Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/3133382e3138352e3234302e302f32322d3232203d3e20323633393230.roa
File:                     3133382e3138352e3234302e302f32322d3232203d3e20323633393230.roa (raw, json)
Hash identifier:          eCvDvjHAPcVRCquAP6C81vPpMjpAs5CCA8EmIMyMBaU=
Subject key identifier:   6D:6A:00:89:DF:60:55:5A:CE:61:D6:10:ED:96:3D:15:07:CD:8E:53
Certificate issuer:       /CN=D87FCA943E98B8806A606F5B0F8BE7294C4D93A3
Certificate serial:       7F92EE694D14FCE6E799E8B6B9ADC74381604959
Authority key identifier: D8:7F:CA:94:3E:98:B8:80:6A:60:6F:5B:0F:8B:E7:29:4C:4D:93:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D87FCA943E98B8806A606F5B0F8BE7294C4D93A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/3133382e3138352e3234302e302f32322d3232203d3e20323633393230.roa
Signing time:             Tue 27 May 2025 20:34:47 +0000
ROA not before:           Tue 27 May 2025 20:29:47 +0000
ROA not after:            Tue 26 May 2026 20:34:47 +0000
asID:                     263920
IP address blocks:        138.185.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/D87FCA943E98B8806A606F5B0F8BE7294C4D93A3.crl
                          rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/D87FCA943E98B8806A606F5B0F8BE7294C4D93A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D87FCA943E98B8806A606F5B0F8BE7294C4D93A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 20:35:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:92:ee:69:4d:14:fc:e6:e7:99:e8:b6:b9:ad:c7:43:81:60:49:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D87FCA943E98B8806A606F5B0F8BE7294C4D93A3
        Validity
            Not Before: May 27 20:29:47 2025 GMT
            Not After : May 26 20:34:47 2026 GMT
        Subject: CN=6D6A0089DF60555ACE61D610ED963D1507CD8E53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:90:46:c9:c9:d3:7b:b5:9e:d3:1b:24:1d:6c:
                    5d:60:d7:c8:30:2c:62:bd:0d:3c:ac:3b:18:78:c1:
                    20:f1:61:b3:a3:1b:57:18:55:61:5e:8e:f1:19:e5:
                    f8:70:88:08:1a:bf:1e:05:1a:d7:37:46:de:57:40:
                    49:d8:c2:90:86:12:4c:96:15:99:52:9f:f0:64:3d:
                    62:be:b9:f4:1c:60:cf:42:43:ad:d5:0d:18:09:db:
                    49:82:b8:f2:e4:19:21:d6:0d:98:d3:70:11:57:47:
                    c4:14:bd:a0:0f:6c:74:44:82:90:24:91:68:78:2f:
                    7e:3a:bf:c3:d5:ab:d2:e4:d2:ee:85:5b:81:33:be:
                    2c:68:0f:b5:a2:a4:68:b0:9c:40:5b:88:39:e9:7c:
                    98:f0:f4:79:d8:8c:01:24:31:38:fe:6d:8e:6c:94:
                    f8:78:da:04:31:38:36:c4:11:5c:18:44:1a:ea:b6:
                    a7:27:b8:cb:99:a4:61:ed:00:5a:6a:5e:9e:f8:01:
                    e3:7c:3f:85:56:c7:b9:08:9d:20:59:a7:bc:21:3a:
                    ea:12:e0:77:16:a1:b8:09:62:2f:99:d6:e7:a3:95:
                    71:52:66:24:fe:a1:33:7b:8c:5b:63:8a:56:e8:89:
                    8c:b2:aa:1c:f5:d7:db:7a:06:2d:21:81:f5:e7:25:
                    4a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:6A:00:89:DF:60:55:5A:CE:61:D6:10:ED:96:3D:15:07:CD:8E:53
            X509v3 Authority Key Identifier:
                keyid:D8:7F:CA:94:3E:98:B8:80:6A:60:6F:5B:0F:8B:E7:29:4C:4D:93:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/D87FCA943E98B8806A606F5B0F8BE7294C4D93A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D87FCA943E98B8806A606F5B0F8BE7294C4D93A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/3133382e3138352e3234302e302f32322d3232203d3e20323633393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:9c:3c:84:b1:e0:18:3f:e9:1c:42:6c:bf:53:d5:14:3f:7f:
         eb:89:33:86:9e:61:92:ea:10:ce:44:46:e5:45:68:03:44:eb:
         ce:fb:79:71:76:c4:5e:9d:a0:18:fb:06:77:17:95:80:73:6f:
         96:b3:ca:3c:85:ca:dd:01:d2:df:57:8d:02:84:79:27:f1:98:
         f7:99:4d:0a:58:77:23:84:f7:da:f2:a7:9c:7f:73:77:08:f9:
         cd:97:9c:e9:e6:27:d1:e6:0a:a7:b2:38:ba:46:69:ae:cc:17:
         6f:35:0f:cf:a1:8d:c2:06:6f:47:02:af:af:54:54:ed:51:b6:
         d2:10:cd:c8:5b:98:b5:9e:d0:74:1c:64:a1:a0:44:f6:68:26:
         28:a5:b4:9d:78:3f:ce:be:8b:74:ec:ac:36:c5:08:c6:31:e4:
         f7:d1:da:72:2e:22:b9:64:91:3d:94:7b:24:06:dc:56:ca:a2:
         54:8f:c1:b8:c5:08:77:26:71:74:c7:f1:35:c0:a0:d5:87:a0:
         49:8d:1d:0b:bb:ee:c6:2c:a3:0b:24:9b:e2:a5:68:f1:fb:9f:
         e7:8b:9e:c7:0b:81:a6:8b:35:8c:7b:c7:e8:bd:81:9a:9d:6a:
         70:9f:fe:49:f1:32:69:e9:6f:50:fa:79:ef:6a:01:a4:8f:a0:
         86:5d:60:a4
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUf5LuaU0U/Obnmei2ua3HQ4FgSVkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDg3RkNBOTQzRTk4Qjg4MDZBNjA2RjVCMEY4QkU3Mjk0
QzREOTNBMzAeFw0yNTA1MjcyMDI5NDdaFw0yNjA1MjYyMDM0NDdaMDMxMTAvBgNV
BAMTKDZENkEwMDg5REY2MDU1NUFDRTYxRDYxMEVEOTYzRDE1MDdDRDhFNTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtkEbJydN7tZ7TGyQdbF1g18gw
LGK9DTysOxh4wSDxYbOjG1cYVWFejvEZ5fhwiAgavx4FGtc3Rt5XQEnYwpCGEkyW
FZlSn/BkPWK+ufQcYM9CQ63VDRgJ20mCuPLkGSHWDZjTcBFXR8QUvaAPbHREgpAk
kWh4L346v8PVq9Lk0u6FW4EzvixoD7WipGiwnEBbiDnpfJjw9HnYjAEkMTj+bY5s
lPh42gQxODbEEVwYRBrqtqcnuMuZpGHtAFpqXp74AeN8P4VWx7kInSBZp7whOuoS
4HcWobgJYi+Z1uejlXFSZiT+oTN7jFtjilboiYyyqhz119t6Bi0hgfXnJUqpAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUbWoAid9gVVrOYdYQ7ZY9FQfNjlMwHwYDVR0j
BBgwFoAU2H/KlD6YuIBqYG9bD4vnKUxNk6MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUY3Mk1KZTE4c3BCQWJMTlZEdWM2QjNCaXBDZk5LbnRRTnd1aFpBd2U4
OG8vMC9EODdGQ0E5NDNFOThCODgwNkE2MDZGNUIwRjhCRTcyOTRDNEQ5M0EzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q4N0ZDQTk0M0U5OEI4ODA2
QTYwNkY1QjBGOEJFNzI5NEM0RDkzQTMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VGNzJNSmUxOHNwQkFiTE5WRHVjNkIzQmlwQ2ZOS250UU53dWhaQXdlODhvLzAv
MzEzMzM4MmUzMTM4MzUyZTMyMzQzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzMzM5MzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAoq58DANBgkqhkiG9w0BAQsFAAOCAQEAd5w8
hLHgGD/pHEJsv1PVFD9/64kzhp5hkuoQzkRG5UVoA0Trzvt5cXbEXp2gGPsGdxeV
gHNvlrPKPIXK3QHS31eNAoR5J/GY95lNClh3I4T32vKnnH9zdwj5zZec6eYn0eYK
p7I4ukZprswXbzUPz6GNwgZvRwKvr1RU7VG20hDNyFuYtZ7QdBxkoaBE9mgmKKW0
nXg/zr6LdOysNsUIxjHk99Haci4iuWSRPZR7JAbcVsqiVI/BuMUIdyZxdMfxNcCg
1YegSY0dC7vuxiyjCySb4qVo8fuf54uexwuBpos1jHvH6L2Bmp1qcJ/+SfEyaelv
UPp572oBpI+ghl1gpA==
-----END CERTIFICATE-----
Generated at Mon Jun 9 13:01:47 2025 by rpki-client