Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/3133382e3138352e3235342e302f32342d3234203d3e20323633393430.roa
File:                     3133382e3138352e3235342e302f32342d3234203d3e20323633393430.roa (raw, json)
Hash identifier:          1RNXWZSIleRBkeEvpa73VNxJYaF/o86Npnrj3Tv4fIU=
Subject key identifier:   5B:15:93:8C:47:38:91:86:AF:EB:A2:E0:38:28:DC:B4:F1:F8:F0:70
Certificate issuer:       /CN=1C2736B7CFC9C7EA5B9CA9D4E00280396ADF13B0
Certificate serial:       04706A02FBB1435B7B43005C70877BBA31867F89
Authority key identifier: 1C:27:36:B7:CF:C9:C7:EA:5B:9C:A9:D4:E0:02:80:39:6A:DF:13:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C2736B7CFC9C7EA5B9CA9D4E00280396ADF13B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/3133382e3138352e3235342e302f32342d3234203d3e20323633393430.roa
Signing time:             Wed 09 Apr 2025 14:26:38 +0000
ROA not before:           Wed 09 Apr 2025 14:21:38 +0000
ROA not after:            Wed 08 Apr 2026 14:26:38 +0000
asID:                     263940
IP address blocks:        138.185.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/1C2736B7CFC9C7EA5B9CA9D4E00280396ADF13B0.crl
                          rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/1C2736B7CFC9C7EA5B9CA9D4E00280396ADF13B0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C2736B7CFC9C7EA5B9CA9D4E00280396ADF13B0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 01:26:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:70:6a:02:fb:b1:43:5b:7b:43:00:5c:70:87:7b:ba:31:86:7f:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C2736B7CFC9C7EA5B9CA9D4E00280396ADF13B0
        Validity
            Not Before: Apr  9 14:21:38 2025 GMT
            Not After : Apr  8 14:26:38 2026 GMT
        Subject: CN=5B15938C47389186AFEBA2E03828DCB4F1F8F070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:eb:87:0f:20:53:db:cd:e8:1f:0f:53:f9:2a:
                    25:86:f9:40:7e:3b:b9:0c:02:f9:be:9d:7e:58:97:
                    a8:f6:27:bf:f5:79:d8:a8:20:38:e5:b2:27:65:ff:
                    26:e6:95:96:7a:4c:5d:52:a6:f5:06:d3:32:82:9c:
                    04:5d:6d:3e:79:b2:57:aa:e1:5f:c5:47:77:97:1a:
                    0c:d7:64:bf:c9:f0:87:f2:c8:8e:23:d1:82:47:f7:
                    f7:6f:36:00:2c:58:d4:48:d4:83:b5:8d:9a:3c:76:
                    3b:58:2a:71:b1:9f:d4:79:c7:b3:af:9e:cf:d2:19:
                    b2:9a:ce:2f:93:4e:5e:c8:c6:e2:20:43:98:02:a4:
                    51:b1:96:70:8e:5e:00:f6:8d:23:52:21:12:ae:eb:
                    51:ce:d5:5b:bb:0a:09:3e:03:71:29:45:d0:a1:a7:
                    40:f4:22:5f:92:fd:b0:92:3e:16:97:b0:a9:70:87:
                    e4:a7:14:e3:b3:71:79:35:b4:d0:67:a5:9b:45:a4:
                    93:68:3f:34:15:18:1c:91:6e:bf:bf:82:e0:b8:29:
                    c5:d7:7d:18:a5:c8:ad:20:44:fa:e4:83:26:c1:aa:
                    29:1a:fb:3c:46:60:0c:6e:d8:56:9d:90:c2:7e:35:
                    a1:7a:c4:e3:fd:d7:9f:28:42:45:7a:e4:40:8d:24:
                    63:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:15:93:8C:47:38:91:86:AF:EB:A2:E0:38:28:DC:B4:F1:F8:F0:70
            X509v3 Authority Key Identifier:
                keyid:1C:27:36:B7:CF:C9:C7:EA:5B:9C:A9:D4:E0:02:80:39:6A:DF:13:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/1C2736B7CFC9C7EA5B9CA9D4E00280396ADF13B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C2736B7CFC9C7EA5B9CA9D4E00280396ADF13B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/3133382e3138352e3235342e302f32342d3234203d3e20323633393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:bc:06:bf:ec:5c:7c:0d:7c:2a:1b:bd:89:2a:1c:5b:9d:3e:
         53:ce:22:19:e6:ca:0d:58:09:4b:1f:86:f6:05:8e:66:12:fb:
         45:76:b1:97:c5:dd:8f:61:ae:90:d1:1c:cf:cf:f4:bf:3f:3f:
         13:f4:d8:42:6a:cd:14:09:76:9a:eb:f2:8c:6d:ac:a3:05:2b:
         56:65:a6:a5:43:38:eb:16:a0:c1:de:fa:cd:08:88:d5:88:ae:
         03:64:be:3b:f5:62:22:d5:b6:8d:18:60:1c:f6:da:7b:5c:ff:
         d3:a9:65:f5:09:96:b0:6c:ca:1e:9d:ef:d8:c5:46:d2:55:18:
         e3:a3:60:ca:ed:62:c0:f7:82:71:5a:50:42:d0:00:08:11:22:
         23:27:ee:06:39:cd:04:fd:ab:b2:8f:1f:2a:ab:7b:ec:e2:92:
         86:50:5a:5e:d9:a6:27:20:1f:c7:eb:57:80:a0:00:50:58:77:
         04:cb:b5:9a:b8:e5:08:02:e0:41:0e:8f:f9:4a:af:cb:e8:69:
         1f:94:94:d0:b0:c5:55:5a:78:0f:94:0e:75:fe:7b:a3:43:1f:
         aa:e0:38:4a:f0:9b:cf:8b:83:91:cf:22:3c:08:e1:ff:82:ee:
         79:bc:8f:af:c7:35:8a:d2:1e:7f:2f:cf:88:42:5a:87:a1:37:
         0a:dd:7d:1c
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUBHBqAvuxQ1t7QwBccId7ujGGf4kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUMyNzM2QjdDRkM5QzdFQTVCOUNBOUQ0RTAwMjgwMzk2
QURGMTNCMDAeFw0yNTA0MDkxNDIxMzhaFw0yNjA0MDgxNDI2MzhaMDMxMTAvBgNV
BAMTKDVCMTU5MzhDNDczODkxODZBRkVCQTJFMDM4MjhEQ0I0RjFGOEYwNzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ64cPIFPbzegfD1P5KiWG+UB+
O7kMAvm+nX5Yl6j2J7/1edioIDjlsidl/ybmlZZ6TF1SpvUG0zKCnARdbT55sleq
4V/FR3eXGgzXZL/J8IfyyI4j0YJH9/dvNgAsWNRI1IO1jZo8djtYKnGxn9R5x7Ov
ns/SGbKazi+TTl7IxuIgQ5gCpFGxlnCOXgD2jSNSIRKu61HO1Vu7Cgk+A3EpRdCh
p0D0Il+S/bCSPhaXsKlwh+SnFOOzcXk1tNBnpZtFpJNoPzQVGByRbr+/guC4KcXX
fRilyK0gRPrkgybBqika+zxGYAxu2FadkMJ+NaF6xOP9158oQkV65ECNJGO7AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUWxWTjEc4kYav66LgOCjctPH48HAwHwYDVR0j
BBgwFoAUHCc2t8/Jx+pbnKnU4AKAOWrfE7AwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9ZbzhRZVRidUtaMjU5aTVxU1lqZWVVOG9rS0FLVTZMOFpGdTFHNVdMVDFI
LzAvMUMyNzM2QjdDRkM5QzdFQTVCOUNBOUQ0RTAwMjgwMzk2QURGMTNCMC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8xQzI3MzZCN0NGQzlDN0VBNUI5
Q0E5RDRFMDAyODAzOTZBREYxM0IwLmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Z
bzhRZVRidUtaMjU5aTVxU1lqZWVVOG9rS0FLVTZMOFpGdTFHNVdMVDFILzAvMzEz
MzM4MmUzMTM4MzUyZTMyMzUzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYz
MzM5MzQzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAIq5/jANBgkqhkiG9w0BAQsFAAOCAQEAuLwGv+xc
fA18Khu9iSocW50+U84iGebKDVgJSx+G9gWOZhL7RXaxl8Xdj2GukNEcz8/0vz8/
E/TYQmrNFAl2muvyjG2sowUrVmWmpUM46xagwd76zQiI1YiuA2S+O/ViItW2jRhg
HPbae1z/06ll9QmWsGzKHp3v2MVG0lUY46Ngyu1iwPeCcVpQQtAACBEiIyfuBjnN
BP2rso8fKqt77OKShlBaXtmmJyAfx+tXgKAAUFh3BMu1mrjlCALgQQ6P+Uqvy+hp
H5SU0LDFVVp4D5QOdf57o0MfquA4SvCbz4uDkc8iPAjh/4LuebyPr8c1itIefy/P
iEJah6E3Ct19HA==
-----END CERTIFICATE-----
Generated at Fri Apr 18 14:38:52 2025 by rpki-client