Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/1/3133382e3138352e3137322e302f32322d3234203d3e203631383632.roa
File:                     3133382e3138352e3137322e302f32322d3234203d3e203631383632.roa (raw, json)
Hash identifier:          W1nz6eddwnI5Y1rHtWpZS77U9qom9c0LhhHiiEq7Vc8=
Subject key identifier:   1D:0C:51:AD:76:CB:87:57:59:26:D1:1C:FF:ED:AA:C2:97:DE:1B:AD
Certificate issuer:       /CN=82C0DCA453DA0149230AB20FF5CF0E95CD577E8B
Certificate serial:       187309A3683D0D35F60F3EB8B83A81E019A34C6D
Authority key identifier: 82:C0:DC:A4:53:DA:01:49:23:0A:B2:0F:F5:CF:0E:95:CD:57:7E:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82C0DCA453DA0149230AB20FF5CF0E95CD577E8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/1/3133382e3138352e3137322e302f32322d3234203d3e203631383632.roa
Signing time:             Thu 04 Apr 2024 02:19:01 +0000
ROA not before:           Thu 04 Apr 2024 02:14:01 +0000
ROA not after:            Thu 03 Apr 2025 02:19:01 +0000
asID:                     61862
IP address blocks:        138.185.172.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/1/82C0DCA453DA0149230AB20FF5CF0E95CD577E8B.crl
                          rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/1/82C0DCA453DA0149230AB20FF5CF0E95CD577E8B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82C0DCA453DA0149230AB20FF5CF0E95CD577E8B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 00:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:73:09:a3:68:3d:0d:35:f6:0f:3e:b8:b8:3a:81:e0:19:a3:4c:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82C0DCA453DA0149230AB20FF5CF0E95CD577E8B
        Validity
            Not Before: Apr  4 02:14:01 2024 GMT
            Not After : Apr  3 02:19:01 2025 GMT
        Subject: CN=1D0C51AD76CB87575926D11CFFEDAAC297DE1BAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ef:f9:c0:63:c2:95:68:38:c7:ab:ba:26:e2:
                    c8:e7:e3:35:21:9f:24:74:0c:d4:39:c2:65:88:89:
                    6c:53:76:cd:60:1c:43:39:ae:77:7d:24:ba:d4:1e:
                    bf:a7:a2:5a:61:65:08:0d:23:57:fd:71:ec:e3:1f:
                    2a:1d:e4:9e:33:51:15:de:eb:d3:31:5b:6d:76:0f:
                    5f:89:c2:06:1f:96:e1:c8:1a:32:d7:75:17:db:6d:
                    35:b7:84:69:5f:ca:76:95:f7:4b:30:e2:9d:6a:8b:
                    3e:d6:a4:52:03:f2:49:09:02:43:62:80:1b:09:e7:
                    82:40:62:2f:81:97:4e:d3:7d:df:76:1d:7f:d1:2d:
                    d1:5e:eb:7f:92:3f:0f:d2:55:b4:73:16:2b:23:2a:
                    67:24:5d:15:b1:3d:b6:fa:38:94:04:95:67:41:f7:
                    4f:c0:0e:72:9b:e8:60:98:19:d2:e8:69:e8:77:a7:
                    28:ad:91:a0:5e:da:e7:ae:9f:3b:1f:71:6e:d4:18:
                    73:fe:49:eb:5d:f3:63:f4:dc:c8:db:96:43:1b:3d:
                    4a:fa:ba:c1:bd:70:33:d9:4d:4d:c9:af:e6:ff:5f:
                    18:a6:d9:0c:87:b5:a4:c5:b2:ea:e6:9e:64:d4:cc:
                    5e:66:88:ad:fa:57:d0:2e:b1:3c:19:fb:75:f5:8d:
                    b4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:0C:51:AD:76:CB:87:57:59:26:D1:1C:FF:ED:AA:C2:97:DE:1B:AD
            X509v3 Authority Key Identifier:
                keyid:82:C0:DC:A4:53:DA:01:49:23:0A:B2:0F:F5:CF:0E:95:CD:57:7E:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/1/82C0DCA453DA0149230AB20FF5CF0E95CD577E8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82C0DCA453DA0149230AB20FF5CF0E95CD577E8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/1/3133382e3138352e3137322e302f32322d3234203d3e203631383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:b6:9a:bc:7e:b9:bf:22:c2:16:73:b5:65:d3:ea:f1:44:bf:
         96:75:e5:20:0f:66:28:d7:d2:42:fa:e3:a1:20:8b:8f:e1:6c:
         5b:a0:4b:ad:ad:0b:d2:f2:9b:f2:aa:4c:ca:ea:8e:53:c1:df:
         3e:13:ce:7b:76:6c:af:8b:38:cd:67:76:bf:53:cf:af:3c:96:
         31:b5:a3:b2:b3:d1:51:fc:c3:66:30:28:67:8a:ac:ce:47:a4:
         cd:50:b4:c2:90:12:f3:53:26:54:cb:f3:89:7a:76:bb:1a:8f:
         75:90:4d:04:f6:4f:e8:e8:0e:12:8e:bb:aa:0b:0a:a6:92:2e:
         c1:f2:0a:dc:a5:6a:9e:d6:dd:cb:9d:2c:f7:31:cb:d1:fd:ea:
         78:16:ff:85:fe:94:e9:22:a6:c0:ba:57:63:f3:5d:82:bc:96:
         e5:55:bd:d7:9c:41:db:55:0a:0d:70:dd:96:cc:6d:c8:d3:92:
         c2:ed:04:ac:da:e3:40:22:b2:63:9c:29:75:c7:c0:e4:39:f1:
         d1:e8:8d:04:92:a5:82:51:0d:2c:a0:6d:74:b1:d4:2d:e1:82:
         df:e7:a1:a1:4f:78:39:25:90:45:b9:30:41:af:93:42:d7:59:
         e3:36:85:65:d3:4c:33:92:37:00:87:67:77:c5:11:b6:de:24:
         75:0a:22:59
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUGHMJo2g9DTX2Dz64uDqB4BmjTG0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODJDMERDQTQ1M0RBMDE0OTIzMEFCMjBGRjVDRjBFOTVD
RDU3N0U4QjAeFw0yNDA0MDQwMjE0MDFaFw0yNTA0MDMwMjE5MDFaMDMxMTAvBgNV
BAMTKDFEMEM1MUFENzZDQjg3NTc1OTI2RDExQ0ZGRURBQUMyOTdERTFCQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj7/nAY8KVaDjHq7om4sjn4zUh
nyR0DNQ5wmWIiWxTds1gHEM5rnd9JLrUHr+nolphZQgNI1f9cezjHyod5J4zURXe
69MxW212D1+JwgYfluHIGjLXdRfbbTW3hGlfynaV90sw4p1qiz7WpFID8kkJAkNi
gBsJ54JAYi+Bl07Tfd92HX/RLdFe63+SPw/SVbRzFisjKmckXRWxPbb6OJQElWdB
90/ADnKb6GCYGdLoaeh3pyitkaBe2ueunzsfcW7UGHP+Setd82P03MjblkMbPUr6
usG9cDPZTU3Jr+b/Xxim2QyHtaTFsurmnmTUzF5miK36V9AusTwZ+3X1jbQRAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUHQxRrXbLh1dZJtEc/+2qwpfeG60wHwYDVR0j
BBgwFoAUgsDcpFPaAUkjCrIP9c8Olc1XfoswDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9Tb2h2akZIS1hwcGtOUWs3UWJxeWVqTjVmUGtaMmNHclA0OXI2dUFRdmNz
LzEvODJDMERDQTQ1M0RBMDE0OTIzMEFCMjBGRjVDRjBFOTVDRDU3N0U4Qi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84MkMwRENBNDUzREEwMTQ5MjMw
QUIyMEZGNUNGMEU5NUNENTc3RThCLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9T
b2h2akZIS1hwcGtOUWs3UWJxeWVqTjVmUGtaMmNHclA0OXI2dUFRdmNzLzEvMzEz
MzM4MmUzMTM4MzUyZTMxMzczMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM2MzEz
ODM2MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAKKuawwDQYJKoZIhvcNAQELBQADggEBAG62mrx+ub8i
whZztWXT6vFEv5Z15SAPZijX0kL646Egi4/hbFugS62tC9Lym/KqTMrqjlPB3z4T
znt2bK+LOM1ndr9Tz688ljG1o7Kz0VH8w2YwKGeKrM5HpM1QtMKQEvNTJlTL84l6
drsaj3WQTQT2T+joDhKOu6oLCqaSLsHyCtylap7W3cudLPcxy9H96ngW/4X+lOki
psC6V2PzXYK8luVVvdecQdtVCg1w3ZbMbcjTksLtBKza40AismOcKXXHwOQ58dHo
jQSSpYJRDSygbXSx1C3hgt/noaFPeDklkEW5MEGvk0LXWeM2hWXTTDOSNwCHZ3fF
EbbeJHUKIlk=
-----END CERTIFICATE-----
Generated at Fri Jun 28 01:06:20 2024 by rpki-client on console-ams.rpki-client.org