Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/3133382e3138352e3234322e302f32342d3234203d3e20323633393230.roa
File:                     3133382e3138352e3234322e302f32342d3234203d3e20323633393230.roa (raw, json)
Hash identifier:          OTSRzlQ6us3Gdv88CsH4sOryAm3JRXJjQpPohoPcBFA=
Subject key identifier:   FA:1E:F2:92:C6:7A:8A:D1:DC:F7:DE:36:88:3F:7D:62:A2:32:C3:10
Certificate issuer:       /CN=CE122135E9291251C3E65EDC261A4CC410CF3BD5
Certificate serial:       5474CB264702261A7FE22ABF1977A34AB00D41DC
Authority key identifier: CE:12:21:35:E9:29:12:51:C3:E6:5E:DC:26:1A:4C:C4:10:CF:3B:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE122135E9291251C3E65EDC261A4CC410CF3BD5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/3133382e3138352e3234322e302f32342d3234203d3e20323633393230.roa
Signing time:             Tue 15 Apr 2025 01:57:06 +0000
ROA not before:           Tue 15 Apr 2025 01:52:06 +0000
ROA not after:            Tue 14 Apr 2026 01:57:06 +0000
asID:                     263920
IP address blocks:        138.185.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/CE122135E9291251C3E65EDC261A4CC410CF3BD5.crl
                          rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/CE122135E9291251C3E65EDC261A4CC410CF3BD5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE122135E9291251C3E65EDC261A4CC410CF3BD5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 16:29:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:74:cb:26:47:02:26:1a:7f:e2:2a:bf:19:77:a3:4a:b0:0d:41:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE122135E9291251C3E65EDC261A4CC410CF3BD5
        Validity
            Not Before: Apr 15 01:52:06 2025 GMT
            Not After : Apr 14 01:57:06 2026 GMT
        Subject: CN=FA1EF292C67A8AD1DCF7DE36883F7D62A232C310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d9:64:09:aa:d6:c6:f3:0c:9c:76:f9:50:52:
                    01:c1:e6:d3:a8:e5:15:f0:4a:20:3a:ec:01:21:b2:
                    ab:57:bd:18:5f:cf:4d:0a:32:a9:21:7e:f1:ae:56:
                    5c:2c:5c:03:14:fd:dc:a9:41:ab:24:b6:e5:cb:b6:
                    54:44:85:c2:b3:16:61:dc:52:6c:86:ec:d6:5a:95:
                    88:33:2a:46:c0:97:20:7a:5d:93:d3:6d:87:fa:91:
                    0d:69:64:c4:c4:9b:ab:74:1f:cd:1f:33:a4:97:56:
                    ed:9d:a6:9a:0c:0d:53:a4:09:bf:54:83:d6:b9:22:
                    1b:f1:36:16:37:ca:0e:2d:2c:7a:9a:53:df:49:1c:
                    18:b6:19:01:6e:6c:db:74:bb:5e:f1:68:9d:7b:6b:
                    4e:ae:a4:ef:86:c7:de:92:bb:e9:ca:24:72:5d:8b:
                    7f:94:97:ec:10:da:ce:45:9a:f6:b6:9c:12:17:fa:
                    ff:fa:dc:05:a4:bc:69:eb:84:44:60:ac:6b:bc:25:
                    ed:5b:18:a8:d5:73:a6:6e:8a:d7:a5:04:a2:db:3e:
                    92:21:46:a9:1a:24:7d:3d:b0:39:17:52:76:39:05:
                    36:25:d9:3a:62:9b:07:5d:15:66:de:93:aa:c8:67:
                    75:ea:84:4f:7e:ed:89:6b:6c:29:a7:df:4e:1e:73:
                    b8:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:1E:F2:92:C6:7A:8A:D1:DC:F7:DE:36:88:3F:7D:62:A2:32:C3:10
            X509v3 Authority Key Identifier:
                keyid:CE:12:21:35:E9:29:12:51:C3:E6:5E:DC:26:1A:4C:C4:10:CF:3B:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/CE122135E9291251C3E65EDC261A4CC410CF3BD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE122135E9291251C3E65EDC261A4CC410CF3BD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/3133382e3138352e3234322e302f32342d3234203d3e20323633393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:8a:ac:17:c9:13:a0:bf:09:dc:5d:9e:1f:c3:b9:ca:25:2f:
         db:e2:20:2d:7b:63:6f:aa:bc:64:be:30:a4:b2:b1:55:88:d1:
         fb:5e:cf:71:1c:85:55:18:0e:ae:b3:4f:d8:34:fd:f3:53:ea:
         53:68:43:33:ff:b5:4e:44:bd:35:47:47:2c:32:8f:82:5d:0d:
         44:34:1d:c2:08:a1:56:c8:17:f3:6e:36:74:bf:ed:32:3b:aa:
         b1:7a:57:3c:1f:2e:90:c9:15:af:eb:b3:71:fd:65:52:6e:b1:
         a0:98:ae:b3:8c:5f:5a:38:8c:fd:40:e6:ff:96:52:69:9a:42:
         74:40:6f:92:53:2d:12:78:66:ac:c7:bf:f5:03:28:66:26:14:
         58:91:46:a1:02:48:af:28:06:9e:18:c0:a6:ae:97:35:83:dd:
         af:5d:59:27:ef:c1:e8:16:4f:38:7d:54:59:c8:56:2e:47:0c:
         82:06:91:d8:b8:6a:77:73:ec:05:36:c8:01:82:15:7b:50:f9:
         ca:05:7d:af:34:06:50:ce:0a:d9:46:ca:6f:41:81:70:d8:c3:
         c0:1b:8e:77:12:22:20:95:e9:54:a4:f0:c9:10:3b:94:0a:49:
         30:87:bd:18:be:5c:3d:69:56:ee:d0:3e:4b:e1:2f:93:fc:8e:
         0e:8d:07:bf
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUVHTLJkcCJhp/4iq/GXejSrANQdwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0UxMjIxMzVFOTI5MTI1MUMzRTY1RURDMjYxQTRDQzQx
MENGM0JENTAeFw0yNTA0MTUwMTUyMDZaFw0yNjA0MTQwMTU3MDZaMDMxMTAvBgNV
BAMTKEZBMUVGMjkyQzY3QThBRDFEQ0Y3REUzNjg4M0Y3RDYyQTIzMkMzMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC02WQJqtbG8wycdvlQUgHB5tOo
5RXwSiA67AEhsqtXvRhfz00KMqkhfvGuVlwsXAMU/dypQasktuXLtlREhcKzFmHc
UmyG7NZalYgzKkbAlyB6XZPTbYf6kQ1pZMTEm6t0H80fM6SXVu2dppoMDVOkCb9U
g9a5IhvxNhY3yg4tLHqaU99JHBi2GQFubNt0u17xaJ17a06upO+Gx96Su+nKJHJd
i3+Ul+wQ2s5Fmva2nBIX+v/63AWkvGnrhERgrGu8Je1bGKjVc6ZuitelBKLbPpIh
RqkaJH09sDkXUnY5BTYl2TpimwddFWbek6rIZ3XqhE9+7YlrbCmn304ec7gfAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU+h7yksZ6itHc9942iD99YqIywxAwHwYDVR0j
BBgwFoAUzhIhNekpElHD5l7cJhpMxBDPO9UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUY3Mk1KZTE4c3BCQWJMTlZEdWM2QjNCaXBDZk5LbnRRTnd1aFpBd2U4
OG8vMC9DRTEyMjEzNUU5MjkxMjUxQzNFNjVFREMyNjFBNENDNDEwQ0YzQkQ1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NFMTIyMTM1RTkyOTEyNTFD
M0U2NUVEQzI2MUE0Q0M0MTBDRjNCRDUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VGNzJNSmUxOHNwQkFiTE5WRHVjNkIzQmlwQ2ZOS250UU53dWhaQXdlODhvLzAv
MzEzMzM4MmUzMTM4MzUyZTMyMzQzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM5MzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIq58jANBgkqhkiG9w0BAQsFAAOCAQEAHYqs
F8kToL8J3F2eH8O5yiUv2+IgLXtjb6q8ZL4wpLKxVYjR+17PcRyFVRgOrrNP2DT9
81PqU2hDM/+1TkS9NUdHLDKPgl0NRDQdwgihVsgX8242dL/tMjuqsXpXPB8ukMkV
r+uzcf1lUm6xoJius4xfWjiM/UDm/5ZSaZpCdEBvklMtEnhmrMe/9QMoZiYUWJFG
oQJIrygGnhjApq6XNYPdr11ZJ+/B6BZPOH1UWchWLkcMggaR2Lhqd3PsBTbIAYIV
e1D5ygV9rzQGUM4K2UbKb0GBcNjDwBuOdxIiIJXpVKTwyRA7lApJMIe9GL5cPWlW
7tA+S+Evk/yODo0Hvw==
-----END CERTIFICATE-----
Generated at Thu Apr 17 02:39:46 2025 by rpki-client