Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/3133312e3130302e3133322e302f32332d3233203d3e203631363337.roa
File:                     3133312e3130302e3133322e302f32332d3233203d3e203631363337.roa (raw, json)
Hash identifier:          YV2fl3wlW8th6n4XDAsyYyHB1YLOdfCwjGydDS1U9WM=
Subject key identifier:   AB:60:C7:6D:E1:E3:F0:F0:99:17:86:D6:34:B7:BA:EB:B7:39:77:C4
Certificate issuer:       /CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
Certificate serial:       49FA536D832D6C0B1A8ACE64482AF527D989DBB6
Authority key identifier: 31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/3133312e3130302e3133322e302f32332d3233203d3e203631363337.roa
Signing time:             Thu 06 Mar 2025 01:00:28 +0000
ROA not before:           Thu 06 Mar 2025 00:55:28 +0000
ROA not after:            Thu 05 Mar 2026 01:00:28 +0000
asID:                     61637
IP address blocks:        131.100.132.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl
                          rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 05:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:fa:53:6d:83:2d:6c:0b:1a:8a:ce:64:48:2a:f5:27:d9:89:db:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
        Validity
            Not Before: Mar  6 00:55:28 2025 GMT
            Not After : Mar  5 01:00:28 2026 GMT
        Subject: CN=AB60C76DE1E3F0F0991786D634B7BAEBB73977C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:41:b2:5e:cd:7b:01:d5:10:61:c8:fe:0d:5d:
                    bd:5c:e5:65:87:51:05:8d:2b:6f:57:c9:25:1d:da:
                    a0:85:c8:c0:6f:2e:c0:30:4e:c2:1d:7d:76:94:02:
                    b3:a0:5c:70:8c:d7:60:d3:96:5d:53:c6:17:48:3e:
                    5f:62:13:4f:3d:6a:94:71:2a:6d:53:5c:9c:fc:43:
                    58:65:db:97:5f:7e:9f:71:be:e1:01:13:ed:a6:66:
                    bd:3b:f0:b0:4d:39:d5:d6:3b:59:1f:b0:76:8c:a6:
                    13:ee:1e:51:3d:40:e2:14:22:bb:d4:4c:de:40:ed:
                    78:39:24:81:77:be:6e:e5:de:a3:b4:6e:8a:07:6d:
                    04:3b:cc:96:0f:7b:00:ea:ba:05:ec:25:ac:c9:e1:
                    1d:64:60:18:07:3b:8d:fb:73:5e:06:4b:9e:29:00:
                    05:00:40:c3:2c:9a:2c:63:36:c8:03:72:86:27:7a:
                    f8:85:a1:f9:4c:5e:a0:88:34:ea:3c:20:1a:0d:4d:
                    37:ee:6e:ec:ac:e0:67:68:61:87:c5:31:dd:b0:01:
                    c5:e1:b8:05:ae:5e:27:8d:b5:1d:4e:99:fe:61:87:
                    de:6f:f4:75:de:82:df:61:5a:63:e4:88:79:cd:d1:
                    b7:36:2d:4e:41:af:48:40:8e:92:3e:61:44:cd:19:
                    d7:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:60:C7:6D:E1:E3:F0:F0:99:17:86:D6:34:B7:BA:EB:B7:39:77:C4
            X509v3 Authority Key Identifier:
                keyid:31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/3133312e3130302e3133322e302f32332d3233203d3e203631363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7f:24:73:f3:d6:e3:1f:a0:99:46:96:80:88:ac:87:55:4d:a1:
         c9:e2:8a:09:20:b5:66:a9:cf:8b:a0:1c:b5:15:66:18:68:73:
         97:0e:a5:5a:49:62:81:51:51:21:17:a5:93:ac:07:9a:5a:c7:
         3d:32:92:3b:19:60:f9:d3:d9:91:53:62:b3:b4:d9:46:08:6b:
         fe:cd:9e:3f:8d:65:14:6f:9a:10:90:85:88:e5:00:96:2c:35:
         72:df:11:41:99:4d:e7:6a:90:b3:51:6a:ef:c5:51:68:9f:47:
         33:5f:4e:c7:80:9e:0c:47:b4:21:be:3f:56:79:08:fe:a2:7e:
         e1:9a:33:33:9d:75:a9:38:28:6d:bb:ac:2a:54:51:46:d0:f1:
         0b:8d:96:00:c8:8b:bf:92:76:4b:e5:c5:17:4c:77:00:73:25:
         d5:e3:eb:c0:25:7e:e8:d5:1a:71:d6:4b:dd:b3:76:9d:08:09:
         2c:a1:93:1f:5b:22:7c:ec:52:28:26:46:9e:fe:a0:e2:ef:33:
         6d:b7:63:f5:35:55:86:a1:b2:29:80:27:5c:ec:ff:f5:da:7a:
         50:29:c9:9c:3c:5c:79:10:39:2d:81:ef:aa:00:b2:d0:f3:ee:
         7e:6b:80:7e:8b:16:44:18:84:d1:b0:80:b1:24:39:e4:c6:40:
         02:ad:f0:c6
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUSfpTbYMtbAsais5kSCr1J9mJ27YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzE5RkJBRTVCRjYyMDBGNjBFRjA5Q0RCQzFCOTAwNTBB
N0MwNUUwQTAeFw0yNTAzMDYwMDU1MjhaFw0yNjAzMDUwMTAwMjhaMDMxMTAvBgNV
BAMTKEFCNjBDNzZERTFFM0YwRjA5OTE3ODZENjM0QjdCQUVCQjczOTc3QzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhQbJezXsB1RBhyP4NXb1c5WWH
UQWNK29XySUd2qCFyMBvLsAwTsIdfXaUArOgXHCM12DTll1TxhdIPl9iE089apRx
Km1TXJz8Q1hl25dffp9xvuEBE+2mZr078LBNOdXWO1kfsHaMphPuHlE9QOIUIrvU
TN5A7Xg5JIF3vm7l3qO0booHbQQ7zJYPewDqugXsJazJ4R1kYBgHO437c14GS54p
AAUAQMMsmixjNsgDcoYneviFoflMXqCINOo8IBoNTTfubuys4GdoYYfFMd2wAcXh
uAWuXieNtR1Omf5hh95v9HXegt9hWmPkiHnN0bc2LU5Br0hAjpI+YUTNGddXAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUq2DHbeHj8PCZF4bWNLe667c5d8QwHwYDVR0j
BBgwFoAUMZ+65b9iAPYO8JzbwbkAUKfAXgowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXNTcmY3cGZYTVA3c0Z6M3FSYzY2Y2FkUFp0SFVWd014RGlQazR2eGFk
ckYvMS8zMTlGQkFFNUJGNjIwMEY2MEVGMDlDREJDMUI5MDA1MEE3QzA1RTBBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxOUZCQUU1QkY2MjAwRjYw
RUYwOUNEQkMxQjkwMDUwQTdDMDVFMEEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlzU3JmN3BmWE1QN3NGejNxUmM2NmNhZFBadEhVVndNeERpUGs0dnhhZHJGLzEv
MzEzMzMxMmUzMTMwMzAyZTMxMzMzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM2
MzEzNjMzMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGDZIQwDQYJKoZIhvcNAQELBQADggEBAH8kc/PW
4x+gmUaWgIish1VNocniigkgtWapz4ugHLUVZhhoc5cOpVpJYoFRUSEXpZOsB5pa
xz0ykjsZYPnT2ZFTYrO02UYIa/7Nnj+NZRRvmhCQhYjlAJYsNXLfEUGZTedqkLNR
au/FUWifRzNfTseAngxHtCG+P1Z5CP6ifuGaMzOddak4KG27rCpUUUbQ8QuNlgDI
i7+SdkvlxRdMdwBzJdXj68AlfujVGnHWS92zdp0ICSyhkx9bInzsUigmRp7+oOLv
M223Y/U1VYahsimAJ1zs//XaelApyZw8XHkQOS2B76oAstDz7n5rgH6LFkQYhNGw
gLEkOeTGQAKt8MY=
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:54:18 2025 by rpki-client