Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C55JUPHuygNVCyp7bD8metjsoLPrDT5BQAfgE7FrjbXk/0/3133312e3136312e3131362e302f32322d3234203d3e20323730373737.roa
File:                     3133312e3136312e3131362e302f32322d3234203d3e20323730373737.roa (raw, json)
Hash identifier:          7XzuSCIm7w6RbMhLKWpdN+KyTq7ME3zWAgPfO9AxmPw=
Subject key identifier:   40:EC:3D:8C:37:00:99:8E:7F:DB:D1:D5:8C:0C:DD:84:4B:C0:2A:CA
Certificate issuer:       /CN=93564CC33EE53001901A2F9849EA295D1A0CECD5
Certificate serial:       4C888183A729B1F7FE62F1159D9B6F582FBB3464
Authority key identifier: 93:56:4C:C3:3E:E5:30:01:90:1A:2F:98:49:EA:29:5D:1A:0C:EC:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93564CC33EE53001901A2F9849EA295D1A0CECD5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C55JUPHuygNVCyp7bD8metjsoLPrDT5BQAfgE7FrjbXk/0/3133312e3136312e3131362e302f32322d3234203d3e20323730373737.roa
Signing time:             Sat 07 Jun 2025 12:53:34 +0000
ROA not before:           Sat 07 Jun 2025 12:48:34 +0000
ROA not after:            Sat 06 Jun 2026 12:53:34 +0000
asID:                     270777
IP address blocks:        131.161.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C55JUPHuygNVCyp7bD8metjsoLPrDT5BQAfgE7FrjbXk/0/93564CC33EE53001901A2F9849EA295D1A0CECD5.crl
                          rsync://rpki-repo.registro.br/repo/C55JUPHuygNVCyp7bD8metjsoLPrDT5BQAfgE7FrjbXk/0/93564CC33EE53001901A2F9849EA295D1A0CECD5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93564CC33EE53001901A2F9849EA295D1A0CECD5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Jun 2025 00:27:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:88:81:83:a7:29:b1:f7:fe:62:f1:15:9d:9b:6f:58:2f:bb:34:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93564CC33EE53001901A2F9849EA295D1A0CECD5
        Validity
            Not Before: Jun  7 12:48:34 2025 GMT
            Not After : Jun  6 12:53:34 2026 GMT
        Subject: CN=40EC3D8C3700998E7FDBD1D58C0CDD844BC02ACA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:73:53:3d:1f:d2:26:2b:99:96:b8:39:6e:67:
                    7e:e6:d6:a1:93:4f:55:19:68:79:b0:e3:eb:5f:a5:
                    67:58:ed:6c:07:14:0c:77:ed:9b:24:ea:74:79:83:
                    fc:89:e3:84:25:54:71:0a:7f:0e:96:3a:a8:36:92:
                    ae:1f:20:37:72:78:9a:eb:81:af:86:0e:6a:9a:57:
                    71:d2:d8:1e:3a:5c:f2:0f:ed:d0:d6:8e:52:35:41:
                    78:d2:22:19:1f:3b:8d:f9:30:80:91:0a:d1:3c:ca:
                    03:a5:8f:ad:0c:b3:25:15:18:0e:9a:0f:85:32:5a:
                    26:01:6e:1f:f3:7e:83:f4:60:38:77:bc:90:bc:e9:
                    26:5e:af:82:e6:93:ae:db:d4:09:c2:2c:42:a7:b2:
                    69:48:76:16:1b:c0:b4:89:ec:f8:d5:cb:7c:ff:bb:
                    8f:1b:18:c7:7f:99:e8:38:6d:e3:32:72:9e:59:70:
                    4f:0d:8d:1a:9d:13:d5:04:8b:02:96:09:4d:cd:0e:
                    0e:ea:96:76:1b:0d:0f:64:5c:86:e2:58:32:3b:69:
                    cf:41:66:d3:65:5d:79:48:62:d6:3a:21:c4:68:c4:
                    76:fe:40:97:8e:4b:e9:b1:96:2e:81:42:0d:06:ca:
                    2a:92:d0:b2:41:be:94:3f:07:6c:fe:e0:d6:4c:b3:
                    1d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:EC:3D:8C:37:00:99:8E:7F:DB:D1:D5:8C:0C:DD:84:4B:C0:2A:CA
