Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/3133382e3138352e3137322e302f32322d3234203d3e203631383632.roa
File:                     3133382e3138352e3137322e302f32322d3234203d3e203631383632.roa (raw, json)
Hash identifier:          fxTpR6kGjpzHUi4HM+ey62/lxDfVFp1Mya/83PptAgs=
Subject key identifier:   C1:E2:77:AE:EC:69:A9:02:1F:BE:F5:00:BE:4E:19:58:7E:03:2C:33
Certificate issuer:       /CN=4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355
Certificate serial:       4997AD202A58CA498F2D46329756651765C51A27
Authority key identifier: 4B:80:B2:0B:D7:40:DF:8A:FC:F0:F8:C5:A6:FE:B8:B9:E5:30:63:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/3133382e3138352e3137322e302f32322d3234203d3e203631383632.roa
Signing time:             Fri 17 Jan 2025 19:39:08 +0000
ROA not before:           Fri 17 Jan 2025 19:34:08 +0000
ROA not after:            Fri 16 Jan 2026 19:39:08 +0000
asID:                     61862
IP address blocks:        138.185.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.crl
                          rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 13:08:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:97:ad:20:2a:58:ca:49:8f:2d:46:32:97:56:65:17:65:c5:1a:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355
        Validity
            Not Before: Jan 17 19:34:08 2025 GMT
            Not After : Jan 16 19:39:08 2026 GMT
        Subject: CN=C1E277AEEC69A9021FBEF500BE4E19587E032C33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5f:35:b4:e2:e7:fb:43:87:f0:6e:41:b3:ed:
                    cd:78:4c:85:ca:b1:bd:f1:54:fa:52:36:1f:16:28:
                    a1:c9:b7:87:07:b9:91:aa:fe:2f:b9:46:6a:90:87:
                    fc:01:69:e9:9e:3d:f9:6e:3c:f7:de:13:cc:23:b8:
                    30:e4:23:47:0b:29:12:df:0b:e4:62:8b:6c:fc:ca:
                    fa:cb:4b:8d:e9:b9:a7:80:64:28:99:b1:61:49:83:
                    16:75:41:4c:43:ed:01:7e:70:29:74:86:48:68:9f:
                    2a:ac:0b:51:1b:05:2e:57:c6:70:e8:c1:41:87:01:
                    25:b8:4f:50:6c:cb:e8:5e:9f:99:6c:c8:2c:3d:60:
                    23:ca:e5:d8:7b:51:a9:ef:f5:44:df:a7:40:74:79:
                    13:57:51:3a:ff:db:42:c7:67:86:ff:88:24:e3:80:
                    19:ea:28:b4:96:b2:7e:74:4b:63:11:22:5b:62:a9:
                    d1:0b:60:b5:b7:17:b7:e7:6e:5d:c9:24:bb:48:47:
                    59:9e:ab:3f:c8:eb:27:5e:1a:8d:9c:46:1e:f3:a5:
                    f9:ab:18:51:2a:82:c5:a0:f2:5a:51:68:7f:55:06:
                    9d:ab:e5:9d:37:27:02:aa:03:c3:a3:cc:7d:f3:f2:
                    ab:fe:76:52:47:ed:a7:99:9f:7d:0b:4e:e7:85:73:
                    66:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:E2:77:AE:EC:69:A9:02:1F:BE:F5:00:BE:4E:19:58:7E:03:2C:33
            X509v3 Authority Key Identifier:
                keyid:4B:80:B2:0B:D7:40:DF:8A:FC:F0:F8:C5:A6:FE:B8:B9:E5:30:63:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/3133382e3138352e3137322e302f32322d3234203d3e203631383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:03:63:70:a0:7f:75:36:93:a6:ca:e9:7d:2c:0a:62:e9:cf:
         5f:6f:62:f2:e6:ff:8b:43:e4:42:34:83:89:78:aa:8d:c2:0c:
         28:27:61:40:0a:67:9c:4b:89:bd:93:64:d6:6f:fb:7c:3f:4a:
         d9:81:cb:2c:24:14:16:35:70:f2:d5:72:b6:49:42:a8:a0:82:
         54:86:72:26:90:3d:3b:90:86:8b:26:d3:24:c8:cc:64:a6:4b:
         09:2a:aa:91:ee:b3:60:2d:83:fe:36:ba:cd:01:a6:0e:db:01:
         bc:80:86:f0:8e:8a:7b:30:c2:ff:8a:8d:c6:10:c0:e9:1d:2e:
         a4:74:f0:0d:b5:d2:6d:71:14:48:32:d8:95:d4:ae:91:1c:31:
         ad:ec:94:f6:5b:78:1c:4a:a1:6f:c7:51:be:b5:d2:2a:ea:f6:
         81:82:4f:10:e8:4d:27:81:6e:ae:15:4b:d8:e3:c6:e8:d7:40:
         c0:92:52:a5:d7:58:16:de:46:ea:d8:e3:89:f1:e1:47:e5:ab:
         87:7f:23:ce:79:f2:fa:0d:60:48:b9:34:f1:04:17:c4:92:0b:
         d2:04:a3:03:eb:50:3f:76:60:50:94:13:6b:50:fe:11:77:3d:
         34:a3:62:0f:fc:d3:7f:02:db:53:61:ff:c4:3d:69:93:0e:58:
         7a:ce:53:e6
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUSZetICpYykmPLUYyl1ZlF2XFGicwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEI4MEIyMEJENzQwREY4QUZDRjBGOEM1QTZGRUI4QjlF
NTMwNjM1NTAeFw0yNTAxMTcxOTM0MDhaFw0yNjAxMTYxOTM5MDhaMDMxMTAvBgNV
BAMTKEMxRTI3N0FFRUM2OUE5MDIxRkJFRjUwMEJFNEUxOTU4N0UwMzJDMzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuXzW04uf7Q4fwbkGz7c14TIXK
sb3xVPpSNh8WKKHJt4cHuZGq/i+5RmqQh/wBaemePfluPPfeE8wjuDDkI0cLKRLf
C+Rii2z8yvrLS43puaeAZCiZsWFJgxZ1QUxD7QF+cCl0hkhonyqsC1EbBS5XxnDo
wUGHASW4T1Bsy+hen5lsyCw9YCPK5dh7Uanv9UTfp0B0eRNXUTr/20LHZ4b/iCTj
gBnqKLSWsn50S2MRIltiqdELYLW3F7fnbl3JJLtIR1meqz/I6ydeGo2cRh7zpfmr
GFEqgsWg8lpRaH9VBp2r5Z03JwKqA8OjzH3z8qv+dlJH7aeZn30LTueFc2aBAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUweJ3ruxpqQIfvvUAvk4ZWH4DLDMwHwYDVR0j
BBgwFoAUS4CyC9dA34r88PjFpv64ueUwY1UwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9Tb2h2akZIS1hwcGtOUWs3UWJxeWVqTjVmUGtaMmNHclA0OXI2dUFRdmNz
LzAvNEI4MEIyMEJENzQwREY4QUZDRjBGOEM1QTZGRUI4QjlFNTMwNjM1NS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS80QjgwQjIwQkQ3NDBERjhBRkNG
MEY4QzVBNkZFQjhCOUU1MzA2MzU1LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9T
b2h2akZIS1hwcGtOUWs3UWJxeWVqTjVmUGtaMmNHclA0OXI2dUFRdmNzLzAvMzEz
MzM4MmUzMTM4MzUyZTMxMzczMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM2MzEz
ODM2MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAKKuawwDQYJKoZIhvcNAQELBQADggEBAJADY3Cgf3U2
k6bK6X0sCmLpz19vYvLm/4tD5EI0g4l4qo3CDCgnYUAKZ5xLib2TZNZv+3w/StmB
yywkFBY1cPLVcrZJQqigglSGciaQPTuQhosm0yTIzGSmSwkqqpHus2Atg/42us0B
pg7bAbyAhvCOinswwv+KjcYQwOkdLqR08A210m1xFEgy2JXUrpEcMa3slPZbeBxK
oW/HUb610irq9oGCTxDoTSeBbq4VS9jjxujXQMCSUqXXWBbeRurY44nx4Uflq4d/
I8558voNYEi5NPEEF8SSC9IEowPrUD92YFCUE2tQ/hF3PTSjYg/8038C21Nh/8Q9
aZMOWHrOU+Y=
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:41:34 2025 by rpki-client