Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FSGRhzqhqRodCotetvFRBtnv7HSKogPRv5i4z7ptboSa/1/3133382e3132312e34342e302f32322d3234203d3e20323634323830.roa
File:                     3133382e3132312e34342e302f32322d3234203d3e20323634323830.roa (raw, json)
Hash identifier:          UshoEG3iXWA+ZemigurDxvS44aYMJZEpyVBYMhTMT68=
Subject key identifier:   F8:F1:16:4C:E4:1B:0C:AA:90:BD:3C:21:51:F4:96:99:DA:87:A0:76
Certificate issuer:       /CN=CC067DAAC9269BC78CA094B1DF2073E50079CF60
Certificate serial:       6D5EA4418B82727BEC6C8EA8753F4D7707AAA1E3
Authority key identifier: CC:06:7D:AA:C9:26:9B:C7:8C:A0:94:B1:DF:20:73:E5:00:79:CF:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC067DAAC9269BC78CA094B1DF2073E50079CF60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FSGRhzqhqRodCotetvFRBtnv7HSKogPRv5i4z7ptboSa/1/3133382e3132312e34342e302f32322d3234203d3e20323634323830.roa
Signing time:             Thu 06 Mar 2025 02:33:06 +0000
ROA not before:           Thu 06 Mar 2025 02:28:06 +0000
ROA not after:            Thu 05 Mar 2026 02:33:06 +0000
asID:                     264280
IP address blocks:        138.121.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FSGRhzqhqRodCotetvFRBtnv7HSKogPRv5i4z7ptboSa/1/CC067DAAC9269BC78CA094B1DF2073E50079CF60.crl
                          rsync://rpki-repo.registro.br/repo/FSGRhzqhqRodCotetvFRBtnv7HSKogPRv5i4z7ptboSa/1/CC067DAAC9269BC78CA094B1DF2073E50079CF60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC067DAAC9269BC78CA094B1DF2073E50079CF60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 10:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:5e:a4:41:8b:82:72:7b:ec:6c:8e:a8:75:3f:4d:77:07:aa:a1:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC067DAAC9269BC78CA094B1DF2073E50079CF60
        Validity
            Not Before: Mar  6 02:28:06 2025 GMT
            Not After : Mar  5 02:33:06 2026 GMT
        Subject: CN=F8F1164CE41B0CAA90BD3C2151F49699DA87A076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1c:55:23:96:21:84:b9:20:53:f3:6b:3a:52:
                    0d:12:bc:75:33:fa:84:e5:e8:36:06:11:19:4a:47:
                    ed:37:6b:bd:d1:24:e4:50:46:86:fc:b0:39:b0:98:
                    11:f8:02:e6:b8:54:24:66:d2:8b:94:30:f3:de:22:
                    92:f8:63:09:f9:60:ae:39:f4:c4:87:af:a8:00:68:
                    59:06:13:e7:24:f1:3a:9b:d1:72:aa:24:09:2f:25:
                    b9:61:50:81:e5:a3:c2:1c:83:84:c3:24:28:08:65:
                    c9:ac:12:8f:49:a3:b0:6a:93:35:c9:83:03:6a:b1:
                    54:60:59:ad:4e:f0:13:aa:48:52:bf:89:0c:a5:d8:
                    a3:e6:05:09:5b:32:d0:03:79:39:06:95:b3:db:a2:
                    d8:d3:02:d0:ee:5a:63:0a:0e:b2:f3:63:c8:24:d2:
                    6a:8a:55:9a:37:f9:ca:52:9d:83:db:50:e8:59:75:
                    a0:6f:ea:f5:29:b0:e7:6d:1f:6d:23:e6:c7:a2:8e:
                    47:80:85:98:72:87:02:97:94:5f:cb:15:07:92:66:
                    b6:a6:df:63:8b:7a:77:be:38:e1:48:d2:e2:40:0c:
                    e7:83:67:52:a4:d8:fc:6c:18:8b:78:e9:96:64:f6:
                    91:e4:c5:7f:2b:25:05:4b:db:7a:65:67:f8:60:17:
                    29:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:F1:16:4C:E4:1B:0C:AA:90:BD:3C:21:51:F4:96:99:DA:87:A0:76
            X509v3 Authority Key Identifier:
                keyid:CC:06:7D:AA:C9:26:9B:C7:8C:A0:94:B1:DF:20:73:E5:00:79:CF:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FSGRhzqhqRodCotetvFRBtnv7HSKogPRv5i4z7ptboSa/1/CC067DAAC9269BC78CA094B1DF2073E50079CF60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC067DAAC9269BC78CA094B1DF2073E50079CF60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FSGRhzqhqRodCotetvFRBtnv7HSKogPRv5i4z7ptboSa/1/3133382e3132312e34342e302f32322d3234203d3e20323634323830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:c8:e7:cb:9f:f7:13:7e:7c:7f:1a:89:29:ef:e9:5a:97:ca:
         f1:21:5c:41:d7:5b:3f:7d:4a:18:8a:dd:df:30:56:7d:e7:2a:
         2a:71:bf:f1:89:a0:da:71:8d:48:8f:71:de:40:59:39:d9:0c:
         3c:fd:c7:3a:1d:ba:14:61:58:35:b5:2f:bd:4f:df:42:c5:ba:
         ae:89:5f:75:f0:e9:05:e1:36:fc:f4:1c:32:cf:d1:30:76:c0:
         54:36:01:c4:a8:4a:55:4a:70:ba:1f:a5:4a:fa:02:bb:50:8e:
         6d:dd:88:7c:89:cb:f8:18:f8:46:55:3d:76:08:17:b3:3a:24:
         c4:77:5c:9d:1b:45:be:94:1a:c2:43:30:c8:e6:e6:5e:fa:23:
         7b:32:03:23:5d:76:79:7c:42:38:a9:7f:7a:d1:95:1c:ae:42:
         59:d0:7d:bf:34:7b:97:ff:3b:17:87:11:d4:91:3e:66:3e:fe:
         fe:9d:5e:1b:a6:de:5f:da:3b:4d:63:56:55:6a:43:02:f9:9e:
         65:ba:8a:76:a2:f5:fa:c9:19:32:18:1e:eb:62:08:97:50:41:
         5d:a2:6c:1b:76:56:cd:4d:a0:72:0c:a1:66:74:78:18:ba:aa:
         34:3f:43:89:13:f7:90:29:dc:74:1e:f6:e3:8d:d6:52:b7:c6:
         5a:0d:dc:49
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUbV6kQYuCcnvsbI6odT9NdweqoeMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0MwNjdEQUFDOTI2OUJDNzhDQTA5NEIxREYyMDczRTUw
MDc5Q0Y2MDAeFw0yNTAzMDYwMjI4MDZaFw0yNjAzMDUwMjMzMDZaMDMxMTAvBgNV
BAMTKEY4RjExNjRDRTQxQjBDQUE5MEJEM0MyMTUxRjQ5Njk5REE4N0EwNzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMHFUjliGEuSBT82s6Ug0SvHUz
+oTl6DYGERlKR+03a73RJORQRob8sDmwmBH4Aua4VCRm0ouUMPPeIpL4Ywn5YK45
9MSHr6gAaFkGE+ck8Tqb0XKqJAkvJblhUIHlo8Icg4TDJCgIZcmsEo9Jo7BqkzXJ
gwNqsVRgWa1O8BOqSFK/iQyl2KPmBQlbMtADeTkGlbPbotjTAtDuWmMKDrLzY8gk
0mqKVZo3+cpSnYPbUOhZdaBv6vUpsOdtH20j5seijkeAhZhyhwKXlF/LFQeSZram
32OLene+OOFI0uJADOeDZ1Kk2PxsGIt46ZZk9pHkxX8rJQVL23plZ/hgFyndAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU+PEWTOQbDKqQvTwhUfSWmdqHoHYwHwYDVR0j
BBgwFoAUzAZ9qskmm8eMoJSx3yBz5QB5z2AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlNHUmh6cWhxUm9kQ290ZXR2RlJCdG52N0hTS29nUFJ2NWk0ejdwdGJv
U2EvMS9DQzA2N0RBQUM5MjY5QkM3OENBMDk0QjFERjIwNzNFNTAwNzlDRjYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NDMDY3REFBQzkyNjlCQzc4
Q0EwOTRCMURGMjA3M0U1MDA3OUNGNjAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZTR1JoenFocVJvZENvdGV0dkZSQnRudjdIU0tvZ1BSdjVpNHo3cHRib1NhLzEv
MzEzMzM4MmUzMTMyMzEyZTM0MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzQzMjM4MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKKeSwwDQYJKoZIhvcNAQELBQADggEBABDI58uf
9xN+fH8aiSnv6VqXyvEhXEHXWz99ShiK3d8wVn3nKipxv/GJoNpxjUiPcd5AWTnZ
DDz9xzoduhRhWDW1L71P30LFuq6JX3Xw6QXhNvz0HDLP0TB2wFQ2AcSoSlVKcLof
pUr6ArtQjm3diHyJy/gY+EZVPXYIF7M6JMR3XJ0bRb6UGsJDMMjm5l76I3syAyNd
dnl8Qjipf3rRlRyuQlnQfb80e5f/OxeHEdSRPmY+/v6dXhum3l/aO01jVlVqQwL5
nmW6inai9frJGTIYHutiCJdQQV2ibBt2Vs1NoHIMoWZ0eBi6qjQ/Q4kT95Ap3HQe
9uON1lK3xloN3Ek=
-----END CERTIFICATE-----
Generated at Sun Apr 6 20:46:49 2025 by rpki-client