Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/3133382e3138352e3135362e302f32322d3234203d3e20323634333432.roa
File:                     3133382e3138352e3135362e302f32322d3234203d3e20323634333432.roa (raw, json)
Hash identifier:          QcMm+vdZ5pLRDvpOE9WxIZ4nOi3XhMRoNCJRfAhHe5M=
Subject key identifier:   B8:91:58:87:80:F6:5B:FF:32:9E:99:F2:11:2E:0C:A1:8B:B4:21:37
Certificate issuer:       /CN=AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD
Certificate serial:       779637982CA487BBBF42B0F3874B11250D8CA15A
Authority key identifier: AC:9D:ED:B6:6C:13:A6:8A:FC:D2:B7:A3:76:D9:E8:14:C9:F2:0B:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/3133382e3138352e3135362e302f32322d3234203d3e20323634333432.roa
Signing time:             Wed 05 Mar 2025 19:00:09 +0000
ROA not before:           Wed 05 Mar 2025 18:55:09 +0000
ROA not after:            Wed 04 Mar 2026 19:00:09 +0000
asID:                     264342
IP address blocks:        138.185.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.crl
                          rsync://rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:96:37:98:2c:a4:87:bb:bf:42:b0:f3:87:4b:11:25:0d:8c:a1:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD
        Validity
            Not Before: Mar  5 18:55:09 2025 GMT
            Not After : Mar  4 19:00:09 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d4:fc:9d:d4:13:20:1a:96:f3:3a:4e:ab:59:
                    de:d9:33:6b:c9:be:13:cd:45:0a:ad:4f:a5:b3:d6:
                    a6:ff:83:24:08:a4:a2:40:11:1b:cf:f6:0f:ef:f3:
                    64:5c:67:21:7b:a5:57:cb:4c:5d:71:b8:dd:dd:41:
                    79:c8:c2:87:2c:e8:44:e2:77:8e:57:a7:cb:95:e2:
                    de:ff:21:b4:e8:8b:15:9f:70:88:24:c1:10:82:d7:
                    9d:53:1b:ae:fb:41:06:02:12:ac:0e:53:2a:e6:ff:
                    ad:bb:b6:0c:5b:27:ab:e6:81:cb:c4:af:48:52:5c:
                    90:0b:8c:43:78:cb:f9:5e:27:c5:8c:36:45:7e:85:
                    9d:32:52:60:ad:06:ec:6b:60:45:b4:6e:48:ec:9a:
                    09:0d:b1:85:51:53:1f:f5:7e:7e:58:4b:a1:33:12:
                    43:25:8b:75:9c:23:56:74:62:ab:17:9f:fc:f9:0e:
                    87:75:2c:20:37:18:c9:23:f2:b0:bc:96:f6:b5:cc:
                    01:16:d4:d2:2d:e2:5f:2c:7d:99:fc:ce:90:91:0f:
                    d0:75:0b:a8:97:aa:61:5d:fb:c1:f9:8f:80:12:81:
                    fa:e4:59:a6:8f:39:4c:07:7e:b6:e4:7f:66:12:13:
                    32:6c:bc:ff:ba:51:06:a8:99:f6:45:dc:f0:11:3a:
                    86:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:91:58:87:80:F6:5B:FF:32:9E:99:F2:11:2E:0C:A1:8B:B4:21:37
            X509v3 Authority Key Identifier:
                keyid:AC:9D:ED:B6:6C:13:A6:8A:FC:D2:B7:A3:76:D9:E8:14:C9:F2:0B:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/3133382e3138352e3135362e302f32322d3234203d3e20323634333432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:4a:cb:36:fd:4a:76:75:a9:a2:8b:4d:4b:4a:f3:56:1e:9d:
         f9:1f:f9:fb:00:a1:06:d3:5e:3d:61:4d:a9:3b:32:71:66:98:
         0f:41:ca:29:21:92:d5:40:bd:64:3f:5b:a1:4a:02:9d:b2:89:
         20:21:d9:05:f4:91:92:20:6e:03:62:ce:30:96:17:ea:73:eb:
