Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/3133382e3138352e342e302f32322d3234203d3e20323636343333.roa
File:                     3133382e3138352e342e302f32322d3234203d3e20323636343333.roa (raw, json)
Hash identifier:          n8S2COXT7FsJis/4Ekfbx3z3cwFdOm+NqrDeR9NrRhU=
Subject key identifier:   E5:A1:16:BE:9B:30:F1:A0:25:35:AC:C5:DA:1D:03:F0:A3:3B:E4:39
Certificate issuer:       /CN=E4B0FA124B3B7D199E6A099F05777631A9F2C102
Certificate serial:       1A68317CFD8B9E6852DD688FE2127D0E20C59A65
Authority key identifier: E4:B0:FA:12:4B:3B:7D:19:9E:6A:09:9F:05:77:76:31:A9:F2:C1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B0FA124B3B7D199E6A099F05777631A9F2C102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/3133382e3138352e342e302f32322d3234203d3e20323636343333.roa
Signing time:             Mon 09 Jun 2025 19:15:40 +0000
ROA not before:           Mon 09 Jun 2025 19:10:40 +0000
ROA not after:            Mon 08 Jun 2026 19:15:40 +0000
asID:                     266433
IP address blocks:        138.185.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/E4B0FA124B3B7D199E6A099F05777631A9F2C102.crl
                          rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/E4B0FA124B3B7D199E6A099F05777631A9F2C102.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B0FA124B3B7D199E6A099F05777631A9F2C102.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 03:30:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:68:31:7c:fd:8b:9e:68:52:dd:68:8f:e2:12:7d:0e:20:c5:9a:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4B0FA124B3B7D199E6A099F05777631A9F2C102
        Validity
            Not Before: Jun  9 19:10:40 2025 GMT
            Not After : Jun  8 19:15:40 2026 GMT
        Subject: CN=E5A116BE9B30F1A02535ACC5DA1D03F0A33BE439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f8:5f:4c:17:7e:30:57:05:7f:b7:27:88:d6:
                    ac:69:bf:60:3c:c4:9b:6e:08:ee:67:fd:1e:df:33:
                    c1:29:2d:a1:59:3e:3e:9e:04:e1:36:08:2c:78:88:
                    0c:f9:19:8f:cd:a2:7e:dc:08:f9:ca:00:2e:0c:4d:
                    33:78:e2:90:a0:3c:0c:c3:c8:53:e3:0b:88:3e:cc:
                    4b:bf:2b:5a:a7:5f:ff:4c:85:84:36:2e:72:72:e7:
                    6a:04:0e:eb:4a:1a:bb:8a:3a:ed:45:6c:aa:97:c0:
                    e1:12:55:04:b6:10:79:2e:68:e2:d7:d9:f6:7c:79:
                    99:37:33:00:95:f3:b5:78:fe:f0:3a:b3:c4:98:58:
                    18:62:0c:97:1d:3b:f6:68:47:0f:38:ee:d4:49:0b:
                    92:cb:86:67:59:fa:83:92:23:d5:b6:b1:a6:21:cc:
                    2e:23:d3:4f:b4:5d:bc:bb:1d:59:86:3a:17:01:73:
                    78:2b:f3:b1:ce:a7:2d:88:65:9f:2e:e1:9e:ea:7c:
                    f8:c5:2b:a1:1d:72:02:3c:7a:ee:de:df:c9:08:c7:
                    fa:1c:ca:87:c1:5e:1d:a2:2b:a5:09:15:a6:a8:ec:
                    e1:52:05:03:d3:d6:5b:a8:56:4e:4c:a3:8e:5d:c6:
                    90:d9:1d:ff:e4:2b:5b:4b:4a:b3:d5:b3:c0:4e:de:
                    af:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:A1:16:BE:9B:30:F1:A0:25:35:AC:C5:DA:1D:03:F0:A3:3B:E4:39
            X509v3 Authority Key Identifier:
