Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FRs7xuA22jMuMsNQfVbNzTzPH6NcDVaN4wtrNArGwqvS/2/3133382e3131382e3138382e302f32322d3332203d3e20323639313637.roa
File:                     3133382e3131382e3138382e302f32322d3332203d3e20323639313637.roa (raw, json)
Hash identifier:          uqvAERFy++BZuKuyyl7ovg6QrYfJfjRcYsFYumrOfkw=
Subject key identifier:   FB:97:A1:BB:5B:1C:72:87:FC:0D:1D:5A:A4:7F:7B:37:13:D7:5E:97
Certificate issuer:       /CN=DA9315F122902DBF06A55537C7FDDC0362C259E1
Certificate serial:       26757738528D818323EB0997DCBFDA5F503BE459
Authority key identifier: DA:93:15:F1:22:90:2D:BF:06:A5:55:37:C7:FD:DC:03:62:C2:59:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA9315F122902DBF06A55537C7FDDC0362C259E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FRs7xuA22jMuMsNQfVbNzTzPH6NcDVaN4wtrNArGwqvS/2/3133382e3131382e3138382e302f32322d3332203d3e20323639313637.roa
Signing time:             Sat 07 Dec 2024 14:32:14 +0000
ROA not before:           Sat 07 Dec 2024 14:27:14 +0000
ROA not after:            Sat 06 Dec 2025 14:32:14 +0000
asID:                     269167
IP address blocks:        138.118.188.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FRs7xuA22jMuMsNQfVbNzTzPH6NcDVaN4wtrNArGwqvS/2/DA9315F122902DBF06A55537C7FDDC0362C259E1.crl
                          rsync://rpki-repo.registro.br/repo/FRs7xuA22jMuMsNQfVbNzTzPH6NcDVaN4wtrNArGwqvS/2/DA9315F122902DBF06A55537C7FDDC0362C259E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA9315F122902DBF06A55537C7FDDC0362C259E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 15 Apr 2025 23:28:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:75:77:38:52:8d:81:83:23:eb:09:97:dc:bf:da:5f:50:3b:e4:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA9315F122902DBF06A55537C7FDDC0362C259E1
        Validity
            Not Before: Dec  7 14:27:14 2024 GMT
            Not After : Dec  6 14:32:14 2025 GMT
        Subject: CN=FB97A1BB5B1C7287FC0D1D5AA47F7B3713D75E97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:61:f2:04:f0:5a:ed:6c:71:f8:c3:a5:18:86:
                    cb:ec:b4:b5:b8:e2:12:c4:c1:b3:68:59:17:5d:7c:
                    75:7b:10:3a:3e:7e:4a:52:d3:8e:e5:49:08:cc:9f:
                    4e:da:df:2d:1a:12:f3:92:e3:de:62:99:b8:c1:fc:
                    1f:8f:da:80:0b:0b:47:7f:d3:62:f5:19:98:f5:39:
                    a0:dc:6d:3d:37:b4:d3:01:c1:c8:7a:09:cb:47:81:
                    6e:95:cb:1e:91:3b:1d:dd:a1:9d:8f:14:13:73:bd:
                    7c:59:24:a8:c0:74:2b:17:e5:4a:28:45:a0:89:32:
                    6a:0a:98:0b:ee:2f:4e:00:1f:f2:a8:31:b7:cf:7c:
                    e7:d2:65:bf:1d:65:95:33:bd:9e:3f:d6:7b:45:bd:
                    d1:01:4b:e7:1f:f9:4f:58:c7:43:a6:51:4f:a7:a9:
                    4f:ae:58:7b:6b:79:39:67:98:68:c4:1a:6a:c6:d4:
                    77:61:2d:a4:6c:f6:3c:d4:57:e1:85:75:89:35:10:
                    bc:e4:b6:29:b5:48:6b:91:57:6e:62:e9:73:d6:29:
                    d9:6e:c2:cf:9e:f2:67:c8:dc:b7:8e:14:d6:e4:bb:
                    b1:9e:96:f0:d0:aa:00:8c:8c:b6:76:d5:1d:8f:03:
                    50:7f:56:b9:77:3e:bd:b6:bc:9e:5e:95:4c:8e:27:
                    37:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:97:A1:BB:5B:1C:72:87:FC:0D:1D:5A:A4:7F:7B:37:13:D7:5E:97
