Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7cpRMVGxeDfgcEj9pUeMS8MP9YrmoSioeJ8bJbHpWcLe/0/3133312e3235352e37362e302f32322d3234203d3e20323634353138.roa
File:                     3133312e3235352e37362e302f32322d3234203d3e20323634353138.roa (raw, json)
Hash identifier:          zBWA4JZ+yzmGOUXiLzYHd3xR5kFYaKWpwhVYpYm2j+4=
Subject key identifier:   51:EC:FB:EE:38:F4:4A:0C:66:A2:62:24:59:57:85:16:37:21:F9:85
Certificate issuer:       /CN=22CB937D7A1CC3A0570501B2B0718242D450D682
Certificate serial:       7431D9721C23C30E8BF9FA0967F1BF546D1F8846
Authority key identifier: 22:CB:93:7D:7A:1C:C3:A0:57:05:01:B2:B0:71:82:42:D4:50:D6:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22CB937D7A1CC3A0570501B2B0718242D450D682.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7cpRMVGxeDfgcEj9pUeMS8MP9YrmoSioeJ8bJbHpWcLe/0/3133312e3235352e37362e302f32322d3234203d3e20323634353138.roa
Signing time:             Mon 29 Apr 2024 13:42:54 +0000
ROA not before:           Mon 29 Apr 2024 13:37:54 +0000
ROA not after:            Mon 28 Apr 2025 13:42:54 +0000
asID:                     264518
IP address blocks:        131.255.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7cpRMVGxeDfgcEj9pUeMS8MP9YrmoSioeJ8bJbHpWcLe/0/22CB937D7A1CC3A0570501B2B0718242D450D682.crl
                          rsync://rpki-repo.registro.br/repo/7cpRMVGxeDfgcEj9pUeMS8MP9YrmoSioeJ8bJbHpWcLe/0/22CB937D7A1CC3A0570501B2B0718242D450D682.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22CB937D7A1CC3A0570501B2B0718242D450D682.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 09:02:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:31:d9:72:1c:23:c3:0e:8b:f9:fa:09:67:f1:bf:54:6d:1f:88:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22CB937D7A1CC3A0570501B2B0718242D450D682
        Validity
            Not Before: Apr 29 13:37:54 2024 GMT
            Not After : Apr 28 13:42:54 2025 GMT
        Subject: CN=51ECFBEE38F44A0C66A26224595785163721F985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:39:af:6b:37:d8:40:e3:bc:2d:10:df:50:6d:
                    e3:92:58:1c:b5:e6:41:ad:6e:c9:8f:c7:27:a1:0d:
                    5e:2f:67:b2:44:5d:b8:4e:c8:4b:08:90:4f:71:1c:
                    29:06:7a:6c:5a:3a:07:2d:6c:df:6f:8d:14:02:a8:
                    4f:68:17:bf:ba:03:c3:9a:1e:82:d5:97:8e:dd:64:
                    db:69:c6:cf:d6:7f:89:bb:80:fd:07:5b:8e:36:27:
                    5f:ee:00:0c:24:c8:0b:62:ad:86:97:ff:98:84:87:
                    5d:74:7a:37:9d:44:17:aa:40:95:5c:c2:03:f2:22:
                    19:45:5a:9e:55:16:78:7c:6e:62:a9:f7:ca:01:14:
                    a9:7b:65:dc:ca:25:a7:94:9a:20:dd:50:fb:2f:a3:
                    28:00:56:f8:9e:0c:d7:37:cb:7c:e2:01:c2:fd:0a:
                    8c:3f:c6:5d:e8:06:5e:06:2d:7a:af:c5:70:2c:2a:
                    67:ff:94:0f:b8:64:c3:cf:ac:fb:03:87:70:2a:82:
                    13:b2:7a:0b:72:eb:84:d9:b0:4f:5d:bc:09:a9:00:
                    72:f8:7f:61:09:bc:06:14:21:2f:ed:9f:0b:ff:45:
                    99:0d:25:55:6e:74:2e:25:54:35:ea:04:41:d6:1c:
                    a1:c2:95:b4:e0:c0:bb:b5:da:38:50:12:25:1d:05:
                    85:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:EC:FB:EE:38:F4:4A:0C:66:A2:62:24:59:57:85:16:37:21:F9:85
