Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/3133382e3230342e3133302e302f32342d3234203d3e20323633383837.roa
File:                     3133382e3230342e3133302e302f32342d3234203d3e20323633383837.roa (raw, json)
Hash identifier:          pazZs1aSam9rBFmyj/qOISaakR2GbbZp7fQ5pK28PTw=
Subject key identifier:   14:FC:8F:99:AA:61:C5:B4:79:23:45:1A:B1:E2:B7:55:18:DE:34:FF
Certificate issuer:       /CN=1B4A9F66924E0480B35C513AF20D0C5D1204BC9A
Certificate serial:       12A6E5663053B288B559767729A176528F5A909D
Authority key identifier: 1B:4A:9F:66:92:4E:04:80:B3:5C:51:3A:F2:0D:0C:5D:12:04:BC:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B4A9F66924E0480B35C513AF20D0C5D1204BC9A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/3133382e3230342e3133302e302f32342d3234203d3e20323633383837.roa
Signing time:             Wed 05 Mar 2025 21:26:30 +0000
ROA not before:           Wed 05 Mar 2025 21:21:30 +0000
ROA not after:            Wed 04 Mar 2026 21:26:30 +0000
asID:                     263887
IP address blocks:        138.204.130.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/1B4A9F66924E0480B35C513AF20D0C5D1204BC9A.crl
                          rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/1B4A9F66924E0480B35C513AF20D0C5D1204BC9A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B4A9F66924E0480B35C513AF20D0C5D1204BC9A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 11:42:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:a6:e5:66:30:53:b2:88:b5:59:76:77:29:a1:76:52:8f:5a:90:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B4A9F66924E0480B35C513AF20D0C5D1204BC9A
        Validity
            Not Before: Mar  5 21:21:30 2025 GMT
            Not After : Mar  4 21:26:30 2026 GMT
        Subject: CN=14FC8F99AA61C5B47923451AB1E2B75518DE34FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:32:12:e7:fe:f7:86:64:36:b8:4b:e1:e5:70:
                    b6:db:6d:31:7d:82:77:1f:50:82:77:87:a7:59:bc:
                    60:00:da:0b:be:ae:8c:cf:bf:b5:eb:b7:d4:61:17:
                    22:12:74:72:8d:02:bc:af:5c:18:c5:e1:aa:c5:8e:
                    8c:5e:ab:30:49:9f:7c:c4:26:ae:e5:fc:e8:78:f0:
                    7f:9d:21:74:0b:48:02:6e:ce:fb:47:00:52:91:e1:
                    79:f2:c7:32:1d:c9:55:94:0e:1f:60:8b:03:c3:ca:
                    db:64:71:5e:fc:ec:69:46:35:1c:ec:bc:65:93:83:
                    4d:6f:7b:c8:1b:06:04:72:82:c2:cc:d8:b2:51:10:
                    b7:ac:9a:19:e5:3f:2a:d9:16:25:c8:d4:3a:7d:8b:
                    b9:e6:77:0c:45:5a:c8:cc:ec:83:e7:58:25:24:ef:
                    65:77:5d:25:8e:2a:fe:41:ad:64:a0:c2:f0:ea:54:
                    35:d5:d3:c8:93:9a:1a:b1:54:a8:15:b7:f2:0e:b0:
                    ac:d8:18:a0:8f:6c:04:ab:3f:a9:1e:d6:9e:83:f6:
                    88:de:4d:70:53:66:cf:68:35:43:6f:f0:ef:4f:d2:
                    02:d9:e6:89:72:84:d7:62:47:fa:0d:9c:ae:32:66:
                    ab:a8:ef:a9:15:d6:2b:fd:d3:e5:42:5a:42:a7:f6:
                    fd:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:FC:8F:99:AA:61:C5:B4:79:23:45:1A:B1:E2:B7:55:18:DE:34:FF
            X509v3 Authority Key Identifier:
