Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/1/3133382e3132312e3133322e302f32322d3232203d3e20323634333030.roa
File:                     3133382e3132312e3133322e302f32322d3232203d3e20323634333030.roa (raw, json)
Hash identifier:          nePLrI7joRrgQbt2fVsGs3GZCbneiBCFymjlsXZNuSI=
Subject key identifier:   B4:F9:DE:7B:7F:44:0C:DA:F0:7F:1B:F2:A7:FD:1E:E0:6E:55:34:33
Certificate issuer:       /CN=9BAD7480D68EE59406D3FBBE7F30557285587474
Certificate serial:       78D66110E8487DECDC1D4BAF629FF3794A26E62D
Authority key identifier: 9B:AD:74:80:D6:8E:E5:94:06:D3:FB:BE:7F:30:55:72:85:58:74:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BAD7480D68EE59406D3FBBE7F30557285587474.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/1/3133382e3132312e3133322e302f32322d3232203d3e20323634333030.roa
Signing time:             Thu 06 Mar 2025 06:01:53 +0000
ROA not before:           Thu 06 Mar 2025 05:56:53 +0000
ROA not after:            Thu 05 Mar 2026 06:01:53 +0000
asID:                     264300
IP address blocks:        138.121.132.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/1/9BAD7480D68EE59406D3FBBE7F30557285587474.crl
                          rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/1/9BAD7480D68EE59406D3FBBE7F30557285587474.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BAD7480D68EE59406D3FBBE7F30557285587474.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 14:38:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:d6:61:10:e8:48:7d:ec:dc:1d:4b:af:62:9f:f3:79:4a:26:e6:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BAD7480D68EE59406D3FBBE7F30557285587474
        Validity
            Not Before: Mar  6 05:56:53 2025 GMT
            Not After : Mar  5 06:01:53 2026 GMT
        Subject: CN=B4F9DE7B7F440CDAF07F1BF2A7FD1EE06E553433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:3f:a4:1d:65:4e:fc:c8:e9:a1:c7:82:94:82:
                    be:9a:78:45:3a:4a:be:ff:b4:0b:1a:51:3a:5c:01:
                    97:66:e1:3b:b3:0d:7e:3b:e0:43:4e:b0:61:33:7b:
                    8e:3f:72:61:e6:a7:28:3f:41:36:f8:56:6a:ec:d1:
                    4e:e2:34:bc:bb:30:ea:6e:d5:48:92:ec:b3:97:dd:
                    77:1b:f6:d2:43:0b:93:1e:aa:c9:34:0e:d2:6d:c1:
                    7f:eb:15:2e:3f:94:c2:23:c6:29:5c:8a:ec:4d:75:
                    83:41:81:fa:68:7b:37:7e:50:4c:60:57:d4:55:7f:
                    23:b8:4d:4f:76:ee:11:7f:f5:66:e2:02:23:2e:5f:
                    bf:70:97:03:33:ba:4a:42:b9:7e:cd:1d:1c:91:08:
                    03:c9:a0:ca:52:35:80:be:9f:32:57:a2:6b:13:b2:
                    56:bb:b6:f5:bb:60:ae:f2:0a:42:1e:8c:57:c2:68:
                    b8:6d:48:b2:0d:94:4c:15:c3:a3:23:b0:66:3e:26:
                    7d:7e:b7:40:94:df:63:e4:86:a5:fb:1b:93:29:4a:
                    ae:c4:ad:60:fd:44:9d:59:0c:56:90:9c:27:2b:e7:
                    c4:aa:d6:8b:20:1d:f5:32:f4:21:66:3f:fe:83:cd:
                    73:0e:03:12:d2:7b:68:d3:7d:23:a8:03:f6:59:13:
                    68:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:F9:DE:7B:7F:44:0C:DA:F0:7F:1B:F2:A7:FD:1E:E0:6E:55:34:33
            X509v3 Authority Key Identifier:
                keyid:9B:AD:74:80:D6:8E:E5:94:06:D3:FB:BE:7F:30:55:72:85:58:74:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/1/9BAD7480D68EE59406D3FBBE7F30557285587474.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BAD7480D68EE59406D3FBBE7F30557285587474.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/1/3133382e3132312e3133322e302f32322d3232203d3e20323634333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:7f:33:fc:27:64:64:87:0e:12:66:2b:60:45:f5:3e:a9:a7:
         b3:5b:66:bf:06:66:d5:4f:a3:10:da:8b:35:2f:82:60:a1:12:
         57:5e:fc:10:d6:0c:f5:c4:09:b0:70:8b:f7:38:ed:63:12:1e:
         11:18:0f:a5:a8:2b:4c:2d:3d:fc:5d:a4:f6:6a:2d:03:54:ad:
         a5:8a:8e:3f:ea:96:6c:8b:7f:4e:a9:6e:a7:8c:c4:8f:85:c1:
         d7:2c:ec:45:5b:a2:b5:6b:c9:1b:f5:4b:1c:35:45:cb:bd:c9:
         56:ce:24:e5:ef:ef:d9:40:2a:9c:16:4a:b9:bb:9d:26:d2:44:
         95:1c:2e:79:a4:a3:38:42:2a:89:4a:24:68:18:12:f9:14:ba:
         43:5b:72:05:c9:2e:23:c6:06:4f:0d:c3:b1:48:f2:ca:e2:b8:
         83:db:11:2f:2e:f8:6e:40:c8:20:92:7c:28:39:06:75:7c:2f:
         f2:41:a1:c3:7f:e3:12:8d:f1:c6:79:87:0b:38:fe:72:68:8c:
         ff:ca:67:f8:94:7c:cb:ba:28:fd:88:cb:1b:6d:de:c8:ed:36:
         2d:55:e3:f9:5d:6e:de:86:23:71:76:81:3c:df:50:c8:1a:20:
         c2:14:64:fd:7d:7f:84:5d:3f:26:9f:72:30:18:c2:cc:c7:6e:
         a4:41:89:24
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUeNZhEOhIfezcHUuvYp/zeUom5i0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUJBRDc0ODBENjhFRTU5NDA2RDNGQkJFN0YzMDU1NzI4
NTU4NzQ3NDAeFw0yNTAzMDYwNTU2NTNaFw0yNjAzMDUwNjAxNTNaMDMxMTAvBgNV
BAMTKEI0RjlERTdCN0Y0NDBDREFGMDdGMUJGMkE3RkQxRUUwNkU1NTM0MzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbP6QdZU78yOmhx4KUgr6aeEU6
Sr7/tAsaUTpcAZdm4TuzDX474ENOsGEze44/cmHmpyg/QTb4Vmrs0U7iNLy7MOpu
1UiS7LOX3Xcb9tJDC5Meqsk0DtJtwX/rFS4/lMIjxilciuxNdYNBgfpoezd+UExg
V9RVfyO4TU927hF/9WbiAiMuX79wlwMzukpCuX7NHRyRCAPJoMpSNYC+nzJXomsT
sla7tvW7YK7yCkIejFfCaLhtSLINlEwVw6MjsGY+Jn1+t0CU32PkhqX7G5MpSq7E
rWD9RJ1ZDFaQnCcr58Sq1osgHfUy9CFmP/6DzXMOAxLSe2jTfSOoA/ZZE2gzAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUtPnee39EDNrwfxvyp/0e4G5VNDMwHwYDVR0j
BBgwFoAUm610gNaO5ZQG0/u+fzBVcoVYdHQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmIyMzV2eVhVN2ZEaVJRaVh4YldQTUpMUmFpczVmWEJrOEZKemRUZ0Rt
eVQvMS85QkFENzQ4MEQ2OEVFNTk0MDZEM0ZCQkU3RjMwNTU3Mjg1NTg3NDc0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlCQUQ3NDgwRDY4RUU1OTQw
NkQzRkJCRTdGMzA1NTcyODU1ODc0NzQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JiMjM1dnlYVTdmRGlSUWlYeGJXUE1KTFJhaXM1ZlhCazhGSnpkVGdEbXlULzEv
MzEzMzM4MmUzMTMyMzEyZTMxMzMzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzNDMzMzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAop5hDANBgkqhkiG9w0BAQsFAAOCAQEAW38z
/CdkZIcOEmYrYEX1Pqmns1tmvwZm1U+jENqLNS+CYKESV178ENYM9cQJsHCL9zjt
YxIeERgPpagrTC09/F2k9motA1StpYqOP+qWbIt/Tqlup4zEj4XB1yzsRVuitWvJ
G/VLHDVFy73JVs4k5e/v2UAqnBZKubudJtJElRwueaSjOEIqiUokaBgS+RS6Q1ty
BckuI8YGTw3DsUjyyuK4g9sRLy74bkDIIJJ8KDkGdXwv8kGhw3/jEo3xxnmHCzj+
cmiM/8pn+JR8y7oo/YjLG23eyO02LVXj+V1u3oYjcXaBPN9QyBogwhRk/X1/hF0/
Jp9yMBjCzMdupEGJJA==
-----END CERTIFICATE-----
Generated at Sat Apr 12 21:28:50 2025 by rpki-client