Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/1/3133312e302e3138302e302f32322d3234203d3e203631373037.roa
File:                     3133312e302e3138302e302f32322d3234203d3e203631373037.roa (raw, json)
Hash identifier:          M1dK/49vDOuK8c8Ep/sx9EegybPeapD1nDYQCHcRFzM=
Subject key identifier:   C0:59:2A:53:1F:A5:A3:32:E5:6A:F7:5A:22:4A:82:D6:51:08:C9:89
Certificate issuer:       /CN=7742143BD14B1FB2C82A2CE2FD5AFAE28BCC8759
Certificate serial:       6FE6EBBD1A22DC72D91E7994FF61F3DC5E9BAD51
Authority key identifier: 77:42:14:3B:D1:4B:1F:B2:C8:2A:2C:E2:FD:5A:FA:E2:8B:CC:87:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7742143BD14B1FB2C82A2CE2FD5AFAE28BCC8759.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/1/3133312e302e3138302e302f32322d3234203d3e203631373037.roa
Signing time:             Thu 06 Mar 2025 00:33:06 +0000
ROA not before:           Thu 06 Mar 2025 00:28:06 +0000
ROA not after:            Thu 05 Mar 2026 00:33:06 +0000
asID:                     61707
IP address blocks:        131.0.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/1/7742143BD14B1FB2C82A2CE2FD5AFAE28BCC8759.crl
                          rsync://rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/1/7742143BD14B1FB2C82A2CE2FD5AFAE28BCC8759.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7742143BD14B1FB2C82A2CE2FD5AFAE28BCC8759.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 08:15:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:e6:eb:bd:1a:22:dc:72:d9:1e:79:94:ff:61:f3:dc:5e:9b:ad:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7742143BD14B1FB2C82A2CE2FD5AFAE28BCC8759
        Validity
            Not Before: Mar  6 00:28:06 2025 GMT
            Not After : Mar  5 00:33:06 2026 GMT
        Subject: CN=C0592A531FA5A332E56AF75A224A82D65108C989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:65:fa:e0:0c:d8:52:3c:7b:0e:c0:49:07:e2:
                    2e:4d:23:e4:9f:08:41:9d:47:f5:31:1a:0f:7a:b3:
                    ad:b4:53:93:98:62:03:cb:83:5c:76:fb:83:23:3d:
                    4a:53:70:95:05:14:5e:61:03:f1:11:7c:e8:46:de:
                    6c:bc:c1:64:7c:18:bc:87:dc:f8:b0:85:bb:4e:b8:
                    5e:4d:b0:e1:b5:bf:fe:c3:47:e1:ef:ab:d7:ac:0e:
                    51:ee:32:9c:4d:a1:ee:02:8b:ec:63:dc:9c:db:08:
                    e6:21:43:04:ca:a0:11:25:b1:5c:61:55:f2:74:bc:
                    57:ab:72:a4:06:30:32:72:13:c1:10:fa:cc:19:0b:
                    25:f5:f8:8a:61:64:88:d9:20:09:f0:64:63:89:71:
                    68:aa:60:8c:d9:ca:90:0e:e9:c2:01:c1:84:2d:a7:
                    c9:ae:21:27:74:1e:28:16:9d:ca:92:32:23:07:f6:
                    7f:ba:8a:71:4e:86:c0:da:eb:82:9e:01:2b:b2:e6:
                    32:25:03:dc:dd:31:fa:38:f2:c3:fe:5f:ff:74:c8:
                    56:f8:a2:b1:c7:0c:8e:c5:52:68:1c:8b:01:23:52:
                    7a:ab:5a:bd:6c:18:67:e5:9a:1e:55:75:47:1e:b9:
                    fe:8d:bc:d8:f6:13:b2:ab:30:0a:89:9f:50:bb:eb:
                    1f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:59:2A:53:1F:A5:A3:32:E5:6A:F7:5A:22:4A:82:D6:51:08:C9:89
            X509v3 Authority Key Identifier:
                keyid:77:42:14:3B:D1:4B:1F:B2:C8:2A:2C:E2:FD:5A:FA:E2:8B:CC:87:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/1/7742143BD14B1FB2C82A2CE2FD5AFAE28BCC8759.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7742143BD14B1FB2C82A2CE2FD5AFAE28BCC8759.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/1/3133312e302e3138302e302f32322d3234203d3e203631373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:df:bf:b1:92:ae:d8:fa:d7:ab:a7:04:d9:cf:99:1c:d9:f0:
         90:6c:a2:fc:a0:ed:a7:0b:ac:ac:2c:37:ee:35:43:90:4d:c4:
         f0:99:bd:dd:e7:4d:95:b4:45:35:03:13:32:ee:f3:0b:97:2c:
         4b:3f:2f:fa:4d:9e:41:e7:c2:73:5d:ac:9d:e4:8b:f0:45:b7:
         79:0e:3c:5d:0d:3a:33:5e:b1:f5:ca:43:13:f8:4c:34:fe:9d:
         68:1f:75:9e:e8:7a:fd:af:5d:eb:dd:f4:f9:54:f6:79:9e:ae:
         f9:cb:11:c1:25:f9:20:74:39:64:5b:d2:88:44:4e:ce:f3:4e:
         95:93:5d:ab:23:5f:0e:df:af:24:17:ce:1e:c8:1b:73:38:84:
         77:f0:3b:cc:ff:5d:ca:62:18:6f:46:ff:2b:7c:aa:c6:e3:a5:
         0b:39:fc:59:ca:11:d5:9b:ad:d4:2b:8d:72:c6:4d:f7:e0:e8:
         83:49:10:ca:44:7e:d6:06:93:1a:07:38:5e:4d:01:b5:a1:17:
         d6:23:d1:87:36:38:bc:a6:a7:5b:4a:2e:ae:bb:fa:8a:f7:81:
         50:ff:fb:7a:0b:84:c4:a3:e7:b1:91:2b:1b:aa:5c:e6:cb:1b:
         98:8e:0a:45:a7:6e:fd:c2:44:e3:e9:67:aa:61:93:1f:22:47:
         35:ea:80:07
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUb+brvRoi3HLZHnmU/2Hz3F6brVEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzc0MjE0M0JEMTRCMUZCMkM4MkEyQ0UyRkQ1QUZBRTI4
QkNDODc1OTAeFw0yNTAzMDYwMDI4MDZaFw0yNjAzMDUwMDMzMDZaMDMxMTAvBgNV
BAMTKEMwNTkyQTUzMUZBNUEzMzJFNTZBRjc1QTIyNEE4MkQ2NTEwOEM5ODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9ZfrgDNhSPHsOwEkH4i5NI+Sf
CEGdR/UxGg96s620U5OYYgPLg1x2+4MjPUpTcJUFFF5hA/ERfOhG3my8wWR8GLyH
3PiwhbtOuF5NsOG1v/7DR+Hvq9esDlHuMpxNoe4Ci+xj3JzbCOYhQwTKoBElsVxh
VfJ0vFercqQGMDJyE8EQ+swZCyX1+IphZIjZIAnwZGOJcWiqYIzZypAO6cIBwYQt
p8muISd0HigWncqSMiMH9n+6inFOhsDa64KeASuy5jIlA9zdMfo48sP+X/90yFb4
orHHDI7FUmgciwEjUnqrWr1sGGflmh5VdUceuf6NvNj2E7KrMAqJn1C76x8tAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUwFkqUx+lozLlavdaIkqC1lEIyYkwHwYDVR0j
BBgwFoAUd0IUO9FLH7LIKizi/Vr64ovMh1kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2NUTGdKdDU1aGdKNTlncW15ekoyUEs4VkhER216TlV4UER1QjllS3pn
WHQvMS83NzQyMTQzQkQxNEIxRkIyQzgyQTJDRTJGRDVBRkFFMjhCQ0M4NzU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc3NDIxNDNCRDE0QjFGQjJD
ODJBMkNFMkZENUFGQUUyOEJDQzg3NTkuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdjVExnSnQ1NWhnSjU5Z3FteXpKMlBLOFZIREdtek5VeFBEdUI5ZUt6Z1h0LzEv
MzEzMzMxMmUzMDJlMzEzODMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzYzMTM3
MzAzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAoMAtDANBgkqhkiG9w0BAQsFAAOCAQEASN+/sZKu2PrX
q6cE2c+ZHNnwkGyi/KDtpwusrCw37jVDkE3E8Jm93edNlbRFNQMTMu7zC5csSz8v
+k2eQefCc12sneSL8EW3eQ48XQ06M16x9cpDE/hMNP6daB91nuh6/a9d6930+VT2
eZ6u+csRwSX5IHQ5ZFvSiEROzvNOlZNdqyNfDt+vJBfOHsgbcziEd/A7zP9dymIY
b0b/K3yqxuOlCzn8WcoR1Zut1CuNcsZN9+Dog0kQykR+1gaTGgc4Xk0BtaEX1iPR
hzY4vKanW0ourrv6iveBUP/7eguExKPnsZErG6pc5ssbmI4KRadu/cJE4+lnqmGT
HyJHNeqABw==
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:41:20 2025 by rpki-client