Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6QYdjFw2p19cEgQHbr3bqWuvY7sQhFrZbYnPhuiSDa8u/0/3133382e39342e34382e302f32322d3233203d3e20323634313234.roa
File:                     3133382e39342e34382e302f32322d3233203d3e20323634313234.roa (raw, json)
Hash identifier:          jBkw56tcgy4zQ+Zs0wIrQ95NtEXgEmppquG2p7YLOXc=
Subject key identifier:   F6:57:35:D2:30:33:BB:3F:CB:01:AA:FE:8F:25:8A:D3:61:CD:7C:26
Certificate issuer:       /CN=8940C50AC5631CCDF2D0D09149CBC5A2FEB64B8E
Certificate serial:       34CD21C875B927887899E69DE760D927E397736D
Authority key identifier: 89:40:C5:0A:C5:63:1C:CD:F2:D0:D0:91:49:CB:C5:A2:FE:B6:4B:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8940C50AC5631CCDF2D0D09149CBC5A2FEB64B8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6QYdjFw2p19cEgQHbr3bqWuvY7sQhFrZbYnPhuiSDa8u/0/3133382e39342e34382e302f32322d3233203d3e20323634313234.roa
Signing time:             Thu 01 May 2025 19:31:06 +0000
ROA not before:           Thu 01 May 2025 19:26:06 +0000
ROA not after:            Thu 30 Apr 2026 19:31:06 +0000
asID:                     264124
IP address blocks:        138.94.48.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6QYdjFw2p19cEgQHbr3bqWuvY7sQhFrZbYnPhuiSDa8u/0/8940C50AC5631CCDF2D0D09149CBC5A2FEB64B8E.crl
                          rsync://rpki-repo.registro.br/repo/6QYdjFw2p19cEgQHbr3bqWuvY7sQhFrZbYnPhuiSDa8u/0/8940C50AC5631CCDF2D0D09149CBC5A2FEB64B8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8940C50AC5631CCDF2D0D09149CBC5A2FEB64B8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 20:07:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:cd:21:c8:75:b9:27:88:78:99:e6:9d:e7:60:d9:27:e3:97:73:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8940C50AC5631CCDF2D0D09149CBC5A2FEB64B8E
        Validity
            Not Before: May  1 19:26:06 2025 GMT
            Not After : Apr 30 19:31:06 2026 GMT
        Subject: CN=F65735D23033BB3FCB01AAFE8F258AD361CD7C26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:2a:df:b6:a5:b4:0d:f6:ba:60:57:22:82:a5:
                    74:b7:55:d2:e2:cb:c0:81:12:0b:69:0b:b8:fc:72:
                    d2:40:33:7b:e0:fd:bc:1f:e3:f2:55:f7:4a:4d:47:
                    84:45:4f:7c:ae:35:63:59:22:3b:df:fe:62:10:cf:
                    d6:f7:db:93:ce:ab:60:87:fc:02:8a:a4:05:72:d7:
                    c1:b7:d3:4c:ff:c0:34:8c:a2:5f:8c:44:b1:6e:dd:
                    a8:2c:20:ed:5e:d1:52:75:d9:4f:5a:a2:e1:01:68:
                    5e:ba:94:6f:c8:36:eb:23:5e:0b:f1:e9:64:08:8a:
                    60:13:7b:76:22:1d:98:d5:45:c6:93:af:cb:8f:4d:
                    18:26:32:1c:ca:2a:b3:9f:7a:db:f6:40:71:bc:3b:
                    93:f9:41:3a:86:ba:06:3f:2b:cf:62:81:e6:86:c4:
                    d3:b7:8c:8e:96:bd:db:c8:cb:f1:1b:14:5a:6b:22:
                    4b:88:aa:5a:1d:db:0d:94:dc:99:74:77:0e:84:69:
                    ee:16:a1:df:27:55:90:fa:60:3d:d5:fc:84:09:19:
                    73:eb:61:b2:19:cd:38:1d:7a:6e:2f:d8:9e:0a:4a:
                    d1:32:c1:ce:32:69:f8:af:6a:69:1a:b8:93:6a:c4:
                    64:ab:b5:52:c1:60:5d:ae:18:cd:09:92:1a:7e:77:
                    1c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:57:35:D2:30:33:BB:3F:CB:01:AA:FE:8F:25:8A:D3:61:CD:7C:26
