Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8MsaFtuPntCFCqg6hfpSgVmqy2whrJeCY8AJPv4enV6P/0/3133382e3138352e3231322e302f32322d3332203d3e20313938393439.roa
File:                     3133382e3138352e3231322e302f32322d3332203d3e20313938393439.roa (raw, json)
Hash identifier:          v/4VjXW+JmB8qP7RxBHzNa48yB4ZFlTxx5DktID61CM=
Subject key identifier:   AD:2D:09:B1:43:D5:A8:49:21:BC:1A:3D:AA:A1:65:3C:C7:91:68:44
Certificate issuer:       /CN=86864B7419B870C1E8E0A4BEA9E38FC483637AD0
Certificate serial:       1B35817B391B50D9DE9A286D3AB5564335226169
Authority key identifier: 86:86:4B:74:19:B8:70:C1:E8:E0:A4:BE:A9:E3:8F:C4:83:63:7A:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MsaFtuPntCFCqg6hfpSgVmqy2whrJeCY8AJPv4enV6P/0/3133382e3138352e3231322e302f32322d3332203d3e20313938393439.roa
Signing time:             Mon 05 May 2025 19:17:35 +0000
ROA not before:           Mon 05 May 2025 19:12:35 +0000
ROA not after:            Mon 04 May 2026 19:17:35 +0000
asID:                     198949
IP address blocks:        138.185.212.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8MsaFtuPntCFCqg6hfpSgVmqy2whrJeCY8AJPv4enV6P/0/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.crl
                          rsync://rpki-repo.registro.br/repo/8MsaFtuPntCFCqg6hfpSgVmqy2whrJeCY8AJPv4enV6P/0/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 11:24:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:35:81:7b:39:1b:50:d9:de:9a:28:6d:3a:b5:56:43:35:22:61:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86864B7419B870C1E8E0A4BEA9E38FC483637AD0
        Validity
            Not Before: May  5 19:12:35 2025 GMT
            Not After : May  4 19:17:35 2026 GMT
        Subject: CN=AD2D09B143D5A84921BC1A3DAAA1653CC7916844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f3:00:be:7f:79:ae:7c:b4:e1:e3:3e:1f:a7:
                    a8:95:59:13:a2:87:a8:97:47:82:da:02:24:f2:ca:
                    13:99:34:2a:52:f6:b8:61:ef:39:43:ee:e2:21:64:
                    7c:1f:a4:49:a9:1d:f0:67:78:01:3b:47:d5:91:21:
                    3d:e5:f6:5a:71:c8:dd:c1:13:8b:9f:df:21:dd:e7:
                    ae:3d:fb:1b:b8:4c:c5:e5:10:7e:9a:79:32:58:73:
                    86:3f:c2:da:9b:40:97:26:69:97:dc:ec:71:17:6b:
                    f3:25:74:c7:cf:3d:5a:29:09:e6:83:93:46:ba:9b:
                    44:d6:8c:7e:00:ce:e0:b6:2c:8f:6e:ca:f9:d7:51:
                    03:40:ee:bc:e5:72:f6:94:c2:ad:ab:51:80:70:44:
                    b6:67:14:39:9e:fc:ee:70:2c:43:e7:c0:74:0a:bc:
                    27:c5:75:c5:91:1b:65:6d:71:4a:44:96:86:83:6e:
                    f0:69:10:fd:54:b6:2d:b5:60:74:67:1d:9f:7a:4e:
                    a3:27:c1:ab:75:25:fc:1a:ab:2c:92:74:5e:2b:12:
                    e6:88:ae:72:2f:09:61:b0:65:7a:68:87:20:cd:8a:
                    1e:76:1e:37:ed:36:7a:82:cc:42:c2:27:64:23:ec:
                    b7:24:4a:d4:c5:33:06:68:12:60:0f:e1:40:e7:ec:
                    b3:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:2D:09:B1:43:D5:A8:49:21:BC:1A:3D:AA:A1:65:3C:C7:91:68:44
            X509v3 Authority Key Identifier:
                keyid:86:86:4B:74:19:B8:70:C1:E8:E0:A4:BE:A9:E3:8F:C4:83:63:7A:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MsaFtuPntCFCqg6hfpSgVmqy2whrJeCY8AJPv4enV6P/0/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MsaFtuPntCFCqg6hfpSgVmqy2whrJeCY8AJPv4enV6P/0/3133382e3138352e3231322e302f32322d3332203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:50:ad:15:d0:09:8c:59:dc:f8:cf:16:f4:c7:60:a2:8e:73:
         12:ab:85:d6:b8:03:c6:9b:e0:3b:12:ef:ec:4a:0f:46:fa:10:
         7f:7a:bf:f3:c2:f6:c7:74:24:58:53:5f:e6:28:ee:b7:e8:2b:
         64:11:32:69:73:4b:8c:7d:97:96:4a:5e:19:e6:c5:85:f8:d9:
         c6:d2:de:df:fb:41:39:28:f7:04:fd:53:8f:f8:ea:64:64:30:
         ca:3e:49:86:c9:1b:ba:a0:6e:31:73:e5:1f:ca:c4:a4:bd:ba:
         c5:00:cf:17:cc:f9:9f:14:cb:9c:12:e3:76:0b:9c:ce:c4:e0:
         af:b1:bd:cb:5a:c9:35:51:9c:7d:7c:cf:2d:bf:27:01:7d:30:
         bc:9d:8d:09:04:71:c0:57:a2:48:04:3e:32:36:f1:a1:8e:85:
         f2:96:eb:2d:e4:cc:87:a8:34:0f:5f:88:81:56:b6:61:7f:cc:
         7d:18:52:c0:2c:1c:90:3c:e1:b2:48:9f:09:58:36:82:22:c4:
         25:66:38:b7:55:00:75:ea:7a:b8:5e:b2:d2:17:da:49:36:fb:
         40:22:7d:a0:65:67:d6:70:63:17:21:0d:ab:8e:77:60:a1:9a:
         9f:83:2d:9d:30:21:86:03:e6:09:7f:c3:b8:f9:50:05:be:10:
         b3:03:14:ef
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUGzWBezkbUNnemihtOrVWQzUiYWkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODY4NjRCNzQxOUI4NzBDMUU4RTBBNEJFQTlFMzhGQzQ4
MzYzN0FEMDAeFw0yNTA1MDUxOTEyMzVaFw0yNjA1MDQxOTE3MzVaMDMxMTAvBgNV
BAMTKEFEMkQwOUIxNDNENUE4NDkyMUJDMUEzREFBQTE2NTNDQzc5MTY4NDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ8wC+f3mufLTh4z4fp6iVWROi
h6iXR4LaAiTyyhOZNCpS9rhh7zlD7uIhZHwfpEmpHfBneAE7R9WRIT3l9lpxyN3B
E4uf3yHd5649+xu4TMXlEH6aeTJYc4Y/wtqbQJcmaZfc7HEXa/MldMfPPVopCeaD
k0a6m0TWjH4AzuC2LI9uyvnXUQNA7rzlcvaUwq2rUYBwRLZnFDme/O5wLEPnwHQK
vCfFdcWRG2VtcUpEloaDbvBpEP1Uti21YHRnHZ96TqMnwat1JfwaqyySdF4rEuaI
rnIvCWGwZXpohyDNih52HjftNnqCzELCJ2Qj7LckStTFMwZoEmAP4UDn7LOnAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUrS0JsUPVqEkhvBo9qqFlPMeRaEQwHwYDVR0j
BBgwFoAUhoZLdBm4cMHo4KS+qeOPxINjetAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOE1zYUZ0dVBudENGQ3FnNmhmcFNnVm1xeTJ3aHJKZUNZOEFKUHY0ZW5W
NlAvMC84Njg2NEI3NDE5Qjg3MEMxRThFMEE0QkVBOUUzOEZDNDgzNjM3QUQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg2ODY0Qjc0MTlCODcwQzFF
OEUwQTRCRUE5RTM4RkM0ODM2MzdBRDAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhNc2FGdHVQbnRDRkNxZzZoZnBTZ1ZtcXkyd2hySmVDWThBSlB2NGVuVjZQLzAv
MzEzMzM4MmUzMTM4MzUyZTMyMzEzMjJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMx
MzkzODM5MzQzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAoq51DANBgkqhkiG9w0BAQsFAAOCAQEAbVCt
FdAJjFnc+M8W9Mdgoo5zEquF1rgDxpvgOxLv7EoPRvoQf3q/88L2x3QkWFNf5iju
t+grZBEyaXNLjH2XlkpeGebFhfjZxtLe3/tBOSj3BP1Tj/jqZGQwyj5JhskbuqBu
MXPlH8rEpL26xQDPF8z5nxTLnBLjdguczsTgr7G9y1rJNVGcfXzPLb8nAX0wvJ2N
CQRxwFeiSAQ+MjbxoY6F8pbrLeTMh6g0D1+IgVa2YX/MfRhSwCwckDzhskifCVg2
giLEJWY4t1UAdep6uF6y0hfaSTb7QCJ9oGVn1nBjFyENq453YKGan4MtnTAhhgPm
CX/DuPlQBb4QswMU7w==
-----END CERTIFICATE-----
Generated at Tue May 13 19:52:23 2025 by rpki-client