Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/3133382e3138352e3132342e302f32322d3234203d3e20323633383430.roa
File:                     3133382e3138352e3132342e302f32322d3234203d3e20323633383430.roa (raw, json)
Hash identifier:          nTHnk58+NlGCzA2boJphxaatQL1TrBKE4lQslsXvu7o=
Subject key identifier:   ED:4B:0D:E7:DE:C5:83:98:2C:C6:02:9A:09:E6:50:79:79:E8:F3:15
Certificate issuer:       /CN=B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE
Certificate serial:       5E9B1CF8B798C25E6AA7F7A8E09626AE5F92B637
Authority key identifier: B6:52:7C:B6:A3:B1:2B:9F:9A:B2:1D:CC:B0:50:B5:90:A8:DF:5B:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/3133382e3138352e3132342e302f32322d3234203d3e20323633383430.roa
Signing time:             Sat 05 Apr 2025 12:29:51 +0000
ROA not before:           Sat 05 Apr 2025 12:24:51 +0000
ROA not after:            Sat 04 Apr 2026 12:29:51 +0000
asID:                     263840
IP address blocks:        138.185.124.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE.crl
                          rsync://rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 15:40:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:9b:1c:f8:b7:98:c2:5e:6a:a7:f7:a8:e0:96:26:ae:5f:92:b6:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE
        Validity
            Not Before: Apr  5 12:24:51 2025 GMT
            Not After : Apr  4 12:29:51 2026 GMT
        Subject: CN=ED4B0DE7DEC583982CC6029A09E6507979E8F315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3b:a8:53:eb:04:9f:55:0e:84:8c:3e:15:56:
                    cd:34:46:e7:96:4d:0b:79:4b:b7:0d:50:71:b5:c3:
                    46:42:fc:66:7b:05:75:f2:10:db:32:9b:da:30:51:
                    7a:a4:cb:d8:bf:59:eb:11:e4:76:70:6a:cf:e8:2e:
                    4c:f3:c1:59:64:fe:bd:56:2e:2c:39:14:01:fa:0d:
                    b5:c1:37:c0:f4:18:de:70:c9:0b:72:01:0f:f2:bb:
                    67:bd:f3:2c:f8:1c:53:7c:db:1b:95:6c:6e:0d:03:
                    fb:41:9a:9e:cf:ab:1c:3e:9b:c1:bc:06:7a:58:df:
                    19:b5:60:cf:33:53:37:65:2a:5b:e4:ed:e1:07:0c:
                    ac:03:92:5f:0f:81:bb:10:4b:9b:88:a1:85:36:c0:
                    6e:dc:a9:f5:ab:22:fd:8e:97:d1:db:f0:a7:0d:5f:
                    d1:08:1d:32:47:3d:50:84:74:62:f2:01:f2:29:ef:
                    a0:c1:fc:47:32:b4:4f:f0:4b:7a:14:d5:b8:35:22:
                    a3:5e:6b:4a:4a:7b:82:3e:23:77:df:02:06:b2:1d:
                    57:34:f4:80:a6:9c:b6:86:92:0b:02:ad:20:ff:30:
                    71:35:e2:1a:ac:1e:a3:af:f7:e0:4e:23:cf:33:a2:
                    a8:b1:9d:89:78:d8:29:8c:81:23:3d:11:e6:8a:76:
                    8d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:4B:0D:E7:DE:C5:83:98:2C:C6:02:9A:09:E6:50:79:79:E8:F3:15
            X509v3 Authority Key Identifier:
