Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/3133312e37322e3137322e302f32322d3234203d3e20323632393933.roa
File:                     3133312e37322e3137322e302f32322d3234203d3e20323632393933.roa (raw, json)
Hash identifier:          PsRtW7mHTyutO0DxQQGdWmoyYKa6pQXrN/ynckkhhkg=
Subject key identifier:   CE:D8:77:AE:3B:8F:87:97:E5:5C:DE:D7:5F:A6:59:EA:2A:5A:E1:0C
Certificate issuer:       /CN=21F41A1DE6B061FF1919072AF54DAF54380B0F27
Certificate serial:       47BBCC186BF3A71C3467B80EBDA8AD42BBC8A165
Authority key identifier: 21:F4:1A:1D:E6:B0:61:FF:19:19:07:2A:F5:4D:AF:54:38:0B:0F:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F41A1DE6B061FF1919072AF54DAF54380B0F27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/3133312e37322e3137322e302f32322d3234203d3e20323632393933.roa
Signing time:             Wed 23 Jul 2025 12:08:05 +0000
ROA not before:           Wed 23 Jul 2025 12:03:05 +0000
ROA not after:            Wed 22 Jul 2026 12:08:05 +0000
asID:                     262993
IP address blocks:        131.72.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/21F41A1DE6B061FF1919072AF54DAF54380B0F27.crl
                          rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/21F41A1DE6B061FF1919072AF54DAF54380B0F27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F41A1DE6B061FF1919072AF54DAF54380B0F27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 17:55:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:bb:cc:18:6b:f3:a7:1c:34:67:b8:0e:bd:a8:ad:42:bb:c8:a1:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21F41A1DE6B061FF1919072AF54DAF54380B0F27
        Validity
            Not Before: Jul 23 12:03:05 2025 GMT
            Not After : Jul 22 12:08:05 2026 GMT
        Subject: CN=CED877AE3B8F8797E55CDED75FA659EA2A5AE10C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:90:fd:1d:91:f9:96:ff:26:c6:d1:31:b6:f2:
                    c7:27:9b:e4:01:0c:e2:fd:c3:f9:d3:b2:8d:ba:99:
                    15:9e:ae:86:c4:63:0b:9f:fb:dd:1c:a2:06:8c:e1:
                    f1:85:a7:f9:64:da:17:62:38:5a:83:d0:92:84:71:
                    b5:cf:4a:46:5b:73:19:62:5d:ca:29:53:60:08:e6:
                    f8:a0:74:70:f4:6b:0e:8c:fd:c9:59:64:b1:f0:ec:
                    3e:28:d1:6e:f9:ab:76:9d:1a:7e:17:2d:e0:43:d0:
                    1e:49:05:df:b8:2a:ea:83:bb:b3:1f:f6:0b:63:6d:
                    fa:b3:69:b2:1a:aa:1a:77:e6:f5:c9:1c:05:38:64:
                    ac:a3:79:08:57:d8:9a:81:b9:6f:96:9a:3f:de:9c:
                    65:99:c0:77:e5:82:3c:7b:09:29:f9:7b:04:f6:55:
                    ad:df:d3:23:94:10:9c:20:5d:83:33:9d:f9:64:ed:
                    86:d9:5c:07:8e:11:6b:ba:73:78:1b:d2:fc:38:96:
                    56:19:36:ba:fe:2b:2e:26:49:3b:2a:39:52:e7:51:
                    d6:84:d4:f7:84:50:8f:48:72:da:cc:52:e7:3d:6b:
                    38:a8:3f:69:3c:cc:65:47:78:1e:4b:cb:44:d3:f3:
                    f0:27:2d:d9:24:11:01:d8:59:ed:91:6a:0f:c0:d2:
                    b7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:D8:77:AE:3B:8F:87:97:E5:5C:DE:D7:5F:A6:59:EA:2A:5A:E1:0C
            X509v3 Authority Key Identifier:
