Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/3133312e3130302e3135342e302f32332d3233203d3e203631363339.roa
File:                     3133312e3130302e3135342e302f32332d3233203d3e203631363339.roa (raw, json)
Hash identifier:          R6ABjQfx6UryWF7jhX76NHL5oTy6Ly13TWsw9SUw288=
Subject key identifier:   AC:23:F6:02:F5:52:D7:BD:F6:24:6F:CD:8E:3D:F3:3F:92:16:2E:AB
Certificate issuer:       /CN=0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B
Certificate serial:       60D950A37D3C77AB592A282E8D925644A9CC6F96
Authority key identifier: 0D:8D:D1:F1:99:2D:55:A1:0F:EA:85:FA:E3:F9:5E:CE:F8:7D:E4:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/3133312e3130302e3135342e302f32332d3233203d3e203631363339.roa
Signing time:             Wed 05 Mar 2025 19:00:19 +0000
ROA not before:           Wed 05 Mar 2025 18:55:19 +0000
ROA not after:            Wed 04 Mar 2026 19:00:19 +0000
asID:                     61639
IP address blocks:        131.100.154.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.crl
                          rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 19:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:d9:50:a3:7d:3c:77:ab:59:2a:28:2e:8d:92:56:44:a9:cc:6f:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B
        Validity
            Not Before: Mar  5 18:55:19 2025 GMT
            Not After : Mar  4 19:00:19 2026 GMT
        Subject: CN=AC23F602F552D7BDF6246FCD8E3DF33F92162EAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:26:66:8d:ee:91:d3:67:7b:b0:f1:01:41:a8:
                    dd:fc:03:62:cc:e0:23:0b:69:75:05:f5:3e:e0:a4:
                    ef:75:7c:e2:04:87:23:98:62:51:bd:83:bc:aa:0c:
                    f2:5e:03:d8:7e:4b:d5:f9:1d:db:69:41:12:72:a7:
                    05:8a:98:40:cb:ad:8c:09:52:8e:a5:77:cd:73:69:
                    53:15:d1:0a:a4:26:fb:dd:8a:48:cc:a0:02:09:47:
                    aa:00:1d:5e:7d:ae:00:a6:35:89:4e:ca:7f:ff:39:
                    e2:a7:8e:12:99:3d:0f:51:25:59:86:de:77:08:cf:
                    e4:ec:0e:ae:a5:cb:02:5f:67:3d:aa:68:65:7d:50:
                    f1:cf:9a:30:82:9f:46:73:8a:64:43:7a:54:13:70:
                    47:d6:35:f7:5f:66:69:eb:71:3c:04:4e:60:82:e7:
                    2e:76:4b:0d:5d:d8:a5:7a:d4:56:da:d7:a9:b1:a4:
                    78:d8:57:37:4e:45:b6:cb:ce:26:94:8b:84:74:a4:
                    df:7d:d4:18:a0:9f:4a:e3:97:ec:f1:da:77:35:45:
                    5c:6e:00:6a:d6:e9:c6:aa:49:dd:72:15:a6:66:cc:
                    93:f4:a2:8c:91:65:c0:4c:73:c9:ae:92:ec:b5:aa:
                    a0:90:26:0f:33:8b:77:a5:6f:a4:55:63:2d:ad:b3:
                    6d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:23:F6:02:F5:52:D7:BD:F6:24:6F:CD:8E:3D:F3:3F:92:16:2E:AB
            X509v3 Authority Key Identifier:
                keyid:0D:8D:D1:F1:99:2D:55:A1:0F:EA:85:FA:E3:F9:5E:CE:F8:7D:E4:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/3133312e3130302e3135342e302f32332d3233203d3e203631363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:30:c4:a8:0d:b9:2e:2f:4a:1d:30:37:d0:1b:01:1a:5d:0e:
         10:58:11:b3:70:93:f2:a6:7c:30:39:a9:88:b5:f5:d9:dc:38:
         d3:b8:53:f8:c2:13:d0:c1:c3:a9:64:08:ea:a1:93:0d:ca:88:
         c6:27:c0:5a:b3:80:36:ff:8e:4c:de:af:31:44:ba:5f:bf:9f:
         4f:ed:34:b1:1c:6d:4f:bf:d4:f4:1b:ed:d4:b3:4c:cc:2d:96:
         67:b8:3f:e0:87:19:9e:f2:14:6a:b0:b6:15:e2:c1:51:a4:38:
         75:d9:88:4a:c8:7f:56:b7:aa:af:ad:4f:ae:32:d5:c8:1f:2f:
         00:92:39:b8:8d:a8:b1:be:c8:d1:55:ba:1c:d1:27:24:8b:8a:
         93:4e:35:98:a1:45:a2:16:70:dc:87:e2:d1:a4:b6:9f:53:84:
         a4:7f:67:4e:25:74:c3:c7:31:34:14:b7:00:ff:fe:d8:e9:e0:
         37:5a:d5:30:55:98:3d:e8:30:45:67:25:e1:5a:fe:d2:66:79:
         71:90:da:dd:30:6e:cf:65:71:c8:cd:73:c3:66:c7:f2:f4:13:
         14:2e:47:8b:3b:da:2c:5f:5d:7c:45:a0:20:a2:01:2c:b2:fd:
         87:da:dc:fc:5f:9e:92:05:81:bc:a4:5a:02:8e:07:05:2f:bc:
         b0:ac:52:1b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYNlQo308d6tZKigujZJWRKnMb5YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQ4REQxRjE5OTJENTVBMTBGRUE4NUZBRTNGOTVFQ0VG
ODdERTQyQjAeFw0yNTAzMDUxODU1MTlaFw0yNjAzMDQxOTAwMTlaMDMxMTAvBgNV
BAMTKEFDMjNGNjAyRjU1MkQ3QkRGNjI0NkZDRDhFM0RGMzNGOTIxNjJFQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5JmaN7pHTZ3uw8QFBqN38A2LM
4CMLaXUF9T7gpO91fOIEhyOYYlG9g7yqDPJeA9h+S9X5HdtpQRJypwWKmEDLrYwJ
Uo6ld81zaVMV0QqkJvvdikjMoAIJR6oAHV59rgCmNYlOyn//OeKnjhKZPQ9RJVmG
3ncIz+TsDq6lywJfZz2qaGV9UPHPmjCCn0ZzimRDelQTcEfWNfdfZmnrcTwETmCC
5y52Sw1d2KV61Fba16mxpHjYVzdORbbLziaUi4R0pN991Bign0rjl+zx2nc1RVxu
AGrW6caqSd1yFaZmzJP0ooyRZcBMc8mukuy1qqCQJg8zi3elb6RVYy2ts23DAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUrCP2AvVS1732JG/Njj3zP5IWLqswHwYDVR0j
BBgwFoAUDY3R8ZktVaEP6oX64/lezvh95CswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTFNQ1B5QXljQk5mZnY5Mzl4enFWQUJ5VHVvN1JCakZ4dEgybjF2eHEy
dkUvMS8wRDhERDFGMTk5MkQ1NUExMEZFQTg1RkFFM0Y5NUVDRUY4N0RFNDJCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBEOEREMUYxOTkyRDU1QTEw
RkVBODVGQUUzRjk1RUNFRjg3REU0MkIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ExTUNQeUF5Y0JOZmZ2OTM5eHpxVkFCeVR1bzdSQmpGeHRIMm4xdnhxMnZFLzEv
MzEzMzMxMmUzMTMwMzAyZTMxMzUzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM2
MzEzNjMzMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGDZJowDQYJKoZIhvcNAQELBQADggEBAEEwxKgN
uS4vSh0wN9AbARpdDhBYEbNwk/KmfDA5qYi19dncONO4U/jCE9DBw6lkCOqhkw3K
iMYnwFqzgDb/jkzerzFEul+/n0/tNLEcbU+/1PQb7dSzTMwtlme4P+CHGZ7yFGqw
thXiwVGkOHXZiErIf1a3qq+tT64y1cgfLwCSObiNqLG+yNFVuhzRJySLipNONZih
RaIWcNyH4tGktp9ThKR/Z04ldMPHMTQUtwD//tjp4Dda1TBVmD3oMEVnJeFa/tJm
eXGQ2t0wbs9lccjNc8Nmx/L0ExQuR4s72ixfXXxFoCCiASyy/Yfa3PxfnpIFgbyk
WgKOBwUvvLCsUhs=
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:05:46 2025 by rpki-client