            X509v3 Authority Key Identifier:
                keyid:93:56:4C:C3:3E:E5:30:01:90:1A:2F:98:49:EA:29:5D:1A:0C:EC:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C55JUPHuygNVCyp7bD8metjsoLPrDT5BQAfgE7FrjbXk/0/93564CC33EE53001901A2F9849EA295D1A0CECD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93564CC33EE53001901A2F9849EA295D1A0CECD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C55JUPHuygNVCyp7bD8metjsoLPrDT5BQAfgE7FrjbXk/0/3133312e3136312e3131362e302f32322d3234203d3e20323730373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:02:de:6b:f5:93:82:ee:92:28:0f:73:1b:b1:30:40:11:4d:
         29:6a:d4:10:b5:24:a0:e1:95:46:12:9a:cf:75:ef:5c:11:e0:
         6a:de:03:30:1a:80:bd:e8:6d:d5:31:21:ed:bd:a1:44:d7:20:
         ba:28:46:e1:05:d0:32:8c:d1:4a:d9:3b:cb:78:bb:23:4d:9f:
         2c:0a:ea:47:18:c6:f5:a6:ff:57:21:60:76:90:4c:dc:54:55:
         e6:c9:65:b9:92:53:23:25:b6:29:69:e4:0f:8f:e8:06:1e:45:
         7f:b5:55:80:88:e5:ce:91:f5:aa:15:c9:d0:4b:fa:c4:0c:65:
         ff:ae:0f:a5:13:ed:42:8b:5e:2f:3e:74:fc:de:fd:84:2f:d4:
         d7:15:6b:01:bb:95:53:18:79:6d:4e:79:80:05:61:d6:8c:99:
         6a:2e:b4:67:40:0d:35:23:95:05:69:e3:37:c2:32:96:90:c2:
         04:0b:cd:e9:9a:f3:b9:da:f1:13:c6:50:4a:a7:71:c3:90:9b:
         5f:91:76:77:53:8b:7f:09:be:28:53:69:21:56:3c:84:0c:cc:
         6f:b3:37:ff:8b:b2:ff:0d:15:df:68:4f:f0:6f:23:af:2e:be:
         46:a1:99:86:e4:8f:f2:cb:32:8e:df:2c:cd:b2:35:a1:d7:95:
         b3:72:94:bd
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUTIiBg6cpsff+YvEVnZtvWC+7NGQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTM1NjRDQzMzRUU1MzAwMTkwMUEyRjk4NDlFQTI5NUQx
QTBDRUNENTAeFw0yNTA2MDcxMjQ4MzRaFw0yNjA2MDYxMjUzMzRaMDMxMTAvBgNV
BAMTKDQwRUMzRDhDMzcwMDk5OEU3RkRCRDFENThDMENERDg0NEJDMDJBQ0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBc1M9H9ImK5mWuDluZ37m1qGT
T1UZaHmw4+tfpWdY7WwHFAx37Zsk6nR5g/yJ44QlVHEKfw6WOqg2kq4fIDdyeJrr
ga+GDmqaV3HS2B46XPIP7dDWjlI1QXjSIhkfO435MICRCtE8ygOlj60MsyUVGA6a
D4UyWiYBbh/zfoP0YDh3vJC86SZer4Lmk67b1AnCLEKnsmlIdhYbwLSJ7PjVy3z/
u48bGMd/meg4beMycp5ZcE8NjRqdE9UEiwKWCU3NDg7qlnYbDQ9kXIbiWDI7ac9B
ZtNlXXlIYtY6IcRoxHb+QJeOS+mxli6BQg0GyiqS0LJBvpQ/B2z+4NZMsx2ZAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUQOw9jDcAmY5/29HVjAzdhEvAKsowHwYDVR0j
BBgwFoAUk1ZMwz7lMAGQGi+YSeopXRoM7NUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzU1SlVQSHV5Z05WQ3lwN2JEOG1ldGpzb0xQckRUNUJRQWZnRTdGcmpi
WGsvMC85MzU2NENDMzNFRTUzMDAxOTAxQTJGOTg0OUVBMjk1RDFBMENFQ0Q1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkzNTY0Q0MzM0VFNTMwMDE5
MDFBMkY5ODQ5RUEyOTVEMUEwQ0VDRDUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M1NUpVUEh1eWdOVkN5cDdiRDhtZXRqc29MUHJEVDVCUUFmZ0U3RnJqYlhrLzAv
MzEzMzMxMmUzMTM2MzEyZTMxMzEzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzczMDM3MzczNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAoOhdDANBgkqhkiG9w0BAQsFAAOCAQEAUALe
a/WTgu6SKA9zG7EwQBFNKWrUELUkoOGVRhKaz3XvXBHgat4DMBqAveht1TEh7b2h
RNcguihG4QXQMozRStk7y3i7I02fLArqRxjG9ab/VyFgdpBM3FRV5slluZJTIyW2
KWnkD4/oBh5Ff7VVgIjlzpH1qhXJ0Ev6xAxl/64PpRPtQoteLz50/N79hC/U1xVr
AbuVUxh5bU55gAVh1oyZai60Z0ANNSOVBWnjN8IylpDCBAvN6ZrzudrxE8ZQSqdx
w5CbX5F2d1OLfwm+KFNpIVY8hAzMb7M3/4uy/w0V32hP8G8jry6+RqGZhuSP8ssy
jt8szbI1odeVs3KUvQ==
-----END CERTIFICATE-----
Generated at Thu Jun 12 14:31:55 2025 by rpki-client