Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9NobCjzpJjYaq7dxygh7rB31Wn5jyF3ybc4uQc9dWe65/1/3133312e3139362e3132342e302f32322d3234203d3e20323731333134.roa
File:                     3133312e3139362e3132342e302f32322d3234203d3e20323731333134.roa (raw, json)
Hash identifier:          /2sZgn+7KHtXoMOb6jX79vAudsPH9emG9DjMRqzpfCI=
Subject key identifier:   9A:DC:24:D8:D3:65:75:F4:D6:57:F3:AB:EC:9B:26:9D:38:74:0A:77
Certificate issuer:       /CN=88BA7580557AA3113C46B2EE567F5D1F9F9C8197
Certificate serial:       081379DD45EC81BC3D59F99431B5C5416D686D13
Authority key identifier: 88:BA:75:80:55:7A:A3:11:3C:46:B2:EE:56:7F:5D:1F:9F:9C:81:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88BA7580557AA3113C46B2EE567F5D1F9F9C8197.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9NobCjzpJjYaq7dxygh7rB31Wn5jyF3ybc4uQc9dWe65/1/3133312e3139362e3132342e302f32322d3234203d3e20323731333134.roa
Signing time:             Wed 05 Mar 2025 19:40:29 +0000
ROA not before:           Wed 05 Mar 2025 19:35:29 +0000
ROA not after:            Wed 04 Mar 2026 19:40:29 +0000
asID:                     271314
IP address blocks:        131.196.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9NobCjzpJjYaq7dxygh7rB31Wn5jyF3ybc4uQc9dWe65/1/88BA7580557AA3113C46B2EE567F5D1F9F9C8197.crl
                          rsync://rpki-repo.registro.br/repo/9NobCjzpJjYaq7dxygh7rB31Wn5jyF3ybc4uQc9dWe65/1/88BA7580557AA3113C46B2EE567F5D1F9F9C8197.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88BA7580557AA3113C46B2EE567F5D1F9F9C8197.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 22:37:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:13:79:dd:45:ec:81:bc:3d:59:f9:94:31:b5:c5:41:6d:68:6d:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88BA7580557AA3113C46B2EE567F5D1F9F9C8197
        Validity
            Not Before: Mar  5 19:35:29 2025 GMT
            Not After : Mar  4 19:40:29 2026 GMT
        Subject: CN=9ADC24D8D36575F4D657F3ABEC9B269D38740A77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d8:7d:6e:ec:3b:93:1a:9b:bc:ed:e9:08:24:
                    37:10:6e:50:89:44:c7:15:71:2a:1b:c9:1a:ba:9d:
                    19:ca:8d:d5:3e:ce:04:a9:b4:65:ed:eb:d1:6e:d0:
                    8f:e9:92:1e:fd:51:37:c9:d9:b6:ff:dd:6a:1c:d0:
                    e6:30:48:de:9a:93:1e:2e:ef:9b:a5:60:45:a7:2c:
                    3b:f0:04:24:f5:ad:ed:c0:7b:af:a2:3f:ee:b6:99:
                    aa:93:e0:03:bc:3d:54:38:b5:15:0e:8b:2c:50:05:
                    34:89:19:59:6d:03:2d:e7:a2:b1:54:ce:ac:63:fe:
                    11:b0:68:ef:3b:d8:70:e1:16:15:95:df:76:f3:1a:
                    66:96:5c:a6:8a:74:af:69:51:d9:2c:e6:7b:5b:90:
                    d2:b8:4d:17:ee:aa:4c:5a:a7:e9:91:40:56:6f:9b:
                    be:4f:80:29:0b:09:fe:c5:6e:5d:ff:29:e6:c9:78:
                    4d:83:2a:6b:db:6c:2c:0e:a3:2a:06:38:93:4c:7f:
                    ce:25:32:96:9c:03:cc:34:b6:7d:f3:0b:aa:c5:d5:
                    8c:8e:fd:8f:be:76:c4:5a:cf:76:e2:74:92:67:62:
                    7d:cb:61:15:57:d6:8e:f0:ec:67:3b:7d:20:73:e6:
                    6b:af:72:d4:d6:4c:29:64:2c:77:2f:7a:7d:3f:29:
                    e9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:DC:24:D8:D3:65:75:F4:D6:57:F3:AB:EC:9B:26:9D:38:74:0A:77
            X509v3 Authority Key Identifier:
                keyid:88:BA:75:80:55:7A:A3:11:3C:46:B2:EE:56:7F:5D:1F:9F:9C:81:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9NobCjzpJjYaq7dxygh7rB31Wn5jyF3ybc4uQc9dWe65/1/88BA7580557AA3113C46B2EE567F5D1F9F9C8197.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88BA7580557AA3113C46B2EE567F5D1F9F9C8197.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9NobCjzpJjYaq7dxygh7rB31Wn5jyF3ybc4uQc9dWe65/1/3133312e3139362e3132342e302f32322d3234203d3e20323731333134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c1:f4:34:a2:3e:01:68:41:f5:b7:13:7f:b4:78:c6:61:47:fa:
         c3:b6:0b:37:cd:0c:52:e6:88:a4:9a:7e:c8:1a:19:1d:ac:fc:
         ce:2a:8d:b1:9e:58:85:a4:09:85:8e:6a:ba:15:c2:4a:39:94:
         9c:35:67:e1:ef:0a:e7:a0:2a:76:6a:d2:32:fb:35:82:e3:11:
         94:1e:40:2e:6c:d5:ed:8b:87:7b:74:02:ef:d1:31:cc:53:08:
         c5:e9:b0:f3:dd:a3:b8:9e:76:ba:f8:32:e8:8f:6a:a6:0f:30:
         29:d6:9b:70:4c:c9:f7:e0:3b:2c:44:d4:09:2a:25:1b:f0:d5:
         01:39:5a:55:f7:08:c0:e2:e8:aa:6f:2f:c0:e1:c9:11:dc:72:
         3f:98:a1:af:03:42:d7:22:ff:6e:8e:8c:74:22:2f:f1:b5:bc:
         26:75:38:7d:8a:7a:47:af:7e:5d:41:4f:d2:25:e1:07:1d:54:
         b7:f9:73:ab:fd:a5:b9:c5:45:fe:d7:77:23:9f:f6:24:23:ed:
         7e:a1:39:dd:29:c4:45:93:d8:2c:e7:31:e4:d3:a1:ae:eb:95:
         59:76:3e:af:dc:5c:67:b2:49:cf:ca:9a:e8:26:49:d3:17:90:
         0b:6e:73:94:87:86:41:36:ba:a6:8c:ba:f0:a2:78:d5:83:43:
         7f:19:d5:75
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUCBN53UXsgbw9WfmUMbXFQW1obRMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhCQTc1ODA1NTdBQTMxMTNDNDZCMkVFNTY3RjVEMUY5
RjlDODE5NzAeFw0yNTAzMDUxOTM1MjlaFw0yNjAzMDQxOTQwMjlaMDMxMTAvBgNV
BAMTKDlBREMyNEQ4RDM2NTc1RjRENjU3RjNBQkVDOUIyNjlEMzg3NDBBNzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC42H1u7DuTGpu87ekIJDcQblCJ
RMcVcSobyRq6nRnKjdU+zgSptGXt69Fu0I/pkh79UTfJ2bb/3Woc0OYwSN6akx4u
75ulYEWnLDvwBCT1re3Ae6+iP+62maqT4AO8PVQ4tRUOiyxQBTSJGVltAy3norFU
zqxj/hGwaO872HDhFhWV33bzGmaWXKaKdK9pUdks5ntbkNK4TRfuqkxap+mRQFZv
m75PgCkLCf7Fbl3/KebJeE2DKmvbbCwOoyoGOJNMf84lMpacA8w0tn3zC6rF1YyO
/Y++dsRaz3bidJJnYn3LYRVX1o7w7Gc7fSBz5muvctTWTClkLHcven0/KeknAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUmtwk2NNldfTWV/Or7JsmnTh0CncwHwYDVR0j
BBgwFoAUiLp1gFV6oxE8RrLuVn9dH5+cgZcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOU5vYkNqenBKallhcTdkeHlnaDdyQjMxV241anlGM3liYzR1UWM5ZFdl
NjUvMS84OEJBNzU4MDU1N0FBMzExM0M0NkIyRUU1NjdGNUQxRjlGOUM4MTk3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg4QkE3NTgwNTU3QUEzMTEz
QzQ2QjJFRTU2N0Y1RDFGOUY5QzgxOTcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlOb2JDanpwSmpZYXE3ZHh5Z2g3ckIzMVduNWp5RjN5YmM0dVFjOWRXZTY1LzEv
MzEzMzMxMmUzMTM5MzYyZTMxMzIzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzczMTMzMzEzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAoPEfDANBgkqhkiG9w0BAQsFAAOCAQEAwfQ0
oj4BaEH1txN/tHjGYUf6w7YLN80MUuaIpJp+yBoZHaz8ziqNsZ5YhaQJhY5quhXC
SjmUnDVn4e8K56AqdmrSMvs1guMRlB5ALmzV7YuHe3QC79ExzFMIxemw892juJ52
uvgy6I9qpg8wKdabcEzJ9+A7LETUCSolG/DVATlaVfcIwOLoqm8vwOHJEdxyP5ih
rwNC1yL/bo6MdCIv8bW8JnU4fYp6R69+XUFP0iXhBx1Ut/lzq/2lucVF/td3I5/2
JCPtfqE53SnERZPYLOcx5NOhruuVWXY+r9xcZ7JJz8qa6CZJ0xeQC25zlIeGQTa6
poy68KJ41YNDfxnVdQ==
-----END CERTIFICATE-----
Generated at Sat Apr 12 23:02:19 2025 by rpki-client