Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AuMvXxtFbfBmM5otTRgii1rkzuwVMTN5oaijGSp4vYEf/0/3133312e3139362e3234322e302f32342d3234203d3e20323635393331.roa
File:                     3133312e3139362e3234322e302f32342d3234203d3e20323635393331.roa (raw, json)
Hash identifier:          mSfvuSLbtFJXU6Y2OxM5Agpxe+eCq6l+qCVV9410JEE=
Subject key identifier:   B9:76:F7:D9:78:4D:C0:78:0A:A3:ED:EF:C0:14:3A:55:E9:86:FA:8A
Certificate issuer:       /CN=9286252C75F02440D7307A4D8DAD99CDC7A76982
Certificate serial:       7AB8C69450C832C960995BC33282A3C2DABC1C48
Authority key identifier: 92:86:25:2C:75:F0:24:40:D7:30:7A:4D:8D:AD:99:CD:C7:A7:69:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9286252C75F02440D7307A4D8DAD99CDC7A76982.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AuMvXxtFbfBmM5otTRgii1rkzuwVMTN5oaijGSp4vYEf/0/3133312e3139362e3234322e302f32342d3234203d3e20323635393331.roa
Signing time:             Fri 11 Jul 2025 20:52:19 +0000
ROA not before:           Fri 11 Jul 2025 20:47:19 +0000
ROA not after:            Fri 10 Jul 2026 20:52:19 +0000
asID:                     265931
IP address blocks:        131.196.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AuMvXxtFbfBmM5otTRgii1rkzuwVMTN5oaijGSp4vYEf/0/9286252C75F02440D7307A4D8DAD99CDC7A76982.crl
                          rsync://rpki-repo.registro.br/repo/AuMvXxtFbfBmM5otTRgii1rkzuwVMTN5oaijGSp4vYEf/0/9286252C75F02440D7307A4D8DAD99CDC7A76982.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9286252C75F02440D7307A4D8DAD99CDC7A76982.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 14:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:b8:c6:94:50:c8:32:c9:60:99:5b:c3:32:82:a3:c2:da:bc:1c:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9286252C75F02440D7307A4D8DAD99CDC7A76982
        Validity
            Not Before: Jul 11 20:47:19 2025 GMT
            Not After : Jul 10 20:52:19 2026 GMT
        Subject: CN=B976F7D9784DC0780AA3EDEFC0143A55E986FA8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:d3:6b:0b:3d:b9:9d:19:90:c6:d7:96:3b:30:
                    76:de:d0:ad:3c:be:c5:78:44:6b:63:48:e7:ea:be:
                    e8:5c:43:8f:70:2d:fb:29:78:90:93:f1:c0:0e:44:
                    e4:06:c4:d4:c0:58:d9:41:e5:f6:18:85:1e:80:81:
                    5f:15:9e:5a:f5:72:7a:6a:83:12:04:63:8f:f6:8f:
                    e0:9a:6a:4d:ea:a5:b5:55:64:91:91:d8:75:1e:37:
                    16:df:1d:a4:40:ad:88:f2:52:64:c4:ad:7a:8a:66:
                    51:5a:71:dc:26:a2:00:7b:5d:6f:46:79:6f:f1:cd:
                    a6:94:dd:09:c5:e0:ac:e6:f7:99:b5:47:e2:04:d9:
                    1a:e5:70:af:06:4b:e1:b0:85:b6:02:63:5e:90:59:
                    c1:0d:2d:f6:7d:76:fa:6f:1c:a5:46:80:1e:c1:10:
                    ad:6b:3a:8e:82:a4:f4:e4:e6:f9:41:3e:0c:84:31:
                    37:39:8a:4f:cb:37:93:b7:83:64:49:0c:27:8f:d2:
                    55:01:bd:9f:90:83:33:88:6a:21:1f:83:63:2c:df:
                    01:48:de:33:55:75:f7:f9:e1:b2:7c:4c:a0:9c:6a:
                    60:9c:2c:dc:bc:5d:41:1b:83:cf:ea:2f:d4:f6:77:
                    5d:c7:fe:2e:65:6c:f6:92:4c:b1:fa:07:5a:9c:5e:
                    95:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:76:F7:D9:78:4D:C0:78:0A:A3:ED:EF:C0:14:3A:55:E9:86:FA:8A
            X509v3 Authority Key Identifier:
                keyid:92:86:25:2C:75:F0:24:40:D7:30:7A:4D:8D:AD:99:CD:C7:A7:69:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AuMvXxtFbfBmM5otTRgii1rkzuwVMTN5oaijGSp4vYEf/0/9286252C75F02440D7307A4D8DAD99CDC7A76982.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9286252C75F02440D7307A4D8DAD99CDC7A76982.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AuMvXxtFbfBmM5otTRgii1rkzuwVMTN5oaijGSp4vYEf/0/3133312e3139362e3234322e302f32342d3234203d3e20323635393331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:d1:6b:7f:83:72:1b:8c:a1:d7:ae:5b:37:07:2c:ac:f1:1f:
         57:f9:e7:58:bb:6f:aa:bb:82:ab:3d:a4:dc:cd:b6:6b:b3:b2:
         7e:a4:75:86:0f:f0:76:5a:f3:b5:f2:07:6d:9a:c0:42:87:1f:
         ab:f5:2a:63:92:28:0b:0f:d4:90:ed:c6:ec:41:33:2a:99:b3:
         c7:23:35:01:48:06:47:a7:ce:91:70:89:3c:1c:31:c0:39:e3:
         cb:93:18:25:a6:a0:71:45:f8:fa:48:e6:9f:e0:90:3e:22:c4:
         a0:f7:4e:c8:4c:fc:3b:ed:2e:40:92:ad:eb:b1:1e:1d:91:9c:
         81:f9:91:9d:6f:f8:ee:9a:f8:58:6d:62:82:65:f5:b6:14:94:
         19:35:e7:8e:e2:bc:c3:9c:cd:80:ed:e6:44:4a:f9:2b:4a:ef:
         6f:eb:50:b1:4f:2e:46:bd:7d:27:cd:54:ac:a9:d2:1d:b8:01:
         ec:38:f3:73:44:ac:d4:5d:39:61:20:9f:58:3a:ee:0e:01:4b:
         ff:63:cd:f7:d7:c7:24:dd:e0:3c:23:ba:6f:58:85:98:24:e8:
         d6:ca:7c:c1:62:fd:89:86:6e:05:78:f1:48:d4:a0:2d:2f:fd:
         a5:0b:6d:9a:4a:d8:b3:11:12:dc:ae:5f:94:8d:f9:24:6e:36:
         e6:40:2c:fb
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUerjGlFDIMslgmVvDMoKjwtq8HEgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTI4NjI1MkM3NUYwMjQ0MEQ3MzA3QTREOERBRDk5Q0RD
N0E3Njk4MjAeFw0yNTA3MTEyMDQ3MTlaFw0yNjA3MTAyMDUyMTlaMDMxMTAvBgNV
BAMTKEI5NzZGN0Q5Nzg0REMwNzgwQUEzRURFRkMwMTQzQTU1RTk4NkZBOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCD02sLPbmdGZDG15Y7MHbe0K08
vsV4RGtjSOfqvuhcQ49wLfspeJCT8cAOROQGxNTAWNlB5fYYhR6AgV8Vnlr1cnpq
gxIEY4/2j+Caak3qpbVVZJGR2HUeNxbfHaRArYjyUmTErXqKZlFacdwmogB7XW9G
eW/xzaaU3QnF4Kzm95m1R+IE2RrlcK8GS+GwhbYCY16QWcENLfZ9dvpvHKVGgB7B
EK1rOo6CpPTk5vlBPgyEMTc5ik/LN5O3g2RJDCeP0lUBvZ+QgzOIaiEfg2Ms3wFI
3jNVdff54bJ8TKCcamCcLNy8XUEbg8/qL9T2d13H/i5lbPaSTLH6B1qcXpUJAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUuXb32XhNwHgKo+3vwBQ6VemG+oowHwYDVR0j
BBgwFoAUkoYlLHXwJEDXMHpNja2ZzcenaYIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXVNdlh4dEZiZkJtTTVvdFRSZ2lpMXJrenV3Vk1UTjVvYWlqR1NwNHZZ
RWYvMC85Mjg2MjUyQzc1RjAyNDQwRDczMDdBNEQ4REFEOTlDREM3QTc2OTgyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkyODYyNTJDNzVGMDI0NDBE
NzMwN0E0RDhEQUQ5OUNEQzdBNzY5ODIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F1TXZYeHRGYmZCbU01b3RUUmdpaTFya3p1d1ZNVE41b2FpakdTcDR2WUVmLzAv
MzEzMzMxMmUzMTM5MzYyZTMyMzQzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNTM5MzMzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIPE8jANBgkqhkiG9w0BAQsFAAOCAQEAVNFr
f4NyG4yh165bNwcsrPEfV/nnWLtvqruCqz2k3M22a7OyfqR1hg/wdlrztfIHbZrA
Qocfq/UqY5IoCw/UkO3G7EEzKpmzxyM1AUgGR6fOkXCJPBwxwDnjy5MYJaagcUX4
+kjmn+CQPiLEoPdOyEz8O+0uQJKt67EeHZGcgfmRnW/47pr4WG1igmX1thSUGTXn
juK8w5zNgO3mREr5K0rvb+tQsU8uRr19J81UrKnSHbgB7Djzc0Ss1F05YSCfWDru
DgFL/2PN99fHJN3gPCO6b1iFmCTo1sp8wWL9iYZuBXjxSNSgLS/9pQttmkrYsxES
3K5flI35JG425kAs+w==
-----END CERTIFICATE-----
Generated at Sat Jul 26 00:54:07 2025 by rpki-client