Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G6SYyAxaUbXyCxcYrRCTxyr1LEojnF3vr9egn5CC9Unj/0/3133382e35392e3231362e302f32322d3332203d3e20323634313139.roa
File:                     3133382e35392e3231362e302f32322d3332203d3e20323634313139.roa (raw, json)
Hash identifier:          ROEJQGz+F109sV2OhVKcCdMH8z9QoriDUC/c6yrKxnA=
Subject key identifier:   E3:63:91:57:82:15:D2:32:EB:CF:37:B8:FE:93:3C:BF:F3:2A:C0:0F
Certificate issuer:       /CN=FF491384C83663A7F928ABDCFC348DF90A2CEFE1
Certificate serial:       24D06AA27380F4F0790B08696FB8E896A9809CE2
Authority key identifier: FF:49:13:84:C8:36:63:A7:F9:28:AB:DC:FC:34:8D:F9:0A:2C:EF:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF491384C83663A7F928ABDCFC348DF90A2CEFE1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G6SYyAxaUbXyCxcYrRCTxyr1LEojnF3vr9egn5CC9Unj/0/3133382e35392e3231362e302f32322d3332203d3e20323634313139.roa
Signing time:             Thu 14 Aug 2025 17:04:27 +0000
ROA not before:           Thu 14 Aug 2025 16:59:27 +0000
ROA not after:            Thu 13 Aug 2026 17:04:27 +0000
asID:                     264119
IP address blocks:        138.59.216.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G6SYyAxaUbXyCxcYrRCTxyr1LEojnF3vr9egn5CC9Unj/0/FF491384C83663A7F928ABDCFC348DF90A2CEFE1.crl
                          rsync://rpki-repo.registro.br/repo/G6SYyAxaUbXyCxcYrRCTxyr1LEojnF3vr9egn5CC9Unj/0/FF491384C83663A7F928ABDCFC348DF90A2CEFE1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF491384C83663A7F928ABDCFC348DF90A2CEFE1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 11:08:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:d0:6a:a2:73:80:f4:f0:79:0b:08:69:6f:b8:e8:96:a9:80:9c:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF491384C83663A7F928ABDCFC348DF90A2CEFE1
        Validity
            Not Before: Aug 14 16:59:27 2025 GMT
            Not After : Aug 13 17:04:27 2026 GMT
        Subject: CN=E36391578215D232EBCF37B8FE933CBFF32AC00F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:63:9d:53:13:1b:76:75:b9:d3:10:17:21:27:
                    f8:e8:50:34:7a:a6:6e:f9:95:ae:5e:92:5c:4c:c5:
                    1b:c5:ce:46:8a:40:5c:67:e5:49:0d:3d:ed:98:8a:
                    4b:6f:86:2c:f4:35:19:28:68:4b:c8:a6:08:e2:14:
                    13:a9:23:fb:3e:1d:b1:d8:1e:0b:b7:c4:e1:31:d0:
                    78:c7:97:b6:e5:a3:a4:07:a0:c5:67:82:0b:b2:32:
                    69:19:15:f6:b1:94:9a:fa:58:59:36:e4:88:ad:0f:
                    b7:03:b2:85:93:17:55:4b:63:6f:cb:e7:d5:30:ff:
                    fc:cd:1f:6d:ab:0f:c6:df:96:20:71:0f:8e:2b:99:
                    cd:7f:42:ee:f7:1b:0d:3c:02:6e:56:ab:db:e1:87:
                    f8:57:99:ca:67:58:e3:da:69:8e:2e:55:c3:5d:a3:
                    22:48:3f:7e:67:27:99:40:84:8c:c3:7a:b8:94:09:
                    f9:31:77:7d:aa:6b:2c:2a:b3:85:73:e1:c1:01:cf:
                    24:2f:fd:6a:23:9d:20:77:fa:12:01:7a:a9:7f:d0:
                    55:ea:3e:30:3a:cb:9b:52:bc:3a:9f:7d:40:bf:9b:
                    3b:b2:fb:95:eb:42:fc:df:a3:91:d7:3b:65:36:6c:
                    db:8a:87:cc:f5:bf:23:98:2b:b6:91:9c:89:d1:69:
                    77:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:63:91:57:82:15:D2:32:EB:CF:37:B8:FE:93:3C:BF:F3:2A:C0:0F
            X509v3 Authority Key Identifier:
                keyid:FF:49:13:84:C8:36:63:A7:F9:28:AB:DC:FC:34:8D:F9:0A:2C:EF:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G6SYyAxaUbXyCxcYrRCTxyr1LEojnF3vr9egn5CC9Unj/0/FF491384C83663A7F928ABDCFC348DF90A2CEFE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF491384C83663A7F928ABDCFC348DF90A2CEFE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G6SYyAxaUbXyCxcYrRCTxyr1LEojnF3vr9egn5CC9Unj/0/3133382e35392e3231362e302f32322d3332203d3e20323634313139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:72:bd:38:17:8a:38:48:2e:86:f4:d3:2c:74:35:f0:f7:7d:
         f4:95:5c:3a:f6:f7:ef:73:85:89:81:f3:07:9d:ef:56:47:48:
         63:5d:6c:cd:58:d8:52:19:19:76:82:fa:4d:9c:93:9e:6b:a6:
         2a:1f:c8:b4:ed:f2:f0:84:ac:76:36:c5:14:d9:85:61:e3:ef:
         ac:3e:e8:20:ca:e8:f8:e3:97:3a:34:eb:a4:3d:84:51:c3:bf:
         41:f3:42:e1:7e:e9:86:e4:d5:9b:2c:25:3e:2c:10:dd:43:23:
         1c:2d:8d:ff:61:57:5c:68:5a:f2:c9:cb:5f:44:d8:b8:53:2a:
         35:86:4f:76:d7:43:ee:15:ba:0e:25:3c:e3:c3:e2:04:dc:e1:
         7e:ad:ff:d3:4a:fc:95:43:7a:21:f7:db:e2:c7:aa:78:55:d9:
         4f:37:34:4b:f2:e8:bc:9f:2d:f5:9b:4c:4b:a1:86:74:8c:5a:
         6b:a5:dd:fd:8c:3e:25:7a:b0:3b:dc:53:b2:a9:c3:45:f3:c5:
         9e:fe:3a:df:c3:f7:e8:fe:c2:2d:2c:1e:23:e4:64:70:37:ba:
         c6:90:9b:c1:d7:83:1d:6c:df:02:f7:15:0c:31:a1:79:8a:0c:
         bb:d8:9b:a4:88:8a:e8:b7:c8:f8:f8:94:2b:f5:c8:31:52:9a:
         b2:3d:59:fb
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUJNBqonOA9PB5Cwhpb7jolqmAnOIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkY0OTEzODRDODM2NjNBN0Y5MjhBQkRDRkMzNDhERjkw
QTJDRUZFMTAeFw0yNTA4MTQxNjU5MjdaFw0yNjA4MTMxNzA0MjdaMDMxMTAvBgNV
BAMTKEUzNjM5MTU3ODIxNUQyMzJFQkNGMzdCOEZFOTMzQ0JGRjMyQUMwMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQY51TExt2dbnTEBchJ/joUDR6
pm75la5eklxMxRvFzkaKQFxn5UkNPe2Yiktvhiz0NRkoaEvIpgjiFBOpI/s+HbHY
Hgu3xOEx0HjHl7blo6QHoMVngguyMmkZFfaxlJr6WFk25IitD7cDsoWTF1VLY2/L
59Uw//zNH22rD8bfliBxD44rmc1/Qu73Gw08Am5Wq9vhh/hXmcpnWOPaaY4uVcNd
oyJIP35nJ5lAhIzDeriUCfkxd32qaywqs4Vz4cEBzyQv/WojnSB3+hIBeql/0FXq
PjA6y5tSvDqffUC/mzuy+5XrQvzfo5HXO2U2bNuKh8z1vyOYK7aRnInRaXcxAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU42ORV4IV0jLrzze4/pM8v/MqwA8wHwYDVR0j
BBgwFoAU/0kThMg2Y6f5KKvc/DSN+Qos7+EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzZTWXlBeGFVYlh5Q3hjWXJSQ1R4eXIxTEVvam5GM3ZyOWVnbjVDQzlV
bmovMC9GRjQ5MTM4NEM4MzY2M0E3RjkyOEFCRENGQzM0OERGOTBBMkNFRkUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZGNDkxMzg0QzgzNjYzQTdG
OTI4QUJEQ0ZDMzQ4REY5MEEyQ0VGRTEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0c2U1l5QXhhVWJYeUN4Y1lyUkNUeHlyMUxFb2puRjN2cjllZ241Q0M5VW5qLzAv
MzEzMzM4MmUzNTM5MmUzMjMxMzYyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzQzMTMxMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKKO9gwDQYJKoZIhvcNAQELBQADggEBAF1yvTgX
ijhILob00yx0NfD3ffSVXDr29+9zhYmB8wed71ZHSGNdbM1Y2FIZGXaC+k2ck55r
piofyLTt8vCErHY2xRTZhWHj76w+6CDK6Pjjlzo066Q9hFHDv0HzQuF+6Ybk1Zss
JT4sEN1DIxwtjf9hV1xoWvLJy19E2LhTKjWGT3bXQ+4Vug4lPOPD4gTc4X6t/9NK
/JVDeiH32+LHqnhV2U83NEvy6LyfLfWbTEuhhnSMWmul3f2MPiV6sDvcU7Kpw0Xz
xZ7+Ot/D9+j+wi0sHiPkZHA3usaQm8HXgx1s3wL3FQwxoXmKDLvYm6SIiui3yPj4
lCv1yDFSmrI9Wfs=
-----END CERTIFICATE-----
Generated at Sun Aug 24 03:34:09 2025 by rpki-client