                keyid:B6:52:7C:B6:A3:B1:2B:9F:9A:B2:1D:CC:B0:50:B5:90:A8:DF:5B:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/3133382e3138352e3132342e302f32322d3234203d3e20323633383430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:ec:12:60:f3:fc:09:6a:c4:55:86:48:3c:5f:6a:66:4e:9e:
         b6:07:6e:ab:b7:b3:4d:b2:fe:f8:a0:0f:29:15:38:e8:b9:e2:
         5c:e4:ba:0a:2d:e4:e7:ed:16:18:e3:69:53:32:21:d9:ec:74:
         71:37:c0:62:04:0e:cb:fe:e7:39:8d:13:e3:34:12:d7:00:dc:
         48:ca:50:f0:da:b4:a2:25:52:7a:88:a6:97:47:67:e4:84:78:
         ed:c4:3a:a1:84:9d:f3:46:11:26:c1:a9:58:4b:2e:ad:36:b6:
         b8:2d:a7:25:94:fc:21:aa:e2:d4:70:be:9b:c5:88:b8:b6:39:
         ff:bd:66:6b:1e:29:6f:87:73:fe:c4:71:e4:b2:50:56:19:b4:
         e9:9a:00:a5:22:ab:71:d8:2a:06:39:9f:84:cc:66:29:18:76:
         9e:89:c0:64:d4:2d:55:af:7c:e6:de:b6:ca:ed:2f:6b:e7:12:
         ca:5e:27:db:23:ae:50:73:83:e2:9d:6d:a2:7e:94:50:9a:91:
         44:b3:c7:25:ad:b7:f5:16:a2:38:c7:d0:ce:0d:22:b1:ed:c0:
         df:fa:c4:4b:ed:63:81:35:08:81:2d:b7:60:b2:d5:22:14:26:
         3d:ee:06:ae:0c:bf:b6:eb:d8:d4:f1:e6:5d:44:62:cc:7d:e4:
         9e:12:16:18
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUXpsc+LeYwl5qp/eo4JYmrl+StjcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjY1MjdDQjZBM0IxMkI5RjlBQjIxRENDQjA1MEI1OTBB
OERGNUJGRTAeFw0yNTA0MDUxMjI0NTFaFw0yNjA0MDQxMjI5NTFaMDMxMTAvBgNV
BAMTKEVENEIwREU3REVDNTgzOTgyQ0M2MDI5QTA5RTY1MDc5NzlFOEYzMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAO6hT6wSfVQ6EjD4VVs00RueW
TQt5S7cNUHG1w0ZC/GZ7BXXyENsym9owUXqky9i/WesR5HZwas/oLkzzwVlk/r1W
Liw5FAH6DbXBN8D0GN5wyQtyAQ/yu2e98yz4HFN82xuVbG4NA/tBmp7Pqxw+m8G8
BnpY3xm1YM8zUzdlKlvk7eEHDKwDkl8PgbsQS5uIoYU2wG7cqfWrIv2Ol9Hb8KcN
X9EIHTJHPVCEdGLyAfIp76DB/EcytE/wS3oU1bg1IqNea0pKe4I+I3ffAgayHVc0
9ICmnLaGkgsCrSD/MHE14hqsHqOv9+BOI88zoqixnYl42CmMgSM9EeaKdo0rAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU7UsN597Fg5gsxgKaCeZQeXno8xUwHwYDVR0j
BBgwFoAUtlJ8tqOxK5+ash3MsFC1kKjfW/4wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9Bb0NEeHQxdEFLWkQ2cVBVZ2NZNHQ2a3VUNVA0b05ZdU1CYmg5WkhtNERW
LzAvQjY1MjdDQjZBM0IxMkI5RjlBQjIxRENDQjA1MEI1OTBBOERGNUJGRS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9CNjUyN0NCNkEzQjEyQjlGOUFC
MjFEQ0NCMDUwQjU5MEE4REY1QkZFLmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9B
b0NEeHQxdEFLWkQ2cVBVZ2NZNHQ2a3VUNVA0b05ZdU1CYmg5WkhtNERWLzAvMzEz
MzM4MmUzMTM4MzUyZTMxMzIzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYz
MzM4MzQzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAoq5fDANBgkqhkiG9w0BAQsFAAOCAQEAY+wSYPP8
CWrEVYZIPF9qZk6etgduq7ezTbL++KAPKRU46LniXOS6Ci3k5+0WGONpUzIh2ex0
cTfAYgQOy/7nOY0T4zQS1wDcSMpQ8Nq0oiVSeoiml0dn5IR47cQ6oYSd80YRJsGp
WEsurTa2uC2nJZT8Iari1HC+m8WIuLY5/71max4pb4dz/sRx5LJQVhm06ZoApSKr
cdgqBjmfhMxmKRh2nonAZNQtVa985t62yu0va+cSyl4n2yOuUHOD4p1ton6UUJqR
RLPHJa239RaiOMfQzg0ise3A3/rES+1jgTUIgS23YLLVIhQmPe4Grgy/tuvY1PHm
XURizH3knhIWGA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:37:58 2025 by rpki-client on console.sobornost.net