Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/3133382e3230342e3134382e302f32332d3233203d3e20323633393030.roa
File:                     3133382e3230342e3134382e302f32332d3233203d3e20323633393030.roa (raw, json)
Hash identifier:          HbZnI1rkXbdtRnD0HvWkpg+AtYU555uTmRmvQ6rrSEI=
Subject key identifier:   92:F6:FF:FE:1C:46:64:71:A8:D6:0B:B7:E6:AB:B0:F6:C6:90:E9:F8
Certificate issuer:       /CN=D108A6A498B3839B4F3F805ACCAE934F8CF79D90
Certificate serial:       48A406A516BABC712C36934E90BED158CC7404B2
Authority key identifier: D1:08:A6:A4:98:B3:83:9B:4F:3F:80:5A:CC:AE:93:4F:8C:F7:9D:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/3133382e3230342e3134382e302f32332d3233203d3e20323633393030.roa
Signing time:             Wed 05 Mar 2025 20:00:07 +0000
ROA not before:           Wed 05 Mar 2025 19:55:07 +0000
ROA not after:            Wed 04 Mar 2026 20:00:07 +0000
asID:                     263900
IP address blocks:        138.204.148.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.crl
                          rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 06:56:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:a4:06:a5:16:ba:bc:71:2c:36:93:4e:90:be:d1:58:cc:74:04:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D108A6A498B3839B4F3F805ACCAE934F8CF79D90
        Validity
            Not Before: Mar  5 19:55:07 2025 GMT
            Not After : Mar  4 20:00:07 2026 GMT
        Subject: CN=92F6FFFE1C466471A8D60BB7E6ABB0F6C690E9F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:11:e2:be:d0:3a:c1:11:cd:d9:2d:46:33:33:
                    b7:16:0f:b3:52:a4:46:6c:fb:32:ec:31:eb:aa:ca:
                    74:d8:81:0c:92:7a:df:ae:30:c6:7d:2c:b5:28:a7:
                    93:63:b4:0d:2d:88:bd:a6:5b:c9:63:9a:d4:47:f0:
                    14:ae:d5:89:23:34:24:fb:a9:cc:b4:28:8a:1c:34:
                    2e:a8:d1:46:a2:26:59:e1:ce:b6:b0:b4:5e:16:75:
                    58:34:50:80:11:b7:8d:26:ca:82:60:05:b6:85:7e:
                    13:97:cd:18:e2:b4:33:0a:3e:30:18:f3:aa:d4:79:
                    c4:99:6e:e3:8c:ef:da:ee:b7:4b:fc:db:92:1d:59:
                    b2:0b:47:1e:c7:d3:18:75:79:54:b6:bf:a1:04:49:
                    5a:6a:d0:12:2c:3c:70:12:19:97:32:ab:57:b8:50:
                    bd:74:0f:dd:32:91:14:11:90:bf:f1:31:ea:3d:46:
                    75:f5:f0:75:88:12:b1:5b:95:70:10:90:3e:a3:53:
                    eb:e4:ba:08:9a:f0:14:46:04:63:d8:66:e4:13:9c:
                    99:82:04:c0:0e:e8:ef:1f:32:b6:2e:38:c3:30:28:
                    bf:30:17:9a:b7:e9:bb:b9:e9:28:de:4a:27:eb:1f:
                    c3:fe:01:fc:fd:7a:ae:61:d2:3f:a7:1c:ed:c5:c9:
                    5c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:F6:FF:FE:1C:46:64:71:A8:D6:0B:B7:E6:AB:B0:F6:C6:90:E9:F8
            X509v3 Authority Key Identifier:
                keyid:D1:08:A6:A4:98:B3:83:9B:4F:3F:80:5A:CC:AE:93:4F:8C:F7:9D:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/3133382e3230342e3134382e302f32332d3233203d3e20323633393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:d0:07:df:8b:bc:1d:42:3c:83:51:a3:dd:46:d3:d7:89:29:
         76:a9:e5:cf:34:aa:bb:57:ca:e7:bc:3d:53:b8:4e:93:9a:6e:
         2a:35:d5:df:0a:1c:c6:76:fa:3c:49:e6:3a:a6:30:61:3e:4d:
         71:ff:25:27:89:a9:d9:6b:7a:03:3e:65:0e:eb:bf:36:9f:74:
         63:f7:fc:65:71:59:c1:eb:30:1a:8c:66:73:3b:76:bc:89:70:
         89:e8:5e:13:9f:f4:2c:0f:5a:94:8d:dc:3b:d0:0c:a5:52:35:
         f6:69:21:81:68:7e:35:4f:8a:4a:ff:c2:38:73:47:ba:23:1f:
         5e:d5:81:f7:46:6b:c2:1b:bc:63:4a:3c:96:ea:06:9b:7e:87:
         bb:73:24:18:32:10:38:85:fc:9e:a5:b0:ce:c3:b7:40:c2:50:
         d1:ab:40:03:5c:fa:20:d9:8a:83:06:b4:de:e9:1b:2b:59:6f:
         92:91:10:0e:f0:a6:39:8b:f3:42:eb:0b:00:81:64:97:45:5a:
         f9:18:bc:aa:7c:f0:57:27:cc:fb:1f:00:bc:4a:e9:d8:9d:39:
         6a:d9:cf:a6:15:1b:b0:ed:2f:f1:2c:c0:a8:56:ca:b2:ec:ef:
         a0:08:32:49:4f:a8:30:9b:c6:6a:f3:c4:73:80:e5:14:3b:a0:
         3c:f7:57:45
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUSKQGpRa6vHEsNpNOkL7RWMx0BLIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDEwOEE2QTQ5OEIzODM5QjRGM0Y4MDVBQ0NBRTkzNEY4
Q0Y3OUQ5MDAeFw0yNTAzMDUxOTU1MDdaFw0yNjAzMDQyMDAwMDdaMDMxMTAvBgNV
BAMTKDkyRjZGRkZFMUM0NjY0NzFBOEQ2MEJCN0U2QUJCMEY2QzY5MEU5RjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKEeK+0DrBEc3ZLUYzM7cWD7NS
pEZs+zLsMeuqynTYgQySet+uMMZ9LLUop5NjtA0tiL2mW8ljmtRH8BSu1YkjNCT7
qcy0KIocNC6o0UaiJlnhzrawtF4WdVg0UIARt40myoJgBbaFfhOXzRjitDMKPjAY
86rUecSZbuOM79rut0v825IdWbILRx7H0xh1eVS2v6EESVpq0BIsPHASGZcyq1e4
UL10D90ykRQRkL/xMeo9RnX18HWIErFblXAQkD6jU+vkugia8BRGBGPYZuQTnJmC
BMAO6O8fMrYuOMMwKL8wF5q36bu56SjeSifrH8P+Afz9eq5h0j+nHO3FyVxfAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUkvb//hxGZHGo1gu35quw9saQ6fgwHwYDVR0j
BBgwFoAU0QimpJizg5tPP4BazK6TT4z3nZAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlJSTVJacDd6Q1hNVVZVWlNXTnJzM3FzUG9QM2I3WE55QzlSanFtanY1
dXovMi9EMTA4QTZBNDk4QjM4MzlCNEYzRjgwNUFDQ0FFOTM0RjhDRjc5RDkwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QxMDhBNkE0OThCMzgzOUI0
RjNGODA1QUNDQUU5MzRGOENGNzlEOTAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZSUk1SWnA3ekNYTVVWVVpTV05yczNxc1BvUDNiN1hOeUM5UmpxbWp2NXV6LzIv
MzEzMzM4MmUzMjMwMzQyZTMxMzQzODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMzM5MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAYrMlDANBgkqhkiG9w0BAQsFAAOCAQEAX9AH
34u8HUI8g1Gj3UbT14kpdqnlzzSqu1fK57w9U7hOk5puKjXV3wocxnb6PEnmOqYw
YT5Ncf8lJ4mp2Wt6Az5lDuu/Np90Y/f8ZXFZweswGoxmczt2vIlwieheE5/0LA9a
lI3cO9AMpVI19mkhgWh+NU+KSv/COHNHuiMfXtWB90Zrwhu8Y0o8luoGm36Hu3Mk
GDIQOIX8nqWwzsO3QMJQ0atAA1z6INmKgwa03ukbK1lvkpEQDvCmOYvzQusLAIFk
l0Va+Ri8qnzwVyfM+x8AvErp2J05atnPphUbsO0v8SzAqFbKsuzvoAgySU+oMJvG
avPEc4DlFDugPPdXRQ==
-----END CERTIFICATE-----
Generated at Sat Apr 12 08:27:22 2025 by rpki-client