Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3133312e3130302e3137322e302f32322d3232203d3e203232313737.roa
File:                     3133312e3130302e3137322e302f32322d3232203d3e203232313737.roa (raw, json)
Hash identifier:          Zb5Fd2cH2+E2aFLThN19jTWFsatlw+rPTvIpz0gJ3aM=
Subject key identifier:   B7:47:D9:7B:90:B7:EC:EB:AE:26:BE:C9:79:04:6E:4F:BE:A8:47:D4
Certificate issuer:       /CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
Certificate serial:       4109E1E1C529DE02E48129F4C68905CFA2B88F8B
Authority key identifier: D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3133312e3130302e3137322e302f32322d3232203d3e203232313737.roa
Signing time:             Thu 06 Mar 2025 04:30:06 +0000
ROA not before:           Thu 06 Mar 2025 04:25:06 +0000
ROA not after:            Thu 05 Mar 2026 04:30:06 +0000
asID:                     22177
IP address blocks:        131.100.172.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl
                          rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 08:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:09:e1:e1:c5:29:de:02:e4:81:29:f4:c6:89:05:cf:a2:b8:8f:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
        Validity
            Not Before: Mar  6 04:25:06 2025 GMT
            Not After : Mar  5 04:30:06 2026 GMT
        Subject: CN=B747D97B90B7ECEBAE26BEC979046E4FBEA847D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e6:40:c3:93:bf:79:91:4a:24:37:53:6b:31:
                    36:1c:8e:96:cb:51:46:72:e8:cb:cc:57:08:de:81:
                    89:6c:83:9c:e8:8c:52:48:1b:21:2f:47:90:5f:d8:
                    d7:48:29:39:d3:ea:8f:f8:b1:a9:59:b1:d5:b1:d6:
                    c6:74:5f:b9:28:d5:1e:4e:31:6e:4c:12:e1:04:b2:
                    5a:39:aa:5c:31:51:08:ef:73:62:46:b7:f5:03:2e:
                    b7:da:b5:8f:f6:62:c0:bd:9d:5c:66:33:47:93:b4:
                    fb:5a:e6:a0:42:45:ec:5c:93:78:11:97:fe:ca:75:
                    cf:a6:a9:7d:d0:3e:f9:89:9c:3b:3c:b0:b4:98:eb:
                    9f:f8:c4:bc:96:87:fa:ca:97:7c:18:02:f1:f7:53:
                    53:34:d6:eb:00:b8:12:bd:4d:c5:e5:23:06:94:47:
                    84:c9:92:84:e2:f0:76:3b:8b:b4:2d:64:f6:64:f8:
                    0f:bb:02:91:e3:ed:58:9a:82:b1:64:a3:35:8a:21:
                    59:85:41:50:bb:82:ff:0f:a9:ac:34:e3:42:96:62:
                    03:db:16:78:7f:bd:27:d4:47:e3:ff:73:f5:d6:d3:
                    bc:90:da:57:de:2e:41:3a:af:89:68:a8:33:ab:ea:
                    d9:7a:f0:4b:02:7a:9a:78:2b:2c:ed:c0:fb:e9:80:
                    0b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:47:D9:7B:90:B7:EC:EB:AE:26:BE:C9:79:04:6E:4F:BE:A8:47:D4
            X509v3 Authority Key Identifier:
                keyid:D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3133312e3130302e3137322e302f32322d3232203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:19:6c:0e:06:62:00:ea:bd:f7:2a:db:72:6a:80:1c:31:c9:
         8d:b7:a4:25:21:01:21:4d:8a:0e:7e:23:c5:51:48:b7:44:c7:
         be:a0:fa:b4:29:13:46:c3:a7:e0:27:ad:a3:41:0d:46:74:d1:
         f7:b2:6c:22:d3:f0:e5:a0:2c:98:85:6c:39:87:72:e2:c7:e0:
         1d:e6:ef:f7:97:c1:99:23:5b:14:60:3c:12:19:59:ee:05:d4:
         8d:8d:68:6f:69:dc:39:89:64:c9:eb:57:ce:62:94:c5:34:74:
         f5:b1:df:4e:ec:1b:eb:6e:3d:ce:4e:7a:38:c8:2f:86:22:ef:
         a4:f2:0f:b0:2e:57:4b:fc:d8:81:22:34:03:6e:1c:0c:a5:10:
         df:d2:91:7c:57:5d:8f:1d:8f:72:ae:5d:da:b5:cd:e1:5c:4d:
         77:92:82:11:fa:f0:a1:9c:6b:bb:17:3c:85:69:83:d8:a4:8c:
         d8:e5:45:51:21:b0:c5:f7:36:7b:a9:ec:76:97:61:fd:b3:64:
         be:5f:31:03:9a:d1:40:03:f0:98:a2:4e:91:99:81:ed:81:01:
         c9:ec:b3:43:f8:a5:cf:8a:48:9f:63:d1:a5:c1:c5:0e:73:44:
         88:ca:2c:24:01:9f:c6:08:61:ee:9e:ac:2e:f4:35:76:89:bb:
         c9:f4:66:4a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQQnh4cUp3gLkgSn0xokFz6K4j4swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDFCOTVCOUY4MTJGODc3RUZCNDg2RDJFNEMzMEI3MDNG
Q0FFQzgyOTAeFw0yNTAzMDYwNDI1MDZaFw0yNjAzMDUwNDMwMDZaMDMxMTAvBgNV
BAMTKEI3NDdEOTdCOTBCN0VDRUJBRTI2QkVDOTc5MDQ2RTRGQkVBODQ3RDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB5kDDk795kUokN1NrMTYcjpbL
UUZy6MvMVwjegYlsg5zojFJIGyEvR5Bf2NdIKTnT6o/4salZsdWx1sZ0X7ko1R5O
MW5MEuEEslo5qlwxUQjvc2JGt/UDLrfatY/2YsC9nVxmM0eTtPta5qBCRexck3gR
l/7Kdc+mqX3QPvmJnDs8sLSY65/4xLyWh/rKl3wYAvH3U1M01usAuBK9TcXlIwaU
R4TJkoTi8HY7i7QtZPZk+A+7ApHj7ViagrFkozWKIVmFQVC7gv8Pqaw040KWYgPb
Fnh/vSfUR+P/c/XW07yQ2lfeLkE6r4loqDOr6tl68EsCepp4KyztwPvpgAufAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUt0fZe5C37OuuJr7JeQRuT76oR9QwHwYDVR0j
BBgwFoAU0blbn4Evh377SG0uTDC3A/yuyCkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjdYeThRY0NvTXlZRjgxVXRpQUZLUTgyalEza1RubzQ3dnVQTlZXcmY4
TmsvMS9EMUI5NUI5RjgxMkY4NzdFRkI0ODZEMkU0QzMwQjcwM0ZDQUVDODI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QxQjk1QjlGODEyRjg3N0VG
QjQ4NkQyRTRDMzBCNzAzRkNBRUM4MjkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0I3WHk4UWNDb015WUY4MVV0aUFGS1E4MmpRM2tUbm80N3Z1UE5WV3JmOE5rLzEv
MzEzMzMxMmUzMTMwMzAyZTMxMzczMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzIzMTM3Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKDZKwwDQYJKoZIhvcNAQELBQADggEBAHEZbA4G
YgDqvfcq23JqgBwxyY23pCUhASFNig5+I8VRSLdEx76g+rQpE0bDp+AnraNBDUZ0
0feybCLT8OWgLJiFbDmHcuLH4B3m7/eXwZkjWxRgPBIZWe4F1I2NaG9p3DmJZMnr
V85ilMU0dPWx307sG+tuPc5OejjIL4Yi76TyD7AuV0v82IEiNANuHAylEN/SkXxX
XY8dj3KuXdq1zeFcTXeSghH68KGca7sXPIVpg9ikjNjlRVEhsMX3Nnup7HaXYf2z
ZL5fMQOa0UAD8JiiTpGZge2BAcnss0P4pc+KSJ9j0aXBxQ5zRIjKLCQBn8YIYe6e
rC70NXaJu8n0Zko=
-----END CERTIFICATE-----
Generated at Sun Apr 13 00:09:40 2025 by rpki-client