Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6sTG21oHodLQqurV1h6WhhNuJoYCuRkLAKvqNQmmfGgE/0/3133382e39342e34342e302f32322d3234203d3e20323634313235.roa
File:                     3133382e39342e34342e302f32322d3234203d3e20323634313235.roa (raw, json)
Hash identifier:          /NNSuwtSTAZex6aVtEcltvfx1O5f3eY00+oED5jPTmA=
Subject key identifier:   C9:19:11:51:24:5F:E0:9A:41:31:B9:8E:51:CD:DF:E2:87:D2:65:86
Certificate issuer:       /CN=E1BBFDE5A7EBA969957793A5D2A293428D4D7BB9
Certificate serial:       547F371E6B9F57A3CB3232D8AEF7E29E71F5081E
Authority key identifier: E1:BB:FD:E5:A7:EB:A9:69:95:77:93:A5:D2:A2:93:42:8D:4D:7B:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1BBFDE5A7EBA969957793A5D2A293428D4D7BB9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6sTG21oHodLQqurV1h6WhhNuJoYCuRkLAKvqNQmmfGgE/0/3133382e39342e34342e302f32322d3234203d3e20323634313235.roa
Signing time:             Wed 07 May 2025 20:31:26 +0000
ROA not before:           Wed 07 May 2025 20:26:26 +0000
ROA not after:            Wed 06 May 2026 20:31:26 +0000
asID:                     264125
IP address blocks:        138.94.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6sTG21oHodLQqurV1h6WhhNuJoYCuRkLAKvqNQmmfGgE/0/E1BBFDE5A7EBA969957793A5D2A293428D4D7BB9.crl
                          rsync://rpki-repo.registro.br/repo/6sTG21oHodLQqurV1h6WhhNuJoYCuRkLAKvqNQmmfGgE/0/E1BBFDE5A7EBA969957793A5D2A293428D4D7BB9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1BBFDE5A7EBA969957793A5D2A293428D4D7BB9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 May 2025 09:38:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:7f:37:1e:6b:9f:57:a3:cb:32:32:d8:ae:f7:e2:9e:71:f5:08:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1BBFDE5A7EBA969957793A5D2A293428D4D7BB9
        Validity
            Not Before: May  7 20:26:26 2025 GMT
            Not After : May  6 20:31:26 2026 GMT
        Subject: CN=C9191151245FE09A4131B98E51CDDFE287D26586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:06:24:dd:8a:8a:56:5e:e6:51:ac:f0:fe:a5:
                    81:d8:7c:1d:41:22:56:c3:9f:de:e7:65:b0:b0:83:
                    62:58:2c:ef:55:48:a0:72:e1:af:06:30:aa:53:ec:
                    37:72:c6:6e:d4:8f:05:ef:e2:ab:e6:b3:48:7c:7e:
                    81:a1:ad:3f:da:b1:1c:9f:86:05:af:63:85:45:79:
                    e0:0a:f4:67:e3:e2:00:f7:e5:c2:e9:3e:1c:f5:48:
                    eb:24:71:03:4e:a3:6f:df:80:d0:18:18:a2:21:07:
                    29:ba:0d:b1:84:f5:91:f6:96:cb:be:3e:da:7e:3e:
                    22:26:6a:0a:29:b1:7c:4b:02:8c:9e:66:c6:44:b6:
                    9e:70:b0:52:34:b5:03:35:42:95:1f:3e:72:f4:a7:
                    de:55:3a:f5:7f:7d:9f:d1:ff:e9:cf:db:87:ba:1e:
                    b3:c3:44:fd:50:a4:b8:a4:0f:23:59:f8:36:98:0b:
                    45:bd:5a:43:3f:9d:b5:24:35:b2:50:40:22:17:da:
                    d7:ec:f2:42:26:20:0b:86:1b:98:13:e9:83:2c:92:
                    19:b8:39:3b:e5:e7:cf:cb:95:1c:1d:c8:e5:e6:69:
                    73:d1:dd:61:71:a7:e6:f3:e3:28:21:99:32:55:c4:
                    66:fe:14:4d:89:e6:80:3c:40:5a:bf:75:02:65:6f:
                    f3:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:19:11:51:24:5F:E0:9A:41:31:B9:8E:51:CD:DF:E2:87:D2:65:86
            X509v3 Authority Key Identifier:
