Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3134332e3133372e302e302f32322d3232203d3e203631373937.roa
File:                     3134332e3133372e302e302f32322d3232203d3e203631373937.roa (raw, json)
Hash identifier:          hkGad4Rsu0f0d5tMNifE5QKLj/ogp/RWmZ0IdevEM/g=
Subject key identifier:   5E:B3:14:2B:E6:94:C9:37:BB:21:20:C1:EC:1C:1A:D0:ED:50:A9:8D
Certificate issuer:       /CN=FE4DA27833757CF1F5DCB4799D9D238117F31532
Certificate serial:       7AD1E961832134E4E7D0B731BD49D74B0D547EBC
Authority key identifier: FE:4D:A2:78:33:75:7C:F1:F5:DC:B4:79:9D:9D:23:81:17:F3:15:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE4DA27833757CF1F5DCB4799D9D238117F31532.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3134332e3133372e302e302f32322d3232203d3e203631373937.roa
Signing time:             Fri 06 Jun 2025 11:44:17 +0000
ROA not before:           Fri 06 Jun 2025 11:39:17 +0000
ROA not after:            Fri 05 Jun 2026 11:44:17 +0000
asID:                     61797
IP address blocks:        143.137.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/FE4DA27833757CF1F5DCB4799D9D238117F31532.crl
                          rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/FE4DA27833757CF1F5DCB4799D9D238117F31532.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE4DA27833757CF1F5DCB4799D9D238117F31532.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Jun 2025 08:52:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:d1:e9:61:83:21:34:e4:e7:d0:b7:31:bd:49:d7:4b:0d:54:7e:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE4DA27833757CF1F5DCB4799D9D238117F31532
        Validity
            Not Before: Jun  6 11:39:17 2025 GMT
            Not After : Jun  5 11:44:17 2026 GMT
        Subject: CN=5EB3142BE694C937BB2120C1EC1C1AD0ED50A98D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:13:d2:b0:01:33:9b:bc:63:75:af:f7:ba:43:
                    69:67:34:0b:39:23:cf:bf:20:3f:c9:3a:fe:15:e3:
                    9e:b2:b7:7b:34:b3:d5:c8:74:4e:cd:ee:7c:77:25:
                    c5:ea:e0:77:24:fd:c0:2b:69:77:ae:4b:3b:35:b9:
                    8c:dd:0f:ee:cc:dc:59:0b:55:3a:9f:4f:7c:2a:c1:
                    54:5b:45:e6:c3:f7:7f:22:af:a4:cb:4c:d4:a6:e3:
                    fb:4f:03:fb:70:62:d3:2b:a9:df:b0:5e:8e:ba:fa:
                    93:11:8c:2e:b4:70:d6:54:8d:4d:e6:e7:d0:50:05:
                    6a:4b:84:71:a0:66:3f:96:5f:60:c8:03:d2:2f:71:
                    c3:ae:be:2f:1c:4a:4d:ea:22:64:f2:86:e4:9d:f4:
                    c6:68:0e:90:ac:b4:e3:2c:30:be:92:08:6f:47:eb:
                    cb:0c:3d:03:c9:90:67:40:be:ff:f0:b8:5b:df:a2:
                    e8:ca:81:7b:55:d1:a0:cd:8f:37:a4:d8:d6:33:46:
                    6e:32:0e:d7:38:52:03:40:d6:f7:63:b8:65:72:01:
                    b6:aa:06:14:2b:16:55:ab:d4:c1:1e:68:b3:32:65:
                    2f:4e:da:6a:07:4a:67:c5:6f:f5:50:e7:5c:62:d1:
                    58:e6:0e:b5:75:d6:96:56:08:16:a6:6f:8d:09:be:
                    c4:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:B3:14:2B:E6:94:C9:37:BB:21:20:C1:EC:1C:1A:D0:ED:50:A9:8D
            X509v3 Authority Key Identifier:
                keyid:FE:4D:A2:78:33:75:7C:F1:F5:DC:B4:79:9D:9D:23:81:17:F3:15:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/FE4DA27833757CF1F5DCB4799D9D238117F31532.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE4DA27833757CF1F5DCB4799D9D238117F31532.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3134332e3133372e302e302f32322d3232203d3e203631373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:90:6d:72:02:8e:ba:e1:81:59:17:14:0e:88:e0:fe:84:bc:
         cf:5e:47:24:78:c2:9e:47:af:ee:92:1a:6d:fb:07:b9:ad:36:
         02:90:4b:cf:7a:5d:ea:42:7e:64:c0:c4:a4:56:e9:0c:be:7e:
         e0:a7:31:2b:14:6e:fc:d4:3f:ed:b9:b4:81:63:86:6e:ca:b3:
         ff:32:dc:a9:45:fa:d5:3e:3b:be:5c:a2:2d:9e:3a:0b:23:9a:
         a4:2b:37:60:3c:6b:21:44:5f:3b:8e:52:e4:2b:6c:59:67:91:
         f4:26:fd:bd:60:57:5e:84:64:1e:42:8e:8e:ce:17:85:29:55:
         6e:6e:ea:7c:a3:18:b5:d5:b4:cd:09:e7:78:7a:54:88:ec:22:
         e0:fc:f7:7e:9b:fd:72:53:93:44:cb:9a:3a:1c:91:53:d7:0b:
         d6:dc:68:1e:b7:33:9d:00:3e:6c:af:cd:7b:78:dd:85:63:43:
         68:50:d4:ee:a2:10:d9:a1:84:da:e1:79:ad:b7:52:6a:b0:e6:
         df:7e:20:0d:54:f4:04:81:cf:2b:d8:d3:19:53:c8:85:47:8a:
         09:32:9b:a6:44:87:e9:c2:a0:ff:03:2f:a2:40:1e:29:1b:14:
         53:7f:a2:86:e0:17:3b:1b:0b:b1:c4:80:e2:d2:19:4d:c7:66:
         e2:97:c8:37
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUetHpYYMhNOTn0LcxvUnXSw1UfrwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkU0REEyNzgzMzc1N0NGMUY1RENCNDc5OUQ5RDIzODEx
N0YzMTUzMjAeFw0yNTA2MDYxMTM5MTdaFw0yNjA2MDUxMTQ0MTdaMDMxMTAvBgNV
BAMTKDVFQjMxNDJCRTY5NEM5MzdCQjIxMjBDMUVDMUMxQUQwRUQ1MEE5OEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClE9KwATObvGN1r/e6Q2lnNAs5
I8+/ID/JOv4V456yt3s0s9XIdE7N7nx3JcXq4Hck/cAraXeuSzs1uYzdD+7M3FkL
VTqfT3wqwVRbRebD938ir6TLTNSm4/tPA/twYtMrqd+wXo66+pMRjC60cNZUjU3m
59BQBWpLhHGgZj+WX2DIA9IvccOuvi8cSk3qImTyhuSd9MZoDpCstOMsML6SCG9H
68sMPQPJkGdAvv/wuFvfoujKgXtV0aDNjzek2NYzRm4yDtc4UgNA1vdjuGVyAbaq
BhQrFlWr1MEeaLMyZS9O2moHSmfFb/VQ51xi0VjmDrV11pZWCBamb40JvsQfAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUXrMUK+aUyTe7ISDB7Bwa0O1QqY0wHwYDVR0j
BBgwFoAU/k2ieDN1fPH13LR5nZ0jgRfzFTIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQU45d3M0eW90SmRQVmlNa05iRUF1ODczejR2M2N1UFh6UmtwbmpnUDhG
SjEvMC9GRTREQTI3ODMzNzU3Q0YxRjVEQ0I0Nzk5RDlEMjM4MTE3RjMxNTMyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZFNERBMjc4MzM3NTdDRjFG
NURDQjQ3OTlEOUQyMzgxMTdGMzE1MzIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FOOXdzNHlvdEpkUFZpTWtOYkVBdTg3M3o0djNjdVBYelJrcG5qZ1A4RkoxLzAv
MzEzNDMzMmUzMTMzMzcyZTMwMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzYzMTM3
MzkzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAo+JADANBgkqhkiG9w0BAQsFAAOCAQEAfZBtcgKOuuGB
WRcUDojg/oS8z15HJHjCnkev7pIabfsHua02ApBLz3pd6kJ+ZMDEpFbpDL5+4Kcx
KxRu/NQ/7bm0gWOGbsqz/zLcqUX61T47vlyiLZ46CyOapCs3YDxrIURfO45S5Cts
WWeR9Cb9vWBXXoRkHkKOjs4XhSlVbm7qfKMYtdW0zQnneHpUiOwi4Pz3fpv9clOT
RMuaOhyRU9cL1txoHrcznQA+bK/Ne3jdhWNDaFDU7qIQ2aGE2uF5rbdSarDm334g
DVT0BIHPK9jTGVPIhUeKCTKbpkSH6cKg/wMvokAeKRsUU3+ihuAXOxsLscSA4tIZ
Tcdm4pfINw==
-----END CERTIFICATE-----
Generated at Thu Jun 12 15:30:13 2025 by rpki-client