Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3139312e33362e3133322e302f32322d3234203d3e203238313436.roa
File:                     3139312e33362e3133322e302f32322d3234203d3e203238313436.roa (raw, json)
Hash identifier:          dII7vBj/5Gdr3AYGpKTuBMaG+Jc6M2w7ejr4NpOdXLQ=
Subject key identifier:   20:23:08:00:D1:D8:EC:EF:02:48:F4:50:15:2F:B7:DE:CF:E0:60:97
Certificate issuer:       /CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
Certificate serial:       014F322F2632A1C84E4554998B1C28D40205EB7F
Authority key identifier: 7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3139312e33362e3133322e302f32322d3234203d3e203238313436.roa
Signing time:             Mon 12 May 2025 12:57:30 +0000
ROA not before:           Mon 12 May 2025 12:52:30 +0000
ROA not after:            Mon 11 May 2026 12:57:30 +0000
asID:                     28146
IP address blocks:        191.36.132.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl
                          rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 03:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:4f:32:2f:26:32:a1:c8:4e:45:54:99:8b:1c:28:d4:02:05:eb:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
        Validity
            Not Before: May 12 12:52:30 2025 GMT
            Not After : May 11 12:57:30 2026 GMT
        Subject: CN=20230800D1D8ECEF0248F450152FB7DECFE06097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5c:aa:c4:77:86:89:e3:87:0b:16:70:f0:8e:
                    b4:dd:2b:48:b4:12:cc:e3:16:f7:70:d1:fb:fd:df:
                    90:25:8b:ec:b0:f0:c2:d6:09:5d:06:41:6a:50:20:
                    fc:5c:57:54:8b:b6:d6:0d:50:61:b5:ba:ea:46:e1:
                    25:d0:c3:31:f1:08:61:2b:d5:91:9a:b5:44:a8:8e:
                    5b:eb:e7:56:f9:12:d7:7c:1f:23:62:5c:1f:82:af:
                    70:81:c7:bd:ca:2e:1a:b8:29:90:4f:4b:1a:2b:eb:
                    ce:73:c9:39:3a:90:e1:18:f3:2c:91:7e:24:c1:f2:
                    3b:47:49:6f:9c:99:fe:a1:6f:23:6c:1b:cd:de:4e:
                    4b:3c:71:cd:fa:43:3e:3b:37:6f:56:73:7a:3b:5b:
                    78:35:a0:13:ab:4e:3f:f2:22:87:16:13:c2:24:bc:
                    2d:00:42:f4:60:25:48:c6:78:59:13:af:4c:0b:5b:
                    77:bb:8a:33:4d:bb:eb:1c:49:e2:92:36:dc:92:5c:
                    d4:db:2a:73:8c:d0:66:75:8d:3e:e4:b1:d6:30:9a:
                    9f:bf:a4:fe:14:ee:29:55:0b:e1:87:c9:f7:d8:a7:
                    fe:c8:6b:07:6c:92:9c:63:47:33:e8:8e:c5:e9:93:
                    34:20:aa:b9:84:dd:aa:f0:b4:a6:e1:24:79:e3:84:
                    eb:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:23:08:00:D1:D8:EC:EF:02:48:F4:50:15:2F:B7:DE:CF:E0:60:97
            X509v3 Authority Key Identifier:
                keyid:7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3139312e33362e3133322e302f32322d3234203d3e203238313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:1f:09:72:4d:0f:75:a2:61:98:7a:89:be:e3:92:d2:a1:3d:
         39:e3:d6:cf:db:1a:a1:15:da:70:a6:5f:d1:d2:c3:44:4b:b8:
         71:51:6b:bc:07:36:25:b2:51:5f:8e:ff:a6:22:63:d2:16:9d:
         b3:f7:26:cc:d3:8d:15:3b:37:d7:98:30:ff:a5:94:91:2c:21:
         d6:16:25:c3:87:0d:e0:2a:73:b7:b2:38:5a:c2:6d:41:7d:28:
         1c:08:73:ac:42:1e:04:97:cb:af:2e:2c:2d:ac:e1:7e:fb:a6:
         82:e1:a1:5c:f0:19:9f:06:de:6f:84:65:0e:05:89:46:b2:41:
         db:56:cb:7d:73:b2:18:b9:41:9c:6f:2c:dd:cf:5f:c1:aa:2c:
         2b:8b:c1:cb:81:16:8c:f8:67:4e:29:66:af:b7:be:e4:77:57:
         0a:81:98:cd:78:27:f2:21:66:70:38:8e:89:02:e0:d5:0c:c6:
         ab:db:90:22:7d:c3:36:40:7f:49:83:63:07:6c:d5:75:42:3e:
         cc:51:18:d7:45:00:cc:94:66:f3:db:d6:47:45:c1:7b:e9:47:
         35:45:c9:d1:85:85:46:75:6f:a7:c7:f0:7f:c0:46:c5:1a:f6:
         a8:be:f9:43:8d:99:63:cf:8d:75:2a:f0:6c:75:b9:79:2a:f7:
         70:d2:df:b5
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUAU8yLyYyochORVSZixwo1AIF638wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0FCN0M5QUFFQTFEMjkyMDEwMkQwNTJFMUFDNDVFQ0Ez
NDM5QjJGMDAeFw0yNTA1MTIxMjUyMzBaFw0yNjA1MTExMjU3MzBaMDMxMTAvBgNV
BAMTKDIwMjMwODAwRDFEOEVDRUYwMjQ4RjQ1MDE1MkZCN0RFQ0ZFMDYwOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3XKrEd4aJ44cLFnDwjrTdK0i0
EszjFvdw0fv935Ali+yw8MLWCV0GQWpQIPxcV1SLttYNUGG1uupG4SXQwzHxCGEr
1ZGatUSojlvr51b5Etd8HyNiXB+Cr3CBx73KLhq4KZBPSxor685zyTk6kOEY8yyR
fiTB8jtHSW+cmf6hbyNsG83eTks8cc36Qz47N29Wc3o7W3g1oBOrTj/yIocWE8Ik
vC0AQvRgJUjGeFkTr0wLW3e7ijNNu+scSeKSNtySXNTbKnOM0GZ1jT7ksdYwmp+/
pP4U7ilVC+GHyffYp/7IawdskpxjRzPojsXpkzQgqrmE3arwtKbhJHnjhOuHAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUICMIANHY7O8CSPRQFS+33s/gYJcwHwYDVR0j
BBgwFoAUerfJquodKSAQLQUuGsReyjQ5svAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEZEQ2g2WDV5cktkN0NZWXZacERMOVNxU3pNQUJqUGFhNmRzMUtSSzZx
SzYvMC83QUI3QzlBQUVBMUQyOTIwMTAyRDA1MkUxQUM0NUVDQTM0MzlCMkYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdBQjdDOUFBRUExRDI5MjAx
MDJEMDUyRTFBQzQ1RUNBMzQzOUIyRjAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhGRENoNlg1eXJLZDdDWVl2WnBETDlTcVN6TUFCalBhYTZkczFLUks2cUs2LzAv
MzEzOTMxMmUzMzM2MmUzMTMzMzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM4
MzEzNDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCvySEMA0GCSqGSIb3DQEBCwUAA4IBAQCNHwlyTQ91
omGYeom+45LSoT0549bP2xqhFdpwpl/R0sNES7hxUWu8BzYlslFfjv+mImPSFp2z
9ybM040VOzfXmDD/pZSRLCHWFiXDhw3gKnO3sjhawm1BfSgcCHOsQh4El8uvLiwt
rOF++6aC4aFc8BmfBt5vhGUOBYlGskHbVst9c7IYuUGcbyzdz1/Bqiwri8HLgRaM
+GdOKWavt77kd1cKgZjNeCfyIWZwOI6JAuDVDMar25AifcM2QH9Jg2MHbNV1Qj7M
URjXRQDMlGbz29ZHRcF76Uc1RcnRhYVGdW+nx/B/wEbFGvaovvlDjZljz411KvBs
dbl5Kvdw0t+1
-----END CERTIFICATE-----
Generated at Sun Jun 8 15:15:56 2025 by rpki-client