Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/3133312e3139362e31382e302f32332d3233203d3e20323635383939.roa
File:                     3133312e3139362e31382e302f32332d3233203d3e20323635383939.roa (raw, json)
Hash identifier:          DYCEYsGs3ZgTrZ+1J1dvcrvVJpfCdj/hzITDR3sDx8o=
Subject key identifier:   83:02:91:1A:42:11:27:5D:82:9B:2D:9F:BC:FC:95:CA:70:3E:BD:BA
Certificate issuer:       /CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
Certificate serial:       740E1D303FDC2C19BAA7EB7572E1D58545F8ABFD
Authority key identifier: 1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/3133312e3139362e31382e302f32332d3233203d3e20323635383939.roa
Signing time:             Fri 25 Jul 2025 18:34:00 +0000
ROA not before:           Fri 25 Jul 2025 18:29:00 +0000
ROA not after:            Fri 24 Jul 2026 18:34:00 +0000
asID:                     265899
IP address blocks:        131.196.18.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl
                          rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 14:46:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:0e:1d:30:3f:dc:2c:19:ba:a7:eb:75:72:e1:d5:85:45:f8:ab:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
        Validity
            Not Before: Jul 25 18:29:00 2025 GMT
            Not After : Jul 24 18:34:00 2026 GMT
        Subject: CN=8302911A4211275D829B2D9FBCFC95CA703EBDBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:69:01:e3:03:3f:77:e8:04:2b:2f:11:43:5d:
                    d1:d8:1c:14:00:5e:0a:0a:35:06:77:f6:23:f9:0a:
                    a3:b0:1e:ce:27:a3:15:5b:7c:13:6e:8f:3a:41:3f:
                    3d:5a:9a:00:fe:44:db:7f:fe:b9:94:a9:90:f9:3e:
                    df:07:75:58:bb:73:9c:2d:62:33:85:6d:1b:13:73:
                    d2:17:26:b4:f7:7f:42:af:11:db:56:cc:07:eb:d8:
                    78:22:7f:df:26:04:a3:ea:55:b3:1a:23:d4:74:81:
                    01:16:63:41:0d:e4:52:47:7a:69:b0:14:d7:79:d9:
                    07:b3:b0:32:9a:62:95:5b:37:95:10:94:6b:af:bb:
                    ba:dd:24:6f:2b:6b:a4:00:2f:92:32:e7:ea:6b:73:
                    d0:94:8f:97:cf:5e:6d:dd:76:c9:5f:e7:38:7e:11:
                    6f:30:a7:7a:4d:4c:1d:64:bf:a3:21:e0:a4:13:c5:
                    93:ac:fc:0f:c5:ab:de:07:73:91:3c:14:27:17:e1:
                    ad:a5:95:55:70:eb:16:ed:e0:e2:f0:b6:de:29:bb:
                    ad:4e:cd:97:fd:d7:8d:d9:70:68:58:35:17:bd:74:
                    33:56:15:23:44:c8:ce:1d:a0:0e:61:cd:f2:8d:12:
                    85:e5:64:a9:45:a2:93:9d:f1:ee:6f:54:e6:af:37:
                    88:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:02:91:1A:42:11:27:5D:82:9B:2D:9F:BC:FC:95:CA:70:3E:BD:BA
            X509v3 Authority Key Identifier:
                keyid:1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/3133312e3139362e31382e302f32332d3233203d3e20323635383939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:e0:bd:fa:6c:2e:85:0b:da:ec:ce:85:bb:6b:f9:fb:6e:dc:
         ed:12:4c:66:d0:45:f7:47:2e:d1:5d:8e:29:26:b7:92:f7:58:
         a6:71:c0:bd:d9:4c:e1:d7:be:11:0f:8f:6b:18:e7:57:cb:d0:
         ab:73:90:d1:46:db:ff:00:3b:17:38:9b:f6:82:43:b4:6f:5b:
         19:a3:d8:8d:b0:fa:31:59:2b:c7:fb:3c:b9:71:08:41:2d:36:
         9e:89:c1:24:da:ea:b6:44:77:eb:be:de:35:45:03:3d:8f:28:
         a6:db:22:9f:66:9b:ff:23:41:e0:db:fa:3f:c3:9f:1c:98:50:
         af:e0:d2:18:d1:e5:05:7c:c7:6b:43:ac:6e:3d:a1:af:00:36:
         88:70:bc:b6:d7:62:16:d7:de:66:1f:3b:a7:3c:72:8d:79:62:
         aa:a3:91:a3:58:ec:83:8e:da:1f:22:7f:a7:90:44:de:5b:84:
         1d:ee:97:24:ea:38:01:43:05:9c:01:f5:84:eb:ec:02:a0:87:
         fc:cc:bf:a2:2a:4e:c6:cc:4c:d5:0c:b1:47:9d:c0:a4:73:d8:
         b5:17:ed:30:e7:cb:91:30:04:e9:7a:11:fd:9a:a0:2d:3d:42:
         43:9b:84:ee:6c:a0:ed:ef:cf:63:1e:74:77:ee:81:6a:45:4b:
         e8:16:fb:59
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUdA4dMD/cLBm6p+t1cuHVhUX4q/0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUYxMUU1NThGQzc1RDlEQTE1MDM5RUE1OEQ1QTE2NkE2
RjVFRjEwQjAeFw0yNTA3MjUxODI5MDBaFw0yNjA3MjQxODM0MDBaMDMxMTAvBgNV
BAMTKDgzMDI5MTFBNDIxMTI3NUQ4MjlCMkQ5RkJDRkM5NUNBNzAzRUJEQkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuaQHjAz936AQrLxFDXdHYHBQA
XgoKNQZ39iP5CqOwHs4noxVbfBNujzpBPz1amgD+RNt//rmUqZD5Pt8HdVi7c5wt
YjOFbRsTc9IXJrT3f0KvEdtWzAfr2Hgif98mBKPqVbMaI9R0gQEWY0EN5FJHemmw
FNd52QezsDKaYpVbN5UQlGuvu7rdJG8ra6QAL5Iy5+prc9CUj5fPXm3ddslf5zh+
EW8wp3pNTB1kv6Mh4KQTxZOs/A/Fq94Hc5E8FCcX4a2llVVw6xbt4OLwtt4pu61O
zZf9143ZcGhYNRe9dDNWFSNEyM4doA5hzfKNEoXlZKlFopOd8e5vVOavN4hFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUgwKRGkIRJ12Cmy2fvPyVynA+vbowHwYDVR0j
BBgwFoAUHxHlWPx12doVA56ljVoWam9e8QswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjVtYXpYcXl3NFVjcGN3a1BkUWJQMVdqeWt3UDdraGpYRmQ5MXd6eExY
ZTYvMC8xRjExRTU1OEZDNzVEOURBMTUwMzlFQTU4RDVBMTY2QTZGNUVGMTBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFGMTFFNTU4RkM3NUQ5REEx
NTAzOUVBNThENUExNjZBNkY1RUYxMEIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzI1bWF6WHF5dzRVY3Bjd2tQZFFiUDFXanlrd1A3a2hqWEZkOTF3enhMWGU2LzAv
MzEzMzMxMmUzMTM5MzYyZTMxMzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzUzODM5Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGDxBIwDQYJKoZIhvcNAQELBQADggEBAJjgvfps
LoUL2uzOhbtr+ftu3O0STGbQRfdHLtFdjikmt5L3WKZxwL3ZTOHXvhEPj2sY51fL
0KtzkNFG2/8AOxc4m/aCQ7RvWxmj2I2w+jFZK8f7PLlxCEEtNp6JwSTa6rZEd+u+
3jVFAz2PKKbbIp9mm/8jQeDb+j/DnxyYUK/g0hjR5QV8x2tDrG49oa8ANohwvLbX
YhbX3mYfO6c8co15YqqjkaNY7IOO2h8if6eQRN5bhB3ulyTqOAFDBZwB9YTr7AKg
h/zMv6IqTsbMTNUMsUedwKRz2LUX7TDny5EwBOl6Ef2aoC09QkObhO5soO3vz2Me
dHfugWpFS+gW+1k=
-----END CERTIFICATE-----
Generated at Sun Jul 27 06:12:00 2025 by rpki-client