Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/3133312e3232312e3138342e302f32332d3233203d3e20323634343235.roa
File:                     3133312e3232312e3138342e302f32332d3233203d3e20323634343235.roa (raw, json)
Hash identifier:          fSTDs8YDPsxdA5uxNNX/gPcN+eM3m0zmIMsiExYJmVc=
Subject key identifier:   29:73:79:71:A7:BB:50:E1:86:6A:67:CF:4D:DB:F9:E4:72:60:83:97
Certificate issuer:       /CN=FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F
Certificate serial:       635803263F894F4671B097C04936EE9CC1CC4407
Authority key identifier: FA:1F:E3:BB:76:D2:2F:9B:57:6A:C2:40:FA:8E:05:0A:8D:C9:4A:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/3133312e3232312e3138342e302f32332d3233203d3e20323634343235.roa
Signing time:             Mon 07 Jul 2025 15:19:47 +0000
ROA not before:           Mon 07 Jul 2025 15:14:47 +0000
ROA not after:            Mon 06 Jul 2026 15:19:47 +0000
asID:                     264425
IP address blocks:        131.221.184.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.crl
                          rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Jul 2025 21:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:58:03:26:3f:89:4f:46:71:b0:97:c0:49:36:ee:9c:c1:cc:44:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F
        Validity
            Not Before: Jul  7 15:14:47 2025 GMT
            Not After : Jul  6 15:19:47 2026 GMT
        Subject: CN=29737971A7BB50E1866A67CF4DDBF9E472608397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:7a:c9:7e:d5:12:98:ac:b1:40:9d:7b:9d:10:
                    e7:2a:03:61:f0:0d:69:df:de:e1:09:c0:b6:40:30:
                    2d:c5:b6:fe:d8:2b:be:75:e8:a8:67:0c:1d:0a:33:
                    9c:a4:9f:23:cf:aa:66:32:58:ae:6c:21:88:23:76:
                    e1:c0:d4:b0:93:60:82:fc:33:7d:c9:5b:a4:76:dd:
                    19:95:14:cc:5a:74:41:a6:5e:9d:49:48:81:73:e5:
                    a1:c2:db:dd:a4:89:81:9d:9f:65:8f:ed:71:c5:fd:
                    2a:9c:bc:06:d9:aa:5a:8f:37:84:5a:9e:08:6b:f5:
                    72:36:be:fa:33:18:82:a3:5f:45:0e:f9:b8:d0:7e:
                    10:fd:fa:13:a4:95:64:7f:8c:67:c2:a3:b5:70:36:
                    26:c7:da:c2:9d:17:1d:a2:93:1d:60:38:e1:9f:c3:
                    8d:d2:89:cc:9f:d6:f0:f1:c7:ae:f1:09:4c:17:ec:
                    47:7a:5a:04:15:9c:66:5e:f1:9d:aa:26:fc:f8:c9:
                    04:b8:0f:14:aa:56:2b:6d:eb:81:8b:fd:ef:65:5d:
                    0c:9d:d4:6d:0a:24:34:d0:e7:7e:7c:11:35:b1:07:
                    c6:b3:74:2a:d0:21:51:59:ee:f1:62:27:0a:91:34:
                    a1:8d:b1:2d:79:0e:a2:83:09:ee:9e:8b:6d:69:a0:
                    4e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:73:79:71:A7:BB:50:E1:86:6A:67:CF:4D:DB:F9:E4:72:60:83:97
            X509v3 Authority Key Identifier:
                keyid:FA:1F:E3:BB:76:D2:2F:9B:57:6A:C2:40:FA:8E:05:0A:8D:C9:4A:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/3133312e3232312e3138342e302f32332d3233203d3e20323634343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:9f:d4:b9:67:01:2b:b4:52:83:bf:2e:1a:33:58:c5:fb:ef:
         f9:83:f5:e4:15:4e:d7:24:79:b8:bb:24:b1:1a:89:86:e9:cb:
         11:fd:a5:3d:18:8b:8f:57:d5:08:ea:59:1f:91:ba:ac:fa:2e:
         5e:91:3c:c3:e1:4b:1e:88:a4:0a:6e:a8:55:d2:1e:04:4b:5e:
         e0:e8:67:d3:29:00:0d:f4:34:1d:a1:4e:25:d5:36:dc:5f:07:
         21:50:d4:5d:a2:46:c2:0c:43:5f:87:8c:31:c1:af:6a:7b:77:
         1b:b2:6c:18:2f:9a:48:48:75:26:19:96:a3:bd:06:9e:4a:2b:
         f4:df:b8:73:d5:51:57:42:f1:a3:fe:95:50:d6:1c:4f:1e:aa:
         ee:6f:2b:73:40:23:e5:61:df:05:ed:fa:57:2a:ff:a2:4c:f4:
         6d:f8:58:b6:1a:6d:83:60:5f:07:e5:f7:7e:6e:cb:5f:c6:12:
         62:fd:7d:71:37:3d:01:c9:ef:29:14:53:50:a9:b7:a3:91:34:
         41:09:b8:ff:47:e1:31:e1:fb:1c:c0:78:9e:ba:61:91:f7:bf:
         c3:f3:bb:06:aa:88:79:e7:d1:64:6e:5d:ec:96:1d:a1:d8:eb:
         9f:0b:b0:75:5f:c4:4e:11:11:f4:f1:82:7e:49:4a:43:32:cd:
         bb:66:76:24
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUY1gDJj+JT0ZxsJfASTbunMHMRAcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkExRkUzQkI3NkQyMkY5QjU3NkFDMjQwRkE4RTA1MEE4
REM5NEE5RjAeFw0yNTA3MDcxNTE0NDdaFw0yNjA3MDYxNTE5NDdaMDMxMTAvBgNV
BAMTKDI5NzM3OTcxQTdCQjUwRTE4NjZBNjdDRjREREJGOUU0NzI2MDgzOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuesl+1RKYrLFAnXudEOcqA2Hw
DWnf3uEJwLZAMC3Ftv7YK7516KhnDB0KM5yknyPPqmYyWK5sIYgjduHA1LCTYIL8
M33JW6R23RmVFMxadEGmXp1JSIFz5aHC292kiYGdn2WP7XHF/SqcvAbZqlqPN4Ra
nghr9XI2vvozGIKjX0UO+bjQfhD9+hOklWR/jGfCo7VwNibH2sKdFx2ikx1gOOGf
w43Sicyf1vDxx67xCUwX7Ed6WgQVnGZe8Z2qJvz4yQS4DxSqVitt64GL/e9lXQyd
1G0KJDTQ5358ETWxB8azdCrQIVFZ7vFiJwqRNKGNsS15DqKDCe6ei21poE4NAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUKXN5cae7UOGGamfPTdv55HJgg5cwHwYDVR0j
BBgwFoAU+h/ju3bSL5tXasJA+o4FCo3JSp8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0dSTExtTmg3TjJweGdKNExvWDhHdDFiY2czeXFKV1ZSNUVxNUxYbVpL
NGQvMC9GQTFGRTNCQjc2RDIyRjlCNTc2QUMyNDBGQThFMDUwQThEQzk0QTlGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZBMUZFM0JCNzZEMjJGOUI1
NzZBQzI0MEZBOEUwNTBBOERDOTRBOUYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NHUkxMbU5oN04ycHhnSjRMb1g4R3QxYmNnM3lxSldWUjVFcTVMWG1aSzRkLzAv
MzEzMzMxMmUzMjMyMzEyZTMxMzgzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzNDM0MzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAYPduDANBgkqhkiG9w0BAQsFAAOCAQEAnJ/U
uWcBK7RSg78uGjNYxfvv+YP15BVO1yR5uLsksRqJhunLEf2lPRiLj1fVCOpZH5G6
rPouXpE8w+FLHoikCm6oVdIeBEte4Ohn0ykADfQ0HaFOJdU23F8HIVDUXaJGwgxD
X4eMMcGvant3G7JsGC+aSEh1JhmWo70Gnkor9N+4c9VRV0Lxo/6VUNYcTx6q7m8r
c0Aj5WHfBe36Vyr/okz0bfhYthptg2BfB+X3fm7LX8YSYv19cTc9AcnvKRRTUKm3
o5E0QQm4/0fhMeH7HMB4nrphkfe/w/O7BqqIeefRZG5d7JYdodjrnwuwdV/EThER
9PGCfklKQzLNu2Z2JA==
-----END CERTIFICATE-----
Generated at Fri Jul 25 00:25:24 2025 by rpki-client