Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9LjuiRnkhM5B1tBSrYcFyhmW2F9sTMWoVtdpBWYYYs4y/0/3133382e3231392e3134382e302f32322d3232203d3e20323632383137.roa
File:                     3133382e3231392e3134382e302f32322d3232203d3e20323632383137.roa (raw, json)
Hash identifier:          pd9RaRDkrF9svbMNlNcdk94V0y/ZvODFWsZCf3ojpS0=
Subject key identifier:   A5:10:06:61:8B:84:B3:50:5D:42:9C:1A:9B:DA:86:35:B2:A1:77:16
Certificate issuer:       /CN=1F73BD8798ECA34051AE6C9F9CA63ED03685ACD2
Certificate serial:       22B1A9E2A2084A6C37BA6AEF184511C06CF25093
Authority key identifier: 1F:73:BD:87:98:EC:A3:40:51:AE:6C:9F:9C:A6:3E:D0:36:85:AC:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F73BD8798ECA34051AE6C9F9CA63ED03685ACD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9LjuiRnkhM5B1tBSrYcFyhmW2F9sTMWoVtdpBWYYYs4y/0/3133382e3231392e3134382e302f32322d3232203d3e20323632383137.roa
Signing time:             Tue 13 May 2025 19:18:34 +0000
ROA not before:           Tue 13 May 2025 19:13:34 +0000
ROA not after:            Tue 12 May 2026 19:18:34 +0000
asID:                     262817
IP address blocks:        138.219.148.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9LjuiRnkhM5B1tBSrYcFyhmW2F9sTMWoVtdpBWYYYs4y/0/1F73BD8798ECA34051AE6C9F9CA63ED03685ACD2.crl
                          rsync://rpki-repo.registro.br/repo/9LjuiRnkhM5B1tBSrYcFyhmW2F9sTMWoVtdpBWYYYs4y/0/1F73BD8798ECA34051AE6C9F9CA63ED03685ACD2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F73BD8798ECA34051AE6C9F9CA63ED03685ACD2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 May 2025 03:15:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:b1:a9:e2:a2:08:4a:6c:37:ba:6a:ef:18:45:11:c0:6c:f2:50:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F73BD8798ECA34051AE6C9F9CA63ED03685ACD2
        Validity
            Not Before: May 13 19:13:34 2025 GMT
            Not After : May 12 19:18:34 2026 GMT
        Subject: CN=A51006618B84B3505D429C1A9BDA8635B2A17716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:20:d1:81:e8:13:9d:a3:9c:a3:64:db:61:e6:
                    5a:0e:14:60:2f:0c:08:ab:50:a9:94:12:5b:c1:27:
                    d4:7f:33:94:1a:e9:71:f4:1f:52:a4:5c:7d:04:15:
                    cf:4c:3d:f4:5c:b8:b7:49:32:98:cf:12:d8:f5:db:
                    26:aa:02:ad:a1:24:7d:d0:39:39:6e:c9:2f:97:a6:
                    87:3d:05:af:50:db:d0:c1:3e:53:a0:10:54:f8:2d:
                    29:a0:eb:98:8b:79:10:d0:a5:21:a5:b3:51:26:5c:
                    5d:d3:aa:aa:37:c4:df:92:03:36:ec:a8:cb:22:d4:
                    43:9c:1e:b1:11:59:50:a3:c0:ea:4c:55:db:e4:85:
                    22:db:1b:74:c5:f3:b6:3f:5f:39:73:10:81:87:48:
                    96:87:36:46:72:9a:5e:44:72:12:ea:5a:2d:d2:ce:
                    e6:ea:02:3c:17:4e:aa:be:13:95:34:fb:50:19:4d:
                    12:2b:a2:de:93:a3:f5:e2:42:9f:ff:e5:f9:dc:8d:
                    f0:94:87:5c:86:2a:e5:dc:c2:86:4b:d5:3a:52:c2:
                    23:35:d0:0e:8e:66:5c:4e:49:44:22:71:01:fc:03:
                    3c:e8:0e:d4:09:04:c4:ea:7f:0a:b6:ec:fb:83:47:
                    21:36:4c:5d:22:f0:4d:2e:ac:ca:73:e8:9c:00:8c:
                    47:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:10:06:61:8B:84:B3:50:5D:42:9C:1A:9B:DA:86:35:B2:A1:77:16
