Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/3133382e3132322e3232302e302f32322d3234203d3e20323632393933.roa
File:                     3133382e3132322e3232302e302f32322d3234203d3e20323632393933.roa (raw, json)
Hash identifier:          jULvzAmUH0fWR8rrV7xAwTtrfgF+p/71upiRkceoBLU=
Subject key identifier:   CE:AC:76:8A:E3:D5:96:61:C3:8D:AA:F3:22:8E:5C:11:ED:8B:F1:0B
Certificate issuer:       /CN=21F41A1DE6B061FF1919072AF54DAF54380B0F27
Certificate serial:       3B41FDB0FC74AF7414E004A34948000FBCC3C369
Authority key identifier: 21:F4:1A:1D:E6:B0:61:FF:19:19:07:2A:F5:4D:AF:54:38:0B:0F:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F41A1DE6B061FF1919072AF54DAF54380B0F27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/3133382e3132322e3232302e302f32322d3234203d3e20323632393933.roa
Signing time:             Wed 21 Aug 2024 12:06:24 +0000
ROA not before:           Wed 21 Aug 2024 12:01:24 +0000
ROA not after:            Wed 20 Aug 2025 12:06:24 +0000
asID:                     262993
IP address blocks:        138.122.220.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/21F41A1DE6B061FF1919072AF54DAF54380B0F27.crl
                          rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/21F41A1DE6B061FF1919072AF54DAF54380B0F27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F41A1DE6B061FF1919072AF54DAF54380B0F27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:41:fd:b0:fc:74:af:74:14:e0:04:a3:49:48:00:0f:bc:c3:c3:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21F41A1DE6B061FF1919072AF54DAF54380B0F27
        Validity
            Not Before: Aug 21 12:01:24 2024 GMT
            Not After : Aug 20 12:06:24 2025 GMT
        Subject: CN=CEAC768AE3D59661C38DAAF3228E5C11ED8BF10B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:14:d6:bc:97:63:31:4d:aa:58:6e:23:39:74:
                    31:46:45:7e:d2:72:c1:9a:cb:ca:b6:1d:7a:bf:98:
                    44:ed:33:0c:3d:d8:4e:03:3d:9d:d3:d1:6f:67:4d:
                    7b:36:84:31:2a:3e:2f:87:31:a2:68:88:e2:d9:93:
                    7d:c8:de:c8:e8:81:3f:fe:e6:cf:24:8c:29:47:8c:
                    e9:39:2a:ac:49:e1:6d:74:64:f3:a4:69:4e:89:db:
                    1e:eb:e1:5a:b8:c5:d7:aa:96:11:66:39:ff:99:8e:
                    fd:6f:4b:bc:8c:91:2d:46:13:fa:e0:07:78:ec:42:
                    10:71:1c:8f:7e:17:48:bc:0e:0e:b1:7c:de:e9:79:
                    da:b3:ce:2a:53:6d:e4:a8:2e:a2:bf:27:cb:b5:d6:
                    fe:9d:88:2e:39:6b:ca:8f:67:6d:1a:f6:02:bc:c6:
                    7c:13:f3:65:67:de:15:ed:93:22:36:e0:d8:ab:2a:
                    3a:9a:6d:b7:6e:b9:61:c2:e9:18:19:55:3c:ce:3f:
                    bb:2f:ea:f2:6b:bd:35:49:a1:4b:02:2f:ea:7d:f9:
                    ba:2e:11:2f:f1:07:2b:3c:db:6a:18:33:22:b6:1b:
                    49:c8:d2:09:d6:07:89:31:a7:48:32:a2:47:42:43:
                    14:62:f3:56:7b:cd:25:67:bb:7f:6b:37:a4:60:85:
                    b2:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:AC:76:8A:E3:D5:96:61:C3:8D:AA:F3:22:8E:5C:11:ED:8B:F1:0B
            X509v3 Authority Key Identifier:
                keyid:21:F4:1A:1D:E6:B0:61:FF:19:19:07:2A:F5:4D:AF:54:38:0B:0F:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/21F41A1DE6B061FF1919072AF54DAF54380B0F27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F41A1DE6B061FF1919072AF54DAF54380B0F27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/3133382e3132322e3232302e302f32322d3234203d3e20323632393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:77:47:96:e2:28:2e:0a:e1:78:bc:3c:37:e3:63:e0:6c:c0:
         e1:1b:d5:41:f3:14:b7:a6:11:7c:67:3b:2b:8d:77:7a:11:ce:
         db:52:7d:da:dc:1c:20:7c:0f:7f:78:17:fe:27:ff:fa:84:df:
         a2:2c:c7:00:f1:81:05:95:11:9e:b5:a7:ae:f8:72:dd:b8:a1:
         f6:87:5a:20:8f:8f:14:89:0a:d3:89:a2:64:df:13:4e:25:d3:
         f7:d4:40:db:5e:ff:5e:0b:94:14:dd:63:be:b6:15:d2:07:28:
         05:b7:89:d9:72:46:8c:3e:8f:43:28:04:bb:09:f7:17:7b:a1:
         8f:d9:8c:30:76:e3:e3:a8:2a:bf:17:4d:2f:66:d1:f5:10:c5:
         cd:2b:c3:d8:0f:98:0a:b3:11:06:7d:ff:0a:73:4b:0f:9d:2b:
         1f:a7:4c:4f:4f:b6:3d:24:09:e5:5b:b2:fe:b9:39:e0:9f:ac:
         2b:99:50:7d:55:59:70:c3:e8:7c:74:c3:0e:7f:76:45:97:67:
         7d:29:d5:75:e8:c7:d0:17:55:45:51:db:84:d9:11:c6:56:37:
         94:9a:4e:ab:98:31:d4:64:57:19:1e:7b:a9:df:6e:37:d3:e0:
         56:7b:71:07:73:f7:98:c4:ca:eb:46:54:6a:95:74:7e:84:03:
         10:6f:b3:7f
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUO0H9sPx0r3QU4ASjSUgAD7zDw2kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjFGNDFBMURFNkIwNjFGRjE5MTkwNzJBRjU0REFGNTQz
ODBCMEYyNzAeFw0yNDA4MjExMjAxMjRaFw0yNTA4MjAxMjA2MjRaMDMxMTAvBgNV
BAMTKENFQUM3NjhBRTNENTk2NjFDMzhEQUFGMzIyOEU1QzExRUQ4QkYxMEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkFNa8l2MxTapYbiM5dDFGRX7S
csGay8q2HXq/mETtMww92E4DPZ3T0W9nTXs2hDEqPi+HMaJoiOLZk33I3sjogT/+
5s8kjClHjOk5KqxJ4W10ZPOkaU6J2x7r4Vq4xdeqlhFmOf+Zjv1vS7yMkS1GE/rg
B3jsQhBxHI9+F0i8Dg6xfN7pedqzzipTbeSoLqK/J8u11v6diC45a8qPZ20a9gK8
xnwT82Vn3hXtkyI24NirKjqabbduuWHC6RgZVTzOP7sv6vJrvTVJoUsCL+p9+bou
ES/xBys822oYMyK2G0nI0gnWB4kxp0gyokdCQxRi81Z7zSVnu39rN6RghbIzAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUzqx2iuPVlmHDjarzIo5cEe2L8QswHwYDVR0j
BBgwFoAUIfQaHeawYf8ZGQcq9U2vVDgLDycwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby93ZU5OTkFIMlFlMzEzOHVCZFZlR00xdnpZTERmZVhqM1ExaTNFQXQ1dVdt
LzAvMjFGNDFBMURFNkIwNjFGRjE5MTkwNzJBRjU0REFGNTQzODBCMEYyNy5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yMUY0MUExREU2QjA2MUZGMTkx
OTA3MkFGNTREQUY1NDM4MEIwRjI3LmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby93
ZU5OTkFIMlFlMzEzOHVCZFZlR00xdnpZTERmZVhqM1ExaTNFQXQ1dVdtLzAvMzEz
MzM4MmUzMTMyMzIyZTMyMzIzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYz
MjM5MzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAop63DANBgkqhkiG9w0BAQsFAAOCAQEAGHdHluIo
LgrheLw8N+Nj4GzA4RvVQfMUt6YRfGc7K413ehHO21J92twcIHwPf3gX/if/+oTf
oizHAPGBBZURnrWnrvhy3bih9odaII+PFIkK04miZN8TTiXT99RA217/XguUFN1j
vrYV0gcoBbeJ2XJGjD6PQygEuwn3F3uhj9mMMHbj46gqvxdNL2bR9RDFzSvD2A+Y
CrMRBn3/CnNLD50rH6dMT0+2PSQJ5Vuy/rk54J+sK5lQfVVZcMPofHTDDn92RZdn
fSnVdejH0BdVRVHbhNkRxlY3lJpOq5gx1GRXGR57qd9uN9PgVntxB3P3mMTK60ZU
apV0foQDEG+zfw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:32:47 2024 by rpki-client on console-ams.rpki-client.org