Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/3133382e39372e36302e302f32322d3232203d3e20323634313330.roa
File:                     3133382e39372e36302e302f32322d3232203d3e20323634313330.roa (raw, json)
Hash identifier:          xOPrUAntqrJ+wIlHtdXgHQeK0N7D9t/MCzXU0CfPlNc=
Subject key identifier:   67:24:3F:BC:E6:D8:D3:BF:CB:E5:E9:78:8B:E8:46:75:64:77:47:52
Certificate issuer:       /CN=E47C0193099D783BC9228A8B85CB28868735A4E2
Certificate serial:       1BF8F1FCCC2745231E369B9064E3D3403ECA3841
Authority key identifier: E4:7C:01:93:09:9D:78:3B:C9:22:8A:8B:85:CB:28:86:87:35:A4:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E47C0193099D783BC9228A8B85CB28868735A4E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/3133382e39372e36302e302f32322d3232203d3e20323634313330.roa
Signing time:             Tue 20 May 2025 13:54:12 +0000
ROA not before:           Tue 20 May 2025 13:49:12 +0000
ROA not after:            Tue 19 May 2026 13:54:12 +0000
asID:                     264130
IP address blocks:        138.97.60.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/E47C0193099D783BC9228A8B85CB28868735A4E2.crl
                          rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/E47C0193099D783BC9228A8B85CB28868735A4E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E47C0193099D783BC9228A8B85CB28868735A4E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Jun 2025 18:04:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:f8:f1:fc:cc:27:45:23:1e:36:9b:90:64:e3:d3:40:3e:ca:38:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E47C0193099D783BC9228A8B85CB28868735A4E2
        Validity
            Not Before: May 20 13:49:12 2025 GMT
            Not After : May 19 13:54:12 2026 GMT
        Subject: CN=67243FBCE6D8D3BFCBE5E9788BE8467564774752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:eb:d5:c6:f6:cb:09:e2:58:c9:11:25:d3:ef:
                    27:cc:50:17:40:12:60:41:ce:66:e8:a0:7f:17:a2:
                    cc:2d:15:12:38:ac:f4:b0:18:bb:f5:c7:ee:0e:98:
                    50:9a:17:5b:13:a4:8f:86:97:b9:9c:94:f8:34:cf:
                    2b:5f:32:ac:45:a6:63:9b:d4:a8:63:92:5e:ab:20:
                    ac:44:06:33:9c:50:89:01:43:e9:b2:ae:44:d4:44:
                    78:6f:bc:ac:55:75:9a:ea:1a:35:f7:d2:0a:2b:f5:
                    29:e0:97:ef:4a:71:1c:30:d4:e7:c8:25:87:f9:58:
                    0d:30:89:e5:d8:64:55:29:8b:fb:39:49:fe:0e:cf:
                    48:e1:13:a8:19:0b:c1:48:27:cc:e2:c1:ec:ac:39:
                    e1:5e:ca:2d:a6:43:11:01:2c:1c:db:95:15:9b:19:
                    cf:9f:90:bd:02:4a:5c:c7:37:09:ed:3f:8c:f7:ac:
                    88:28:d7:b4:1e:7b:c5:74:01:12:81:c8:8b:d3:2d:
                    35:55:a7:fe:a9:10:f4:6f:ed:d6:45:db:59:5b:a8:
                    7f:5f:4f:30:a5:2c:6f:7e:5e:b3:13:d3:b4:54:03:
                    e2:9a:95:79:b3:0c:5a:a1:f3:49:0e:0f:28:56:8d:
                    06:1c:32:3b:56:00:51:70:e6:2c:9e:37:77:ba:10:
                    2b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:24:3F:BC:E6:D8:D3:BF:CB:E5:E9:78:8B:E8:46:75:64:77:47:52
            X509v3 Authority Key Identifier:
                keyid:E4:7C:01:93:09:9D:78:3B:C9:22:8A:8B:85:CB:28:86:87:35:A4:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/E47C0193099D783BC9228A8B85CB28868735A4E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E47C0193099D783BC9228A8B85CB28868735A4E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/3133382e39372e36302e302f32322d3232203d3e20323634313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:cd:dc:c8:c7:0a:13:bc:b6:b3:3b:d9:cb:75:81:fe:2a:c2:
         03:e3:b4:26:56:e0:a3:1b:ce:37:6d:87:ef:70:73:b6:37:9f:
         f1:86:fd:be:b1:53:70:f5:13:ea:bf:0d:71:51:aa:eb:7d:64:
         54:1e:3c:a8:37:0f:df:7e:8f:42:e8:f0:84:5f:27:11:16:af:
         cb:51:cb:23:e2:cd:d3:ef:ea:e6:0b:f0:13:92:3c:47:af:32:
         9a:93:c4:58:59:f8:cb:df:38:a2:a4:22:a0:74:73:30:bc:73:
         ed:95:ef:28:97:b6:8e:64:0d:d4:2a:1f:f4:d2:cd:ef:d6:13:
         25:7f:8e:7b:5c:0b:af:ff:17:af:82:92:b4:76:36:b3:7d:a5:
         5d:2f:67:cb:1e:e6:6c:88:64:23:f1:e5:6d:d6:b6:d2:da:b0:
         4f:4b:dd:66:d3:c4:37:11:21:b5:26:bb:c8:11:68:7c:27:dc:
         90:a7:5a:bc:52:cc:b0:f7:0b:e1:42:98:de:b2:5e:a8:44:94:
         8f:53:7a:f7:0e:84:e9:a4:3c:98:6b:5f:e6:e9:d0:8c:8c:64:
         1a:0a:21:60:69:ae:07:78:c3:06:45:61:01:cc:1f:44:7b:92:
         e3:8b:6c:73:76:92:87:40:a5:29:80:23:b4:aa:56:ff:99:e3:
         65:a1:3c:60
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUG/jx/MwnRSMeNpuQZOPTQD7KOEEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTQ3QzAxOTMwOTlENzgzQkM5MjI4QThCODVDQjI4ODY4
NzM1QTRFMjAeFw0yNTA1MjAxMzQ5MTJaFw0yNjA1MTkxMzU0MTJaMDMxMTAvBgNV
BAMTKDY3MjQzRkJDRTZEOEQzQkZDQkU1RTk3ODhCRTg0Njc1NjQ3NzQ3NTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz69XG9ssJ4ljJESXT7yfMUBdA
EmBBzmbooH8XoswtFRI4rPSwGLv1x+4OmFCaF1sTpI+Gl7mclPg0zytfMqxFpmOb
1Khjkl6rIKxEBjOcUIkBQ+myrkTURHhvvKxVdZrqGjX30gor9Sngl+9KcRww1OfI
JYf5WA0wieXYZFUpi/s5Sf4Oz0jhE6gZC8FIJ8ziweysOeFeyi2mQxEBLBzblRWb
Gc+fkL0CSlzHNwntP4z3rIgo17Qee8V0ARKByIvTLTVVp/6pEPRv7dZF21lbqH9f
TzClLG9+XrMT07RUA+KalXmzDFqh80kODyhWjQYcMjtWAFFw5iyeN3e6ECs3AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUZyQ/vObY07/L5el4i+hGdWR3R1IwHwYDVR0j
BBgwFoAU5HwBkwmdeDvJIoqLhcsohoc1pOIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUxyb1dvS3BMQ2tkanc3TjhENVVCc0J5OU45RzU1akpuZWZBVXdodVNq
N04vMC9FNDdDMDE5MzA5OUQ3ODNCQzkyMjhBOEI4NUNCMjg4Njg3MzVBNEUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U0N0MwMTkzMDk5RDc4M0JD
OTIyOEE4Qjg1Q0IyODg2ODczNUE0RTIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VMcm9Xb0twTENrZGp3N044RDVVQnNCeTlOOUc1NWpKbmVmQVV3aHVTajdOLzAv
MzEzMzM4MmUzOTM3MmUzNjMwMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM0
MzEzMzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCimE8MA0GCSqGSIb3DQEBCwUAA4IBAQAEzdzIxwoT
vLazO9nLdYH+KsID47QmVuCjG843bYfvcHO2N5/xhv2+sVNw9RPqvw1xUarrfWRU
HjyoNw/ffo9C6PCEXycRFq/LUcsj4s3T7+rmC/ATkjxHrzKak8RYWfjL3ziipCKg
dHMwvHPtle8ol7aOZA3UKh/00s3v1hMlf457XAuv/xevgpK0djazfaVdL2fLHuZs
iGQj8eVt1rbS2rBPS91m08Q3ESG1JrvIEWh8J9yQp1q8Usyw9wvhQpjesl6oRJSP
U3r3DoTppDyYa1/m6dCMjGQaCiFgaa4HeMMGRWEBzB9Ee5Lji2xzdpKHQKUpgCO0
qlb/meNloTxg
-----END CERTIFICATE-----
Generated at Sun Jun 22 10:38:15 2025 by rpki-client