Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/81gmUVDET8fuK66of4RZQHSaKb9iVHv3BW4ywuW9AP4b/0/3133312e37322e3134302e302f32322d3234203d3e203532383632.roa
File:                     3133312e37322e3134302e302f32322d3234203d3e203532383632.roa (raw, json)
Hash identifier:          O5OBE2QMIUpFY2ga6mNcyWmO4ZC/TA01e8M+6k4bKKs=
Subject key identifier:   0D:AF:7B:36:27:F7:66:03:58:8F:F8:E6:0A:CA:D8:A2:20:0F:DF:89
Certificate issuer:       /CN=5A5F04F3CD1DE3A853C1305EF3E9185AAB1E51D5
Certificate serial:       1DEE33CC1B263313ABA3BCC2CFCF5ED8F3C9E925
Authority key identifier: 5A:5F:04:F3:CD:1D:E3:A8:53:C1:30:5E:F3:E9:18:5A:AB:1E:51:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A5F04F3CD1DE3A853C1305EF3E9185AAB1E51D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/81gmUVDET8fuK66of4RZQHSaKb9iVHv3BW4ywuW9AP4b/0/3133312e37322e3134302e302f32322d3234203d3e203532383632.roa
Signing time:             Fri 16 May 2025 18:43:54 +0000
ROA not before:           Fri 16 May 2025 18:38:54 +0000
ROA not after:            Fri 15 May 2026 18:43:54 +0000
asID:                     52862
IP address blocks:        131.72.140.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/81gmUVDET8fuK66of4RZQHSaKb9iVHv3BW4ywuW9AP4b/0/5A5F04F3CD1DE3A853C1305EF3E9185AAB1E51D5.crl
                          rsync://rpki-repo.registro.br/repo/81gmUVDET8fuK66of4RZQHSaKb9iVHv3BW4ywuW9AP4b/0/5A5F04F3CD1DE3A853C1305EF3E9185AAB1E51D5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A5F04F3CD1DE3A853C1305EF3E9185AAB1E51D5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 10:54:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:ee:33:cc:1b:26:33:13:ab:a3:bc:c2:cf:cf:5e:d8:f3:c9:e9:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A5F04F3CD1DE3A853C1305EF3E9185AAB1E51D5
        Validity
            Not Before: May 16 18:38:54 2025 GMT
            Not After : May 15 18:43:54 2026 GMT
        Subject: CN=0DAF7B3627F76603588FF8E60ACAD8A2200FDF89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:89:39:2f:72:b8:69:a8:cf:62:0c:c1:ab:4a:
                    cf:bc:1f:b9:63:59:ad:6a:e8:45:bf:f9:9e:c0:7c:
                    63:7d:aa:ae:ca:dd:2b:9c:11:c0:33:b0:e8:07:2a:
                    65:c5:ce:d5:70:94:1b:9c:3c:70:e3:be:ad:17:0a:
                    22:4f:66:1b:d5:7b:05:27:dc:9d:ce:c7:a4:86:80:
                    95:1f:34:61:c8:10:3f:32:90:e7:54:f3:6f:e0:07:
                    37:5b:35:9f:af:2f:74:82:fe:44:fc:33:9d:93:cf:
                    85:05:9c:37:18:d7:44:1a:af:8a:c7:61:86:43:ed:
                    eb:d4:3c:98:b3:fa:ba:bb:6c:23:9a:e6:b4:78:0f:
                    45:6c:6a:a6:fc:26:5d:29:0c:93:23:45:d9:4c:43:
                    94:14:ce:3a:26:6e:4b:11:4d:29:bf:d4:64:ac:54:
                    1a:c8:c2:fa:09:ff:1d:47:78:16:17:2a:4a:a7:57:
                    23:2b:97:43:63:f4:be:81:4b:8d:93:a5:6a:4f:93:
                    c7:98:75:98:e0:97:2b:39:5c:fd:d8:3a:d4:de:0c:
                    c4:56:32:d9:40:76:2d:39:4b:cf:3f:20:a2:96:02:
                    b2:2b:aa:d1:d1:4e:6b:19:00:2b:c4:a3:bf:08:99:
                    13:60:14:b8:e0:0a:f7:a7:fd:1f:e0:f1:e9:0a:6e:
                    d3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:AF:7B:36:27:F7:66:03:58:8F:F8:E6:0A:CA:D8:A2:20:0F:DF:89
            X509v3 Authority Key Identifier:
                keyid:5A:5F:04:F3:CD:1D:E3:A8:53:C1:30:5E:F3:E9:18:5A:AB:1E:51:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/81gmUVDET8fuK66of4RZQHSaKb9iVHv3BW4ywuW9AP4b/0/5A5F04F3CD1DE3A853C1305EF3E9185AAB1E51D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A5F04F3CD1DE3A853C1305EF3E9185AAB1E51D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/81gmUVDET8fuK66of4RZQHSaKb9iVHv3BW4ywuW9AP4b/0/3133312e37322e3134302e302f32322d3234203d3e203532383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:56:b0:00:82:98:fd:20:7f:3b:1f:83:ce:55:33:f6:a6:64:
         ec:47:a8:df:e2:75:43:e6:92:ed:6e:69:a5:73:bd:cd:29:ab:
         98:ea:11:ed:97:2d:3a:f8:5d:44:6d:9b:9e:5a:db:67:38:02:
         18:84:1f:0b:1d:f7:80:29:ce:38:30:6e:38:6a:24:8f:4e:63:
         9b:65:1a:84:6e:d5:84:2e:4e:18:19:92:e7:cd:7e:5c:50:4c:
         bb:9c:f0:e6:ae:3f:62:a0:02:e6:3d:02:b9:a4:23:cc:af:5b:
         90:37:93:93:e7:26:0b:d8:15:35:72:38:65:13:c8:71:47:63:
         dd:eb:37:65:5c:f6:94:f3:67:f5:17:d3:73:e3:dc:21:06:4f:
         b0:81:95:6f:ea:4d:86:5a:f9:d9:61:ca:ac:22:ec:9c:91:fb:
         24:b8:2e:92:98:7c:87:d6:d9:59:a0:02:a6:9b:8e:92:4f:09:
         bc:7b:78:02:e0:1d:a4:83:0c:e6:dc:33:b0:a7:da:bb:c5:ba:
         46:f5:58:8d:fa:47:68:0c:33:6b:59:1b:b1:96:29:86:e7:bd:
         14:1e:ad:30:f0:e1:6e:73:e0:1b:34:36:00:dd:cf:6d:fb:55:
         79:97:ae:41:25:54:b7:d4:58:87:66:5e:28:a7:ee:1f:55:44:
         e2:c9:01:c8
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUHe4zzBsmMxOro7zCz89e2PPJ6SUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUE1RjA0RjNDRDFERTNBODUzQzEzMDVFRjNFOTE4NUFB
QjFFNTFENTAeFw0yNTA1MTYxODM4NTRaFw0yNjA1MTUxODQzNTRaMDMxMTAvBgNV
BAMTKDBEQUY3QjM2MjdGNzY2MDM1ODhGRjhFNjBBQ0FEOEEyMjAwRkRGODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdiTkvcrhpqM9iDMGrSs+8H7lj
Wa1q6EW/+Z7AfGN9qq7K3SucEcAzsOgHKmXFztVwlBucPHDjvq0XCiJPZhvVewUn
3J3Ox6SGgJUfNGHIED8ykOdU82/gBzdbNZ+vL3SC/kT8M52Tz4UFnDcY10Qar4rH
YYZD7evUPJiz+rq7bCOa5rR4D0Vsaqb8Jl0pDJMjRdlMQ5QUzjombksRTSm/1GSs
VBrIwvoJ/x1HeBYXKkqnVyMrl0Nj9L6BS42TpWpPk8eYdZjglys5XP3YOtTeDMRW
MtlAdi05S88/IKKWArIrqtHRTmsZACvEo78ImRNgFLjgCven/R/g8ekKbtPbAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUDa97Nif3ZgNYj/jmCsrYoiAP34kwHwYDVR0j
BBgwFoAUWl8E880d46hTwTBe8+kYWqseUdUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODFnbVVWREVUOGZ1SzY2b2Y0UlpRSFNhS2I5aVZIdjNCVzR5d3VXOUFQ
NGIvMC81QTVGMDRGM0NEMURFM0E4NTNDMTMwNUVGM0U5MTg1QUFCMUU1MUQ1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVBNUYwNEYzQ0QxREUzQTg1
M0MxMzA1RUYzRTkxODVBQUIxRTUxRDUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzgxZ21VVkRFVDhmdUs2Nm9mNFJaUUhTYUtiOWlWSHYzQlc0eXd1VzlBUDRiLzAv
MzEzMzMxMmUzNzMyMmUzMTM0MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTMy
MzgzNjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCg0iMMA0GCSqGSIb3DQEBCwUAA4IBAQBMVrAAgpj9
IH87H4POVTP2pmTsR6jf4nVD5pLtbmmlc73NKauY6hHtly06+F1EbZueWttnOAIY
hB8LHfeAKc44MG44aiSPTmObZRqEbtWELk4YGZLnzX5cUEy7nPDmrj9ioALmPQK5
pCPMr1uQN5OT5yYL2BU1cjhlE8hxR2Pd6zdlXPaU82f1F9Nz49whBk+wgZVv6k2G
WvnZYcqsIuyckfskuC6SmHyH1tlZoAKmm46STwm8e3gC4B2kgwzm3DOwp9q7xbpG
9ViN+kdoDDNrWRuxlimG570UHq0w8OFuc+AbNDYA3c9t+1V5l65BJVS31FiHZl4o
p+4fVUTiyQHI
-----END CERTIFICATE-----
Generated at Mon Jun 9 19:27:44 2025 by rpki-client