Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/3133382e3138352e3234322e302f32342d3234203d3e20323633393230.roa
File:                     3133382e3138352e3234322e302f32342d3234203d3e20323633393230.roa (raw, json)
Hash identifier:          ospJbBowdAqzoEB/200UL11IdUy7RVlfSZwWPtBCnnM=
Subject key identifier:   91:F0:61:9B:0C:58:D8:52:37:22:00:4A:88:5B:71:86:1D:64:2E:7A
Certificate issuer:       /CN=D87FCA943E98B8806A606F5B0F8BE7294C4D93A3
Certificate serial:       6EF1A74BC6D78AA1C19F9DA6DEC9998139F94734
Authority key identifier: D8:7F:CA:94:3E:98:B8:80:6A:60:6F:5B:0F:8B:E7:29:4C:4D:93:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D87FCA943E98B8806A606F5B0F8BE7294C4D93A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/3133382e3138352e3234322e302f32342d3234203d3e20323633393230.roa
Signing time:             Tue 27 May 2025 20:34:46 +0000
ROA not before:           Tue 27 May 2025 20:29:46 +0000
ROA not after:            Tue 26 May 2026 20:34:46 +0000
asID:                     263920
IP address blocks:        138.185.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/D87FCA943E98B8806A606F5B0F8BE7294C4D93A3.crl
                          rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/D87FCA943E98B8806A606F5B0F8BE7294C4D93A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D87FCA943E98B8806A606F5B0F8BE7294C4D93A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 20:35:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:f1:a7:4b:c6:d7:8a:a1:c1:9f:9d:a6:de:c9:99:81:39:f9:47:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D87FCA943E98B8806A606F5B0F8BE7294C4D93A3
        Validity
            Not Before: May 27 20:29:46 2025 GMT
            Not After : May 26 20:34:46 2026 GMT
        Subject: CN=91F0619B0C58D8523722004A885B71861D642E7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ab:60:af:4b:03:65:36:f8:fb:d9:ba:4e:c9:
                    bf:6b:e3:25:3b:02:11:e4:b1:24:ee:79:22:29:91:
                    a6:29:a2:c5:a2:69:7e:c5:ce:51:6d:63:6d:e8:3b:
                    3b:22:f7:cc:46:1e:e8:52:2c:46:5c:2d:3e:cf:0e:
                    17:15:12:1c:ee:ee:98:4c:22:f3:e2:a8:98:f2:44:
                    af:ac:80:61:e7:f7:a1:97:ef:dc:92:8a:e1:4d:77:
                    48:a7:48:81:bb:52:78:18:19:fc:5e:9e:9f:1e:cf:
                    5a:41:d5:33:ab:46:82:45:eb:5c:34:c1:1e:0a:04:
                    a2:c1:2c:54:ab:52:85:ca:e1:b2:87:c2:d0:8e:5a:
                    cb:52:ef:f2:8d:1e:74:70:a5:e5:76:4f:60:e7:8e:
                    29:ff:ed:27:0e:da:1f:a4:51:ab:e2:98:15:bb:50:
                    08:62:3b:dd:f1:de:b2:68:6a:27:4a:8b:ab:fa:25:
                    96:7f:f3:c9:85:83:4e:9f:c9:55:0b:5b:14:5a:01:
                    6d:8b:b3:2e:8c:1e:4d:07:05:9a:f2:74:81:16:53:
                    4e:37:92:4c:ee:4c:1a:fa:24:6c:a2:aa:a6:79:93:
                    9f:29:92:aa:85:e9:d3:7b:05:48:89:a6:42:99:a4:
                    99:3e:9e:b2:80:c6:de:50:bc:37:47:a8:00:96:b3:
                    74:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:F0:61:9B:0C:58:D8:52:37:22:00:4A:88:5B:71:86:1D:64:2E:7A
            X509v3 Authority Key Identifier:
                keyid:D8:7F:CA:94:3E:98:B8:80:6A:60:6F:5B:0F:8B:E7:29:4C:4D:93:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/D87FCA943E98B8806A606F5B0F8BE7294C4D93A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D87FCA943E98B8806A606F5B0F8BE7294C4D93A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/3133382e3138352e3234322e302f32342d3234203d3e20323633393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:f4:ba:f7:55:9a:95:88:ea:92:48:f8:d8:9d:3a:d8:43:c2:
         6d:2a:7f:e2:77:9e:12:29:ac:c9:75:de:31:6b:03:04:1d:a3:
         73:f3:4f:66:07:9a:f9:7e:0e:97:a0:8d:e5:77:eb:5a:23:0f:
         fc:94:7d:33:e1:ef:5c:03:3d:e8:6b:4b:cc:f1:24:c1:f0:da:
         a8:03:a0:35:b7:9e:36:7e:82:5a:7e:33:24:dd:4b:c2:af:fc:
         7d:23:41:ca:62:9d:dd:45:59:fa:5b:48:70:ef:cd:f3:4d:2f:
         39:03:be:dd:74:2a:3c:12:74:18:dd:d0:89:30:d3:32:18:18:
         d5:32:a1:9c:6b:8e:1f:45:64:88:e6:8a:7f:ce:81:65:28:36:
         2c:a7:77:3c:81:96:4c:a3:d4:0d:09:67:cc:83:e0:dd:65:f1:
         ae:12:cc:95:88:3c:70:f2:7e:8c:74:69:62:f9:90:ab:23:d4:
         23:72:d3:8c:f7:f3:db:2f:e8:62:51:65:a4:26:8e:c8:66:1a:
         8c:b6:e6:4c:ab:bf:e4:57:bb:a6:f2:ab:19:4c:61:76:41:fe:
         61:58:03:2f:9f:13:e7:dd:de:1b:18:f5:0f:40:47:6a:12:4f:
         b3:0d:54:b0:42:83:1c:99:23:81:5a:51:29:07:3c:03:04:08:
         7a:30:cf:0c
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUbvGnS8bXiqHBn52m3smZgTn5RzQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDg3RkNBOTQzRTk4Qjg4MDZBNjA2RjVCMEY4QkU3Mjk0
QzREOTNBMzAeFw0yNTA1MjcyMDI5NDZaFw0yNjA1MjYyMDM0NDZaMDMxMTAvBgNV
BAMTKDkxRjA2MTlCMEM1OEQ4NTIzNzIyMDA0QTg4NUI3MTg2MUQ2NDJFN0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClq2CvSwNlNvj72bpOyb9r4yU7
AhHksSTueSIpkaYposWiaX7FzlFtY23oOzsi98xGHuhSLEZcLT7PDhcVEhzu7phM
IvPiqJjyRK+sgGHn96GX79ySiuFNd0inSIG7UngYGfxenp8ez1pB1TOrRoJF61w0
wR4KBKLBLFSrUoXK4bKHwtCOWstS7/KNHnRwpeV2T2Dnjin/7ScO2h+kUavimBW7
UAhiO93x3rJoaidKi6v6JZZ/88mFg06fyVULWxRaAW2Lsy6MHk0HBZrydIEWU043
kkzuTBr6JGyiqqZ5k58pkqqF6dN7BUiJpkKZpJk+nrKAxt5QvDdHqACWs3QtAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUkfBhmwxY2FI3IgBKiFtxhh1kLnowHwYDVR0j
BBgwFoAU2H/KlD6YuIBqYG9bD4vnKUxNk6MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUY3Mk1KZTE4c3BCQWJMTlZEdWM2QjNCaXBDZk5LbnRRTnd1aFpBd2U4
OG8vMC9EODdGQ0E5NDNFOThCODgwNkE2MDZGNUIwRjhCRTcyOTRDNEQ5M0EzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q4N0ZDQTk0M0U5OEI4ODA2
QTYwNkY1QjBGOEJFNzI5NEM0RDkzQTMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VGNzJNSmUxOHNwQkFiTE5WRHVjNkIzQmlwQ2ZOS250UU53dWhaQXdlODhvLzAv
MzEzMzM4MmUzMTM4MzUyZTMyMzQzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM5MzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIq58jANBgkqhkiG9w0BAQsFAAOCAQEAAPS6
91WalYjqkkj42J062EPCbSp/4neeEimsyXXeMWsDBB2jc/NPZgea+X4Ol6CN5Xfr
WiMP/JR9M+HvXAM96GtLzPEkwfDaqAOgNbeeNn6CWn4zJN1Lwq/8fSNBymKd3UVZ
+ltIcO/N800vOQO+3XQqPBJ0GN3QiTDTMhgY1TKhnGuOH0VkiOaKf86BZSg2LKd3
PIGWTKPUDQlnzIPg3WXxrhLMlYg8cPJ+jHRpYvmQqyPUI3LTjPfz2y/oYlFlpCaO
yGYajLbmTKu/5Fe7pvKrGUxhdkH+YVgDL58T593eGxj1D0BHahJPsw1UsEKDHJkj
gVpRKQc8AwQIejDPDA==
-----END CERTIFICATE-----
Generated at Mon Jun 9 11:05:15 2025 by rpki-client