                keyid:21:F4:1A:1D:E6:B0:61:FF:19:19:07:2A:F5:4D:AF:54:38:0B:0F:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/21F41A1DE6B061FF1919072AF54DAF54380B0F27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F41A1DE6B061FF1919072AF54DAF54380B0F27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/3133312e37322e3137322e302f32322d3234203d3e20323632393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:d1:ca:af:81:9f:ee:5e:42:31:a1:1b:2c:81:c8:24:0d:7c:
         61:55:68:81:29:84:24:50:ca:02:5d:2b:73:47:e5:76:a1:be:
         f2:23:2d:ca:b4:fc:93:ed:f4:98:aa:33:76:ab:6b:b2:d2:cf:
         80:26:06:5f:02:6a:f5:2e:52:ab:63:96:76:1a:e0:df:d4:9d:
         e5:44:24:e2:a1:40:b9:5f:e4:4c:dc:7c:77:78:3d:47:0b:a6:
         d9:78:56:4b:c7:1c:86:46:d0:55:f2:07:ca:4e:a5:ce:e0:ad:
         69:06:6a:e9:b1:17:0a:42:d1:33:0f:9d:a8:ad:47:0f:d4:d2:
         98:c6:f3:ea:0b:42:aa:f7:d1:7b:1a:98:fd:09:46:e8:85:20:
         6f:fb:dc:c1:0a:e4:fd:b5:2e:f8:c5:c7:8f:2d:fd:2b:5c:59:
         2a:bf:34:be:24:89:35:49:4a:be:c1:81:8a:72:46:8c:ff:9b:
         f5:1c:bd:da:1d:b6:a2:fc:db:58:5e:0c:61:31:b4:1f:14:b2:
         62:ba:ba:f2:4c:66:ed:42:2c:c6:30:34:d5:d2:54:89:5b:33:
         97:47:f4:31:06:71:19:ed:a6:32:2a:3f:db:9a:51:82:43:3e:
         ee:99:9e:92:5d:a6:2d:45:72:04:72:b3:62:d8:75:06:52:58:
         4e:c8:d0:17
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUR7vMGGvzpxw0Z7gOvaitQrvIoWUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjFGNDFBMURFNkIwNjFGRjE5MTkwNzJBRjU0REFGNTQz
ODBCMEYyNzAeFw0yNTA3MjMxMjAzMDVaFw0yNjA3MjIxMjA4MDVaMDMxMTAvBgNV
BAMTKENFRDg3N0FFM0I4Rjg3OTdFNTVDREVENzVGQTY1OUVBMkE1QUUxMEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAkP0dkfmW/ybG0TG28scnm+QB
DOL9w/nTso26mRWerobEYwuf+90cogaM4fGFp/lk2hdiOFqD0JKEcbXPSkZbcxli
XcopU2AI5vigdHD0aw6M/clZZLHw7D4o0W75q3adGn4XLeBD0B5JBd+4KuqDu7Mf
9gtjbfqzabIaqhp35vXJHAU4ZKyjeQhX2JqBuW+Wmj/enGWZwHflgjx7CSn5ewT2
Va3f0yOUEJwgXYMznflk7YbZXAeOEWu6c3gb0vw4llYZNrr+Ky4mSTsqOVLnUdaE
1PeEUI9IctrMUuc9azioP2k8zGVHeB5Ly0TT8/AnLdkkEQHYWe2Rag/A0rdnAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUzth3rjuPh5flXN7XX6ZZ6ipa4QwwHwYDVR0j
BBgwFoAUIfQaHeawYf8ZGQcq9U2vVDgLDycwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby93ZU5OTkFIMlFlMzEzOHVCZFZlR00xdnpZTERmZVhqM1ExaTNFQXQ1dVdt
LzAvMjFGNDFBMURFNkIwNjFGRjE5MTkwNzJBRjU0REFGNTQzODBCMEYyNy5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yMUY0MUExREU2QjA2MUZGMTkx
OTA3MkFGNTREQUY1NDM4MEIwRjI3LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby93
ZU5OTkFIMlFlMzEzOHVCZFZlR00xdnpZTERmZVhqM1ExaTNFQXQ1dVdtLzAvMzEz
MzMxMmUzNzMyMmUzMTM3MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzIz
OTM5MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAKDSKwwDQYJKoZIhvcNAQELBQADggEBAGfRyq+Bn+5e
QjGhGyyByCQNfGFVaIEphCRQygJdK3NH5XahvvIjLcq0/JPt9JiqM3ara7LSz4Am
Bl8CavUuUqtjlnYa4N/UneVEJOKhQLlf5EzcfHd4PUcLptl4VkvHHIZG0FXyB8pO
pc7grWkGaumxFwpC0TMPnaitRw/U0pjG8+oLQqr30XsamP0JRuiFIG/73MEK5P21
LvjFx48t/StcWSq/NL4kiTVJSr7BgYpyRoz/m/UcvdodtqL821heDGExtB8UsmK6
uvJMZu1CLMYwNNXSVIlbM5dH9DEGcRntpjIqP9uaUYJDPu6ZnpJdpi1FcgRys2LY
dQZSWE7I0Bc=
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:28:48 2025 by rpki-client