Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/3133382e3132322e36302e302f32322d3232203d3e203631353733.roa
File:                     3133382e3132322e36302e302f32322d3232203d3e203631353733.roa (raw, json)
Hash identifier:          KkxCpCpwPoOJkfa3drHTb2xeEYL2s4Bl1M7Jg91x4Sk=
Subject key identifier:   4A:55:83:1E:BC:27:CD:24:C0:32:E6:E3:7C:60:D8:A1:83:80:A5:43
Certificate issuer:       /CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
Certificate serial:       3122B4CB0458AF8ADE0715B4A4A9D2B8B1D4FEEF
Authority key identifier: DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/3133382e3132322e36302e302f32322d3232203d3e203631353733.roa
Signing time:             Fri 31 May 2024 23:25:13 +0000
ROA not before:           Fri 31 May 2024 23:20:13 +0000
ROA not after:            Fri 30 May 2025 23:25:13 +0000
asID:                     61573
IP address blocks:        138.122.60.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl
                          rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:22:b4:cb:04:58:af:8a:de:07:15:b4:a4:a9:d2:b8:b1:d4:fe:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
        Validity
            Not Before: May 31 23:20:13 2024 GMT
            Not After : May 30 23:25:13 2025 GMT
        Subject: CN=4A55831EBC27CD24C032E6E37C60D8A18380A543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5e:00:15:79:4c:4e:f9:8f:1e:34:f7:d8:3d:
                    2b:0d:aa:31:84:46:bf:a7:f7:91:f1:d2:c0:e0:b4:
                    8d:8a:b6:33:68:58:fc:2f:3d:98:cd:97:30:89:05:
                    e5:42:65:fe:47:5a:aa:97:04:86:94:67:7f:7a:f7:
                    98:b2:59:5b:0b:23:6d:a2:48:69:48:1e:41:11:ed:
                    05:c9:5d:a8:fd:7c:2c:93:05:eb:4a:56:45:c2:57:
                    8e:cf:41:b1:b3:dd:b5:91:60:d8:9f:63:38:f2:4b:
                    c2:9b:9c:76:fe:22:71:73:ac:0b:ea:87:89:d2:d1:
                    52:59:81:2d:f9:40:ce:b2:fc:ce:39:5d:c0:eb:0d:
                    af:76:bf:3c:44:17:05:7b:c4:2b:f7:e9:6b:86:d1:
                    49:0a:24:19:bd:f8:31:f0:a2:72:cd:97:e6:70:df:
                    7a:86:a8:2a:e9:7f:47:da:7e:82:b0:be:5f:2f:09:
                    a3:83:94:96:8a:db:e9:dc:ff:c6:00:d8:e8:c2:75:
                    e4:9c:aa:62:35:2c:f2:4b:de:a7:80:a2:68:cb:50:
                    1b:0b:1b:3f:bc:71:65:75:81:cd:f9:7e:b3:bf:10:
                    e2:1f:b5:66:cd:84:8b:d6:e7:fa:30:c4:ae:6e:31:
                    78:96:0c:71:3b:e8:6e:eb:a0:42:29:81:36:23:82:
                    be:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:55:83:1E:BC:27:CD:24:C0:32:E6:E3:7C:60:D8:A1:83:80:A5:43
            X509v3 Authority Key Identifier:
                keyid:DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/3133382e3132322e36302e302f32322d3232203d3e203631353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:e5:b3:9f:05:0e:c9:1c:44:a3:76:a6:e9:56:22:a5:db:04:
