Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3133382e3235352e3137322e302f32322d3234203d3e203238323230.roa
File:                     3133382e3235352e3137322e302f32322d3234203d3e203238323230.roa (raw, json)
Hash identifier:          kEXmzx86Kq1P8Y/eBTECWEkrm0ysop8uPcz5Wz8Amps=
Subject key identifier:   55:9F:06:F2:76:80:C1:00:B0:75:CA:55:BF:30:58:34:01:57:85:24
Certificate issuer:       /CN=DDF75D11A85F5023747B20E973994EC53D23A68E
Certificate serial:       60A4012F95565487B50C4879C501C683BBF5713A
Authority key identifier: DD:F7:5D:11:A8:5F:50:23:74:7B:20:E9:73:99:4E:C5:3D:23:A6:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDF75D11A85F5023747B20E973994EC53D23A68E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3133382e3235352e3137322e302f32322d3234203d3e203238323230.roa
Signing time:             Fri 09 May 2025 12:56:45 +0000
ROA not before:           Fri 09 May 2025 12:51:45 +0000
ROA not after:            Fri 08 May 2026 12:56:45 +0000
asID:                     28220
IP address blocks:        138.255.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.crl
                          rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDF75D11A85F5023747B20E973994EC53D23A68E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 01:12:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:a4:01:2f:95:56:54:87:b5:0c:48:79:c5:01:c6:83:bb:f5:71:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDF75D11A85F5023747B20E973994EC53D23A68E
        Validity
            Not Before: May  9 12:51:45 2025 GMT
            Not After : May  8 12:56:45 2026 GMT
        Subject: CN=559F06F27680C100B075CA55BF30583401578524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:44:d8:cc:e9:9f:88:4e:27:7d:97:4a:66:7e:
                    85:d8:90:65:77:97:a6:64:eb:e3:c9:6d:f6:ce:2a:
                    cd:51:b6:bb:8e:8f:32:81:f3:3f:f8:18:45:de:79:
                    e9:48:7e:df:d7:ff:45:c3:3f:6f:50:6f:b3:d0:22:
                    04:e7:6b:36:a9:28:a4:b0:7c:19:3a:cd:f7:db:29:
                    b0:c8:d3:a9:93:61:a9:a1:64:bf:ba:5d:72:11:d6:
                    48:64:c1:51:6b:9d:87:51:5d:d3:50:a4:a4:1a:c7:
                    65:f9:07:45:ad:d8:53:05:6e:ae:81:f7:55:68:7e:
                    77:d8:9b:74:3b:45:2c:d5:48:a6:c8:8d:ed:f6:84:
                    fe:a6:53:92:72:a0:ba:cb:42:80:55:4e:92:91:24:
                    e1:61:0a:0a:82:5f:ff:54:a4:be:52:08:4d:e9:e0:
                    0a:c2:85:c0:56:77:62:d5:2b:87:2d:ba:09:22:8b:
                    86:67:c0:95:27:99:60:f5:48:6c:c7:56:44:11:08:
                    19:54:63:6b:a0:3c:09:1a:ad:a1:26:79:b1:1a:84:
                    d8:d8:89:ac:5a:5a:6e:94:90:7d:27:4c:ff:d4:e0:
                    83:15:b2:83:84:bf:de:3e:8f:79:ae:df:14:da:60:
                    85:43:a5:ac:52:03:1d:3f:bd:3b:37:8e:7a:64:61:
                    fe:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:9F:06:F2:76:80:C1:00:B0:75:CA:55:BF:30:58:34:01:57:85:24
            X509v3 Authority Key Identifier:
                keyid:DD:F7:5D:11:A8:5F:50:23:74:7B:20:E9:73:99:4E:C5:3D:23:A6:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDF75D11A85F5023747B20E973994EC53D23A68E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3133382e3235352e3137322e302f32322d3234203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:c1:e8:90:48:bb:e0:6b:7c:1a:01:00:51:50:54:df:54:d5:
         5c:ad:41:b7:bd:74:58:7d:3b:19:30:da:e2:38:5b:de:35:c7:
         fc:d8:e6:27:c3:01:ea:a3:57:64:ef:82:b0:e8:46:f6:b1:56:
         36:d9:09:b2:98:17:c9:dc:d1:ee:6e:bb:d5:7c:41:17:fd:f9:
         b1:11:71:15:ce:7a:8f:61:cb:86:7d:69:b6:5c:f1:6d:82:a2:
         c9:b6:52:b6:d9:3a:9d:1b:8c:09:c1:bc:4e:2d:b4:50:e2:0e:
         6f:2f:ef:00:84:2f:ec:33:1d:f2:44:1d:33:46:ac:e4:13:51:
         78:d9:29:2d:bf:46:e6:2c:a6:4c:39:25:38:9e:ef:9c:70:55:
         a7:b6:3f:0c:16:97:a1:82:34:13:e1:fe:ba:cb:41:24:01:33:
         6d:85:6b:31:f8:bc:8a:c3:d9:af:fc:19:9c:f7:ec:d7:1d:e8:
         d1:60:20:8c:b4:cb:78:cb:7a:53:c1:69:bb:c9:a2:43:d6:28:
         e4:e8:fc:c7:be:58:43:28:2d:0c:74:2f:9f:15:68:73:db:4e:
         e8:fc:c6:05:a8:07:10:81:79:5c:ef:90:99:f1:27:73:ee:59:
         a1:cc:01:e1:ce:66:11:b2:01:48:a6:ff:99:08:51:8b:fa:cc:
         f3:4e:61:f3
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYKQBL5VWVIe1DEh5xQHGg7v1cTowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRERGNzVEMTFBODVGNTAyMzc0N0IyMEU5NzM5OTRFQzUz
RDIzQTY4RTAeFw0yNTA1MDkxMjUxNDVaFw0yNjA1MDgxMjU2NDVaMDMxMTAvBgNV
BAMTKDU1OUYwNkYyNzY4MEMxMDBCMDc1Q0E1NUJGMzA1ODM0MDE1Nzg1MjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDURNjM6Z+ITid9l0pmfoXYkGV3
l6Zk6+PJbfbOKs1RtruOjzKB8z/4GEXeeelIft/X/0XDP29Qb7PQIgTnazapKKSw
fBk6zffbKbDI06mTYamhZL+6XXIR1khkwVFrnYdRXdNQpKQax2X5B0Wt2FMFbq6B
91VofnfYm3Q7RSzVSKbIje32hP6mU5JyoLrLQoBVTpKRJOFhCgqCX/9UpL5SCE3p
4ArChcBWd2LVK4ctugkii4ZnwJUnmWD1SGzHVkQRCBlUY2ugPAkaraEmebEahNjY
iaxaWm6UkH0nTP/U4IMVsoOEv94+j3mu3xTaYIVDpaxSAx0/vTs3jnpkYf4XAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUVZ8G8naAwQCwdcpVvzBYNAFXhSQwHwYDVR0j
BBgwFoAU3fddEahfUCN0eyDpc5lOxT0jpo4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOU03WlFMVXp5Tkt2M3lTRTNGQ05KQ0t1bXdLTkN0Y3pTVFlwRjdIOE1n
cmYvMC9EREY3NUQxMUE4NUY1MDIzNzQ3QjIwRTk3Mzk5NEVDNTNEMjNBNjhFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RERjc1RDExQTg1RjUwMjM3
NDdCMjBFOTczOTk0RUM1M0QyM0E2OEUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlNN1pRTFV6eU5LdjN5U0UzRkNOSkNLdW13S05DdGN6U1RZcEY3SDhNZ3JmLzAv
MzEzMzM4MmUzMjM1MzUyZTMxMzczMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzgzMjMyMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKK/6wwDQYJKoZIhvcNAQELBQADggEBAD3B6JBI
u+BrfBoBAFFQVN9U1VytQbe9dFh9Oxkw2uI4W941x/zY5ifDAeqjV2TvgrDoRvax
VjbZCbKYF8nc0e5uu9V8QRf9+bERcRXOeo9hy4Z9abZc8W2Cosm2UrbZOp0bjAnB
vE4ttFDiDm8v7wCEL+wzHfJEHTNGrOQTUXjZKS2/RuYspkw5JTie75xwVae2PwwW
l6GCNBPh/rrLQSQBM22FazH4vIrD2a/8GZz37Ncd6NFgIIy0y3jLelPBabvJokPW
KOTo/Me+WEMoLQx0L58VaHPbTuj8xgWoBxCBeVzvkJnxJ3PuWaHMAeHOZhGyAUim
/5kIUYv6zPNOYfM=
-----END CERTIFICATE-----
Generated at Wed May 14 06:13:04 2025 by rpki-client