            X509v3 Authority Key Identifier:
                keyid:DA:93:15:F1:22:90:2D:BF:06:A5:55:37:C7:FD:DC:03:62:C2:59:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FRs7xuA22jMuMsNQfVbNzTzPH6NcDVaN4wtrNArGwqvS/2/DA9315F122902DBF06A55537C7FDDC0362C259E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA9315F122902DBF06A55537C7FDDC0362C259E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FRs7xuA22jMuMsNQfVbNzTzPH6NcDVaN4wtrNArGwqvS/2/3133382e3131382e3138382e302f32322d3332203d3e20323639313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:ef:e6:5d:d1:f5:e2:dc:8c:81:c5:34:0f:27:d5:3b:e6:df:
         61:1b:1a:e8:8c:96:fa:36:65:86:92:c4:16:f0:ef:a5:dc:01:
         71:dc:2d:00:c5:46:ef:ed:cb:32:3f:95:b6:da:a8:77:75:50:
         f4:fa:32:bc:0f:28:7e:91:11:b7:06:f2:67:4e:3f:18:22:08:
         49:d2:3a:1a:f6:72:89:74:45:21:25:28:8d:2a:d2:9a:a2:3e:
         e5:4b:89:ba:db:28:64:93:ee:e3:ba:7d:d0:00:c1:db:08:39:
         94:e2:31:cf:bb:a3:03:a9:e2:a9:bc:09:f4:6a:01:e3:7d:22:
         40:06:82:9d:60:b4:06:98:d8:dd:61:bf:3b:3b:0c:fd:84:f2:
         25:1d:f9:d5:ea:02:ea:ee:4c:f3:73:95:1c:1f:90:a8:3a:13:
         65:28:ca:c4:29:9d:a1:a6:c9:b8:6f:97:41:6b:8a:93:f1:71:
         f6:c8:f5:99:56:e9:ba:ba:c4:32:5b:c0:d8:af:86:24:5a:9a:
         b2:80:8a:ed:4f:5c:67:48:91:84:e0:63:b8:1d:8e:0d:16:96:
         24:7f:9c:98:bc:44:b5:cd:ed:16:fb:8a:f9:f5:3f:7c:d2:75:
         17:5e:66:42:73:21:1e:06:92:f8:aa:bc:57:d0:73:36:41:43:
         6a:1e:27:20
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUJnV3OFKNgYMj6wmX3L/aX1A75FkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREE5MzE1RjEyMjkwMkRCRjA2QTU1NTM3QzdGRERDMDM2
MkMyNTlFMTAeFw0yNDEyMDcxNDI3MTRaFw0yNTEyMDYxNDMyMTRaMDMxMTAvBgNV
BAMTKEZCOTdBMUJCNUIxQzcyODdGQzBEMUQ1QUE0N0Y3QjM3MTNENzVFOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPYfIE8FrtbHH4w6UYhsvstLW4
4hLEwbNoWRddfHV7EDo+fkpS047lSQjMn07a3y0aEvOS495imbjB/B+P2oALC0d/
02L1GZj1OaDcbT03tNMBwch6CctHgW6Vyx6ROx3doZ2PFBNzvXxZJKjAdCsX5Uoo
RaCJMmoKmAvuL04AH/KoMbfPfOfSZb8dZZUzvZ4/1ntFvdEBS+cf+U9Yx0OmUU+n
qU+uWHtreTlnmGjEGmrG1HdhLaRs9jzUV+GFdYk1ELzktim1SGuRV25i6XPWKdlu
ws+e8mfI3LeOFNbku7GelvDQqgCMjLZ21R2PA1B/Vrl3Pr22vJ5elUyOJzfBAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU+5ehu1sccof8DR1apH97NxPXXpcwHwYDVR0j
BBgwFoAU2pMV8SKQLb8GpVU3x/3cA2LCWeEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlJzN3h1QTIyak11TXNOUWZWYk56VHpQSDZOY0RWYU40d3RyTkFyR3dx
dlMvMi9EQTkzMTVGMTIyOTAyREJGMDZBNTU1MzdDN0ZEREMwMzYyQzI1OUUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RBOTMxNUYxMjI5MDJEQkYw
NkE1NTUzN0M3RkREQzAzNjJDMjU5RTEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZSczd4dUEyMmpNdU1zTlFmVmJOelR6UEg2TmNEVmFONHd0ck5Bckd3cXZTLzIv
MzEzMzM4MmUzMTMxMzgyZTMxMzgzODJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzYzOTMxMzYzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAop2vDANBgkqhkiG9w0BAQsFAAOCAQEAnu/m
XdH14tyMgcU0DyfVO+bfYRsa6IyW+jZlhpLEFvDvpdwBcdwtAMVG7+3LMj+Vttqo
d3VQ9PoyvA8ofpERtwbyZ04/GCIISdI6GvZyiXRFISUojSrSmqI+5UuJutsoZJPu
47p90ADB2wg5lOIxz7ujA6niqbwJ9GoB430iQAaCnWC0BpjY3WG/OzsM/YTyJR35
1eoC6u5M83OVHB+QqDoTZSjKxCmdoabJuG+XQWuKk/Fx9sj1mVbpurrEMlvA2K+G
JFqasoCK7U9cZ0iRhOBjuB2ODRaWJH+cmLxEtc3tFvuK+fU/fNJ1F15mQnMhHgaS
+Kq8V9BzNkFDah4nIA==
-----END CERTIFICATE-----
Generated at Tue Apr 15 16:18:55 2025 by rpki-client