         17:87:e3:c0:92:ab:64:c6:53:2a:45:1a:f9:0d:43:e2:ef:3b:
         35:18:cf:a0:d2:51:1e:cb:db:8a:95:8b:b4:e2:6d:4a:f0:45:
         14:f3:29:09:a3:49:3a:42:8f:19:f4:29:44:ac:c8:3c:c9:f9:
         e9:6c:cb:a9:27:c1:d4:1e:a4:59:b5:78:2b:1c:26:97:12:73:
         24:3d:d8:ac:f5:94:0e:a8:2f:cb:56:4d:a5:a1:e3:96:7d:df:
         b9:4c:08:56:1b:f6:8b:2c:6b:0c:18:82:11:79:ae:47:d3:a5:
         4b:5f:0e:0c:b7:f1:52:3f:30:31:ee:31:5a:5c:a9:44:dc:8f:
         8e:4b:04:3e:ba:d2:85:58:5f:21:8f:bc:e9:83:eb:f3:cb:9c:
         d0:1f:bf:43:e4:09:43:67:23:08:08:6c:5c:f9:d7:d1:ca:c0:
         a1:95:3d:e0:d8:22:78:5b:e5:cf:29:f7:56:10:11:11:6d:c2:
         b2:2f:d6:b1
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUd5Y3mCykh7u/QrDzh0sRJQ2MoVowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM5REVEQjY2QzEzQTY4QUZDRDJCN0EzNzZEOUU4MTRD
OUYyMEJDRDAeFw0yNTAzMDUxODU1MDlaFw0yNjAzMDQxOTAwMDlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjVENEZDOURENDEzMjAxQTk2
RjMzQTRFQUI1OURFRDkzMzZCQzlCRTEzQ0Q0NTBBQUQ0RkE1QjNENkE2RkY4MzI0
MDhBNEEyNDAxMTFCQ0ZGNjBGRUZGMzY0NUM2NzIxN0JBNTU3Q0I0QzVENzFCOERE
REQ0MTc5QzhDMjg3MkNFODQ0RTI3NzhFNTdBN0NCOTVFMkRFRkYyMUI0RTg4QjE1
OUY3MDg4MjRDMTEwODJENzlENTMxQkFFRkI0MTA2MDIxMkFDMEU1MzJBRTZGRkFE
QkJCNjBDNUIyN0FCRTY4MUNCQzRBRjQ4NTI1QzkwMEI4QzQzNzhDQkY5NUUyN0M1
OEMzNjQ1N0U4NTlEMzI1MjYwQUQwNkVDNkI2MDQ1QjQ2RTQ4RUM5QTA5MERCMTg1
NTE1MzFGRjU3RTdFNTg0QkExMzMxMjQzMjU4Qjc1OUMyMzU2NzQ2MkFCMTc5RkZD
RjkwRTg3NzUyQzIwMzcxOEM5MjNGMkIwQkM5NkY2QjVDQzAxMTZENEQyMkRFMjVG
MkM3RDk5RkNDRTkwOTEwRkQwNzUwQkE4OTdBQTYxNURGQkMxRjk4RjgwMTI4MUZB
RTQ1OUE2OEYzOTRDMDc3RUI2RTQ3RjY2MTIxMzMyNkNCQ0ZGQkE1MTA2QTg5OUY2
NDVEQ0YwMTEzQTg2N0QwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAtdT8ndQTIBqW8zpOq1ne2TNryb4TzUUKrU+ls9am/4MkCKSiQBEb
z/YP7/NkXGche6VXy0xdcbjd3UF5yMKHLOhE4neOV6fLleLe/yG06IsVn3CIJMEQ
gtedUxuu+0EGAhKsDlMq5v+tu7YMWyer5oHLxK9IUlyQC4xDeMv5XifFjDZFfoWd
MlJgrQbsa2BFtG5I7JoJDbGFUVMf9X5+WEuhMxJDJYt1nCNWdGKrF5/8+Q6HdSwg
NxjJI/KwvJb2tcwBFtTSLeJfLH2Z/M6QkQ/QdQuol6phXfvB+Y+AEoH65FmmjzlM
B3625H9mEhMybLz/ulEGqJn2RdzwETqGfQIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FLiRWIeA9lv/Mp6Z8hEuDKGLtCE3MB8GA1UdIwQYMBaAFKyd7bZsE6aK/NK3o3bZ
6BTJ8gvNMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0F0eUZzOWtHN1pqdGJL
ZFV6V1VtdXNTRm5nOXlUSDFGd0NLZktrNW1XWExjLzEvQUM5REVEQjY2QzEzQTY4
QUZDRDJCN0EzNzZEOUU4MTRDOUYyMEJDRC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9BQzlERURCNjZDMTNBNjhBRkNEMkI3QTM3NkQ5RTgxNEM5RjIw
QkNELmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9BdHlGczlrRzdaanRiS2RVeldV
bXVzU0ZuZzl5VEgxRndDS2ZLazVtV1hMYy8xLzMxMzMzODJlMzEzODM1MmUzMTM1
MzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzQzMzM0MzIucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAKKuZwwDQYJKoZIhvcNAQELBQADggEBAKtKyzb9SnZ1qaKLTUtK81Yenfkf+fsA
oQbTXj1hTak7MnFmmA9ByikhktVAvWQ/W6FKAp2yiSAh2QX0kZIgbgNizjCWF+pz
6xeH48CSq2TGUypFGvkNQ+LvOzUYz6DSUR7L24qVi7TibUrwRRTzKQmjSTpCjxn0
KUSsyDzJ+elsy6knwdQepFm1eCscJpcScyQ92Kz1lA6oL8tWTaWh45Z937lMCFYb
9ossawwYghF5rkfTpUtfDgy38VI/MDHuMVpcqUTcj45LBD660oVYXyGPvOmD6/PL
nNAfv0PkCUNnIwgIbFz519HKwKGVPeDYInhb5c8p91YQERFtwrIv1rE=
-----END CERTIFICATE-----
Generated at Sat Apr 12 22:37:16 2025 by rpki-client