Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/1/3133312e3232312e3234342e302f32322d3234203d3e20323634343430.roa
File:                     3133312e3232312e3234342e302f32322d3234203d3e20323634343430.roa (raw, json)
Hash identifier:          +ump5fjSK9u4VMjhkm+0ds9WxL3PlydMW/WJojUQA5g=
Subject key identifier:   59:2C:76:54:07:2D:45:45:52:A3:9E:55:51:6E:3D:7D:96:56:7F:54
Certificate issuer:       /CN=E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9
Certificate serial:       585FD4D5B8BDC0887EFFA324F7C8D43E5AD481C6
Authority key identifier: E7:D9:CB:B2:81:E5:5D:A4:61:F6:EB:9D:AF:25:A7:E9:16:2A:D2:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/1/3133312e3232312e3234342e302f32322d3234203d3e20323634343430.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     264440
IP address blocks:        131.221.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/1/E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.crl
                          rsync://rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/1/E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:5f:d4:d5:b8:bd:c0:88:7e:ff:a3:24:f7:c8:d4:3e:5a:d4:81:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:27:24:4e:48:f4:d1:ea:3d:69:09:ca:d0:fc:
                    14:29:16:2e:c0:df:0d:d4:c5:9b:87:ee:95:7c:ab:
                    27:84:15:09:69:e7:e2:13:a9:86:91:a0:36:eb:7e:
                    15:18:2f:2b:cc:e7:e7:85:1a:d7:5b:00:fd:61:19:
                    9e:35:fe:11:f6:5a:54:b5:5b:8b:9a:c8:8e:4d:49:
                    bc:52:f2:98:b3:f0:32:64:a2:9d:73:d5:1f:5d:96:
                    ac:4a:38:d0:eb:0e:40:f6:5c:b1:95:b9:b7:2f:5a:
                    a7:a9:01:4a:00:2c:85:bc:c8:09:b7:c4:19:30:17:
                    56:bc:77:36:26:84:f0:8c:e8:b4:3a:d4:ff:bb:62:
                    ca:62:89:46:df:95:98:5b:2a:17:2a:fb:6a:a3:f8:
                    16:9e:bf:11:c0:e6:fa:0d:80:e7:78:14:7c:47:94:
                    83:39:c0:3c:04:38:d7:59:6b:8f:d8:dd:37:8f:1c:
                    4c:a3:d4:3f:3b:c2:9d:19:e4:4c:1b:b8:7e:96:c7:
                    59:bc:74:81:da:c5:25:70:1e:ef:f7:5e:dc:18:6b:
                    2b:49:b7:a3:9a:b1:07:c3:52:41:3d:0c:4c:a3:81:
                    40:5c:ad:9f:e2:83:07:87:fa:70:12:d2:11:44:e5:
                    0d:c0:33:5a:d8:09:26:8f:77:b6:80:b0:7a:9b:e8:
                    16:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:2C:76:54:07:2D:45:45:52:A3:9E:55:51:6E:3D:7D:96:56:7F:54
            X509v3 Authority Key Identifier:
                keyid:E7:D9:CB:B2:81:E5:5D:A4:61:F6:EB:9D:AF:25:A7:E9:16:2A:D2:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/1/E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/1/3133312e3232312e3234342e302f32322d3234203d3e20323634343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:a0:74:75:eb:73:80:90:a8:dc:bb:71:53:bd:8b:be:a7:0e:
         cd:5d:14:09:a2:bb:a5:33:cd:f7:0d:ed:c0:92:7d:ed:41:05:
         c1:dd:6b:65:09:3d:1c:b5:67:88:99:7a:ac:01:73:3b:98:ac:
         c8:11:23:ed:ef:8d:1c:b5:01:01:c8:fc:21:0f:a9:0e:88:86:
         c9:f1:e6:1b:75:22:55:61:a3:9a:8a:c4:a3:f2:69:25:11:7e:
         b4:38:04:ce:1b:47:e4:e4:80:6c:12:ce:38:ef:ee:39:69:d3:
         28:91:5a:5d:28:6f:7a:9d:82:f1:30:47:42:ff:8d:37:ce:42:
         b9:f7:97:ca:36:fe:67:36:25:ed:d2:87:d0:f5:cb:88:9b:f9:
         56:21:88:35:25:f9:61:32:3f:1b:40:2b:3a:cb:c3:a1:3f:35:
         b0:a7:68:23:fc:1f:83:53:25:e3:a1:45:52:8a:82:d1:6a:96:
         0f:ce:ef:e6:9c:9a:17:ee:f6:ad:49:96:eb:38:93:02:e4:32:
         7d:09:8f:1e:43:30:d6:49:e8:99:e6:04:b0:cb:28:e8:8f:ae:
         5d:6c:8a:09:10:30:74:2f:c5:e3:a7:26:ba:3a:5f:f5:af:a8:
         37:ef:0f:9d:03:97:8e:58:99:06:c8:6f:21:ac:66:5c:4d:53:
         7b:7b:70:6e
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUWF/U1bi9wIh+/6Mk98jUPlrUgcYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTdEOUNCQjI4MUU1NURBNDYxRjZFQjlEQUYyNUE3RTkx
NjJBRDJFOTAeFw0yNTAzMDUxODU1MDBaFw0yNjAzMDQxOTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkUyNzI0NEU0OEY0RDFFQTNE
NjkwOUNBRDBGQzE0MjkxNjJFQzBERjBERDRDNTlCODdFRTk1N0NBQjI3ODQxNTA5
NjlFN0UyMTNBOTg2OTFBMDM2RUI3RTE1MTgyRjJCQ0NFN0U3ODUxQUQ3NUIwMEZE
NjExOTlFMzVGRTExRjY1QTU0QjU1QjhCOUFDODhFNEQ0OUJDNTJGMjk4QjNGMDMy
NjRBMjlENzNENTFGNUQ5NkFDNEEzOEQwRUIwRTQwRjY1Q0IxOTVCOUI3MkY1QUE3
QTkwMTRBMDAyQzg1QkNDODA5QjdDNDE5MzAxNzU2QkM3NzM2MjY4NEYwOENFOEI0
M0FENEZGQkI2MkNBNjI4OTQ2REY5NTk4NUIyQTE3MkFGQjZBQTNGODE2OUVCRjEx
QzBFNkZBMEQ4MEU3NzgxNDdDNDc5NDgzMzlDMDNDMDQzOEQ3NTk2QjhGRDhERDM3
OEYxQzRDQTNENDNGM0JDMjlEMTlFNDRDMUJCODdFOTZDNzU5QkM3NDgxREFDNTI1
NzAxRUVGRjc1RURDMTg2QjJCNDlCN0EzOUFCMTA3QzM1MjQxM0QwQzRDQTM4MTQw
NUNBRDlGRTI4MzA3ODdGQTcwMTJEMjExNDRFNTBEQzAzMzVBRDgwOTI2OEY3N0I2
ODBCMDdBOUJFODE2NDEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAvickTkj00eo9aQnK0PwUKRYuwN8N1MWbh+6VfKsnhBUJaefiE6mG
kaA2634VGC8rzOfnhRrXWwD9YRmeNf4R9lpUtVuLmsiOTUm8UvKYs/AyZKKdc9Uf
XZasSjjQ6w5A9lyxlbm3L1qnqQFKACyFvMgJt8QZMBdWvHc2JoTwjOi0OtT/u2LK
YolG35WYWyoXKvtqo/gWnr8RwOb6DYDneBR8R5SDOcA8BDjXWWuP2N03jxxMo9Q/
O8KdGeRMG7h+lsdZvHSB2sUlcB7v917cGGsrSbejmrEHw1JBPQxMo4FAXK2f4oMH
h/pwEtIRROUNwDNa2Akmj3e2gLB6m+gWQQIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FFksdlQHLUVFUqOeVVFuPX2WVn9UMB8GA1UdIwQYMBaAFOfZy7KB5V2kYfbrna8l
p+kWKtLpMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0UzUHdrVzlTZUJzcXBl
UndjZm9Wa2VweG9iYzNNblBEN0xEajNjZTEyWFBaLzEvRTdEOUNCQjI4MUU1NURB
NDYxRjZFQjlEQUYyNUE3RTkxNjJBRDJFOS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9FN0Q5Q0JCMjgxRTU1REE0NjFGNkVCOURBRjI1QTdFOTE2MkFE
MkU5LmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9FM1B3a1c5U2VCc3FwZVJ3Y2Zv
VmtlcHhvYmMzTW5QRDdMRGozY2UxMlhQWi8xLzMxMzMzMTJlMzIzMjMxMmUzMjM0
MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzQzNDM0MzAucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAKD3fQwDQYJKoZIhvcNAQELBQADggEBABagdHXrc4CQqNy7cVO9i76nDs1dFAmi
u6UzzfcN7cCSfe1BBcHda2UJPRy1Z4iZeqwBczuYrMgRI+3vjRy1AQHI/CEPqQ6I
hsnx5ht1IlVho5qKxKPyaSURfrQ4BM4bR+TkgGwSzjjv7jlp0yiRWl0ob3qdgvEw
R0L/jTfOQrn3l8o2/mc2Je3Sh9D1y4ib+VYhiDUl+WEyPxtAKzrLw6E/NbCnaCP8
H4NTJeOhRVKKgtFqlg/O7+acmhfu9q1Jlus4kwLkMn0Jjx5DMNZJ6JnmBLDLKOiP
rl1sigkQMHQvxeOnJro6X/WvqDfvD50Dl45YmQbIbyGsZlxNU3t7cG4=
-----END CERTIFICATE-----
Generated at Sun Apr 20 18:12:17 2025 by rpki-client