Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/3133382e39372e3130342e302f32322d3232203d3e203533313037.roa
File:                     3133382e39372e3130342e302f32322d3232203d3e203533313037.roa (raw, json)
Hash identifier:          uWIXEw2GicLh5OQHK7xVk30kM77LvuTTeNxlKdGamok=
Subject key identifier:   6B:47:5F:52:67:56:28:7D:12:9F:07:E8:14:D8:8D:47:CD:B6:0F:4E
Certificate issuer:       /CN=7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1
Certificate serial:       6D89CA7B8E27013B76FD19A6438A9DE277E59BCD
Authority key identifier: 71:25:BE:DD:FE:C2:9C:0A:4C:F5:91:E5:EB:40:83:8B:FE:3C:7A:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/3133382e39372e3130342e302f32322d3232203d3e203533313037.roa
Signing time:             Thu 04 Apr 2024 00:20:24 +0000
ROA not before:           Thu 04 Apr 2024 00:15:24 +0000
ROA not after:            Thu 03 Apr 2025 00:20:24 +0000
asID:                     53107
IP address blocks:        138.97.104.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.crl
                          rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:32:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:89:ca:7b:8e:27:01:3b:76:fd:19:a6:43:8a:9d:e2:77:e5:9b:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1
        Validity
            Not Before: Apr  4 00:15:24 2024 GMT
            Not After : Apr  3 00:20:24 2025 GMT
        Subject: CN=6B475F526756287D129F07E814D88D47CDB60F4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:11:99:cc:eb:fa:84:57:a3:8d:57:5c:49:e2:
                    43:02:e0:07:3f:6f:11:f3:b0:ff:b3:82:c4:b5:b7:
                    6b:fc:b0:fd:3d:a9:4a:ef:ba:1e:fa:fc:28:55:70:
                    4e:c5:90:6f:a3:81:4a:ca:80:4b:71:2f:42:01:b0:
                    05:9a:11:62:07:b7:89:28:d7:64:44:60:4a:8f:33:
                    51:f3:84:01:25:be:19:79:67:ab:10:86:9a:45:7f:
                    ff:9f:d6:7e:d4:25:21:41:67:b1:4d:19:82:90:fd:
                    18:0d:a8:e5:04:f3:91:b7:d7:46:0b:14:c9:06:41:
                    30:6b:73:ba:88:10:c4:d4:f2:72:05:6f:67:3b:65:
                    f7:ca:04:33:15:26:70:cd:e2:e8:84:07:e7:4d:b1:
                    ef:48:e1:66:af:54:1b:cb:14:1d:e0:22:00:e4:4b:
                    8d:62:b9:f2:32:ea:49:2b:d0:cb:c1:b7:c7:c5:11:
                    20:08:f2:08:99:f6:16:98:e9:4a:d6:a9:b1:68:e5:
                    aa:40:22:96:76:d9:2a:60:75:46:1c:5a:6b:7f:f6:
                    24:4c:c3:7a:ce:1e:b0:2d:06:3e:12:6e:78:64:e2:
                    86:dd:7d:2e:e4:0d:6b:9e:ac:84:e2:56:19:77:9e:
                    2a:78:46:75:5d:92:87:2e:6a:e6:f1:48:38:cb:c3:
                    2d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:47:5F:52:67:56:28:7D:12:9F:07:E8:14:D8:8D:47:CD:B6:0F:4E
            X509v3 Authority Key Identifier:
                keyid:71:25:BE:DD:FE:C2:9C:0A:4C:F5:91:E5:EB:40:83:8B:FE:3C:7A:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/3133382e39372e3130342e302f32322d3232203d3e203533313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:03:be:c9:7c:8f:c9:44:20:3c:72:49:73:d6:28:3b:d3:96:
         c4:94:7e:03:e3:da:2d:4c:25:62:b5:70:30:25:b4:a5:ca:37:
         f7:81:fa:1c:eb:db:33:6e:5c:4c:e1:36:0e:0e:01:75:36:5a:
         60:19:b1:f3:d1:12:ae:93:ec:77:f1:15:67:5f:51:43:2c:24:
         18:1f:3d:3d:98:77:99:66:be:5a:3c:29:9c:ca:8f:c4:0d:57:
         07:9c:b8:4e:05:ae:e9:55:06:3f:fc:fe:8c:82:55:a7:eb:30:
         6d:9f:3a:9d:cc:e3:42:ae:85:ef:f1:ef:b0:68:f0:c2:5a:ce:
         ff:b3:c6:0f:da:99:a3:23:8c:ab:59:e5:c8:0f:05:d2:02:30:
         f2:db:34:df:73:5b:c3:8f:18:09:57:05:31:1b:a7:35:25:3f:
         d8:03:98:6d:87:c9:39:6f:5c:67:8c:60:38:20:f2:d8:0c:77:
         c4:87:a0:3b:6d:1a:a7:44:5e:2c:a3:22:fd:60:61:2d:4f:d7:
         e8:ef:86:7a:c4:43:05:a8:bc:22:9e:b8:ee:5d:48:69:8e:a0:
         08:b5:8f:40:b5:00:b3:75:22:01:51:f4:71:14:70:c9:fc:e8:
         33:de:54:48:9d:22:3b:2d:c2:b4:fa:17:fc:a9:e4:97:13:1f:
         98:f6:0a:1b
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUbYnKe44nATt2/RmmQ4qd4nflm80wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzEyNUJFRERGRUMyOUMwQTRDRjU5MUU1RUI0MDgzOEJG
RTNDN0FDMTAeFw0yNDA0MDQwMDE1MjRaFw0yNTA0MDMwMDIwMjRaMDMxMTAvBgNV
BAMTKDZCNDc1RjUyNjc1NjI4N0QxMjlGMDdFODE0RDg4RDQ3Q0RCNjBGNEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwEZnM6/qEV6ONV1xJ4kMC4Ac/
bxHzsP+zgsS1t2v8sP09qUrvuh76/ChVcE7FkG+jgUrKgEtxL0IBsAWaEWIHt4ko
12REYEqPM1HzhAElvhl5Z6sQhppFf/+f1n7UJSFBZ7FNGYKQ/RgNqOUE85G310YL
FMkGQTBrc7qIEMTU8nIFb2c7ZffKBDMVJnDN4uiEB+dNse9I4WavVBvLFB3gIgDk
S41iufIy6kkr0MvBt8fFESAI8giZ9haY6UrWqbFo5apAIpZ22SpgdUYcWmt/9iRM
w3rOHrAtBj4Sbnhk4obdfS7kDWuerITiVhl3nip4RnVdkocuaubxSDjLwy3vAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUa0dfUmdWKH0SnwfoFNiNR822D04wHwYDVR0j
BBgwFoAUcSW+3f7CnApM9ZHl60CDi/48esEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEhnSnF4b2RadG51MktpclRoUjhzcDdLUXZEQ3JpWFFKRWZQZkZDNVRi
eksvMS83MTI1QkVEREZFQzI5QzBBNENGNTkxRTVFQjQwODM4QkZFM0M3QUMxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcxMjVCRURERkVDMjlDMEE0
Q0Y1OTFFNUVCNDA4MzhCRkUzQzdBQzEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hIZ0pxeG9kWnRudTJLaXJUaFI4c3A3S1F2RENyaVhRSkVmUGZGQzVUYnpLLzEv
MzEzMzM4MmUzOTM3MmUzMTMwMzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNTMz
MzEzMDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCimFoMA0GCSqGSIb3DQEBCwUAA4IBAQA0A77JfI/J
RCA8cklz1ig705bElH4D49otTCVitXAwJbSlyjf3gfoc69szblxM4TYODgF1Nlpg
GbHz0RKuk+x38RVnX1FDLCQYHz09mHeZZr5aPCmcyo/EDVcHnLhOBa7pVQY//P6M
glWn6zBtnzqdzONCroXv8e+waPDCWs7/s8YP2pmjI4yrWeXIDwXSAjDy2zTfc1vD
jxgJVwUxG6c1JT/YA5hth8k5b1xnjGA4IPLYDHfEh6A7bRqnRF4soyL9YGEtT9fo
74Z6xEMFqLwinrjuXUhpjqAItY9AtQCzdSIBUfRxFHDJ/Ogz3lRInSI7LcK0+hf8
qeSXEx+Y9gob
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:31 2024 by rpki-client on console-ams.rpki-client.org