Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/3133382e3132322e3130332e302f32342d3234203d3e20323634333131.roa
File:                     3133382e3132322e3130332e302f32342d3234203d3e20323634333131.roa (raw, json)
Hash identifier:          6vHtLq7Xge+kvDVmjSvBv+gDPgirQGosKx/+7SZnucQ=
Subject key identifier:   23:3B:C0:FA:7E:C2:1B:9C:95:B8:2B:66:10:B8:85:05:AB:96:9F:F3
Certificate issuer:       /CN=B5E0BE3C4F73F852BFF3535537037CAE482A4EFA
Certificate serial:       01627C091C905DED0A99C1A53D6EF8F732CF05E8
Authority key identifier: B5:E0:BE:3C:4F:73:F8:52:BF:F3:53:55:37:03:7C:AE:48:2A:4E:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/3133382e3132322e3130332e302f32342d3234203d3e20323634333131.roa
Signing time:             Wed 05 Mar 2025 19:00:03 +0000
ROA not before:           Wed 05 Mar 2025 18:55:03 +0000
ROA not after:            Wed 04 Mar 2026 19:00:03 +0000
asID:                     264311
IP address blocks:        138.122.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.crl
                          rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 19:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:62:7c:09:1c:90:5d:ed:0a:99:c1:a5:3d:6e:f8:f7:32:cf:05:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5E0BE3C4F73F852BFF3535537037CAE482A4EFA
        Validity
            Not Before: Mar  5 18:55:03 2025 GMT
            Not After : Mar  4 19:00:03 2026 GMT
        Subject: CN=3082010A0282010100B427B77403F70EE6BF6C280980DD2EBA671E6A340FEC555C418728C73F4AD26B0C78D70B997C20CC29865EEEC2A0C55EC12D10712CF50D622697E9A29D3B19BB0D9EA73EDF78FC86177843B59490FCDE9A88B2F049E5304C7C68280A27288A37201EB8BD17B8DCD65DA9D9E35AA98316BD498F78A827AD353768AA3CE8136649DA6086389D41A71FF3DE79783C233771B905DDF6A7475BA505900DA5A414EB2C8E7F1860F6B13E686FBC7EDB00F9456EEE7B9E302D27905A311A97DC7C4DED9311307603CDD48E4CD503E45956CC9144AB37D399BB176C5AC11F99D9A8154FC87F8E7B26B6E0E75DB0E44D3950E4885EF66F02F0308A12310E59BC18DC8FFA170203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:27:b7:74:03:f7:0e:e6:bf:6c:28:09:80:dd:
                    2e:ba:67:1e:6a:34:0f:ec:55:5c:41:87:28:c7:3f:
                    4a:d2:6b:0c:78:d7:0b:99:7c:20:cc:29:86:5e:ee:
                    c2:a0:c5:5e:c1:2d:10:71:2c:f5:0d:62:26:97:e9:
                    a2:9d:3b:19:bb:0d:9e:a7:3e:df:78:fc:86:17:78:
                    43:b5:94:90:fc:de:9a:88:b2:f0:49:e5:30:4c:7c:
                    68:28:0a:27:28:8a:37:20:1e:b8:bd:17:b8:dc:d6:
                    5d:a9:d9:e3:5a:a9:83:16:bd:49:8f:78:a8:27:ad:
                    35:37:68:aa:3c:e8:13:66:49:da:60:86:38:9d:41:
                    a7:1f:f3:de:79:78:3c:23:37:71:b9:05:dd:f6:a7:
                    47:5b:a5:05:90:0d:a5:a4:14:eb:2c:8e:7f:18:60:
                    f6:b1:3e:68:6f:bc:7e:db:00:f9:45:6e:ee:7b:9e:
                    30:2d:27:90:5a:31:1a:97:dc:7c:4d:ed:93:11:30:
                    76:03:cd:d4:8e:4c:d5:03:e4:59:56:cc:91:44:ab:
                    37:d3:99:bb:17:6c:5a:c1:1f:99:d9:a8:15:4f:c8:
                    7f:8e:7b:26:b6:e0:e7:5d:b0:e4:4d:39:50:e4:88:
                    5e:f6:6f:02:f0:30:8a:12:31:0e:59:bc:18:dc:8f:
                    fa:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:3B:C0:FA:7E:C2:1B:9C:95:B8:2B:66:10:B8:85:05:AB:96:9F:F3
            X509v3 Authority Key Identifier:
                keyid:B5:E0:BE:3C:4F:73:F8:52:BF:F3:53:55:37:03:7C:AE:48:2A:4E:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/3133382e3132322e3130332e302f32342d3234203d3e20323634333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:c5:c8:a9:69:6b:e5:40:e7:ca:be:64:13:e5:d2:36:76:41:
         15:61:2c:7a:70:bf:71:db:68:16:e5:bf:35:34:39:03:45:8d:
         23:88:5e:37:4c:4e:43:42:3a:93:6c:4a:4c:26:01:0f:83:5b:
         e9:d3:70:a3:a1:f4:06:6f:d4:b9:e7:ed:c4:48:f7:c2:fa:38:
         21:6f:f4:66:62:7a:01:ea:c3:dc:9f:ef:0a:f2:b4:75:c3:24:
         1f:be:7e:28:b3:4a:00:ac:ee:7d:39:45:4f:58:4c:25:b1:ff:
         68:6d:06:79:5f:fd:70:e7:73:aa:69:cc:a8:d6:d4:78:59:6a:
         63:12:41:68:3d:73:9c:04:e0:20:a5:a0:dc:8a:d4:4e:5e:5d:
         92:92:b3:20:f3:26:30:7e:59:72:40:cc:80:09:4a:20:b6:f5:
         c4:21:42:57:19:c6:68:14:8e:8c:03:12:8c:b8:b3:7b:33:6b:
         71:6e:87:c3:6d:da:b4:7c:64:6a:52:b4:fc:31:50:a4:ac:99:
         d8:d2:b0:5d:61:7a:34:ce:46:6d:7c:9f:5f:41:1d:76:36:61:
         f7:a1:02:10:78:09:ea:c3:d6:3e:7b:28:2d:2e:a1:cb:b4:fe:
         fb:e1:68:e8:75:e5:76:a6:22:ed:a7:60:83:f9:93:3f:4f:ac:
         c9:ab:54:03
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUAWJ8CRyQXe0KmcGlPW749zLPBegwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVFMEJFM0M0RjczRjg1MkJGRjM1MzU1MzcwMzdDQUU0
ODJBNEVGQTAeFw0yNTAzMDUxODU1MDNaFw0yNjAzMDQxOTAwMDNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjQyN0I3NzQwM0Y3MEVFNkJG
NkMyODA5ODBERDJFQkE2NzFFNkEzNDBGRUM1NTVDNDE4NzI4QzczRjRBRDI2QjBD
NzhENzBCOTk3QzIwQ0MyOTg2NUVFRUMyQTBDNTVFQzEyRDEwNzEyQ0Y1MEQ2MjI2
OTdFOUEyOUQzQjE5QkIwRDlFQTczRURGNzhGQzg2MTc3ODQzQjU5NDkwRkNERTlB
ODhCMkYwNDlFNTMwNEM3QzY4MjgwQTI3Mjg4QTM3MjAxRUI4QkQxN0I4RENENjVE
QTlEOUUzNUFBOTgzMTZCRDQ5OEY3OEE4MjdBRDM1Mzc2OEFBM0NFODEzNjY0OURB
NjA4NjM4OUQ0MUE3MUZGM0RFNzk3ODNDMjMzNzcxQjkwNURERjZBNzQ3NUJBNTA1
OTAwREE1QTQxNEVCMkM4RTdGMTg2MEY2QjEzRTY4NkZCQzdFREIwMEY5NDU2RUVF
N0I5RTMwMkQyNzkwNUEzMTFBOTdEQzdDNERFRDkzMTEzMDc2MDNDREQ0OEU0Q0Q1
MDNFNDU5NTZDQzkxNDRBQjM3RDM5OUJCMTc2QzVBQzExRjk5RDlBODE1NEZDODdG
OEU3QjI2QjZFMEU3NURCMEU0NEQzOTUwRTQ4ODVFRjY2RjAyRjAzMDhBMTIzMTBF
NTlCQzE4REM4RkZBMTcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAtCe3dAP3Dua/bCgJgN0uumceajQP7FVcQYcoxz9K0msMeNcLmXwg
zCmGXu7CoMVewS0QcSz1DWIml+minTsZuw2epz7fePyGF3hDtZSQ/N6aiLLwSeUw
THxoKAonKIo3IB64vRe43NZdqdnjWqmDFr1Jj3ioJ601N2iqPOgTZknaYIY4nUGn
H/PeeXg8IzdxuQXd9qdHW6UFkA2lpBTrLI5/GGD2sT5ob7x+2wD5RW7ue54wLSeQ
WjEal9x8Te2TETB2A83UjkzVA+RZVsyRRKs305m7F2xawR+Z2agVT8h/jnsmtuDn
XbDkTTlQ5Ihe9m8C8DCKEjEOWbwY3I/6FwIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FCM7wPp+whuclbgrZhC4hQWrlp/zMB8GA1UdIwQYMBaAFLXgvjxPc/hSv/NTVTcD
fK5IKk76MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NDbXdzVEgzZ3F0UUdI
d2VWRGtWVjV6RXdRS1JkUHZVQWNEYWpBUXQ5V1JmLzEvQjVFMEJFM0M0RjczRjg1
MkJGRjM1MzU1MzcwMzdDQUU0ODJBNEVGQS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9CNUUwQkUzQzRGNzNGODUyQkZGMzUzNTUzNzAzN0NBRTQ4MkE0
RUZBLmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9DQ213c1RIM2dxdFFHSHdlVkRr
VlY1ekV3UUtSZFB2VUFjRGFqQVF0OVdSZi8xLzMxMzMzODJlMzEzMjMyMmUzMTMw
MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzQzMzMxMzEucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACKemcwDQYJKoZIhvcNAQELBQADggEBAIHFyKlpa+VA58q+ZBPl0jZ2QRVhLHpw
v3HbaBblvzU0OQNFjSOIXjdMTkNCOpNsSkwmAQ+DW+nTcKOh9AZv1Lnn7cRI98L6
OCFv9GZiegHqw9yf7wrytHXDJB++fiizSgCs7n05RU9YTCWx/2htBnlf/XDnc6pp
zKjW1HhZamMSQWg9c5wE4CCloNyK1E5eXZKSsyDzJjB+WXJAzIAJSiC29cQhQlcZ
xmgUjowDEoy4s3sza3Fuh8Nt2rR8ZGpStPwxUKSsmdjSsF1hejTORm18n19BHXY2
YfehAhB4CerD1j57KC0uocu0/vvhaOh15XamIu2nYIP5kz9PrMmrVAM=
-----END CERTIFICATE-----
Generated at Sun Apr 6 23:37:43 2025 by rpki-client