Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BThyfVhd3jeAjnkyQ9UCkDSm4CE83NYRgTBddTPQhMzS/1/3133382e3235352e32322e302f32342d3234203d3e20323633393531.roa
File:                     3133382e3235352e32322e302f32342d3234203d3e20323633393531.roa (raw, json)
Hash identifier:          pRzmgO3wsX7aRiY8vVUFySwq3AbdWbom85poarZnQkc=
Subject key identifier:   7E:47:49:F4:0F:A7:91:88:75:24:0E:BC:EB:FF:6F:B6:FD:85:29:EF
Certificate issuer:       /CN=3E0B06DA52F7E7DFA9E28E3E56408F896CC07AAD
Certificate serial:       1003FC20E69F952228FA0BB2F5EBBCEDA391BCFE
Authority key identifier: 3E:0B:06:DA:52:F7:E7:DF:A9:E2:8E:3E:56:40:8F:89:6C:C0:7A:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E0B06DA52F7E7DFA9E28E3E56408F896CC07AAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BThyfVhd3jeAjnkyQ9UCkDSm4CE83NYRgTBddTPQhMzS/1/3133382e3235352e32322e302f32342d3234203d3e20323633393531.roa
Signing time:             Sun 21 Apr 2024 19:28:15 +0000
ROA not before:           Sun 21 Apr 2024 19:23:15 +0000
ROA not after:            Sun 20 Apr 2025 19:28:15 +0000
asID:                     263951
IP address blocks:        138.255.22.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BThyfVhd3jeAjnkyQ9UCkDSm4CE83NYRgTBddTPQhMzS/1/3E0B06DA52F7E7DFA9E28E3E56408F896CC07AAD.crl
                          rsync://rpki-repo.registro.br/repo/BThyfVhd3jeAjnkyQ9UCkDSm4CE83NYRgTBddTPQhMzS/1/3E0B06DA52F7E7DFA9E28E3E56408F896CC07AAD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E0B06DA52F7E7DFA9E28E3E56408F896CC07AAD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 09:14:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:03:fc:20:e6:9f:95:22:28:fa:0b:b2:f5:eb:bc:ed:a3:91:bc:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E0B06DA52F7E7DFA9E28E3E56408F896CC07AAD
        Validity
            Not Before: Apr 21 19:23:15 2024 GMT
            Not After : Apr 20 19:28:15 2025 GMT
        Subject: CN=3082010A0282010100FD610E6EBBB04605AAAF01EA4F526FE7AD9E22D6EE5E9C0867157DFFE5B95E6A3D1A5FFCDC3678752972011F5D444C655E9325F81E4EF0AB2BC7B4DAF4DCA0D7AAF940EFF0E7096E20953F0B09B58B0569F8E6DA89DFB1A7EAD403F69A2D02FCF7FE44284A3C85BEFE3F78B09BCCE0867E2884C0E308DEA4EB407FDF66958087D223EB79BC96134AA682622A787BDBF6DC378561FDC11BC8CC47828705CE0D2DD0A00D52809129FC94236AA6A685B252874A815DD9E1BD6AE087782AC0A375FCEE4FC81133101B17CBB5C7607C4F9E7058078F1C69AFA366301EEBD330EB39656C72CB6C7DD709C751C9A15576465AF871E007D2ECD663456EBD7F042EB45F4D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:61:0e:6e:bb:b0:46:05:aa:af:01:ea:4f:52:
                    6f:e7:ad:9e:22:d6:ee:5e:9c:08:67:15:7d:ff:e5:
                    b9:5e:6a:3d:1a:5f:fc:dc:36:78:75:29:72:01:1f:
                    5d:44:4c:65:5e:93:25:f8:1e:4e:f0:ab:2b:c7:b4:
                    da:f4:dc:a0:d7:aa:f9:40:ef:f0:e7:09:6e:20:95:
                    3f:0b:09:b5:8b:05:69:f8:e6:da:89:df:b1:a7:ea:
                    d4:03:f6:9a:2d:02:fc:f7:fe:44:28:4a:3c:85:be:
                    fe:3f:78:b0:9b:cc:e0:86:7e:28:84:c0:e3:08:de:
                    a4:eb:40:7f:df:66:95:80:87:d2:23:eb:79:bc:96:
                    13:4a:a6:82:62:2a:78:7b:db:f6:dc:37:85:61:fd:
                    c1:1b:c8:cc:47:82:87:05:ce:0d:2d:d0:a0:0d:52:
                    80:91:29:fc:94:23:6a:a6:a6:85:b2:52:87:4a:81:
                    5d:d9:e1:bd:6a:e0:87:78:2a:c0:a3:75:fc:ee:4f:
                    c8:11:33:10:1b:17:cb:b5:c7:60:7c:4f:9e:70:58:
                    07:8f:1c:69:af:a3:66:30:1e:eb:d3:30:eb:39:65:
                    6c:72:cb:6c:7d:d7:09:c7:51:c9:a1:55:76:46:5a:
                    f8:71:e0:07:d2:ec:d6:63:45:6e:bd:7f:04:2e:b4:
                    5f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:47:49:F4:0F:A7:91:88:75:24:0E:BC:EB:FF:6F:B6:FD:85:29:EF
            X509v3 Authority Key Identifier:
                keyid:3E:0B:06:DA:52:F7:E7:DF:A9:E2:8E:3E:56:40:8F:89:6C:C0:7A:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BThyfVhd3jeAjnkyQ9UCkDSm4CE83NYRgTBddTPQhMzS/1/3E0B06DA52F7E7DFA9E28E3E56408F896CC07AAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E0B06DA52F7E7DFA9E28E3E56408F896CC07AAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BThyfVhd3jeAjnkyQ9UCkDSm4CE83NYRgTBddTPQhMzS/1/3133382e3235352e32322e302f32342d3234203d3e20323633393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:c0:71:95:df:90:9c:b1:9a:bb:56:f5:84:3d:84:c6:be:25:
         da:0f:eb:b0:00:c1:3f:21:6d:34:00:cd:05:69:a1:bd:40:90:
         cc:a5:ab:24:23:e0:f8:b6:1a:58:7b:d5:17:d8:0a:4f:a1:d5:
         7f:bb:fe:68:07:9a:67:c5:ac:8e:26:5d:90:d3:7e:54:ad:bf:
         a5:bd:1b:40:09:bd:87:87:9f:d7:a6:02:89:8e:e1:fe:3e:57:
         58:2f:59:ac:22:90:17:07:fe:e9:25:e8:1e:01:39:ed:8e:36:
         fb:dc:4c:6a:fe:94:59:fd:0e:93:2e:04:fe:32:0d:56:8e:cf:
         7f:de:92:ff:17:af:16:64:fc:3c:a8:7b:e2:ee:1b:68:00:b3:
         7b:9c:d9:29:0c:b9:dc:9f:00:38:4e:a0:dd:f1:fd:b2:ad:b8:
         22:87:1b:dd:34:28:4e:d8:72:a7:e1:34:a6:59:ea:a1:44:f6:
         c4:24:2e:8f:e2:26:c7:01:1f:c0:97:a5:12:3d:db:58:43:8a:
         91:4a:11:0a:e9:d8:78:05:d0:48:84:4d:26:2b:af:f3:5e:ea:
         23:e6:cb:07:59:83:bc:f8:ad:a9:14:23:c8:71:39:83:da:57:
         a4:28:65:d1:8f:54:ad:da:49:3e:79:36:5b:dd:2a:1e:c4:1d:
         8c:7c:72:6e
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUEAP8IOaflSIo+guy9eu87aORvP4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0UwQjA2REE1MkY3RTdERkE5RTI4RTNFNTY0MDhGODk2
Q0MwN0FBRDAeFw0yNDA0MjExOTIzMTVaFw0yNTA0MjAxOTI4MTVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRkQ2MTBFNkVCQkIwNDYwNUFB
QUYwMUVBNEY1MjZGRTdBRDlFMjJENkVFNUU5QzA4NjcxNTdERkZFNUI5NUU2QTNE
MUE1RkZDREMzNjc4NzUyOTcyMDExRjVENDQ0QzY1NUU5MzI1RjgxRTRFRjBBQjJC
QzdCNERBRjREQ0EwRDdBQUY5NDBFRkYwRTcwOTZFMjA5NTNGMEIwOUI1OEIwNTY5
RjhFNkRBODlERkIxQTdFQUQ0MDNGNjlBMkQwMkZDRjdGRTQ0Mjg0QTNDODVCRUZF
M0Y3OEIwOUJDQ0UwODY3RTI4ODRDMEUzMDhERUE0RUI0MDdGREY2Njk1ODA4N0Qy
MjNFQjc5QkM5NjEzNEFBNjgyNjIyQTc4N0JEQkY2REMzNzg1NjFGREMxMUJDOEND
NDc4Mjg3MDVDRTBEMkREMEEwMEQ1MjgwOTEyOUZDOTQyMzZBQTZBNjg1QjI1Mjg3
NEE4MTVERDlFMUJENkFFMDg3NzgyQUMwQTM3NUZDRUU0RkM4MTEzMzEwMUIxN0NC
QjVDNzYwN0M0RjlFNzA1ODA3OEYxQzY5QUZBMzY2MzAxRUVCRDMzMEVCMzk2NTZD
NzJDQjZDN0RENzA5Qzc1MUM5QTE1NTc2NDY1QUY4NzFFMDA3RDJFQ0Q2NjM0NTZF
QkQ3RjA0MkVCNDVGNEQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA/WEObruwRgWqrwHqT1Jv562eItbuXpwIZxV9/+W5Xmo9Gl/83DZ4
dSlyAR9dRExlXpMl+B5O8Ksrx7Ta9Nyg16r5QO/w5wluIJU/Cwm1iwVp+Obaid+x
p+rUA/aaLQL89/5EKEo8hb7+P3iwm8zghn4ohMDjCN6k60B/32aVgIfSI+t5vJYT
SqaCYip4e9v23DeFYf3BG8jMR4KHBc4NLdCgDVKAkSn8lCNqpqaFslKHSoFd2eG9
auCHeCrAo3X87k/IETMQGxfLtcdgfE+ecFgHjxxpr6NmMB7r0zDrOWVscstsfdcJ
x1HJoVV2Rlr4ceAH0uzWY0VuvX8ELrRfTQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FH5HSfQPp5GIdSQOvOv/b7b9hSnvMB8GA1UdIwQYMBaAFD4LBtpS9+ffqeKOPlZA
j4lswHqtMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JUaHlmVmhkM2plQWpu
a3lROVVDa0RTbTRDRTgzTllSZ1RCZGRUUFFoTXpTLzEvM0UwQjA2REE1MkY3RTdE
RkE5RTI4RTNFNTY0MDhGODk2Q0MwN0FBRC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8zRTBCMDZEQTUyRjdFN0RGQTlFMjhFM0U1NjQwOEY4OTZDQzA3
QUFELmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9CVGh5ZlZoZDNqZUFqbmt5UTlV
Q2tEU200Q0U4M05ZUmdUQmRkVFBRaE16Uy8xLzMxMzMzODJlMzIzNTM1MmUzMjMy
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMzMzkzNTMxLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
iv8WMA0GCSqGSIb3DQEBCwUAA4IBAQAAwHGV35CcsZq7VvWEPYTGviXaD+uwAME/
IW00AM0FaaG9QJDMpaskI+D4thpYe9UX2ApPodV/u/5oB5pnxayOJl2Q035Urb+l
vRtACb2Hh5/XpgKJjuH+PldYL1msIpAXB/7pJegeATntjjb73Exq/pRZ/Q6TLgT+
Mg1Wjs9/3pL/F68WZPw8qHvi7htoALN7nNkpDLncnwA4TqDd8f2yrbgihxvdNChO
2HKn4TSmWeqhRPbEJC6P4ibHAR/Al6USPdtYQ4qRShEK6dh4BdBIhE0mK6/zXuoj
5ssHWYO8+K2pFCPIcTmD2lekKGXRj1St2kk+eTZb3SoexB2MfHJu
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:13 2024 by rpki-client on console-ams.rpki-client.org