Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/0/3133312e37322e34342e302f32342d3332203d3e203631373132.roa
File:                     3133312e37322e34342e302f32342d3332203d3e203631373132.roa (raw, json)
Hash identifier:          s41jERMT1mtefJTpeQl05h1YIYklRovCrixSptyBmyo=
Subject key identifier:   65:F4:4C:EE:77:DA:A4:18:A1:32:FB:63:B4:7B:90:F2:5F:B2:D7:92
Certificate issuer:       /CN=1B4F7D2DBF96AEDC02CE1B0193F964E626C18DC4
Certificate serial:       4906AAAC2903D218E97FE018560D9E8596B1CF49
Authority key identifier: 1B:4F:7D:2D:BF:96:AE:DC:02:CE:1B:01:93:F9:64:E6:26:C1:8D:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B4F7D2DBF96AEDC02CE1B0193F964E626C18DC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/0/3133312e37322e34342e302f32342d3332203d3e203631373132.roa
Signing time:             Sat 01 Mar 2025 12:40:20 +0000
ROA not before:           Sat 01 Mar 2025 12:35:20 +0000
ROA not after:            Sat 28 Feb 2026 12:40:20 +0000
asID:                     61712
IP address blocks:        131.72.44.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/0/1B4F7D2DBF96AEDC02CE1B0193F964E626C18DC4.crl
                          rsync://rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/0/1B4F7D2DBF96AEDC02CE1B0193F964E626C18DC4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B4F7D2DBF96AEDC02CE1B0193F964E626C18DC4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 02:25:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:06:aa:ac:29:03:d2:18:e9:7f:e0:18:56:0d:9e:85:96:b1:cf:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B4F7D2DBF96AEDC02CE1B0193F964E626C18DC4
        Validity
            Not Before: Mar  1 12:35:20 2025 GMT
            Not After : Feb 28 12:40:20 2026 GMT
        Subject: CN=65F44CEE77DAA418A132FB63B47B90F25FB2D792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:18:16:0d:c1:47:a2:fc:e9:e5:e1:a7:f4:15:
                    52:ad:ed:e5:34:3a:fa:bb:35:f8:08:a0:13:2b:f5:
                    15:77:e3:4f:af:f8:4d:6f:df:33:58:7a:6d:01:45:
                    8c:e9:21:08:32:27:34:79:d3:95:0a:70:3a:41:ab:
                    8d:14:3a:58:fb:ec:05:78:71:a5:69:40:c5:04:aa:
                    9c:cc:8c:c2:62:45:85:1d:79:87:2a:70:14:da:43:
                    5d:35:06:e8:db:5a:11:c3:2b:9a:d2:c3:75:9d:32:
                    af:5b:3a:39:fc:e8:97:6e:84:b2:8b:00:ef:e1:5b:
                    9e:a8:1f:42:c0:e0:96:a1:27:4e:f1:71:12:c3:38:
                    c7:ea:d0:59:91:d6:d9:6f:7e:aa:35:6e:7d:d1:05:
                    69:c4:e1:ab:67:95:d2:a2:f2:d3:bb:5e:1a:f7:01:
                    6a:82:c9:6b:c7:b0:f7:ce:8f:ce:3e:b3:3b:3b:d7:
                    c2:87:ab:1c:3a:bb:c4:df:9c:e2:c5:12:54:8c:ce:
                    06:14:26:4a:27:bb:d4:78:09:1b:81:89:ca:a5:f8:
                    3f:8f:7d:1d:53:11:6c:9a:c8:12:90:a2:4f:a1:16:
                    92:4f:57:30:ed:3e:12:d6:ec:b7:e5:59:64:8f:8c:
                    f5:3f:d7:8d:72:96:40:6e:ab:16:11:ec:f0:7e:f4:
                    8d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:F4:4C:EE:77:DA:A4:18:A1:32:FB:63:B4:7B:90:F2:5F:B2:D7:92
            X509v3 Authority Key Identifier:
                keyid:1B:4F:7D:2D:BF:96:AE:DC:02:CE:1B:01:93:F9:64:E6:26:C1:8D:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/0/1B4F7D2DBF96AEDC02CE1B0193F964E626C18DC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B4F7D2DBF96AEDC02CE1B0193F964E626C18DC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/0/3133312e37322e34342e302f32342d3332203d3e203631373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:69:51:10:0f:da:83:7c:38:5e:1e:34:45:52:8c:3d:cf:2f:
         0c:ed:e7:fc:95:35:29:0c:26:6a:15:3f:f0:f8:ce:ed:dd:5b:
         e7:d1:94:85:46:cb:88:73:06:5b:85:bd:eb:9a:de:ef:28:55:
         cc:ef:29:60:d9:2c:56:2d:a8:3b:4d:07:90:6d:21:9c:6c:b4:
         ca:ef:35:40:bc:a2:d7:6c:2b:f9:7c:05:38:fb:3f:65:ac:f4:
         bd:c0:e1:fa:09:73:d1:d3:3d:49:5d:2f:f0:8a:08:d1:f7:1b:
         b1:8c:a6:6d:b0:2a:17:d4:56:06:fd:26:cf:98:88:45:6d:fb:
         65:9a:a9:1a:df:4c:5c:e3:3a:94:35:c7:10:93:8e:e0:56:2e:
         44:7f:87:73:f4:b9:92:e0:60:2a:76:12:f2:4b:19:6a:06:a2:
         82:85:c4:18:6a:37:13:f3:08:c0:6f:9a:fe:e2:54:37:38:b8:
         52:c4:62:46:7d:7e:a8:a1:5b:4c:36:97:37:64:16:ca:6f:69:
         6e:79:6e:a9:af:ef:b0:3c:b1:30:c7:50:de:53:d9:f1:d1:e8:
         87:26:e7:f9:57:a7:59:b3:f3:b7:e4:90:04:e3:8e:c6:93:59:
         0c:70:d5:d1:cf:60:03:07:86:d4:c7:3c:ad:cb:ba:64:44:7a:
         f7:29:ba:16
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUSQaqrCkD0hjpf+AYVg2ehZaxz0kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUI0RjdEMkRCRjk2QUVEQzAyQ0UxQjAxOTNGOTY0RTYy
NkMxOERDNDAeFw0yNTAzMDExMjM1MjBaFw0yNjAyMjgxMjQwMjBaMDMxMTAvBgNV
BAMTKDY1RjQ0Q0VFNzdEQUE0MThBMTMyRkI2M0I0N0I5MEYyNUZCMkQ3OTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHGBYNwUei/Onl4af0FVKt7eU0
Ovq7NfgIoBMr9RV340+v+E1v3zNYem0BRYzpIQgyJzR505UKcDpBq40UOlj77AV4
caVpQMUEqpzMjMJiRYUdeYcqcBTaQ101BujbWhHDK5rSw3WdMq9bOjn86JduhLKL
AO/hW56oH0LA4JahJ07xcRLDOMfq0FmR1tlvfqo1bn3RBWnE4atnldKi8tO7Xhr3
AWqCyWvHsPfOj84+szs718KHqxw6u8TfnOLFElSMzgYUJkonu9R4CRuBicql+D+P
fR1TEWyayBKQok+hFpJPVzDtPhLW7LflWWSPjPU/141ylkBuqxYR7PB+9I2PAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUZfRM7nfapBihMvtjtHuQ8l+y15IwHwYDVR0j
BBgwFoAUG099Lb+WrtwCzhsBk/lk5ibBjcQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjV4djVmOHZzdWhvV1l0c3NxcW9lS1M3ODV2WW9Fa2Y0eWZEam5HN2ZM
eGIvMC8xQjRGN0QyREJGOTZBRURDMDJDRTFCMDE5M0Y5NjRFNjI2QzE4REM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFCNEY3RDJEQkY5NkFFREMw
MkNFMUIwMTkzRjk2NEU2MjZDMThEQzQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzI1eHY1Zjh2c3Vob1dZdHNzcXFvZUtTNzg1dllvRWtmNHlmRGpuRzdmTHhiLzAv
MzEzMzMxMmUzNzMyMmUzNDM0MmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzYzMTM3
MzEzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAINILDANBgkqhkiG9w0BAQsFAAOCAQEAhGlREA/ag3w4
Xh40RVKMPc8vDO3n/JU1KQwmahU/8PjO7d1b59GUhUbLiHMGW4W965re7yhVzO8p
YNksVi2oO00HkG0hnGy0yu81QLyi12wr+XwFOPs/Zaz0vcDh+glz0dM9SV0v8IoI
0fcbsYymbbAqF9RWBv0mz5iIRW37ZZqpGt9MXOM6lDXHEJOO4FYuRH+Hc/S5kuBg
KnYS8ksZagaigoXEGGo3E/MIwG+a/uJUNzi4UsRiRn1+qKFbTDaXN2QWym9pbnlu
qa/vsDyxMMdQ3lPZ8dHohybn+VenWbPzt+SQBOOOxpNZDHDV0c9gAweG1Mc8rcu6
ZER69ym6Fg==
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:47:52 2025 by rpki-client