            X509v3 Authority Key Identifier:
                keyid:22:CB:93:7D:7A:1C:C3:A0:57:05:01:B2:B0:71:82:42:D4:50:D6:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7cpRMVGxeDfgcEj9pUeMS8MP9YrmoSioeJ8bJbHpWcLe/0/22CB937D7A1CC3A0570501B2B0718242D450D682.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22CB937D7A1CC3A0570501B2B0718242D450D682.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7cpRMVGxeDfgcEj9pUeMS8MP9YrmoSioeJ8bJbHpWcLe/0/3133312e3235352e37362e302f32322d3234203d3e20323634353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:67:60:3b:25:e1:fb:c6:e9:81:51:d9:fe:d6:fe:d6:1a:c7:
         10:91:23:65:5c:19:43:79:90:9d:92:f3:ed:74:ba:98:85:d4:
         e2:8c:be:1e:8b:94:6d:80:a3:89:e3:be:ee:02:1d:55:48:9c:
         17:52:3b:e0:da:62:39:fc:0f:28:9d:5b:a8:c9:44:bf:c4:94:
         63:62:9e:ce:c4:f9:68:ba:84:54:00:5b:a3:dc:4a:d3:f0:97:
         3d:d9:eb:af:94:38:b1:c7:eb:20:24:4f:c8:22:67:22:e2:6d:
         05:21:d6:ed:ac:25:4d:da:94:a9:f0:db:35:16:a4:50:bd:25:
         92:c8:61:ba:2f:a9:78:48:63:40:77:73:14:27:e8:b3:0f:80:
         21:e2:55:c5:53:56:3e:75:51:f4:30:ea:93:49:90:ba:e0:e1:
         20:81:b6:93:7b:46:44:09:0b:44:40:be:52:f3:3c:c0:03:59:
         47:4b:9c:65:74:82:33:46:f7:02:c6:0b:4f:26:2a:b0:34:75:
         20:99:83:c7:e7:c6:d3:c4:2b:6d:fa:bd:53:41:59:8b:b0:5e:
         5b:1f:36:3f:81:2a:4e:01:a1:0d:4a:14:a9:e4:cb:d6:ca:28:
         c8:7a:7b:37:2e:92:e2:42:f7:68:3a:a5:7a:5e:3a:3f:de:8a:
         e5:78:ce:7f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUdDHZchwjww6L+foJZ/G/VG0fiEYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjJDQjkzN0Q3QTFDQzNBMDU3MDUwMUIyQjA3MTgyNDJE
NDUwRDY4MjAeFw0yNDA0MjkxMzM3NTRaFw0yNTA0MjgxMzQyNTRaMDMxMTAvBgNV
BAMTKDUxRUNGQkVFMzhGNDRBMEM2NkEyNjIyNDU5NTc4NTE2MzcyMUY5ODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Oa9rN9hA47wtEN9QbeOSWBy1
5kGtbsmPxyehDV4vZ7JEXbhOyEsIkE9xHCkGemxaOgctbN9vjRQCqE9oF7+6A8Oa
HoLVl47dZNtpxs/Wf4m7gP0HW442J1/uAAwkyAtirYaX/5iEh110ejedRBeqQJVc
wgPyIhlFWp5VFnh8bmKp98oBFKl7ZdzKJaeUmiDdUPsvoygAVvieDNc3y3ziAcL9
Cow/xl3oBl4GLXqvxXAsKmf/lA+4ZMPPrPsDh3AqghOyegty64TZsE9dvAmpAHL4
f2EJvAYUIS/tnwv/RZkNJVVudC4lVDXqBEHWHKHClbTgwLu12jhQEiUdBYXlAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUUez77jj0SgxmomIkWVeFFjch+YUwHwYDVR0j
BBgwFoAUIsuTfXocw6BXBQGysHGCQtRQ1oIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2NwUk1WR3hlRGZnY0VqOXBVZU1TOE1QOVlybW9TaW9lSjhiSmJIcFdj
TGUvMC8yMkNCOTM3RDdBMUNDM0EwNTcwNTAxQjJCMDcxODI0MkQ0NTBENjgyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIyQ0I5MzdEN0ExQ0MzQTA1
NzA1MDFCMkIwNzE4MjQyRDQ1MEQ2ODIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdjcFJNVkd4ZURmZ2NFajlwVWVNUzhNUDlZcm1vU2lvZUo4YkpiSHBXY0xlLzAv
MzEzMzMxMmUzMjM1MzUyZTM3MzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzQzNTMxMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKD/0wwDQYJKoZIhvcNAQELBQADggEBAB1nYDsl
4fvG6YFR2f7W/tYaxxCRI2VcGUN5kJ2S8+10upiF1OKMvh6LlG2Ao4njvu4CHVVI
nBdSO+DaYjn8DyidW6jJRL/ElGNins7E+Wi6hFQAW6PcStPwlz3Z66+UOLHH6yAk
T8giZyLibQUh1u2sJU3alKnw2zUWpFC9JZLIYbovqXhIY0B3cxQn6LMPgCHiVcVT
Vj51UfQw6pNJkLrg4SCBtpN7RkQJC0RAvlLzPMADWUdLnGV0gjNG9wLGC08mKrA0
dSCZg8fnxtPEK236vVNBWYuwXlsfNj+BKk4BoQ1KFKnky9bKKMh6ezcukuJC92g6
pXpeOj/eiuV4zn8=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:06 2025 by rpki-client