Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/3133382e3132312e3136362e302f32332d3233203d3e20323730393130.roa
File:                     3133382e3132312e3136362e302f32332d3233203d3e20323730393130.roa (raw, json)
Hash identifier:          ShT2VSmMHelvPLe/wwnl43RUoEV3OV+94UBCN+jhnjk=
Subject key identifier:   73:30:BD:A6:08:50:E2:A7:09:65:55:82:13:6B:8F:05:EE:B2:39:7F
Certificate issuer:       /CN=21B66D518F6F1EC440896EDEA1C6F9E694CC3B66
Certificate serial:       6B8B458A56A91347A0A6AD55FC24E401627718B6
Authority key identifier: 21:B6:6D:51:8F:6F:1E:C4:40:89:6E:DE:A1:C6:F9:E6:94:CC:3B:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/3133382e3132312e3136362e302f32332d3233203d3e20323730393130.roa
Signing time:             Thu 04 Apr 2024 07:17:27 +0000
ROA not before:           Thu 04 Apr 2024 07:12:27 +0000
ROA not after:            Thu 03 Apr 2025 07:17:27 +0000
asID:                     270910
IP address blocks:        138.121.166.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.crl
                          rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:26:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:8b:45:8a:56:a9:13:47:a0:a6:ad:55:fc:24:e4:01:62:77:18:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21B66D518F6F1EC440896EDEA1C6F9E694CC3B66
        Validity
            Not Before: Apr  4 07:12:27 2024 GMT
            Not After : Apr  3 07:17:27 2025 GMT
        Subject: CN=7330BDA60850E2A709655582136B8F05EEB2397F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3a:0e:28:0f:17:0e:98:ae:ba:09:9d:72:17:
                    74:a8:c0:bb:89:aa:e3:99:a7:9e:18:94:45:6f:92:
                    d6:57:db:c3:19:5f:6a:8f:17:ea:76:6e:5b:6d:b3:
                    5c:72:79:b9:2c:21:5c:af:c6:26:17:8e:78:28:dc:
                    e5:52:fe:a4:e0:0b:b3:9b:21:82:4b:4d:71:06:f3:
                    68:be:33:c8:6a:19:73:c8:d3:35:c7:3e:86:d8:19:
                    36:f3:c7:f7:d1:90:82:58:ab:b9:5f:d2:7d:28:00:
                    45:8e:6f:a2:a2:26:80:b0:45:21:64:1c:7a:49:a1:
                    92:c4:98:4f:a6:89:c0:2f:58:50:e4:23:04:fc:dc:
                    c6:b7:38:a6:a3:6f:51:88:ee:61:33:f0:3a:27:50:
                    c0:9b:98:4f:98:7e:dc:87:7a:5a:89:f6:53:32:da:
                    23:c5:f7:fa:68:a3:ba:3b:e0:99:a9:a7:61:13:b8:
                    32:2e:84:9b:b4:57:d8:27:78:97:f2:c6:65:43:09:
                    12:30:24:e0:c9:83:17:d4:a8:49:b2:c0:8b:d1:29:
                    c5:24:e4:1d:27:66:94:6c:f9:0c:e2:9a:00:b3:fa:
                    25:d1:e3:96:03:c0:c9:66:18:ae:67:e3:29:59:36:
                    fc:f2:ff:ee:4c:e4:9c:71:53:b8:64:6a:9f:ea:87:
                    a1:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:30:BD:A6:08:50:E2:A7:09:65:55:82:13:6B:8F:05:EE:B2:39:7F
            X509v3 Authority Key Identifier:
                keyid:21:B6:6D:51:8F:6F:1E:C4:40:89:6E:DE:A1:C6:F9:E6:94:CC:3B:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/3133382e3132312e3136362e302f32332d3233203d3e20323730393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b5:98:aa:60:af:c0:e3:de:af:84:07:4a:33:a1:b3:e4:f2:93:
         9b:dd:65:dd:01:b7:5b:34:a2:2e:fa:62:1e:1a:e1:04:c7:e0:
         6c:3c:2a:ff:6c:c7:1e:9e:20:00:b9:6f:33:31:98:f3:d8:31:
         25:32:34:de:37:62:ec:16:97:4d:72:d6:e0:a9:21:c8:ed:e9:
         3f:12:f5:e7:fe:a9:7a:d2:01:f8:25:17:ac:dc:1e:ec:50:f7:
         b7:92:91:6b:b0:5a:8c:b0:d6:81:6f:97:e2:94:1d:77:12:de:
         b8:34:f4:ab:73:90:5b:bd:86:b1:22:04:5b:e3:21:00:8d:79:
         ff:37:5d:fa:50:c3:a9:f7:ea:00:16:6b:90:7f:77:e2:5a:ad:
         9e:d1:92:99:07:ba:bd:a8:cd:a3:4e:b5:02:a5:01:72:7f:3a:
         d0:f5:f9:c4:09:74:ef:00:e8:53:db:1f:bc:af:12:27:c6:8d:
         ef:0a:6d:04:c0:bc:80:35:ba:cf:e8:22:5a:7c:13:e7:f6:fb:
         61:e7:6c:04:62:6c:0d:c4:97:ca:40:59:0d:95:ab:05:6a:b5:
         68:ce:b5:ce:1e:9d:5c:f8:12:8b:a7:cd:e6:d2:24:2c:0b:db:
         17:89:c1:63:55:e4:c3:8c:f8:42:27:3c:63:66:09:b6:f1:27:
         c9:83:aa:85
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUa4tFilapE0egpq1V/CTkAWJ3GLYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjFCNjZENTE4RjZGMUVDNDQwODk2RURFQTFDNkY5RTY5
NENDM0I2NjAeFw0yNDA0MDQwNzEyMjdaFw0yNTA0MDMwNzE3MjdaMDMxMTAvBgNV
BAMTKDczMzBCREE2MDg1MEUyQTcwOTY1NTU4MjEzNkI4RjA1RUVCMjM5N0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzOg4oDxcOmK66CZ1yF3SowLuJ
quOZp54YlEVvktZX28MZX2qPF+p2bltts1xyebksIVyvxiYXjngo3OVS/qTgC7Ob
IYJLTXEG82i+M8hqGXPI0zXHPobYGTbzx/fRkIJYq7lf0n0oAEWOb6KiJoCwRSFk
HHpJoZLEmE+micAvWFDkIwT83Ma3OKajb1GI7mEz8DonUMCbmE+YftyHelqJ9lMy
2iPF9/poo7o74Jmpp2ETuDIuhJu0V9gneJfyxmVDCRIwJODJgxfUqEmywIvRKcUk
5B0nZpRs+QzimgCz+iXR45YDwMlmGK5n4ylZNvzy/+5M5JxxU7hkap/qh6ElAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUczC9pghQ4qcJZVWCE2uPBe6yOX8wHwYDVR0j
BBgwFoAUIbZtUY9vHsRAiW7eocb55pTMO2YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDNxRTVIc0NxOEI1SGp0Smc5MXBjeFFZRVRyUnlIUXBCa1VHUmNEaGRU
Q2YvMS8yMUI2NkQ1MThGNkYxRUM0NDA4OTZFREVBMUM2RjlFNjk0Q0MzQjY2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxQjY2RDUxOEY2RjFFQzQ0
MDg5NkVERUExQzZGOUU2OTRDQzNCNjYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QzcUU1SHNDcThCNUhqdEpnOTFwY3hRWUVUclJ5SFFwQmtVR1JjRGhkVENmLzEv
MzEzMzM4MmUzMTMyMzEyZTMxMzYzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzczMDM5MzEzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAYp5pjANBgkqhkiG9w0BAQsFAAOCAQEAtZiq
YK/A496vhAdKM6Gz5PKTm91l3QG3WzSiLvpiHhrhBMfgbDwq/2zHHp4gALlvMzGY
89gxJTI03jdi7BaXTXLW4KkhyO3pPxL15/6petIB+CUXrNwe7FD3t5KRa7BajLDW
gW+X4pQddxLeuDT0q3OQW72GsSIEW+MhAI15/zdd+lDDqffqABZrkH934lqtntGS
mQe6vajNo061AqUBcn860PX5xAl07wDoU9sfvK8SJ8aN7wptBMC8gDW6z+giWnwT
5/b7YedsBGJsDcSXykBZDZWrBWq1aM61zh6dXPgSi6fN5tIkLAvbF4nBY1Xkw4z4
Qic8Y2YJtvEnyYOqhQ==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:52 2025 by rpki-client