                keyid:E4:B0:FA:12:4B:3B:7D:19:9E:6A:09:9F:05:77:76:31:A9:F2:C1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/E4B0FA124B3B7D199E6A099F05777631A9F2C102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B0FA124B3B7D199E6A099F05777631A9F2C102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/3133382e3138352e342e302f32322d3234203d3e20323636343333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ad:08:cb:65:6d:59:a9:09:0d:63:94:5b:ff:ae:3f:95:f2:b1:
         19:91:80:71:99:2e:14:e7:86:08:1a:d0:30:e5:76:a2:b1:fb:
         c8:e4:0f:15:a6:c7:fc:7b:48:11:26:c2:a6:2f:0c:89:89:d6:
         fc:a8:d4:18:f9:3e:eb:11:4c:1f:d9:82:7e:47:dd:67:1b:1d:
         bb:f2:55:71:3a:c6:c1:af:fc:30:73:97:e1:44:17:a5:5d:3c:
         94:31:cd:3c:76:05:47:36:0e:b6:69:4b:6c:c5:06:bf:ff:3c:
         ab:8c:58:75:9b:2b:41:85:2b:0d:c2:09:52:36:30:91:bb:0e:
         62:f0:2e:1a:ee:b4:51:bc:c5:9f:69:e6:22:bc:93:52:6a:3c:
         89:ca:26:bf:e8:cb:83:de:65:b8:e4:4c:e2:fe:4f:04:59:8a:
         eb:d6:b7:37:9f:e7:b0:47:c1:0b:77:c7:9e:36:ea:05:9b:83:
         17:00:0e:1b:2c:bf:fa:9f:0d:c5:4c:6c:34:65:59:39:7b:55:
         14:5d:fe:f9:4a:01:be:6e:a0:d2:2e:49:d3:ed:ec:59:14:c8:
         ae:92:c5:71:67:20:2a:64:e2:b3:40:56:5f:8e:76:53:e7:c0:
         3e:e0:22:ee:9a:36:ec:0c:50:96:6e:6e:0d:b7:19:f1:08:c5:
         bd:21:fb:15
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUGmgxfP2LnmhS3WiP4hJ9DiDFmmUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTRCMEZBMTI0QjNCN0QxOTlFNkEwOTlGMDU3Nzc2MzFB
OUYyQzEwMjAeFw0yNTA2MDkxOTEwNDBaFw0yNjA2MDgxOTE1NDBaMDMxMTAvBgNV
BAMTKEU1QTExNkJFOUIzMEYxQTAyNTM1QUNDNURBMUQwM0YwQTMzQkU0MzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk+F9MF34wVwV/tyeI1qxpv2A8
xJtuCO5n/R7fM8EpLaFZPj6eBOE2CCx4iAz5GY/Non7cCPnKAC4MTTN44pCgPAzD
yFPjC4g+zEu/K1qnX/9MhYQ2LnJy52oEDutKGruKOu1FbKqXwOESVQS2EHkuaOLX
2fZ8eZk3MwCV87V4/vA6s8SYWBhiDJcdO/ZoRw847tRJC5LLhmdZ+oOSI9W2saYh
zC4j00+0Xby7HVmGOhcBc3gr87HOpy2IZZ8u4Z7qfPjFK6EdcgI8eu7e38kIx/oc
yofBXh2iK6UJFaao7OFSBQPT1luoVk5Mo45dxpDZHf/kK1tLSrPVs8BO3q+dAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU5aEWvpsw8aAlNazF2h0D8KM75DkwHwYDVR0j
BBgwFoAU5LD6Eks7fRmeagmfBXd2ManywQIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzhiMXRHTm9yakw0SmRDRzMzZzNHb3FXR1RuQlU3YkE3eVRUQk14ZWg5
VWYvMC9FNEIwRkExMjRCM0I3RDE5OUU2QTA5OUYwNTc3NzYzMUE5RjJDMTAyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U0QjBGQTEyNEIzQjdEMTk5
RTZBMDk5RjA1Nzc3NjMxQTlGMkMxMDIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M4YjF0R05vcmpMNEpkQ0czM2czR29xV0dUbkJVN2JBN3lUVEJNeGVoOVVmLzAv
MzEzMzM4MmUzMTM4MzUyZTM0MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM2
MzQzMzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCirkEMA0GCSqGSIb3DQEBCwUAA4IBAQCtCMtlbVmp
CQ1jlFv/rj+V8rEZkYBxmS4U54YIGtAw5XaisfvI5A8Vpsf8e0gRJsKmLwyJidb8
qNQY+T7rEUwf2YJ+R91nGx278lVxOsbBr/wwc5fhRBelXTyUMc08dgVHNg62aUts
xQa//zyrjFh1mytBhSsNwglSNjCRuw5i8C4a7rRRvMWfaeYivJNSajyJyia/6MuD
3mW45Ezi/k8EWYrr1rc3n+ewR8ELd8eeNuoFm4MXAA4bLL/6nw3FTGw0ZVk5e1UU
Xf75SgG+bqDSLknT7exZFMiuksVxZyAqZOKzQFZfjnZT58A+4CLumjbsDFCWbm4N
txnxCMW9IfsV
-----END CERTIFICATE-----
Generated at Thu Jun 19 19:45:22 2025 by rpki-client