            X509v3 Authority Key Identifier:
                keyid:89:40:C5:0A:C5:63:1C:CD:F2:D0:D0:91:49:CB:C5:A2:FE:B6:4B:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6QYdjFw2p19cEgQHbr3bqWuvY7sQhFrZbYnPhuiSDa8u/0/8940C50AC5631CCDF2D0D09149CBC5A2FEB64B8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8940C50AC5631CCDF2D0D09149CBC5A2FEB64B8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6QYdjFw2p19cEgQHbr3bqWuvY7sQhFrZbYnPhuiSDa8u/0/3133382e39342e34382e302f32322d3233203d3e20323634313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:4b:cc:77:68:42:7f:45:48:6f:b7:d0:d6:62:0c:15:8a:0b:
         ed:13:b1:db:9a:ac:c9:c5:69:d6:5c:91:b7:37:d5:b4:0d:2c:
         f0:8f:66:c3:f2:f9:4f:23:bc:93:20:10:1e:81:b1:32:4f:58:
         f2:9a:b9:27:a5:fd:a4:d6:c3:d5:55:59:7a:68:4d:c8:d4:d9:
         c5:2f:80:c7:87:5b:2f:a9:c3:2c:51:c3:7f:f9:10:be:41:aa:
         92:37:a6:1b:57:a6:36:a0:7f:af:37:d1:cd:a7:c8:79:21:11:
         17:b2:ff:f9:2b:43:84:b7:0b:0a:24:e3:d6:a2:f3:ce:2d:1b:
         40:59:67:f2:da:c7:98:9f:32:2a:d3:ce:0c:30:03:f8:76:a6:
         06:d9:27:81:11:aa:05:1f:1f:9f:bc:0f:0c:d5:f3:1a:cf:30:
         e6:95:6a:3d:e3:23:13:99:68:b7:e2:14:08:e9:3f:99:32:86:
         4e:f4:df:29:13:03:67:d8:62:60:51:5d:ae:81:7a:f2:dc:15:
         66:01:e5:2b:9d:18:2f:84:6a:6b:dd:4a:65:9c:c3:e8:ea:a3:
         2f:57:c0:2d:ce:cf:a3:76:69:48:58:69:02:1b:88:53:e0:17:
         06:62:76:24:20:86:e9:1a:9a:82:9b:00:69:48:23:94:ba:e7:
         9a:94:a6:9e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUNM0hyHW5J4h4mead52DZJ+OXc20wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODk0MEM1MEFDNTYzMUNDREYyRDBEMDkxNDlDQkM1QTJG
RUI2NEI4RTAeFw0yNTA1MDExOTI2MDZaFw0yNjA0MzAxOTMxMDZaMDMxMTAvBgNV
BAMTKEY2NTczNUQyMzAzM0JCM0ZDQjAxQUFGRThGMjU4QUQzNjFDRDdDMjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnKt+2pbQN9rpgVyKCpXS3VdLi
y8CBEgtpC7j8ctJAM3vg/bwf4/JV90pNR4RFT3yuNWNZIjvf/mIQz9b325POq2CH
/AKKpAVy18G300z/wDSMol+MRLFu3agsIO1e0VJ12U9aouEBaF66lG/INusjXgvx
6WQIimATe3YiHZjVRcaTr8uPTRgmMhzKKrOfetv2QHG8O5P5QTqGugY/K89igeaG
xNO3jI6WvdvIy/EbFFprIkuIqlod2w2U3Jl0dw6Eae4Wod8nVZD6YD3V/IQJGXPr
YbIZzTgdem4v2J4KStEywc4yafivamkauJNqxGSrtVLBYF2uGM0Jkhp+dxyFAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU9lc10jAzuz/LAar+jyWK02HNfCYwHwYDVR0j
BBgwFoAUiUDFCsVjHM3y0NCRScvFov62S44wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlFZZGpGdzJwMTljRWdRSGJyM2JxV3V2WTdzUWhGclpiWW5QaHVpU0Rh
OHUvMC84OTQwQzUwQUM1NjMxQ0NERjJEMEQwOTE0OUNCQzVBMkZFQjY0QjhFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg5NDBDNTBBQzU2MzFDQ0RG
MkQwRDA5MTQ5Q0JDNUEyRkVCNjRCOEUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZRWWRqRncycDE5Y0VnUUhicjNicVd1dlk3c1FoRnJaYlluUGh1aVNEYTh1LzAv
MzEzMzM4MmUzOTM0MmUzNDM4MmUzMDJmMzIzMjJkMzIzMzIwM2QzZTIwMzIzNjM0
MzEzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCil4wMA0GCSqGSIb3DQEBCwUAA4IBAQBeS8x3aEJ/
RUhvt9DWYgwVigvtE7HbmqzJxWnWXJG3N9W0DSzwj2bD8vlPI7yTIBAegbEyT1jy
mrknpf2k1sPVVVl6aE3I1NnFL4DHh1svqcMsUcN/+RC+QaqSN6YbV6Y2oH+vN9HN
p8h5IREXsv/5K0OEtwsKJOPWovPOLRtAWWfy2seYnzIq084MMAP4dqYG2SeBEaoF
Hx+fvA8M1fMazzDmlWo94yMTmWi34hQI6T+ZMoZO9N8pEwNn2GJgUV2ugXry3BVm
AeUrnRgvhGpr3UplnMPo6qMvV8Atzs+jdmlIWGkCG4hT4BcGYnYkIIbpGpqCmwBp
SCOUuuealKae
-----END CERTIFICATE-----
Generated at Wed May 14 08:39:01 2025 by rpki-client