         67:bb:57:ea:d5:96:02:41:a5:b1:38:ad:5d:a6:70:51:ac:ef:
         7c:6f:c0:b1:7b:3f:db:9e:6e:30:5b:49:39:f9:e3:99:57:70:
         f6:30:8d:04:7f:1a:a1:d8:60:ca:c3:d6:58:a4:ea:0a:a1:17:
         cf:b1:0a:0b:df:eb:71:4a:ef:ea:10:8b:09:5b:77:31:57:55:
         9c:b9:78:e3:8c:a6:0d:d4:88:ad:b8:a4:0f:47:ae:94:75:9b:
         37:df:2f:38:fd:af:f7:28:ef:b1:8d:0a:1d:22:21:82:57:03:
         ab:bd:b2:a3:b3:75:45:1e:d7:4c:a2:86:3f:a0:51:50:aa:bf:
         4d:2f:65:a5:18:92:43:3d:c7:af:e9:6e:22:e0:33:a6:9b:9c:
         ea:af:9b:f0:3d:02:82:ea:ec:ba:e8:4d:b5:c2:58:50:56:dc:
         a5:8b:36:70:1c:ba:e1:72:a2:41:d5:ae:a7:b7:df:2b:b7:de:
         97:54:2d:62:8b:e3:f9:ec:8d:e8:f4:3f:b2:07:db:12:ea:1e:
         30:75:a1:9c:89:e0:65:e2:77:04:e9:e5:f7:78:97:d4:12:fa:
         9b:e8:7e:09:79:3d:09:82:ff:0f:be:d2:02:71:9a:ad:9c:f9:
         ef:81:cf:34
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUMSK0ywRYr4reBxW0pKnSuLHU/u8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREUxOEU0RjFCMTlFOUNCNDJCRTU0NjgzMTI3NjQ1MTlF
QUE4NjZCRDAeFw0yNDA1MzEyMzIwMTNaFw0yNTA1MzAyMzI1MTNaMDMxMTAvBgNV
BAMTKDRBNTU4MzFFQkMyN0NEMjRDMDMyRTZFMzdDNjBEOEExODM4MEE1NDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAXgAVeUxO+Y8eNPfYPSsNqjGE
Rr+n95Hx0sDgtI2KtjNoWPwvPZjNlzCJBeVCZf5HWqqXBIaUZ39695iyWVsLI22i
SGlIHkER7QXJXaj9fCyTBetKVkXCV47PQbGz3bWRYNifYzjyS8KbnHb+InFzrAvq
h4nS0VJZgS35QM6y/M45XcDrDa92vzxEFwV7xCv36WuG0UkKJBm9+DHwonLNl+Zw
33qGqCrpf0fafoKwvl8vCaODlJaK2+nc/8YA2OjCdeScqmI1LPJL3qeAomjLUBsL
Gz+8cWV1gc35frO/EOIftWbNhIvW5/owxK5uMXiWDHE76G7roEIpgTYjgr7pAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUSlWDHrwnzSTAMubjfGDYoYOApUMwHwYDVR0j
BBgwFoAU3hjk8bGenLQr5UaDEnZFGeqoZr0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHdFS3Z0REo2U0Jrdm5WcUdKaVZqaTV1UDQ2UkxYVG5oRnNqeDhCczdl
UnQvMC9ERTE4RTRGMUIxOUU5Q0I0MkJFNTQ2ODMxMjc2NDUxOUVBQTg2NkJELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFMThFNEYxQjE5RTlDQjQy
QkU1NDY4MzEyNzY0NTE5RUFBODY2QkQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h3RUt2dERKNlNCa3ZuVnFHSmlWamk1dVA0NlJMWFRuaEZzang4QnM3ZVJ0LzAv
MzEzMzM4MmUzMTMyMzIyZTM2MzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNjMx
MzUzNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCino8MA0GCSqGSIb3DQEBCwUAA4IBAQCD5bOfBQ7J
HESjdqbpViKl2wRnu1fq1ZYCQaWxOK1dpnBRrO98b8Cxez/bnm4wW0k5+eOZV3D2
MI0Efxqh2GDKw9ZYpOoKoRfPsQoL3+txSu/qEIsJW3cxV1WcuXjjjKYN1IituKQP
R66UdZs33y84/a/3KO+xjQodIiGCVwOrvbKjs3VFHtdMooY/oFFQqr9NL2WlGJJD
Pcev6W4i4DOmm5zqr5vwPQKC6uy66E21wlhQVtylizZwHLrhcqJB1a6nt98rt96X
VC1ii+P57I3o9D+yB9sS6h4wdaGcieBl4ncE6eX3eJfUEvqb6H4JeT0Jgv8PvtIC
cZqtnPnvgc80
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:15 2024 by rpki-client on console-fra.rpki-client.org