                keyid:E1:BB:FD:E5:A7:EB:A9:69:95:77:93:A5:D2:A2:93:42:8D:4D:7B:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6sTG21oHodLQqurV1h6WhhNuJoYCuRkLAKvqNQmmfGgE/0/E1BBFDE5A7EBA969957793A5D2A293428D4D7BB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1BBFDE5A7EBA969957793A5D2A293428D4D7BB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6sTG21oHodLQqurV1h6WhhNuJoYCuRkLAKvqNQmmfGgE/0/3133382e39342e34342e302f32322d3234203d3e20323634313235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:4f:72:ab:24:19:6d:1d:e6:09:98:03:8f:67:b4:5a:d3:b6:
         42:c1:89:a5:73:6c:7c:e0:71:fb:dc:f0:fa:19:6f:b4:7a:e6:
         1a:1e:5f:af:d8:20:b9:ce:15:3d:9e:61:bb:31:c9:7d:b2:76:
         fe:3d:fb:e5:84:07:d6:bd:de:4a:6c:a4:fc:40:b9:71:ec:5e:
         4c:36:07:88:85:56:98:f5:0c:48:ac:ee:31:a8:5e:fd:af:5e:
         26:10:0c:d2:00:a5:53:de:97:cf:2d:00:21:1c:19:07:f4:e3:
         02:1f:aa:10:85:0a:4e:7e:c0:7d:7d:ee:d3:5c:db:a3:36:e1:
         fa:f0:0b:e6:47:3a:30:79:47:94:25:63:4c:35:3b:e9:9e:e5:
         7e:63:ce:e8:57:35:16:65:13:ec:1d:47:81:54:9c:cf:0a:04:
         c7:d1:24:07:a0:2a:d0:2a:09:20:ff:33:1e:a5:c7:98:fa:df:
         bd:4c:8d:5d:62:4d:06:36:95:f1:1b:3f:c3:35:90:e8:07:0e:
         a4:de:9b:c7:50:7f:bc:92:3c:d7:a8:a7:10:67:21:b6:4d:42:
         80:b0:96:3f:4d:1c:d4:d9:78:48:ac:d0:88:52:bf:ce:f7:82:
         80:bd:b3:93:55:be:af:d2:de:bd:1b:64:25:7f:dd:ed:90:d7:
         e2:bd:ae:b7
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUVH83HmufV6PLMjLYrvfinnH1CB4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTFCQkZERTVBN0VCQTk2OTk1Nzc5M0E1RDJBMjkzNDI4
RDREN0JCOTAeFw0yNTA1MDcyMDI2MjZaFw0yNjA1MDYyMDMxMjZaMDMxMTAvBgNV
BAMTKEM5MTkxMTUxMjQ1RkUwOUE0MTMxQjk4RTUxQ0RERkUyODdEMjY1ODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnBiTdiopWXuZRrPD+pYHYfB1B
IlbDn97nZbCwg2JYLO9VSKBy4a8GMKpT7Ddyxm7UjwXv4qvms0h8foGhrT/asRyf
hgWvY4VFeeAK9Gfj4gD35cLpPhz1SOskcQNOo2/fgNAYGKIhBym6DbGE9ZH2lsu+
Ptp+PiImagopsXxLAoyeZsZEtp5wsFI0tQM1QpUfPnL0p95VOvV/fZ/R/+nP24e6
HrPDRP1QpLikDyNZ+DaYC0W9WkM/nbUkNbJQQCIX2tfs8kImIAuGG5gT6YMskhm4
OTvl58/LlRwdyOXmaXPR3WFxp+bz4yghmTJVxGb+FE2J5oA8QFq/dQJlb/MhAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUyRkRUSRf4JpBMbmOUc3f4ofSZYYwHwYDVR0j
BBgwFoAU4bv95afrqWmVd5Ol0qKTQo1Ne7kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnNURzIxb0hvZExRcXVyVjFoNldoaE51Sm9ZQ3VSa0xBS3ZxTlFtbWZH
Z0UvMC9FMUJCRkRFNUE3RUJBOTY5OTU3NzkzQTVEMkEyOTM0MjhENEQ3QkI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UxQkJGREU1QTdFQkE5Njk5
NTc3OTNBNUQyQTI5MzQyOEQ0RDdCQjkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZzVEcyMW9Ib2RMUXF1clYxaDZXaGhOdUpvWUN1UmtMQUt2cU5RbW1mR2dFLzAv
MzEzMzM4MmUzOTM0MmUzNDM0MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM0
MzEzMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCil4sMA0GCSqGSIb3DQEBCwUAA4IBAQChT3KrJBlt
HeYJmAOPZ7Ra07ZCwYmlc2x84HH73PD6GW+0euYaHl+v2CC5zhU9nmG7Mcl9snb+
PfvlhAfWvd5KbKT8QLlx7F5MNgeIhVaY9QxIrO4xqF79r14mEAzSAKVT3pfPLQAh
HBkH9OMCH6oQhQpOfsB9fe7TXNujNuH68AvmRzoweUeUJWNMNTvpnuV+Y87oVzUW
ZRPsHUeBVJzPCgTH0SQHoCrQKgkg/zMepceY+t+9TI1dYk0GNpXxGz/DNZDoBw6k
3pvHUH+8kjzXqKcQZyG2TUKAsJY/TRzU2XhIrNCIUr/O94KAvbOTVb6v0t69G2Ql
f93tkNfiva63
-----END CERTIFICATE-----
Generated at Fri May 16 18:18:21 2025 by rpki-client