Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3138362e3235312e3133382e302f32342d3332203d3e203533323235.roa
File:                     3138362e3235312e3133382e302f32342d3332203d3e203533323235.roa (raw, json)
Hash identifier:          2Ski6UBWpEKkmPw+ZUJ2/NFb4/kJiBb+eJGzeDqX7Jo=
Subject key identifier:   89:89:43:A6:47:68:AF:F4:C1:1F:23:8F:6C:70:1F:4F:82:A5:6F:D2
Certificate issuer:       /CN=72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1
Certificate serial:       7172E0EB75BCE4790EAE6A01E05A8519703AC87A
Authority key identifier: 72:D2:15:65:C0:A5:08:FC:2B:DE:A7:76:8D:0F:4A:EF:D6:CD:19:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3138362e3235312e3133382e302f32342d3332203d3e203533323235.roa
Signing time:             Wed 07 May 2025 18:47:13 +0000
ROA not before:           Wed 07 May 2025 18:42:13 +0000
ROA not after:            Wed 06 May 2026 18:47:13 +0000
asID:                     53225
IP address blocks:        186.251.138.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.crl
                          rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 13:20:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:72:e0:eb:75:bc:e4:79:0e:ae:6a:01:e0:5a:85:19:70:3a:c8:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1
        Validity
            Not Before: May  7 18:42:13 2025 GMT
            Not After : May  6 18:47:13 2026 GMT
        Subject: CN=898943A64768AFF4C11F238F6C701F4F82A56FD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:58:c4:aa:9b:eb:ac:55:b5:f6:45:ca:fe:4f:
                    03:ba:23:cb:13:2b:15:63:fc:d3:b9:8a:1d:8d:96:
                    34:93:f3:33:e0:1c:57:67:29:bf:51:21:9a:f3:f4:
                    87:b6:9c:49:3d:8a:0d:2d:0d:62:ac:5c:49:6e:d5:
                    38:c3:fd:22:0b:47:d4:0a:75:7c:07:37:98:e1:32:
                    42:52:18:60:74:9d:a8:d3:d3:70:4b:5c:10:47:02:
                    a8:42:e5:57:fb:13:04:ad:72:e2:90:97:0d:48:cd:
                    d8:65:44:7c:96:c4:9a:d2:01:59:8b:4f:1d:88:85:
                    a7:5b:74:a9:25:eb:3c:77:73:92:4c:98:13:1f:a6:
                    cc:44:7e:33:e7:63:3e:ef:86:cf:12:07:90:67:4b:
                    00:ea:47:4d:1d:b8:70:f1:30:81:3d:59:f3:9d:20:
                    8c:66:97:2c:b9:14:9b:71:95:c4:c0:7d:5a:25:81:
                    2d:9b:00:00:2c:29:5c:8b:02:67:9a:f9:b9:95:83:
                    58:03:bd:d9:5f:31:18:21:a4:85:f4:fc:76:62:cb:
                    98:08:89:fb:92:21:de:13:7c:e8:7a:48:f1:75:1b:
                    00:14:a2:7b:b3:17:7f:4b:16:15:66:af:bd:fc:f1:
                    66:74:92:91:86:d0:cb:c0:29:4b:6e:c9:0d:3a:17:
                    18:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:89:43:A6:47:68:AF:F4:C1:1F:23:8F:6C:70:1F:4F:82:A5:6F:D2
            X509v3 Authority Key Identifier:
                keyid:72:D2:15:65:C0:A5:08:FC:2B:DE:A7:76:8D:0F:4A:EF:D6:CD:19:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D21565C0A508FC2BDEA7768D0F4AEFD6CD19F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3138362e3235312e3133382e302f32342d3332203d3e203533323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:97:37:9c:39:b3:8d:87:a2:9f:e5:55:64:30:ac:fd:3d:b8:
         04:77:8d:99:75:8d:92:fb:93:ad:59:f5:ff:36:4d:6b:5e:9a:
         5c:82:85:64:53:6b:7e:65:e2:7e:5b:ce:83:09:3f:8c:58:54:
         3e:31:92:ca:a9:b9:cf:58:db:e5:c3:c5:ea:df:21:9e:8b:a1:
         86:91:2b:7f:5f:17:fd:51:96:b6:87:6f:f0:aa:48:c7:b1:b1:
         93:dd:9b:50:84:f4:e4:db:7f:f5:61:cc:bd:4a:95:77:20:10:
         13:35:9c:c4:35:5e:5e:fd:fc:e9:d6:39:27:da:be:b4:13:9d:
         f5:63:b7:1e:62:04:81:f4:ea:58:fa:71:16:e2:24:ab:aa:0d:
         15:15:a1:7d:20:f7:ee:80:ba:1a:e6:0c:e3:66:e3:ae:41:4c:
         17:c6:e4:1e:0b:c6:41:cf:5c:2c:02:0e:81:20:0c:83:da:53:
         a4:86:f4:20:2f:a1:85:da:ee:fc:8a:ca:4e:31:56:43:ea:63:
         1a:a3:dc:17:a1:9a:d9:59:2d:f4:7e:db:f3:2f:dc:d1:0d:a2:
         8e:fb:71:01:fe:9d:85:91:90:05:18:d3:8a:21:43:19:a0:35:
         69:cf:f6:e8:63:93:29:1f:05:d8:ca:21:c7:85:5b:a5:8f:46:
         19:a5:65:57
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUcXLg63W85HkOrmoB4FqFGXA6yHowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzJEMjE1NjVDMEE1MDhGQzJCREVBNzc2OEQwRjRBRUZE
NkNEMTlGMTAeFw0yNTA1MDcxODQyMTNaFw0yNjA1MDYxODQ3MTNaMDMxMTAvBgNV
BAMTKDg5ODk0M0E2NDc2OEFGRjRDMTFGMjM4RjZDNzAxRjRGODJBNTZGRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpWMSqm+usVbX2Rcr+TwO6I8sT
KxVj/NO5ih2NljST8zPgHFdnKb9RIZrz9Ie2nEk9ig0tDWKsXElu1TjD/SILR9QK
dXwHN5jhMkJSGGB0najT03BLXBBHAqhC5Vf7EwStcuKQlw1IzdhlRHyWxJrSAVmL
Tx2IhadbdKkl6zx3c5JMmBMfpsxEfjPnYz7vhs8SB5BnSwDqR00duHDxMIE9WfOd
IIxmlyy5FJtxlcTAfVolgS2bAAAsKVyLAmea+bmVg1gDvdlfMRghpIX0/HZiy5gI
ifuSId4TfOh6SPF1GwAUonuzF39LFhVmr7388WZ0kpGG0MvAKUtuyQ06FxgPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUiYlDpkdor/TBHyOPbHAfT4Klb9IwHwYDVR0j
BBgwFoAUctIVZcClCPwr3qd2jQ9K79bNGfEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlNmb2o0TU5LcG5hQnU4NTVNeE1qM01qWWh1M292bVMyMlhweDRMRDZT
UFEvMC83MkQyMTU2NUMwQTUwOEZDMkJERUE3NzY4RDBGNEFFRkQ2Q0QxOUYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcyRDIxNTY1QzBBNTA4RkMy
QkRFQTc3NjhEMEY0QUVGRDZDRDE5RjEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZTZm9qNE1OS3BuYUJ1ODU1TXhNajNNallodTNvdm1TMjJYcHg0TEQ2U1BRLzAv
MzEzODM2MmUzMjM1MzEyZTMxMzMzODJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM1
MzMzMjMyMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC6+4owDQYJKoZIhvcNAQELBQADggEBAGGXN5w5
s42Hop/lVWQwrP09uAR3jZl1jZL7k61Z9f82TWtemlyChWRTa35l4n5bzoMJP4xY
VD4xksqpuc9Y2+XDxerfIZ6LoYaRK39fF/1RlraHb/CqSMexsZPdm1CE9OTbf/Vh
zL1KlXcgEBM1nMQ1Xl79/OnWOSfavrQTnfVjtx5iBIH06lj6cRbiJKuqDRUVoX0g
9+6AuhrmDONm465BTBfG5B4LxkHPXCwCDoEgDIPaU6SG9CAvoYXa7vyKyk4xVkPq
Yxqj3BehmtlZLfR+2/Mv3NENoo77cQH+nYWRkAUY04ohQxmgNWnP9uhjkykfBdjK
IceFW6WPRhmlZVc=
-----END CERTIFICATE-----
Generated at Wed May 14 20:10:50 2025 by rpki-client