Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/1/3133382e3131372e3137322e302f32332d3233203d3e20323634323337.roa
File:                     3133382e3131372e3137322e302f32332d3233203d3e20323634323337.roa (raw, json)
Hash identifier:          XQ4TPnWKs48iQlHfOL9DivXQMoUPaqHbo5VL5niTSuc=
Subject key identifier:   36:EC:08:7C:C9:02:F9:38:13:FC:BC:6F:FF:ED:2C:F8:EE:0E:B5:72
Certificate issuer:       /CN=66D5AB14A687F80E7A5A3698F13E2B2421405A11
Certificate serial:       594A7EF84F8F13A90E6869BFD9840662866D545A
Authority key identifier: 66:D5:AB:14:A6:87:F8:0E:7A:5A:36:98:F1:3E:2B:24:21:40:5A:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66D5AB14A687F80E7A5A3698F13E2B2421405A11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/1/3133382e3131372e3137322e302f32332d3233203d3e20323634323337.roa
Signing time:             Thu 05 Sep 2024 18:54:26 +0000
ROA not before:           Thu 05 Sep 2024 18:49:26 +0000
ROA not after:            Thu 04 Sep 2025 18:54:26 +0000
asID:                     264237
IP address blocks:        138.117.172.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/1/66D5AB14A687F80E7A5A3698F13E2B2421405A11.crl
                          rsync://rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/1/66D5AB14A687F80E7A5A3698F13E2B2421405A11.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66D5AB14A687F80E7A5A3698F13E2B2421405A11.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:4a:7e:f8:4f:8f:13:a9:0e:68:69:bf:d9:84:06:62:86:6d:54:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66D5AB14A687F80E7A5A3698F13E2B2421405A11
        Validity
            Not Before: Sep  5 18:49:26 2024 GMT
            Not After : Sep  4 18:54:26 2025 GMT
        Subject: CN=36EC087CC902F93813FCBC6FFFED2CF8EE0EB572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:26:31:9c:f8:90:8c:29:d0:02:fb:ea:42:05:
                    3d:c4:f9:16:82:74:ca:4e:44:51:a6:f2:b7:16:66:
                    b7:5d:f0:db:ae:82:ec:62:b7:b6:9c:f5:0a:c2:8b:
                    fb:61:2b:f1:12:b2:1f:82:50:86:9d:3a:39:90:c4:
                    ea:77:8f:a9:58:82:2b:ad:c2:eb:fa:03:48:c3:20:
                    4d:b4:5f:74:7c:0a:96:60:64:63:68:f0:f1:66:1e:
                    02:bd:75:8a:a6:59:3f:7d:fb:a2:b4:d5:15:f9:16:
                    64:d0:30:c4:87:da:35:c9:0c:c7:29:8b:f9:52:9e:
                    2b:9b:3a:6a:81:39:f5:38:dd:2b:2b:77:ff:b9:fa:
                    5d:21:99:1c:81:3e:ff:51:f1:27:d0:f9:21:25:30:
                    22:a8:14:d0:55:a1:c7:69:0d:ca:c6:f8:95:10:ca:
                    bc:4c:ca:1a:b1:1a:71:3d:7c:40:2e:05:26:3e:ff:
                    ac:e9:76:7a:0f:c9:f6:ae:3d:fb:6c:ff:42:eb:61:
                    38:03:9b:96:5d:a5:30:2c:ed:cb:23:c6:9a:f9:09:
                    68:3d:2a:ad:fd:24:fe:42:50:2f:98:44:cd:cb:8b:
                    98:97:90:03:2a:72:bf:a2:a0:3e:9b:22:93:97:fc:
                    69:82:35:a1:c0:6b:b2:05:3f:98:f3:c3:29:eb:57:
                    82:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:EC:08:7C:C9:02:F9:38:13:FC:BC:6F:FF:ED:2C:F8:EE:0E:B5:72
            X509v3 Authority Key Identifier:
                keyid:66:D5:AB:14:A6:87:F8:0E:7A:5A:36:98:F1:3E:2B:24:21:40:5A:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/1/66D5AB14A687F80E7A5A3698F13E2B2421405A11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66D5AB14A687F80E7A5A3698F13E2B2421405A11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/1/3133382e3131372e3137322e302f32332d3233203d3e20323634323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:d0:da:f6:96:46:01:86:a5:7e:4b:00:2c:78:bf:bc:a4:c8:
         8e:e4:05:68:39:f2:d8:98:15:6e:cf:55:9c:70:4d:a7:03:42:
         8e:84:bc:8d:3d:5f:2b:60:12:e7:2c:b7:67:7a:81:1f:16:53:
         92:94:77:65:0d:15:19:d1:c8:27:a8:1b:30:71:2c:b6:c2:a0:
         ea:29:67:8c:ca:6b:53:27:21:f0:51:90:77:bb:34:8a:ac:3a:
         4f:a1:c9:06:5d:64:c6:42:99:26:ea:72:d1:11:c1:22:ed:93:
         c6:a6:1b:e3:9e:f8:b1:ee:b5:0e:12:27:13:a7:b1:e9:2a:fb:
         9a:de:62:6a:da:5e:6e:ce:09:01:8c:35:f2:55:ef:81:d0:54:
         aa:b3:3b:66:d1:d0:ae:7d:e2:dc:7b:5f:5a:61:71:3f:7e:69:
         25:cd:01:57:0d:f8:ba:88:52:1a:c2:2b:2a:27:41:08:e7:f4:
         20:ee:3c:d1:ca:3b:04:f6:64:50:b7:7d:6a:28:41:1b:b5:19:
         8e:cd:e5:cd:50:b4:69:b5:71:af:7f:1c:7b:2b:83:fe:a6:e6:
         c3:b3:35:a3:b7:9d:1e:89:9a:46:5e:81:ca:e9:cb:a9:37:5d:
         eb:9e:9e:4b:e0:74:c0:83:c2:3a:63:d1:c1:99:de:99:9e:e3:
         7f:3f:80:13
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUWUp++E+PE6kOaGm/2YQGYoZtVFowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjZENUFCMTRBNjg3RjgwRTdBNUEzNjk4RjEzRTJCMjQy
MTQwNUExMTAeFw0yNDA5MDUxODQ5MjZaFw0yNTA5MDQxODU0MjZaMDMxMTAvBgNV
BAMTKDM2RUMwODdDQzkwMkY5MzgxM0ZDQkM2RkZGRUQyQ0Y4RUUwRUI1NzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKJjGc+JCMKdAC++pCBT3E+RaC
dMpORFGm8rcWZrdd8Nuuguxit7ac9QrCi/thK/ESsh+CUIadOjmQxOp3j6lYgiut
wuv6A0jDIE20X3R8CpZgZGNo8PFmHgK9dYqmWT99+6K01RX5FmTQMMSH2jXJDMcp
i/lSniubOmqBOfU43Ssrd/+5+l0hmRyBPv9R8SfQ+SElMCKoFNBVocdpDcrG+JUQ
yrxMyhqxGnE9fEAuBSY+/6zpdnoPyfauPfts/0LrYTgDm5ZdpTAs7csjxpr5CWg9
Kq39JP5CUC+YRM3Li5iXkAMqcr+ioD6bIpOX/GmCNaHAa7IFP5jzwynrV4LxAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUNuwIfMkC+TgT/Lxv/+0s+O4OtXIwHwYDVR0j
BBgwFoAUZtWrFKaH+A56WjaY8T4rJCFAWhEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGhNQk5qREZqajlRZEV1aGhmend5TTg4R1I4WlVtVkpEYWc5VU5nTFF2
ZFAvMS82NkQ1QUIxNEE2ODdGODBFN0E1QTM2OThGMTNFMkIyNDIxNDA1QTExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY2RDVBQjE0QTY4N0Y4MEU3
QTVBMzY5OEYxM0UyQjI0MjE0MDVBMTEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hoTUJOakRGamo5UWRFdWhoZnp3eU04OEdSOFpVbVZKRGFnOVVOZ0xRdmRQLzEv
MzEzMzM4MmUzMTMxMzcyZTMxMzczMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzNDMyMzMzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAYp1rDANBgkqhkiG9w0BAQsFAAOCAQEAj9Da
9pZGAYalfksALHi/vKTIjuQFaDny2JgVbs9VnHBNpwNCjoS8jT1fK2AS5yy3Z3qB
HxZTkpR3ZQ0VGdHIJ6gbMHEstsKg6ilnjMprUych8FGQd7s0iqw6T6HJBl1kxkKZ
Jupy0RHBIu2TxqYb4574se61DhInE6ex6Sr7mt5iatpebs4JAYw18lXvgdBUqrM7
ZtHQrn3i3HtfWmFxP35pJc0BVw34uohSGsIrKidBCOf0IO480co7BPZkULd9aihB
G7UZjs3lzVC0abVxr38ceyuD/qbmw7M1o7edHomaRl6ByunLqTdd656eS+B0wIPC
OmPRwZnemZ7jfz+AEw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:14 2024 by rpki-client on console-fra.rpki-client.org