E:26:8A:14:61:65:B7:58:0B:59:E0:44:B5:9D:27:5B:5F:82:42:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/1/3E268A146165B7580B59E044B59D275B5F824225.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E268A146165B7580B59E044B59D275B5F824225.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/1/3133382e3138352e39302e302f32342d3234203d3e20323730383737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:5e:2d:2b:21:6b:94:6a:ac:a3:2c:b5:53:e7:c5:ff:bb:e9:
         07:76:96:07:19:82:b0:7d:cc:a3:c5:8a:91:e3:0b:31:0e:2f:
         33:ca:c2:18:3f:73:1f:b6:32:13:62:91:49:50:86:16:85:0f:
         b5:32:e7:2f:0c:1b:b0:fd:9b:2a:f4:9d:0f:b9:4e:b7:16:28:
         d5:44:a4:2a:43:3a:58:af:ab:a8:9e:6e:3c:80:55:86:8f:a2:
         8c:6e:2e:e8:e7:32:bd:09:1c:b4:51:6a:8b:85:27:a8:25:b3:
         38:21:e8:c2:42:bd:3f:64:ea:7e:47:e4:40:f6:74:2c:7e:93:
         ab:31:ec:9e:1f:4a:c6:43:d0:72:16:7f:79:c6:05:2d:bb:f4:
         eb:ca:9f:da:ca:c5:3c:db:4f:6f:3e:a6:28:7c:b5:e1:b1:1d:
         67:30:6c:69:de:0d:3d:4f:04:df:b7:76:10:a5:b5:5a:ef:7c:
         9c:a9:fc:f6:94:d9:60:9f:4f:ed:00:7e:6b:56:f6:b5:d8:b1:
         ad:ec:33:1b:bd:d9:25:38:2d:6c:b8:0d:6a:11:d8:f4:45:e2:
         48:80:3b:cf:b0:64:3e:c7:26:ca:bb:ac:4f:a7:62:8c:56:2e:
         67:c3:96:d6:86:02:47:b4:9f:4a:f2:f1:2f:e0:3c:5e:3c:bb:
         3c:c9:4c:5a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUHLAteN00ilnzQ/83FIQKVZCrHDgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0UyNjhBMTQ2MTY1Qjc1ODBCNTlFMDQ0QjU5RDI3NUI1
RjgyNDIyNTAeFw0yNTAzMDYwMjAwMTNaFw0yNjAzMDUwMjA1MTNaMDMxMTAvBgNV
BAMTKDZFRTJDMDI5Nzc4RERFNTFCNjcwOERFNThEMzYyMDJFODMwNkYzNzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAAoUVRxVLp5JzVkHeini2Uk+m
CkzYMtVikt6RsojCtn2RV1LihdKMj2PqquLmG8QtQ77k23J9IsbS/F6V91vd+gxZ
9Y/vrugPqBllPTB4fmUZc1azoR0fWGi0LwJZQB2NaIIRsKukTNT4V9TkzEAwro/c
CyKeS3tBLgXk+wGDFRalDtz0oGGp3yGuNKVjqP46nlrI/c4qruD/pr3BkuEiejga
4bxnL1m8LLTFYyFybK/HeC3YcGlU/8zNHC1tJHpu1Dk29oTqrICvKlI9kGh7pO/P
7VT3K14oU9TKnTD8rgFc8bVpwrFHVVKYj2aYvtWxlvBb40kU5thk5GclytUNAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUbuLAKXeN3lG2cI3ljTYgLoMG83cwHwYDVR0j
BBgwFoAUPiaKFGFlt1gLWeBEtZ0nW1+CQiUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXFnUldORVdmc0NKZk4xdzVndEhYb3NXaGtMV1pxcVUyTUx1Ujl4aW5B
RXQvMS8zRTI2OEExNDYxNjVCNzU4MEI1OUUwNDRCNTlEMjc1QjVGODI0MjI1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNFMjY4QTE0NjE2NUI3NTgw
QjU5RTA0NEI1OUQyNzVCNUY4MjQyMjUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FxZ1JXTkVXZnNDSmZOMXc1Z3RIWG9zV2hrTFdacXFVMk1MdVI5eGluQUV0LzEv
MzEzMzM4MmUzMTM4MzUyZTM5MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzAzODM3Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACKuVowDQYJKoZIhvcNAQELBQADggEBAFteLSsh
a5RqrKMstVPnxf+76Qd2lgcZgrB9zKPFipHjCzEOLzPKwhg/cx+2MhNikUlQhhaF
D7Uy5y8MG7D9myr0nQ+5TrcWKNVEpCpDOlivq6iebjyAVYaPooxuLujnMr0JHLRR
aouFJ6glszgh6MJCvT9k6n5H5ED2dCx+k6sx7J4fSsZD0HIWf3nGBS279OvKn9rK
xTzbT28+pih8teGxHWcwbGneDT1PBN+3dhCltVrvfJyp/PaU2WCfT+0AfmtW9rXY
sa3sMxu92SU4LWy4DWoR2PRF4kiAO8+wZD7HJsq7rE+nYoxWLmfDltaGAke0n0ry
8S/gPF48uzzJTFo=
-----END CERTIFICATE-----
Generated at Sun Apr 6 09:05:14 2025 by rpki-client