Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/3133382e3230342e3234302e302f32322d3332203d3e20323633393133.roa
File:                     3133382e3230342e3234302e302f32322d3332203d3e20323633393133.roa (raw, json)
Hash identifier:          6mJ6iuulOW3+crIiKAIvk4hYZqeKFbBsO6teOrtYvuw=
Subject key identifier:   C9:39:75:BB:66:8C:5E:1C:94:3E:A8:7C:9E:71:F2:60:BC:35:81:32
Certificate issuer:       /CN=13B48D144CCB1B4DE47F34FF8FF3AEF82D87144B
Certificate serial:       033325D3C21EFCBFDD26050E9E1803F0C75C4010
Authority key identifier: 13:B4:8D:14:4C:CB:1B:4D:E4:7F:34:FF:8F:F3:AE:F8:2D:87:14:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13B48D144CCB1B4DE47F34FF8FF3AEF82D87144B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/3133382e3230342e3234302e302f32322d3332203d3e20323633393133.roa
Signing time:             Thu 09 Jan 2025 12:57:23 +0000
ROA not before:           Thu 09 Jan 2025 12:52:23 +0000
ROA not after:            Thu 08 Jan 2026 12:57:23 +0000
asID:                     263913
IP address blocks:        138.204.240.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/13B48D144CCB1B4DE47F34FF8FF3AEF82D87144B.crl
                          rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/13B48D144CCB1B4DE47F34FF8FF3AEF82D87144B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13B48D144CCB1B4DE47F34FF8FF3AEF82D87144B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 00:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:33:25:d3:c2:1e:fc:bf:dd:26:05:0e:9e:18:03:f0:c7:5c:40:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13B48D144CCB1B4DE47F34FF8FF3AEF82D87144B
        Validity
            Not Before: Jan  9 12:52:23 2025 GMT
            Not After : Jan  8 12:57:23 2026 GMT
        Subject: CN=C93975BB668C5E1C943EA87C9E71F260BC358132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:33:07:91:cc:8a:79:4b:79:bb:04:6f:be:5a:
                    1a:57:5f:e8:bb:5a:51:ba:f0:48:3d:38:dc:32:57:
                    54:51:bc:58:d0:c6:2e:fe:4e:80:04:e3:96:98:92:
                    af:b9:05:f8:af:1d:a9:24:5a:d1:41:4d:ef:8c:72:
                    f2:38:e9:25:67:55:1a:b8:62:07:57:56:d4:f2:a0:
                    60:6c:85:0d:64:3f:a4:dc:24:8e:a3:b7:f9:88:6a:
                    1b:e3:1f:b1:48:41:ea:50:c6:8e:cf:1e:40:10:21:
                    e6:1b:1f:13:1c:61:5d:a7:ea:96:8f:a1:c7:a7:e0:
                    31:59:de:5d:31:8a:c1:a1:b2:aa:26:bf:fc:ac:c7:
                    52:87:8f:35:7f:db:30:12:2a:13:f7:e4:e1:c1:b9:
                    25:00:6f:bd:61:8e:b1:ca:7c:39:d7:2e:66:fe:f8:
                    63:81:75:44:af:ce:c5:21:1d:cb:50:89:3d:ed:3c:
                    96:6a:83:1c:4f:92:fa:bc:df:e0:d9:55:2f:1e:f0:
                    6b:13:79:15:d7:3e:1d:4d:62:8d:87:3b:0b:b6:6f:
                    47:92:f2:da:bf:d0:aa:97:eb:16:6f:8b:44:86:49:
                    cf:df:cc:55:88:16:ae:b0:e9:0b:64:a9:64:47:04:
                    56:a6:0f:f2:89:ec:98:e9:57:b5:0a:e9:21:6b:71:
                    ca:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:39:75:BB:66:8C:5E:1C:94:3E:A8:7C:9E:71:F2:60:BC:35:81:32
            X509v3 Authority Key Identifier:
                keyid:13:B4:8D:14:4C:CB:1B:4D:E4:7F:34:FF:8F:F3:AE:F8:2D:87:14:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/13B48D144CCB1B4DE47F34FF8FF3AEF82D87144B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13B48D144CCB1B4DE47F34FF8FF3AEF82D87144B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/3133382e3230342e3234302e302f32322d3332203d3e20323633393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:0b:52:6b:7b:af:07:42:1a:3b:c6:82:4b:b1:be:5b:82:9e:
         9e:18:67:1a:de:8f:5e:84:9d:47:ab:44:c8:3f:22:3e:98:8c:
         5c:62:fd:8b:a7:fd:ed:71:da:c7:a7:cc:8b:7a:0b:a4:04:25:
         31:f1:47:b8:e4:9b:78:32:ef:db:cf:4d:cb:3f:36:87:0c:82:
         0e:60:16:d9:38:cf:cc:68:bb:47:56:ed:12:56:56:28:6d:a1:
         fe:88:12:14:70:2d:36:ac:54:20:36:ef:c2:1f:2f:7e:45:13:
         75:e1:26:8e:14:5a:dd:fe:b5:a2:6b:63:9a:3d:bb:88:20:f7:
         db:f2:f9:3c:3b:15:54:a7:bb:d3:0f:4d:c8:b4:fd:2f:4a:26:
         12:d7:23:d8:3e:51:d7:36:36:cc:6e:2a:19:f2:6b:0e:b0:27:
         ee:5b:aa:fd:c1:9c:90:32:01:9c:2e:30:2a:76:2f:97:b5:06:
         e4:f9:52:d9:82:d9:78:ab:d0:83:00:54:52:8b:4d:8a:08:f1:
         06:1b:27:c6:15:35:36:98:18:0b:fe:81:cf:0c:5d:ac:d9:0f:
         86:90:ae:79:17:54:63:bb:3e:62:f7:1c:a3:0f:d8:3a:8c:82:
         be:34:f4:d3:a9:0e:ff:2b:5a:1a:a9:c1:25:94:b5:8f:5f:a9:
         42:29:c4:2a
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUAzMl08Ie/L/dJgUOnhgD8MdcQBAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTNCNDhEMTQ0Q0NCMUI0REU0N0YzNEZGOEZGM0FFRjgy
RDg3MTQ0QjAeFw0yNTAxMDkxMjUyMjNaFw0yNjAxMDgxMjU3MjNaMDMxMTAvBgNV
BAMTKEM5Mzk3NUJCNjY4QzVFMUM5NDNFQTg3QzlFNzFGMjYwQkMzNTgxMzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAMweRzIp5S3m7BG++WhpXX+i7
WlG68Eg9ONwyV1RRvFjQxi7+ToAE45aYkq+5BfivHakkWtFBTe+McvI46SVnVRq4
YgdXVtTyoGBshQ1kP6TcJI6jt/mIahvjH7FIQepQxo7PHkAQIeYbHxMcYV2n6paP
ocen4DFZ3l0xisGhsqomv/ysx1KHjzV/2zASKhP35OHBuSUAb71hjrHKfDnXLmb+
+GOBdUSvzsUhHctQiT3tPJZqgxxPkvq83+DZVS8e8GsTeRXXPh1NYo2HOwu2b0eS
8tq/0KqX6xZvi0SGSc/fzFWIFq6w6QtkqWRHBFamD/KJ7JjpV7UK6SFrccrXAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUyTl1u2aMXhyUPqh8nnHyYLw1gTIwHwYDVR0j
BBgwFoAUE7SNFEzLG03kfzT/j/Ou+C2HFEswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1dUOWlvM3JtTVBOTWVVdURTdW9kaDR6UWM2V282cktXeDZ4OHFzSGh3
aFcvMC8xM0I0OEQxNDRDQ0IxQjRERTQ3RjM0RkY4RkYzQUVGODJEODcxNDRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEzQjQ4RDE0NENDQjFCNERF
NDdGMzRGRjhGRjNBRUY4MkQ4NzE0NEIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NXVDlpbzNybU1QTk1lVXVEU3VvZGg0elFjNldvNnJLV3g2eDhxc0hod2hXLzAv
MzEzMzM4MmUzMjMwMzQyZTMyMzQzMDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzYzMzM5MzEzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAorM8DANBgkqhkiG9w0BAQsFAAOCAQEAHQtS
a3uvB0IaO8aCS7G+W4KenhhnGt6PXoSdR6tEyD8iPpiMXGL9i6f97XHax6fMi3oL
pAQlMfFHuOSbeDLv289Nyz82hwyCDmAW2TjPzGi7R1btElZWKG2h/ogSFHAtNqxU
IDbvwh8vfkUTdeEmjhRa3f61omtjmj27iCD32/L5PDsVVKe70w9NyLT9L0omEtcj
2D5R1zY2zG4qGfJrDrAn7luq/cGckDIBnC4wKnYvl7UG5PlS2YLZeKvQgwBUUotN
igjxBhsnxhU1NpgYC/6BzwxdrNkPhpCueRdUY7s+Yvccow/YOoyCvjT006kO/yta
GqnBJZS1j1+pQinEKg==
-----END CERTIFICATE-----
Generated at Mon Apr 7 04:23:04 2025 by rpki-client