Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/779C2nUJVYJTwyULZGoom993UEFGCCxcTz8T4EWgK3a4/0/3133382e3132322e3131362e302f32322d3234203d3e20323634333139.roa
File:                     3133382e3132322e3131362e302f32322d3234203d3e20323634333139.roa (raw, json)
Hash identifier:          Jw/dX/1ukROGbJ6fkpu/Flv5YrUp2r77b1nuj/JcMXY=
Subject key identifier:   45:46:AC:86:7B:E0:8D:97:99:B5:54:A4:62:01:AC:7B:66:5A:89:22
Certificate issuer:       /CN=8498356D517B9A4BCC9A959FD112ED6755FD7D34
Certificate serial:       78FD259D5D12DE1A135379FC42D72D424B9867EE
Authority key identifier: 84:98:35:6D:51:7B:9A:4B:CC:9A:95:9F:D1:12:ED:67:55:FD:7D:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8498356D517B9A4BCC9A959FD112ED6755FD7D34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/779C2nUJVYJTwyULZGoom993UEFGCCxcTz8T4EWgK3a4/0/3133382e3132322e3131362e302f32322d3234203d3e20323634333139.roa
Signing time:             Thu 27 Mar 2025 16:06:23 +0000
ROA not before:           Thu 27 Mar 2025 16:01:23 +0000
ROA not after:            Thu 26 Mar 2026 16:06:23 +0000
asID:                     264319
IP address blocks:        138.122.116.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/779C2nUJVYJTwyULZGoom993UEFGCCxcTz8T4EWgK3a4/0/8498356D517B9A4BCC9A959FD112ED6755FD7D34.crl
                          rsync://rpki-repo.registro.br/repo/779C2nUJVYJTwyULZGoom993UEFGCCxcTz8T4EWgK3a4/0/8498356D517B9A4BCC9A959FD112ED6755FD7D34.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8498356D517B9A4BCC9A959FD112ED6755FD7D34.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 18:10:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:fd:25:9d:5d:12:de:1a:13:53:79:fc:42:d7:2d:42:4b:98:67:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8498356D517B9A4BCC9A959FD112ED6755FD7D34
        Validity
            Not Before: Mar 27 16:01:23 2025 GMT
            Not After : Mar 26 16:06:23 2026 GMT
        Subject: CN=4546AC867BE08D9799B554A46201AC7B665A8922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:93:00:c6:e6:90:14:70:a2:71:a3:2a:0e:54:
                    b5:71:3f:1d:82:d3:c1:01:04:bd:6e:41:fc:29:14:
                    e2:92:36:86:79:b3:d0:58:81:50:05:ca:0e:79:87:
                    f5:b0:b4:43:2a:df:30:bc:f0:3b:58:5d:67:6a:81:
                    17:4e:b7:18:6d:2e:03:a5:0f:b9:98:cd:06:d4:1f:
                    d8:86:c7:72:fd:a8:89:21:1d:ec:ca:0e:be:c9:95:
                    ab:b7:33:93:11:0f:a0:ab:57:b9:37:4b:a3:c3:46:
                    bb:af:1d:07:29:68:3f:2c:07:e6:5f:5c:ed:88:77:
                    2f:e9:a7:e7:fd:79:25:8b:f4:05:0e:8f:4b:a4:d6:
                    52:0d:65:6d:65:55:cf:87:a9:86:ef:e2:7b:07:0d:
                    d8:58:0a:b3:f6:ac:19:be:35:0e:ee:01:33:e5:ac:
                    e6:69:17:18:f2:1a:d9:1b:11:bc:15:a3:b6:52:0a:
                    7a:b4:16:f3:13:f6:a7:f4:52:89:8d:6a:d1:9e:ea:
                    22:03:9a:4a:d7:82:60:43:2e:dd:64:f4:1d:c2:47:
                    62:25:bc:73:7e:bf:df:9c:b4:21:04:02:7a:4b:b5:
                    34:91:50:28:c6:69:91:eb:b7:33:3a:ec:2a:59:ec:
                    7e:c2:e5:db:c4:70:24:ea:47:f5:69:80:a3:7a:2c:
                    0f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:46:AC:86:7B:E0:8D:97:99:B5:54:A4:62:01:AC:7B:66:5A:89:22
            X509v3 Authority Key Identifier:
                keyid:84:98:35:6D:51:7B:9A:4B:CC:9A:95:9F:D1:12:ED:67:55:FD:7D:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/779C2nUJVYJTwyULZGoom993UEFGCCxcTz8T4EWgK3a4/0/8498356D517B9A4BCC9A959FD112ED6755FD7D34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8498356D517B9A4BCC9A959FD112ED6755FD7D34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/779C2nUJVYJTwyULZGoom993UEFGCCxcTz8T4EWgK3a4/0/3133382e3132322e3131362e302f32322d3234203d3e20323634333139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:44:eb:42:f0:60:91:c7:6a:fa:17:4b:d0:f8:15:72:ba:45:
         1f:6c:44:51:93:cc:14:a3:27:72:64:54:05:73:0e:3e:9d:e2:
         fd:2c:17:31:da:46:4e:90:28:27:61:0f:b6:bf:cd:76:b5:e3:
         c6:45:e0:01:ff:9a:56:be:52:ac:79:78:58:c1:52:11:9b:2c:
         8a:c2:a1:62:e1:db:af:7c:61:6f:8c:e9:e7:3a:20:c5:02:0a:
         ce:da:01:48:8f:81:0b:19:d1:98:7e:55:b4:9d:98:b3:cd:68:
         9c:49:d2:bf:6b:ea:89:1f:51:58:f5:ec:8c:77:cf:86:00:3e:
         d2:f2:63:78:82:88:84:2d:03:32:01:c1:8d:f4:fe:db:86:4d:
         d6:d1:99:a8:d8:37:f6:54:ee:d6:17:4e:d5:5d:2c:88:41:31:
         1f:26:23:03:30:33:39:37:35:e0:12:e8:45:31:73:40:60:52:
         21:0e:95:ca:c2:3a:9a:11:f0:e1:eb:cb:00:19:1f:1f:f0:f8:
         05:1b:66:ae:8b:1b:19:35:67:2a:d2:05:18:e1:c4:57:33:0e:
         eb:ae:c5:a0:93:0e:22:e6:cf:2f:3e:8e:33:1b:8a:0c:9d:6f:
         2d:38:b6:d5:e7:f8:0e:e5:99:95:04:5d:5c:72:9b:8e:03:f0:
         9f:19:22:49
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUeP0lnV0S3hoTU3n8QtctQkuYZ+4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODQ5ODM1NkQ1MTdCOUE0QkNDOUE5NTlGRDExMkVENjc1
NUZEN0QzNDAeFw0yNTAzMjcxNjAxMjNaFw0yNjAzMjYxNjA2MjNaMDMxMTAvBgNV
BAMTKDQ1NDZBQzg2N0JFMDhEOTc5OUI1NTRBNDYyMDFBQzdCNjY1QTg5MjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKkwDG5pAUcKJxoyoOVLVxPx2C
08EBBL1uQfwpFOKSNoZ5s9BYgVAFyg55h/WwtEMq3zC88DtYXWdqgRdOtxhtLgOl
D7mYzQbUH9iGx3L9qIkhHezKDr7Jlau3M5MRD6CrV7k3S6PDRruvHQcpaD8sB+Zf
XO2Idy/pp+f9eSWL9AUOj0uk1lINZW1lVc+HqYbv4nsHDdhYCrP2rBm+NQ7uATPl
rOZpFxjyGtkbEbwVo7ZSCnq0FvMT9qf0UomNatGe6iIDmkrXgmBDLt1k9B3CR2Il
vHN+v9+ctCEEAnpLtTSRUCjGaZHrtzM67CpZ7H7C5dvEcCTqR/VpgKN6LA/3AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQURUashnvgjZeZtVSkYgGse2ZaiSIwHwYDVR0j
BBgwFoAUhJg1bVF7mkvMmpWf0RLtZ1X9fTQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzc5QzJuVUpWWUpUd3lVTFpHb29tOTkzVUVGR0NDeGNUejhUNEVXZ0sz
YTQvMC84NDk4MzU2RDUxN0I5QTRCQ0M5QTk1OUZEMTEyRUQ2NzU1RkQ3RDM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg0OTgzNTZENTE3QjlBNEJD
QzlBOTU5RkQxMTJFRDY3NTVGRDdEMzQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzc3OUMyblVKVllKVHd5VUxaR29vbTk5M1VFRkdDQ3hjVHo4VDRFV2dLM2E0LzAv
MzEzMzM4MmUzMTMyMzIyZTMxMzEzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzNDMzMzEzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAop6dDANBgkqhkiG9w0BAQsFAAOCAQEAm0Tr
QvBgkcdq+hdL0PgVcrpFH2xEUZPMFKMncmRUBXMOPp3i/SwXMdpGTpAoJ2EPtr/N
drXjxkXgAf+aVr5SrHl4WMFSEZssisKhYuHbr3xhb4zp5zogxQIKztoBSI+BCxnR
mH5VtJ2Ys81onEnSv2vqiR9RWPXsjHfPhgA+0vJjeIKIhC0DMgHBjfT+24ZN1tGZ
qNg39lTu1hdO1V0siEExHyYjAzAzOTc14BLoRTFzQGBSIQ6VysI6mhHw4evLABkf
H/D4BRtmrosbGTVnKtIFGOHEVzMO667FoJMOIubPLz6OMxuKDJ1vLTi21ef4DuWZ
lQRdXHKbjgPwnxkiSQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 21:43:08 2025 by rpki-client on console.sobornost.net