            X509v3 Authority Key Identifier:
                keyid:1F:73:BD:87:98:EC:A3:40:51:AE:6C:9F:9C:A6:3E:D0:36:85:AC:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9LjuiRnkhM5B1tBSrYcFyhmW2F9sTMWoVtdpBWYYYs4y/0/1F73BD8798ECA34051AE6C9F9CA63ED03685ACD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F73BD8798ECA34051AE6C9F9CA63ED03685ACD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9LjuiRnkhM5B1tBSrYcFyhmW2F9sTMWoVtdpBWYYYs4y/0/3133382e3231392e3134382e302f32322d3232203d3e20323632383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:56:9e:a3:a0:a4:0f:60:cb:e8:c1:9c:d8:16:15:ae:8c:f2:
         bd:ea:0a:28:16:9c:a5:a3:bf:10:55:3a:50:2b:6e:bc:f3:c4:
         40:b0:c3:16:e5:eb:c6:fe:f8:3b:3a:67:99:4b:1b:bb:d4:44:
         c4:e5:1c:58:c0:86:27:24:0b:58:9d:ca:84:b1:b5:27:4a:ad:
         b2:fe:e3:a9:d5:d3:7f:ec:bc:4b:7a:0f:b6:c4:15:de:ad:91:
         03:0c:26:be:6c:9a:e5:00:74:9d:ce:89:fc:27:3c:3b:b6:ac:
         8d:d8:47:52:fd:af:70:38:0b:c5:0a:60:e9:57:ef:d6:62:67:
         e0:83:46:b4:a5:cf:e6:e7:36:b3:33:b6:5c:ce:c2:ef:51:2e:
         be:17:8f:aa:b8:11:12:85:45:6f:4b:de:47:71:de:fc:41:be:
         b8:f2:d9:31:0c:e3:f2:25:f4:a7:7a:a1:79:d0:d8:85:e3:c9:
         32:13:7b:91:f3:15:8e:f1:5c:fc:09:25:aa:9c:7e:b7:9c:b5:
         74:63:19:36:3d:fb:75:05:d7:6e:29:21:2d:40:70:a3:22:41:
         57:7a:d4:50:55:f0:c9:a7:ea:bb:1d:cb:7b:a6:90:b4:d3:98:
         dd:31:48:90:68:c0:e0:cc:3d:74:f9:ae:db:ad:ce:59:c7:a9:
         08:32:19:3e
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUIrGp4qIISmw3umrvGEURwGzyUJMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUY3M0JEODc5OEVDQTM0MDUxQUU2QzlGOUNBNjNFRDAz
Njg1QUNEMjAeFw0yNTA1MTMxOTEzMzRaFw0yNjA1MTIxOTE4MzRaMDMxMTAvBgNV
BAMTKEE1MTAwNjYxOEI4NEIzNTA1RDQyOUMxQTlCREE4NjM1QjJBMTc3MTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuINGB6BOdo5yjZNth5loOFGAv
DAirUKmUElvBJ9R/M5Qa6XH0H1KkXH0EFc9MPfRcuLdJMpjPEtj12yaqAq2hJH3Q
OTluyS+Xpoc9Ba9Q29DBPlOgEFT4LSmg65iLeRDQpSGls1EmXF3Tqqo3xN+SAzbs
qMsi1EOcHrERWVCjwOpMVdvkhSLbG3TF87Y/XzlzEIGHSJaHNkZyml5EchLqWi3S
zubqAjwXTqq+E5U0+1AZTRIrot6To/XiQp//5fncjfCUh1yGKuXcwoZL1TpSwiM1
0A6OZlxOSUQicQH8AzzoDtQJBMTqfwq27PuDRyE2TF0i8E0urMpz6JwAjEdTAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUpRAGYYuEs1BdQpwam9qGNbKhdxYwHwYDVR0j
BBgwFoAUH3O9h5jso0BRrmyfnKY+0DaFrNIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOUxqdWlSbmtoTTVCMXRCU3JZY0Z5aG1XMkY5c1RNV29WdGRwQldZWVlz
NHkvMC8xRjczQkQ4Nzk4RUNBMzQwNTFBRTZDOUY5Q0E2M0VEMDM2ODVBQ0QyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFGNzNCRDg3OThFQ0EzNDA1
MUFFNkM5RjlDQTYzRUQwMzY4NUFDRDIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlManVpUm5raE01QjF0QlNyWWNGeWhtVzJGOXNUTVdvVnRkcEJXWVlZczR5LzAv
MzEzMzM4MmUzMjMxMzkyZTMxMzQzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzMjM4MzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAorblDANBgkqhkiG9w0BAQsFAAOCAQEAflae
o6CkD2DL6MGc2BYVrozyveoKKBacpaO/EFU6UCtuvPPEQLDDFuXrxv74OzpnmUsb
u9RExOUcWMCGJyQLWJ3KhLG1J0qtsv7jqdXTf+y8S3oPtsQV3q2RAwwmvmya5QB0
nc6J/Cc8O7asjdhHUv2vcDgLxQpg6Vfv1mJn4INGtKXP5uc2szO2XM7C71EuvheP
qrgREoVFb0veR3He/EG+uPLZMQzj8iX0p3qhedDYhePJMhN7kfMVjvFc/Aklqpx+
t5y1dGMZNj37dQXXbikhLUBwoyJBV3rUUFXwyafqux3Le6aQtNOY3TFIkGjA4Mw9
dPmu263OWcepCDIZPg==
-----END CERTIFICATE-----
Generated at Fri May 16 18:18:36 2025 by rpki-client