Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/3133382e39372e36302e302f32342d3234203d3e20323634313330.roa
File:                     3133382e39372e36302e302f32342d3234203d3e20323634313330.roa (raw, json)
Hash identifier:          e84hTCnMM2rmU6v209BxmG9ZjfV+83yfUF7r2z+nBwU=
Subject key identifier:   92:85:1F:C0:2A:D7:B2:17:D7:37:24:81:D6:48:CC:7D:10:56:C9:98
Certificate issuer:       /CN=E47C0193099D783BC9228A8B85CB28868735A4E2
Certificate serial:       2F29A2454008A59C474903F4C6C13511AA8E2D48
Authority key identifier: E4:7C:01:93:09:9D:78:3B:C9:22:8A:8B:85:CB:28:86:87:35:A4:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E47C0193099D783BC9228A8B85CB28868735A4E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/3133382e39372e36302e302f32342d3234203d3e20323634313330.roa
Signing time:             Tue 20 May 2025 13:54:11 +0000
ROA not before:           Tue 20 May 2025 13:49:11 +0000
ROA not after:            Tue 19 May 2026 13:54:11 +0000
asID:                     264130
IP address blocks:        138.97.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/E47C0193099D783BC9228A8B85CB28868735A4E2.crl
                          rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/E47C0193099D783BC9228A8B85CB28868735A4E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E47C0193099D783BC9228A8B85CB28868735A4E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Jun 2025 22:54:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:29:a2:45:40:08:a5:9c:47:49:03:f4:c6:c1:35:11:aa:8e:2d:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E47C0193099D783BC9228A8B85CB28868735A4E2
        Validity
            Not Before: May 20 13:49:11 2025 GMT
            Not After : May 19 13:54:11 2026 GMT
        Subject: CN=92851FC02AD7B217D7372481D648CC7D1056C998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b3:b7:b7:b8:3f:1c:a1:34:d0:a0:56:8b:23:
                    86:f9:d4:27:e5:cc:cf:b1:11:b2:1c:c9:66:23:ae:
                    a9:af:41:57:53:9e:4c:4b:67:83:0e:2d:11:61:cf:
                    52:4f:ec:a3:85:0c:3d:65:f6:4b:2e:da:5b:4b:9f:
                    62:ed:3a:ad:ce:d4:d5:86:50:4c:64:15:9a:ae:c9:
                    d6:5c:4d:7a:c2:5b:b3:07:34:a0:ab:d0:7d:6a:5c:
                    48:ca:1e:30:f7:84:62:9e:32:58:25:f4:f1:43:79:
                    d4:23:b5:0f:4c:07:b3:0a:e1:61:a3:16:94:1a:9f:
                    78:d7:b3:53:95:25:1c:f6:40:f5:aa:ae:8f:d5:f3:
                    40:e2:88:af:ba:11:99:5a:0f:cd:e7:0a:af:a9:b5:
                    82:d7:2a:ec:83:8d:49:b7:12:96:6e:a7:ae:e2:68:
                    cc:f2:ee:5d:96:9a:b2:1f:ee:60:4e:17:7c:9e:8b:
                    9b:65:ff:81:15:0a:69:90:01:e5:bd:a4:8a:85:b4:
                    f9:fd:a7:7e:02:15:42:cf:20:8e:fc:90:37:9f:5a:
                    ae:88:23:40:58:e5:ed:52:ad:1b:58:7d:a7:e7:e5:
                    bd:87:07:e6:f7:6a:a5:cc:b9:34:82:e5:97:df:cb:
                    d8:33:04:d1:4f:99:9b:2c:a9:cf:6b:01:de:7e:1a:
                    43:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:85:1F:C0:2A:D7:B2:17:D7:37:24:81:D6:48:CC:7D:10:56:C9:98
            X509v3 Authority Key Identifier:
                keyid:E4:7C:01:93:09:9D:78:3B:C9:22:8A:8B:85:CB:28:86:87:35:A4:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/E47C0193099D783BC9228A8B85CB28868735A4E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E47C0193099D783BC9228A8B85CB28868735A4E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/3133382e39372e36302e302f32342d3234203d3e20323634313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:ac:38:ff:c7:85:31:6d:78:a1:58:b5:b9:3e:87:dc:2d:da:
         1e:62:5b:8e:77:d9:54:ea:6a:e0:3a:f2:7f:3c:d9:72:f5:7d:
         22:2c:e4:78:83:0a:fb:22:56:e7:aa:80:0f:ad:7c:8a:1e:aa:
         a4:c5:69:53:58:d6:ce:82:04:37:07:7d:dc:d5:ef:f3:e4:7c:
         63:f4:50:77:69:ef:19:5c:fc:37:09:04:7d:fa:4b:11:fb:a8:
         9c:4f:e1:fb:4b:1b:c8:b9:c6:01:97:d2:b2:db:bd:69:ad:f9:
         c2:a3:15:b4:f1:82:b9:ec:16:15:60:ce:36:32:62:7f:10:64:
         f9:c6:5d:58:4e:16:c7:a5:9f:ea:92:4c:97:6c:77:4f:37:77:
         1c:c7:9c:5d:e5:2b:60:4a:d3:bf:7a:66:66:c6:54:10:0b:b5:
         20:53:d2:80:8b:ca:4e:33:be:3c:ec:01:fc:17:6a:77:4b:ec:
         a9:20:9e:0d:e0:38:83:9a:0f:1d:9f:f8:f8:9d:e0:ab:22:74:
         2e:73:ee:60:a9:d3:3c:ab:1d:79:12:41:d4:3f:d4:f6:df:e8:
         67:0f:b5:a8:49:f4:23:14:40:8e:ae:48:25:39:b4:5f:a3:47:
         43:8e:cf:20:15:b2:2c:6c:63:11:83:40:98:b5:07:75:17:b2:
         c7:db:30:b7
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIULymiRUAIpZxHSQP0xsE1EaqOLUgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTQ3QzAxOTMwOTlENzgzQkM5MjI4QThCODVDQjI4ODY4
NzM1QTRFMjAeFw0yNTA1MjAxMzQ5MTFaFw0yNjA1MTkxMzU0MTFaMDMxMTAvBgNV
BAMTKDkyODUxRkMwMkFEN0IyMTdENzM3MjQ4MUQ2NDhDQzdEMTA1NkM5OTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhs7e3uD8coTTQoFaLI4b51Cfl
zM+xEbIcyWYjrqmvQVdTnkxLZ4MOLRFhz1JP7KOFDD1l9ksu2ltLn2LtOq3O1NWG
UExkFZquydZcTXrCW7MHNKCr0H1qXEjKHjD3hGKeMlgl9PFDedQjtQ9MB7MK4WGj
FpQan3jXs1OVJRz2QPWqro/V80DiiK+6EZlaD83nCq+ptYLXKuyDjUm3EpZup67i
aMzy7l2WmrIf7mBOF3yei5tl/4EVCmmQAeW9pIqFtPn9p34CFULPII78kDefWq6I
I0BY5e1SrRtYfafn5b2HB+b3aqXMuTSC5Zffy9gzBNFPmZssqc9rAd5+GkPHAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUkoUfwCrXshfXNySB1kjMfRBWyZgwHwYDVR0j
BBgwFoAU5HwBkwmdeDvJIoqLhcsohoc1pOIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUxyb1dvS3BMQ2tkanc3TjhENVVCc0J5OU45RzU1akpuZWZBVXdodVNq
N04vMC9FNDdDMDE5MzA5OUQ3ODNCQzkyMjhBOEI4NUNCMjg4Njg3MzVBNEUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U0N0MwMTkzMDk5RDc4M0JD
OTIyOEE4Qjg1Q0IyODg2ODczNUE0RTIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VMcm9Xb0twTENrZGp3N044RDVVQnNCeTlOOUc1NWpKbmVmQVV3aHVTajdOLzAv
MzEzMzM4MmUzOTM3MmUzNjMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM0
MzEzMzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAimE8MA0GCSqGSIb3DQEBCwUAA4IBAQCErDj/x4Ux
bXihWLW5PofcLdoeYluOd9lU6mrgOvJ/PNly9X0iLOR4gwr7IlbnqoAPrXyKHqqk
xWlTWNbOggQ3B33c1e/z5Hxj9FB3ae8ZXPw3CQR9+ksR+6icT+H7SxvIucYBl9Ky
271prfnCoxW08YK57BYVYM42MmJ/EGT5xl1YThbHpZ/qkkyXbHdPN3ccx5xd5Stg
StO/emZmxlQQC7UgU9KAi8pOM7487AH8F2p3S+ypIJ4N4DiDmg8dn/j4neCrInQu
c+5gqdM8qx15EkHUP9T23+hnD7WoSfQjFECOrkglObRfo0dDjs8gFbIsbGMRg0CY
tQd1F7LH2zC3
-----END CERTIFICATE-----
Generated at Fri Jun 6 07:18:31 2025 by rpki-client