Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/3133382e302e3135312e302f32342d3234203d3e20323638353436.roa
File:                     3133382e302e3135312e302f32342d3234203d3e20323638353436.roa (raw, json)
Hash identifier:          IBdG1pMLCT4CM2ZFASPiNZoh6+S906INleFqSbR6NDI=
Subject key identifier:   60:D7:BC:E9:99:2F:31:D7:B3:E9:9A:EA:A6:BC:6A:09:2D:91:42:40
Certificate issuer:       /CN=32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4
Certificate serial:       1BC6D8C2599B4062F1AAECCF80435CA6D8F67083
Authority key identifier: 32:C3:A2:0B:EB:E1:AC:7A:6C:3E:09:58:CC:B9:71:DE:A6:4D:E1:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/3133382e302e3135312e302f32342d3234203d3e20323638353436.roa
Signing time:             Wed 04 Jun 2025 01:05:43 +0000
ROA not before:           Wed 04 Jun 2025 01:00:43 +0000
ROA not after:            Wed 03 Jun 2026 01:05:43 +0000
asID:                     268546
IP address blocks:        138.0.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.crl
                          rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 11:40:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:c6:d8:c2:59:9b:40:62:f1:aa:ec:cf:80:43:5c:a6:d8:f6:70:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4
        Validity
            Not Before: Jun  4 01:00:43 2025 GMT
            Not After : Jun  3 01:05:43 2026 GMT
        Subject: CN=60D7BCE9992F31D7B3E99AEAA6BC6A092D914240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:02:36:fa:9e:9e:91:60:d2:90:16:0a:02:84:
                    46:e5:e8:d7:8b:4f:30:55:e0:40:61:34:66:43:c5:
                    9a:8d:8f:c6:3d:46:c4:a5:ed:03:87:7c:26:39:b3:
                    1b:72:b2:3c:c2:ba:82:dd:9c:61:cf:e6:7d:7e:2c:
                    d3:6b:d0:64:97:45:c2:5a:02:ac:8a:77:9a:96:32:
                    ec:06:75:b0:6c:d1:d9:26:df:71:cc:a8:e0:82:40:
                    29:97:9a:a9:24:b3:ec:1f:be:c2:35:fc:81:ba:5f:
                    37:ad:20:6a:f8:2f:28:f6:66:14:ea:50:16:f9:21:
                    97:48:f4:72:8d:8d:59:9d:43:8c:f9:2a:f7:e5:e2:
                    13:cb:aa:24:cc:43:b1:b6:c6:22:af:e9:86:af:5f:
                    ac:1e:64:49:00:db:f9:07:8b:cd:7a:d2:5d:b0:4a:
                    a3:93:9c:7a:6c:99:68:5f:a1:61:25:9e:cc:87:5d:
                    d2:3d:3f:b9:6e:4c:e6:b7:46:1c:a0:7d:a4:30:bd:
                    ec:63:b5:5a:6b:1f:9c:94:ed:d6:94:53:c1:43:aa:
                    dd:28:bb:7b:bb:06:db:ef:c5:76:8d:08:87:5d:54:
                    eb:6b:1b:32:94:e4:62:f1:83:e9:6f:83:83:48:ba:
                    41:09:08:2b:2a:3a:68:8e:3a:8a:4b:84:8d:18:11:
                    27:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:D7:BC:E9:99:2F:31:D7:B3:E9:9A:EA:A6:BC:6A:09:2D:91:42:40
            X509v3 Authority Key Identifier:
                keyid:32:C3:A2:0B:EB:E1:AC:7A:6C:3E:09:58:CC:B9:71:DE:A6:4D:E1:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C3A20BEBE1AC7A6C3E0958CCB971DEA64DE1B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/3133382e302e3135312e302f32342d3234203d3e20323638353436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:66:9f:14:f4:15:d6:7b:ef:eb:ff:44:96:d4:82:35:9b:f6:
         0f:e5:f2:0e:3a:93:bd:e1:47:9e:3e:63:fb:8e:2b:6e:70:c8:
         64:51:53:6c:f1:bc:e6:9e:53:50:6a:a1:95:e9:f6:d0:76:ec:
         78:86:95:c1:9a:b5:17:56:87:b5:c3:fd:cc:02:ee:57:77:e6:
         25:3b:8e:a6:99:b3:ad:32:fb:8d:a5:31:d7:f3:39:48:0e:ad:
         0c:3e:2d:34:88:49:a5:75:6f:c0:a2:f4:04:23:94:8d:b9:59:
         9a:ad:fd:13:53:35:e9:1f:81:2e:f3:be:88:5b:23:bb:bf:dd:
         d3:a0:9e:c6:c2:2e:e4:a3:07:75:50:e9:c1:5b:2d:1a:e7:d1:
         1f:0a:f6:a8:f3:a6:b2:d8:1a:8f:40:13:55:83:73:d5:ea:8b:
         13:4d:1f:4e:b7:71:88:d7:ee:5a:37:8c:65:75:ce:c5:b3:54:
         2e:a5:dc:29:ea:92:ca:73:e9:7d:2c:c5:62:e8:b3:1e:50:69:
         f5:fb:28:cf:5b:11:04:ff:66:20:c7:98:8f:c6:03:3d:51:dd:
         ec:6c:e8:3f:9d:44:98:b3:69:b0:c1:45:35:35:fa:ce:61:78:
         71:cd:8f:fe:ee:7e:cd:ba:4e:3f:2c:52:78:88:41:7e:a0:7a:
         9f:fa:0c:58
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUG8bYwlmbQGLxquzPgENcptj2cIMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzJDM0EyMEJFQkUxQUM3QTZDM0UwOTU4Q0NCOTcxREVB
NjRERTFCNDAeFw0yNTA2MDQwMTAwNDNaFw0yNjA2MDMwMTA1NDNaMDMxMTAvBgNV
BAMTKDYwRDdCQ0U5OTkyRjMxRDdCM0U5OUFFQUE2QkM2QTA5MkQ5MTQyNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfAjb6np6RYNKQFgoChEbl6NeL
TzBV4EBhNGZDxZqNj8Y9RsSl7QOHfCY5sxtysjzCuoLdnGHP5n1+LNNr0GSXRcJa
AqyKd5qWMuwGdbBs0dkm33HMqOCCQCmXmqkks+wfvsI1/IG6XzetIGr4Lyj2ZhTq
UBb5IZdI9HKNjVmdQ4z5Kvfl4hPLqiTMQ7G2xiKv6YavX6weZEkA2/kHi8160l2w
SqOTnHpsmWhfoWElnsyHXdI9P7luTOa3RhygfaQwvexjtVprH5yU7daUU8FDqt0o
u3u7BtvvxXaNCIddVOtrGzKU5GLxg+lvg4NIukEJCCsqOmiOOopLhI0YESfvAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUYNe86ZkvMdez6ZrqprxqCS2RQkAwHwYDVR0j
BBgwFoAUMsOiC+vhrHpsPglYzLlx3qZN4bQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkhrR1ZkQjJoUm96ZHFoSkZmZkduTmRpY0I4aG5wdDZKclJvWG1jZ0hn
NTMvMC8zMkMzQTIwQkVCRTFBQzdBNkMzRTA5NThDQ0I5NzFERUE2NERFMUI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMyQzNBMjBCRUJFMUFDN0E2
QzNFMDk1OENDQjk3MURFQTY0REUxQjQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JIa0dWZEIyaFJvemRxaEpGZmZHbk5kaWNCOGhucHQ2SnJSb1htY2dIZzUzLzAv
MzEzMzM4MmUzMDJlMzEzNTMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM4
MzUzNDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAigCXMA0GCSqGSIb3DQEBCwUAA4IBAQBRZp8U9BXW
e+/r/0SW1II1m/YP5fIOOpO94UeePmP7jitucMhkUVNs8bzmnlNQaqGV6fbQdux4
hpXBmrUXVoe1w/3MAu5Xd+YlO46mmbOtMvuNpTHX8zlIDq0MPi00iEmldW/AovQE
I5SNuVmarf0TUzXpH4Eu876IWyO7v93ToJ7Gwi7kowd1UOnBWy0a59EfCvao86ay
2BqPQBNVg3PV6osTTR9Ot3GI1+5aN4xldc7Fs1Qupdwp6pLKc+l9LMVi6LMeUGn1
+yjPWxEE/2Ygx5iPxgM9Ud3sbOg/nUSYs2mwwUU1NfrOYXhxzY/+7n7Nuk4/LFJ4
iEF+oHqf+gxY
-----END CERTIFICATE-----
Generated at Mon Jun 9 19:49:53 2025 by rpki-client