Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/3133382e3138352e32302e302f32322d3332203d3e20323634333332.roa
File:                     3133382e3138352e32302e302f32322d3332203d3e20323634333332.roa (raw, json)
Hash identifier:          rx5Zu0sL+XVwDW8gwYzOP+H4x5J1EEfuLondo22zp8Y=
Subject key identifier:   5F:06:00:E7:39:DA:4A:12:13:24:8D:BE:D0:20:CA:89:5D:6B:4A:DC
Certificate issuer:       /CN=7A509BA48E79904F69690722D65AADB9AD3A47AB
Certificate serial:       7C469457E9EFF06ADA99AB0E86AE5424DAEF6694
Authority key identifier: 7A:50:9B:A4:8E:79:90:4F:69:69:07:22:D6:5A:AD:B9:AD:3A:47:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/3133382e3138352e32302e302f32322d3332203d3e20323634333332.roa
Signing time:             Wed 12 Feb 2025 16:41:36 +0000
ROA not before:           Wed 12 Feb 2025 16:36:36 +0000
ROA not after:            Wed 11 Feb 2026 16:41:36 +0000
asID:                     264332
IP address blocks:        138.185.20.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.crl
                          rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 16:51:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:46:94:57:e9:ef:f0:6a:da:99:ab:0e:86:ae:54:24:da:ef:66:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A509BA48E79904F69690722D65AADB9AD3A47AB
        Validity
            Not Before: Feb 12 16:36:36 2025 GMT
            Not After : Feb 11 16:41:36 2026 GMT
        Subject: CN=5F0600E739DA4A1213248DBED020CA895D6B4ADC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:15:5f:ca:86:d2:30:bf:bd:21:8d:8e:fc:59:
                    61:e0:f4:1d:3e:02:aa:ee:e3:04:f3:97:f3:68:1b:
                    20:74:90:a8:ab:0d:8e:0a:96:94:66:f9:ed:92:b9:
                    ec:92:e1:4b:6e:7f:ac:42:f0:9d:e3:0e:8b:d0:43:
                    a6:6d:d3:f0:40:f9:a1:5c:15:8a:2f:27:8b:5d:09:
                    9a:d8:a9:6a:90:ad:f5:f1:81:f9:e3:77:df:7d:53:
                    25:d4:ba:fb:a2:82:62:31:fb:03:99:18:38:5d:68:
                    73:12:91:5a:dc:4b:02:e2:15:26:f3:b5:bf:15:62:
                    8c:9e:ca:a3:10:64:04:0a:ee:b7:4c:2f:00:cd:b5:
                    fa:11:99:48:fd:3a:cb:1c:b5:5e:98:d8:14:e7:3b:
                    f2:62:7b:af:8b:ed:ea:91:5e:93:2e:fc:62:4a:3d:
                    9a:fa:ff:a4:59:04:84:03:c6:d8:89:f1:3c:6c:22:
                    00:69:44:bb:a6:5b:1c:83:22:e9:6b:7d:65:ec:d1:
                    d9:3a:36:10:c2:8d:f1:58:60:05:12:dc:44:df:77:
                    81:72:ab:6d:32:72:ae:04:ad:7b:91:72:6e:05:f0:
                    a2:45:7f:f6:a2:1c:9b:bd:a3:99:d1:33:c2:ab:20:
                    69:bf:ba:c8:01:0c:5a:76:8c:3b:28:1d:22:9e:ef:
                    3e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:06:00:E7:39:DA:4A:12:13:24:8D:BE:D0:20:CA:89:5D:6B:4A:DC
            X509v3 Authority Key Identifier:
                keyid:7A:50:9B:A4:8E:79:90:4F:69:69:07:22:D6:5A:AD:B9:AD:3A:47:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/3133382e3138352e32302e302f32322d3332203d3e20323634333332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c1:8f:04:a4:7a:a0:c8:02:1a:3c:8f:99:5c:b9:44:05:82:df:
         fd:d8:a3:70:7f:5b:aa:b7:6e:fe:8e:b5:56:7b:41:da:e1:49:
         77:c0:2f:ef:96:25:a6:b4:ba:ff:03:c9:c9:29:ff:52:f4:84:
         b0:6d:15:7c:0e:7d:a1:f5:7d:c9:2e:b7:ab:a5:b1:3d:fa:0d:
         9b:52:a3:97:94:c7:b8:8c:36:2d:37:74:cf:a4:4f:4e:b6:e9:
         32:b2:e0:a5:de:09:ff:fe:73:51:7d:9c:26:95:46:02:e5:64:
         06:57:11:fa:0b:77:80:e0:65:f0:cb:c3:ac:cf:8d:0a:35:bf:
         51:92:49:a7:45:4e:fc:58:e6:9c:b1:35:3c:06:3c:eb:9c:f9:
         7e:b5:97:dd:88:d5:d1:11:a1:3a:a2:69:00:96:f4:2a:2d:1f:
         65:f7:b0:05:28:38:1b:2b:e4:a6:47:6e:d6:d1:a7:1e:6a:30:
         81:3f:d3:0e:d7:78:04:45:43:04:f7:b4:5e:cf:26:b0:ea:17:
         39:76:20:7a:fb:e4:ff:31:c9:9a:12:99:8f:fe:35:ea:8c:c6:
         c7:41:e9:8b:7a:d4:89:0a:8e:34:15:12:eb:17:c5:c4:2b:b1:
         c5:97:78:a3:d1:f2:16:39:f4:ee:a3:b5:c0:3e:e2:a7:30:14:
         45:a5:84:00
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUfEaUV+nv8GramasOhq5UJNrvZpQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0E1MDlCQTQ4RTc5OTA0RjY5NjkwNzIyRDY1QUFEQjlB
RDNBNDdBQjAeFw0yNTAyMTIxNjM2MzZaFw0yNjAyMTExNjQxMzZaMDMxMTAvBgNV
BAMTKDVGMDYwMEU3MzlEQTRBMTIxMzI0OERCRUQwMjBDQTg5NUQ2QjRBREMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUFV/KhtIwv70hjY78WWHg9B0+
Aqru4wTzl/NoGyB0kKirDY4KlpRm+e2SueyS4Utuf6xC8J3jDovQQ6Zt0/BA+aFc
FYovJ4tdCZrYqWqQrfXxgfnjd999UyXUuvuigmIx+wOZGDhdaHMSkVrcSwLiFSbz
tb8VYoyeyqMQZAQK7rdMLwDNtfoRmUj9OssctV6Y2BTnO/Jie6+L7eqRXpMu/GJK
PZr6/6RZBIQDxtiJ8TxsIgBpRLumWxyDIulrfWXs0dk6NhDCjfFYYAUS3ETfd4Fy
q20ycq4ErXuRcm4F8KJFf/aiHJu9o5nRM8KrIGm/usgBDFp2jDsoHSKe7z7/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUXwYA5znaShITJI2+0CDKiV1rStwwHwYDVR0j
BBgwFoAUelCbpI55kE9paQci1lqtua06R6swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzlOUGZaZWJxZ0hvUDV5TkN6VXhhM0pNU1BqS1ROZURmeFFRdmtwUEpO
Rk0vMS83QTUwOUJBNDhFNzk5MDRGNjk2OTA3MjJENjVBQURCOUFEM0E0N0FCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdBNTA5QkE0OEU3OTkwNEY2
OTY5MDcyMkQ2NUFBREI5QUQzQTQ3QUIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0c5TlBmWmVicWdIb1A1eU5DelV4YTNKTVNQaktUTmVEZnhRUXZrcFBKTkZNLzEv
MzEzMzM4MmUzMTM4MzUyZTMyMzAyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzQzMzMzMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKKuRQwDQYJKoZIhvcNAQELBQADggEBAMGPBKR6
oMgCGjyPmVy5RAWC3/3Yo3B/W6q3bv6OtVZ7QdrhSXfAL++WJaa0uv8Dyckp/1L0
hLBtFXwOfaH1fckut6ulsT36DZtSo5eUx7iMNi03dM+kT0626TKy4KXeCf/+c1F9
nCaVRgLlZAZXEfoLd4DgZfDLw6zPjQo1v1GSSadFTvxY5pyxNTwGPOuc+X61l92I
1dERoTqiaQCW9CotH2X3sAUoOBsr5KZHbtbRpx5qMIE/0w7XeARFQwT3tF7PJrDq
Fzl2IHr75P8xyZoSmY/+NeqMxsdB6Yt61IkKjjQVEusXxcQrscWXeKPR8hY59O6j
tcA+4qcwFEWlhAA=
-----END CERTIFICATE-----
Generated at Sat Apr 12 21:08:33 2025 by rpki-client