                keyid:1B:4A:9F:66:92:4E:04:80:B3:5C:51:3A:F2:0D:0C:5D:12:04:BC:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/1B4A9F66924E0480B35C513AF20D0C5D1204BC9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B4A9F66924E0480B35C513AF20D0C5D1204BC9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/3133382e3230342e3133302e302f32342d3234203d3e20323633383837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:2b:46:9c:68:d5:e2:4e:27:67:f4:f5:60:57:7a:49:4e:eb:
         e1:8e:29:f4:44:59:13:4f:d0:6f:f5:98:6b:82:03:fd:ef:ba:
         03:7a:a3:bd:cb:c7:0e:8c:8c:9b:ea:a5:b9:8d:c9:fa:6c:d7:
         80:ad:41:a6:96:2b:36:a9:c1:9c:2e:c6:20:40:7b:0a:bb:bc:
         43:4d:ab:d2:76:0f:23:7f:9b:b2:89:af:dd:66:9f:65:a0:2f:
         45:1e:19:9e:37:72:da:ce:71:00:5c:56:e9:10:f6:bb:01:95:
         e0:38:d8:29:f5:dc:96:de:8a:14:cc:3b:3b:51:0f:ee:6b:07:
         3c:ec:de:d6:55:f9:65:ed:de:61:3f:40:e3:23:88:60:a5:9b:
         49:28:a3:48:4c:4b:90:d7:1a:ee:f9:1a:c2:bc:07:aa:4a:b9:
         4a:40:ae:51:15:1f:91:c5:5e:0f:14:c0:07:2c:76:ad:56:a9:
         46:9e:f4:9c:69:19:97:04:6a:a5:24:0b:56:0d:9e:78:c2:d9:
         47:ee:91:93:3f:34:47:2b:1d:5c:cd:fa:79:55:47:1b:23:65:
         13:f0:47:8c:7d:37:13:a0:22:ad:ff:4a:8b:ef:2c:1f:8f:8a:
         58:16:3e:9a:5d:47:c8:e8:3f:22:fb:96:c9:1d:3e:52:aa:b5:
         ee:37:6e:bc
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUEqblZjBTsoi1WXZ3KaF2Uo9akJ0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUI0QTlGNjY5MjRFMDQ4MEIzNUM1MTNBRjIwRDBDNUQx
MjA0QkM5QTAeFw0yNTAzMDUyMTIxMzBaFw0yNjAzMDQyMTI2MzBaMDMxMTAvBgNV
BAMTKDE0RkM4Rjk5QUE2MUM1QjQ3OTIzNDUxQUIxRTJCNzU1MThERTM0RkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtMhLn/veGZDa4S+HlcLbbbTF9
gncfUIJ3h6dZvGAA2gu+rozPv7Xrt9RhFyISdHKNAryvXBjF4arFjoxeqzBJn3zE
Jq7l/Oh48H+dIXQLSAJuzvtHAFKR4XnyxzIdyVWUDh9giwPDyttkcV787GlGNRzs
vGWTg01ve8gbBgRygsLM2LJRELesmhnlPyrZFiXI1Dp9i7nmdwxFWsjM7IPnWCUk
72V3XSWOKv5BrWSgwvDqVDXV08iTmhqxVKgVt/IOsKzYGKCPbASrP6ke1p6D9oje
TXBTZs9oNUNv8O9P0gLZ5olyhNdiR/oNnK4yZquo76kV1iv90+VCWkKn9v3xAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUFPyPmaphxbR5I0UaseK3VRjeNP8wHwYDVR0j
BBgwFoAUG0qfZpJOBICzXFE68g0MXRIEvJowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlFLU3Rta1NFTUZzZGdiTFlIeHNWSkVhRmtmb1pFVkxSeTQ5eDNHb3dE
SDIvMC8xQjRBOUY2NjkyNEUwNDgwQjM1QzUxM0FGMjBEMEM1RDEyMDRCQzlBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFCNEE5RjY2OTI0RTA0ODBC
MzVDNTEzQUYyMEQwQzVEMTIwNEJDOUEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZRS1N0bWtTRU1Gc2RnYkxZSHhzVkpFYUZrZm9aRVZMUnk0OXgzR293REgyLzAv
MzEzMzM4MmUzMjMwMzQyZTMxMzMzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM4MzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIrMgjANBgkqhkiG9w0BAQsFAAOCAQEAOCtG
nGjV4k4nZ/T1YFd6SU7r4Y4p9ERZE0/Qb/WYa4ID/e+6A3qjvcvHDoyMm+qluY3J
+mzXgK1BppYrNqnBnC7GIEB7Cru8Q02r0nYPI3+bsomv3WafZaAvRR4Znjdy2s5x
AFxW6RD2uwGV4DjYKfXclt6KFMw7O1EP7msHPOze1lX5Ze3eYT9A4yOIYKWbSSij
SExLkNca7vkawrwHqkq5SkCuURUfkcVeDxTAByx2rVapRp70nGkZlwRqpSQLVg2e
eMLZR+6Rkz80RysdXM36eVVHGyNlE/BHjH03E6Airf9Ki+8sH4+KWBY+ml1HyOg/
IvuWyR0+Uqq17jduvA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:37:10 2025 by rpki-client on console.sobornost.net