Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/3133382e3132322e36332e302f32342d3234203d3e203631353733.roa
File:                     3133382e3132322e36332e302f32342d3234203d3e203631353733.roa (raw, json)
Hash identifier:          3AKNcyqx0TzNh3U9NozdRJApXh69JRIdIRU5NezyhdY=
Subject key identifier:   C3:43:3F:AB:A8:36:63:37:58:C9:FB:6B:58:C1:45:F7:13:6B:58:73
Certificate issuer:       /CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
Certificate serial:       7B75E87AE8CC42283AFC48DE07C01A814557FDA2
Authority key identifier: DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/3133382e3132322e36332e302f32342d3234203d3e203631353733.roa
Signing time:             Sat 03 May 2025 00:20:59 +0000
ROA not before:           Sat 03 May 2025 00:15:59 +0000
ROA not after:            Sat 02 May 2026 00:20:59 +0000
asID:                     61573
IP address blocks:        138.122.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl
                          rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 04 May 2025 21:24:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:75:e8:7a:e8:cc:42:28:3a:fc:48:de:07:c0:1a:81:45:57:fd:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
        Validity
            Not Before: May  3 00:15:59 2025 GMT
            Not After : May  2 00:20:59 2026 GMT
        Subject: CN=C3433FABA836633758C9FB6B58C145F7136B5873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:91:2c:c1:eb:d1:28:e6:e8:8f:7d:21:bd:11:
                    62:13:bc:6f:47:6a:bd:ca:23:00:83:bb:9c:27:cc:
                    80:88:cb:c7:b6:98:11:ea:4e:7a:9b:64:27:29:78:
                    be:d8:fc:2a:32:86:a0:54:d4:cd:73:13:89:51:36:
                    ba:d2:9c:39:be:62:62:11:05:ca:8b:c8:2f:ab:db:
                    ab:53:94:7a:2e:a6:d1:ed:e2:33:05:72:07:0d:2b:
                    96:c1:5f:66:24:b2:61:6a:9f:96:d5:92:b3:32:ca:
                    dc:9a:18:98:1a:6f:7a:86:76:e0:af:77:c2:d5:6e:
                    18:74:90:2b:3b:e3:2c:1f:eb:9b:92:be:58:e1:d5:
                    c5:25:8d:e5:56:04:71:48:8d:b1:cf:f4:8f:45:6e:
                    c2:89:0f:c6:e1:c0:37:7f:dd:8c:b2:eb:3e:45:11:
                    20:d2:f4:8f:77:bc:ae:39:73:36:14:cc:b0:ef:e3:
                    bc:52:f4:19:85:07:b8:ed:f9:53:9a:b6:a3:71:94:
                    db:af:57:7f:89:36:22:01:34:4d:34:e7:85:80:91:
                    0e:bd:07:d4:55:85:06:2d:ef:43:f5:b7:2c:a1:5b:
                    7d:09:8e:31:f3:05:3b:1b:4a:97:76:83:1d:17:44:
                    f9:5d:d2:9e:8f:6c:37:fe:a9:a5:ae:a8:a8:80:32:
                    31:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:43:3F:AB:A8:36:63:37:58:C9:FB:6B:58:C1:45:F7:13:6B:58:73
            X509v3 Authority Key Identifier:
                keyid:DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/3133382e3132322e36332e302f32342d3234203d3e203631353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:8c:72:5c:6c:2a:c5:29:c7:75:33:7e:48:d3:6a:d0:ea:82:
         f8:39:44:fe:cf:42:a7:ef:7f:27:78:0e:1f:09:9d:b6:ad:6f:
         65:09:bc:1e:3c:ec:18:27:5d:f3:2a:bf:75:e0:c1:14:f8:15:
         65:24:cb:b3:1a:b2:2f:48:aa:e8:c6:02:e9:98:76:ff:7f:e4:
         ab:d7:d5:1f:14:3b:1d:91:69:b8:3b:e5:e8:65:77:1b:18:ec:
         8b:a0:e6:a5:d8:e7:60:41:53:e8:9a:32:f0:7d:53:7e:94:5c:
         e8:d8:68:b5:05:36:ca:4c:f9:4c:6c:9d:fd:dc:87:02:3c:50:
         a9:23:b7:b6:e6:4e:47:f6:2a:1f:bb:33:d9:3c:51:62:e5:89:
         75:16:3c:ea:33:8b:6c:a0:f8:97:6b:ba:9c:ee:20:72:2e:60:
         ec:0c:67:60:92:2f:72:e2:ca:5c:bc:85:81:2d:65:4b:c9:94:
         06:b9:c3:0d:ec:09:1a:1c:05:49:98:4f:5e:2f:cc:ec:7a:1d:
         be:c9:b3:4d:71:f8:b7:8a:91:5b:92:36:69:12:c6:76:21:ef:
         1d:e1:2e:44:de:a8:3b:2d:31:a2:10:17:21:be:d5:f0:0b:c6:
         e9:fb:dc:04:24:6f:59:cc:34:b6:f2:41:65:8b:40:d7:04:b8:
         9a:b6:06:23
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUe3XoeujMQig6/EjeB8AagUVX/aIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREUxOEU0RjFCMTlFOUNCNDJCRTU0NjgzMTI3NjQ1MTlF
QUE4NjZCRDAeFw0yNTA1MDMwMDE1NTlaFw0yNjA1MDIwMDIwNTlaMDMxMTAvBgNV
BAMTKEMzNDMzRkFCQTgzNjYzMzc1OEM5RkI2QjU4QzE0NUY3MTM2QjU4NzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCFkSzB69Eo5uiPfSG9EWITvG9H
ar3KIwCDu5wnzICIy8e2mBHqTnqbZCcpeL7Y/CoyhqBU1M1zE4lRNrrSnDm+YmIR
BcqLyC+r26tTlHouptHt4jMFcgcNK5bBX2YksmFqn5bVkrMyytyaGJgab3qGduCv
d8LVbhh0kCs74ywf65uSvljh1cUljeVWBHFIjbHP9I9FbsKJD8bhwDd/3Yyy6z5F
ESDS9I93vK45czYUzLDv47xS9BmFB7jt+VOatqNxlNuvV3+JNiIBNE0054WAkQ69
B9RVhQYt70P1tyyhW30JjjHzBTsbSpd2gx0XRPld0p6PbDf+qaWuqKiAMjG1AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUw0M/q6g2YzdYyftrWMFF9xNrWHMwHwYDVR0j
BBgwFoAU3hjk8bGenLQr5UaDEnZFGeqoZr0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHdFS3Z0REo2U0Jrdm5WcUdKaVZqaTV1UDQ2UkxYVG5oRnNqeDhCczdl
UnQvMC9ERTE4RTRGMUIxOUU5Q0I0MkJFNTQ2ODMxMjc2NDUxOUVBQTg2NkJELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFMThFNEYxQjE5RTlDQjQy
QkU1NDY4MzEyNzY0NTE5RUFBODY2QkQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h3RUt2dERKNlNCa3ZuVnFHSmlWamk1dVA0NlJMWFRuaEZzang4QnM3ZVJ0LzAv
MzEzMzM4MmUzMTMyMzIyZTM2MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMx
MzUzNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAino/MA0GCSqGSIb3DQEBCwUAA4IBAQBbjHJcbCrF
Kcd1M35I02rQ6oL4OUT+z0Kn738neA4fCZ22rW9lCbwePOwYJ13zKr914MEU+BVl
JMuzGrIvSKroxgLpmHb/f+Sr19UfFDsdkWm4O+XoZXcbGOyLoOal2OdgQVPomjLw
fVN+lFzo2Gi1BTbKTPlMbJ393IcCPFCpI7e25k5H9iofuzPZPFFi5Yl1FjzqM4ts
oPiXa7qc7iByLmDsDGdgki9y4spcvIWBLWVLyZQGucMN7AkaHAVJmE9eL8zseh2+
ybNNcfi3ipFbkjZpEsZ2Ie8d4S5E3qg7LTGiEBchvtXwC8bp+9wEJG9ZzDS28kFl
i0DXBLiatgYj
-----END CERTIFICATE-----
Generated at Sun May 4 07:22:37 2025 by rpki-client